]> git.karo-electronics.de Git - karo-tx-linux.git/blob - fs/cifs/connect.c
Merge branch 'for-linus' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input
[karo-tx-linux.git] / fs / cifs / connect.c
1 /*
2  *   fs/cifs/connect.c
3  *
4  *   Copyright (C) International Business Machines  Corp., 2002,2011
5  *   Author(s): Steve French (sfrench@us.ibm.com)
6  *
7  *   This library is free software; you can redistribute it and/or modify
8  *   it under the terms of the GNU Lesser General Public License as published
9  *   by the Free Software Foundation; either version 2.1 of the License, or
10  *   (at your option) any later version.
11  *
12  *   This library is distributed in the hope that it will be useful,
13  *   but WITHOUT ANY WARRANTY; without even the implied warranty of
14  *   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See
15  *   the GNU Lesser General Public License for more details.
16  *
17  *   You should have received a copy of the GNU Lesser General Public License
18  *   along with this library; if not, write to the Free Software
19  *   Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
20  */
21 #include <linux/fs.h>
22 #include <linux/net.h>
23 #include <linux/string.h>
24 #include <linux/sched/signal.h>
25 #include <linux/list.h>
26 #include <linux/wait.h>
27 #include <linux/slab.h>
28 #include <linux/pagemap.h>
29 #include <linux/ctype.h>
30 #include <linux/utsname.h>
31 #include <linux/mempool.h>
32 #include <linux/delay.h>
33 #include <linux/completion.h>
34 #include <linux/kthread.h>
35 #include <linux/pagevec.h>
36 #include <linux/freezer.h>
37 #include <linux/namei.h>
38 #include <linux/uuid.h>
39 #include <linux/uaccess.h>
40 #include <asm/processor.h>
41 #include <linux/inet.h>
42 #include <linux/module.h>
43 #include <keys/user-type.h>
44 #include <net/ipv6.h>
45 #include <linux/parser.h>
46 #include <linux/bvec.h>
47
48 #include "cifspdu.h"
49 #include "cifsglob.h"
50 #include "cifsproto.h"
51 #include "cifs_unicode.h"
52 #include "cifs_debug.h"
53 #include "cifs_fs_sb.h"
54 #include "ntlmssp.h"
55 #include "nterr.h"
56 #include "rfc1002pdu.h"
57 #include "fscache.h"
58 #ifdef CONFIG_CIFS_SMB2
59 #include "smb2proto.h"
60 #endif
61
62 #define CIFS_PORT 445
63 #define RFC1001_PORT 139
64
65 extern mempool_t *cifs_req_poolp;
66
67 /* FIXME: should these be tunable? */
68 #define TLINK_ERROR_EXPIRE      (1 * HZ)
69 #define TLINK_IDLE_EXPIRE       (600 * HZ)
70
71 enum {
72         /* Mount options that take no arguments */
73         Opt_user_xattr, Opt_nouser_xattr,
74         Opt_forceuid, Opt_noforceuid,
75         Opt_forcegid, Opt_noforcegid,
76         Opt_noblocksend, Opt_noautotune,
77         Opt_hard, Opt_soft, Opt_perm, Opt_noperm,
78         Opt_mapposix, Opt_nomapposix,
79         Opt_mapchars, Opt_nomapchars, Opt_sfu,
80         Opt_nosfu, Opt_nodfs, Opt_posixpaths,
81         Opt_noposixpaths, Opt_nounix,
82         Opt_nocase,
83         Opt_brl, Opt_nobrl,
84         Opt_forcemandatorylock, Opt_setuidfromacl, Opt_setuids,
85         Opt_nosetuids, Opt_dynperm, Opt_nodynperm,
86         Opt_nohard, Opt_nosoft,
87         Opt_nointr, Opt_intr,
88         Opt_nostrictsync, Opt_strictsync,
89         Opt_serverino, Opt_noserverino,
90         Opt_rwpidforward, Opt_cifsacl, Opt_nocifsacl,
91         Opt_acl, Opt_noacl, Opt_locallease,
92         Opt_sign, Opt_seal, Opt_noac,
93         Opt_fsc, Opt_mfsymlinks,
94         Opt_multiuser, Opt_sloppy, Opt_nosharesock,
95         Opt_persistent, Opt_nopersistent,
96         Opt_resilient, Opt_noresilient,
97         Opt_domainauto,
98
99         /* Mount options which take numeric value */
100         Opt_backupuid, Opt_backupgid, Opt_uid,
101         Opt_cruid, Opt_gid, Opt_file_mode,
102         Opt_dirmode, Opt_port,
103         Opt_rsize, Opt_wsize, Opt_actimeo,
104         Opt_echo_interval, Opt_max_credits,
105         Opt_snapshot,
106
107         /* Mount options which take string value */
108         Opt_user, Opt_pass, Opt_ip,
109         Opt_domain, Opt_srcaddr, Opt_iocharset,
110         Opt_netbiosname, Opt_servern,
111         Opt_ver, Opt_vers, Opt_sec, Opt_cache,
112
113         /* Mount options to be ignored */
114         Opt_ignore,
115
116         /* Options which could be blank */
117         Opt_blank_pass,
118         Opt_blank_user,
119         Opt_blank_ip,
120
121         Opt_err
122 };
123
124 static const match_table_t cifs_mount_option_tokens = {
125
126         { Opt_user_xattr, "user_xattr" },
127         { Opt_nouser_xattr, "nouser_xattr" },
128         { Opt_forceuid, "forceuid" },
129         { Opt_noforceuid, "noforceuid" },
130         { Opt_forcegid, "forcegid" },
131         { Opt_noforcegid, "noforcegid" },
132         { Opt_noblocksend, "noblocksend" },
133         { Opt_noautotune, "noautotune" },
134         { Opt_hard, "hard" },
135         { Opt_soft, "soft" },
136         { Opt_perm, "perm" },
137         { Opt_noperm, "noperm" },
138         { Opt_mapchars, "mapchars" }, /* SFU style */
139         { Opt_nomapchars, "nomapchars" },
140         { Opt_mapposix, "mapposix" }, /* SFM style */
141         { Opt_nomapposix, "nomapposix" },
142         { Opt_sfu, "sfu" },
143         { Opt_nosfu, "nosfu" },
144         { Opt_nodfs, "nodfs" },
145         { Opt_posixpaths, "posixpaths" },
146         { Opt_noposixpaths, "noposixpaths" },
147         { Opt_nounix, "nounix" },
148         { Opt_nounix, "nolinux" },
149         { Opt_nocase, "nocase" },
150         { Opt_nocase, "ignorecase" },
151         { Opt_brl, "brl" },
152         { Opt_nobrl, "nobrl" },
153         { Opt_nobrl, "nolock" },
154         { Opt_forcemandatorylock, "forcemandatorylock" },
155         { Opt_forcemandatorylock, "forcemand" },
156         { Opt_setuids, "setuids" },
157         { Opt_nosetuids, "nosetuids" },
158         { Opt_setuidfromacl, "idsfromsid" },
159         { Opt_dynperm, "dynperm" },
160         { Opt_nodynperm, "nodynperm" },
161         { Opt_nohard, "nohard" },
162         { Opt_nosoft, "nosoft" },
163         { Opt_nointr, "nointr" },
164         { Opt_intr, "intr" },
165         { Opt_nostrictsync, "nostrictsync" },
166         { Opt_strictsync, "strictsync" },
167         { Opt_serverino, "serverino" },
168         { Opt_noserverino, "noserverino" },
169         { Opt_rwpidforward, "rwpidforward" },
170         { Opt_cifsacl, "cifsacl" },
171         { Opt_nocifsacl, "nocifsacl" },
172         { Opt_acl, "acl" },
173         { Opt_noacl, "noacl" },
174         { Opt_locallease, "locallease" },
175         { Opt_sign, "sign" },
176         { Opt_seal, "seal" },
177         { Opt_noac, "noac" },
178         { Opt_fsc, "fsc" },
179         { Opt_mfsymlinks, "mfsymlinks" },
180         { Opt_multiuser, "multiuser" },
181         { Opt_sloppy, "sloppy" },
182         { Opt_nosharesock, "nosharesock" },
183         { Opt_persistent, "persistenthandles"},
184         { Opt_nopersistent, "nopersistenthandles"},
185         { Opt_resilient, "resilienthandles"},
186         { Opt_noresilient, "noresilienthandles"},
187         { Opt_domainauto, "domainauto"},
188
189         { Opt_backupuid, "backupuid=%s" },
190         { Opt_backupgid, "backupgid=%s" },
191         { Opt_uid, "uid=%s" },
192         { Opt_cruid, "cruid=%s" },
193         { Opt_gid, "gid=%s" },
194         { Opt_file_mode, "file_mode=%s" },
195         { Opt_dirmode, "dirmode=%s" },
196         { Opt_dirmode, "dir_mode=%s" },
197         { Opt_port, "port=%s" },
198         { Opt_rsize, "rsize=%s" },
199         { Opt_wsize, "wsize=%s" },
200         { Opt_actimeo, "actimeo=%s" },
201         { Opt_echo_interval, "echo_interval=%s" },
202         { Opt_max_credits, "max_credits=%s" },
203         { Opt_snapshot, "snapshot=%s" },
204
205         { Opt_blank_user, "user=" },
206         { Opt_blank_user, "username=" },
207         { Opt_user, "user=%s" },
208         { Opt_user, "username=%s" },
209         { Opt_blank_pass, "pass=" },
210         { Opt_blank_pass, "password=" },
211         { Opt_pass, "pass=%s" },
212         { Opt_pass, "password=%s" },
213         { Opt_blank_ip, "ip=" },
214         { Opt_blank_ip, "addr=" },
215         { Opt_ip, "ip=%s" },
216         { Opt_ip, "addr=%s" },
217         { Opt_ignore, "unc=%s" },
218         { Opt_ignore, "target=%s" },
219         { Opt_ignore, "path=%s" },
220         { Opt_domain, "dom=%s" },
221         { Opt_domain, "domain=%s" },
222         { Opt_domain, "workgroup=%s" },
223         { Opt_srcaddr, "srcaddr=%s" },
224         { Opt_ignore, "prefixpath=%s" },
225         { Opt_iocharset, "iocharset=%s" },
226         { Opt_netbiosname, "netbiosname=%s" },
227         { Opt_servern, "servern=%s" },
228         { Opt_ver, "ver=%s" },
229         { Opt_vers, "vers=%s" },
230         { Opt_sec, "sec=%s" },
231         { Opt_cache, "cache=%s" },
232
233         { Opt_ignore, "cred" },
234         { Opt_ignore, "credentials" },
235         { Opt_ignore, "cred=%s" },
236         { Opt_ignore, "credentials=%s" },
237         { Opt_ignore, "guest" },
238         { Opt_ignore, "rw" },
239         { Opt_ignore, "ro" },
240         { Opt_ignore, "suid" },
241         { Opt_ignore, "nosuid" },
242         { Opt_ignore, "exec" },
243         { Opt_ignore, "noexec" },
244         { Opt_ignore, "nodev" },
245         { Opt_ignore, "noauto" },
246         { Opt_ignore, "dev" },
247         { Opt_ignore, "mand" },
248         { Opt_ignore, "nomand" },
249         { Opt_ignore, "_netdev" },
250
251         { Opt_err, NULL }
252 };
253
254 enum {
255         Opt_sec_krb5, Opt_sec_krb5i, Opt_sec_krb5p,
256         Opt_sec_ntlmsspi, Opt_sec_ntlmssp,
257         Opt_ntlm, Opt_sec_ntlmi, Opt_sec_ntlmv2,
258         Opt_sec_ntlmv2i, Opt_sec_lanman,
259         Opt_sec_none,
260
261         Opt_sec_err
262 };
263
264 static const match_table_t cifs_secflavor_tokens = {
265         { Opt_sec_krb5, "krb5" },
266         { Opt_sec_krb5i, "krb5i" },
267         { Opt_sec_krb5p, "krb5p" },
268         { Opt_sec_ntlmsspi, "ntlmsspi" },
269         { Opt_sec_ntlmssp, "ntlmssp" },
270         { Opt_ntlm, "ntlm" },
271         { Opt_sec_ntlmi, "ntlmi" },
272         { Opt_sec_ntlmv2, "nontlm" },
273         { Opt_sec_ntlmv2, "ntlmv2" },
274         { Opt_sec_ntlmv2i, "ntlmv2i" },
275         { Opt_sec_lanman, "lanman" },
276         { Opt_sec_none, "none" },
277
278         { Opt_sec_err, NULL }
279 };
280
281 /* cache flavors */
282 enum {
283         Opt_cache_loose,
284         Opt_cache_strict,
285         Opt_cache_none,
286         Opt_cache_err
287 };
288
289 static const match_table_t cifs_cacheflavor_tokens = {
290         { Opt_cache_loose, "loose" },
291         { Opt_cache_strict, "strict" },
292         { Opt_cache_none, "none" },
293         { Opt_cache_err, NULL }
294 };
295
296 static const match_table_t cifs_smb_version_tokens = {
297         { Smb_1, SMB1_VERSION_STRING },
298         { Smb_20, SMB20_VERSION_STRING},
299         { Smb_21, SMB21_VERSION_STRING },
300         { Smb_30, SMB30_VERSION_STRING },
301         { Smb_302, SMB302_VERSION_STRING },
302 #ifdef CONFIG_CIFS_SMB311
303         { Smb_311, SMB311_VERSION_STRING },
304         { Smb_311, ALT_SMB311_VERSION_STRING },
305 #endif /* SMB311 */
306         { Smb_version_err, NULL }
307 };
308
309 static int ip_connect(struct TCP_Server_Info *server);
310 static int generic_ip_connect(struct TCP_Server_Info *server);
311 static void tlink_rb_insert(struct rb_root *root, struct tcon_link *new_tlink);
312 static void cifs_prune_tlinks(struct work_struct *work);
313 static int cifs_setup_volume_info(struct smb_vol *volume_info, char *mount_data,
314                                         const char *devname);
315
316 /*
317  * cifs tcp session reconnection
318  *
319  * mark tcp session as reconnecting so temporarily locked
320  * mark all smb sessions as reconnecting for tcp session
321  * reconnect tcp session
322  * wake up waiters on reconnection? - (not needed currently)
323  */
324 int
325 cifs_reconnect(struct TCP_Server_Info *server)
326 {
327         int rc = 0;
328         struct list_head *tmp, *tmp2;
329         struct cifs_ses *ses;
330         struct cifs_tcon *tcon;
331         struct mid_q_entry *mid_entry;
332         struct list_head retry_list;
333
334         spin_lock(&GlobalMid_Lock);
335         if (server->tcpStatus == CifsExiting) {
336                 /* the demux thread will exit normally
337                 next time through the loop */
338                 spin_unlock(&GlobalMid_Lock);
339                 return rc;
340         } else
341                 server->tcpStatus = CifsNeedReconnect;
342         spin_unlock(&GlobalMid_Lock);
343         server->maxBuf = 0;
344 #ifdef CONFIG_CIFS_SMB2
345         server->max_read = 0;
346 #endif
347
348         cifs_dbg(FYI, "Reconnecting tcp session\n");
349
350         /* before reconnecting the tcp session, mark the smb session (uid)
351                 and the tid bad so they are not used until reconnected */
352         cifs_dbg(FYI, "%s: marking sessions and tcons for reconnect\n",
353                  __func__);
354         spin_lock(&cifs_tcp_ses_lock);
355         list_for_each(tmp, &server->smb_ses_list) {
356                 ses = list_entry(tmp, struct cifs_ses, smb_ses_list);
357                 ses->need_reconnect = true;
358                 ses->ipc_tid = 0;
359                 list_for_each(tmp2, &ses->tcon_list) {
360                         tcon = list_entry(tmp2, struct cifs_tcon, tcon_list);
361                         tcon->need_reconnect = true;
362                 }
363         }
364         spin_unlock(&cifs_tcp_ses_lock);
365
366         /* do not want to be sending data on a socket we are freeing */
367         cifs_dbg(FYI, "%s: tearing down socket\n", __func__);
368         mutex_lock(&server->srv_mutex);
369         if (server->ssocket) {
370                 cifs_dbg(FYI, "State: 0x%x Flags: 0x%lx\n",
371                          server->ssocket->state, server->ssocket->flags);
372                 kernel_sock_shutdown(server->ssocket, SHUT_WR);
373                 cifs_dbg(FYI, "Post shutdown state: 0x%x Flags: 0x%lx\n",
374                          server->ssocket->state, server->ssocket->flags);
375                 sock_release(server->ssocket);
376                 server->ssocket = NULL;
377         }
378         server->sequence_number = 0;
379         server->session_estab = false;
380         kfree(server->session_key.response);
381         server->session_key.response = NULL;
382         server->session_key.len = 0;
383         server->lstrp = jiffies;
384
385         /* mark submitted MIDs for retry and issue callback */
386         INIT_LIST_HEAD(&retry_list);
387         cifs_dbg(FYI, "%s: moving mids to private list\n", __func__);
388         spin_lock(&GlobalMid_Lock);
389         list_for_each_safe(tmp, tmp2, &server->pending_mid_q) {
390                 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
391                 if (mid_entry->mid_state == MID_REQUEST_SUBMITTED)
392                         mid_entry->mid_state = MID_RETRY_NEEDED;
393                 list_move(&mid_entry->qhead, &retry_list);
394         }
395         spin_unlock(&GlobalMid_Lock);
396         mutex_unlock(&server->srv_mutex);
397
398         cifs_dbg(FYI, "%s: issuing mid callbacks\n", __func__);
399         list_for_each_safe(tmp, tmp2, &retry_list) {
400                 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
401                 list_del_init(&mid_entry->qhead);
402                 mid_entry->callback(mid_entry);
403         }
404
405         do {
406                 try_to_freeze();
407
408                 /* we should try only the port we connected to before */
409                 mutex_lock(&server->srv_mutex);
410                 rc = generic_ip_connect(server);
411                 if (rc) {
412                         cifs_dbg(FYI, "reconnect error %d\n", rc);
413                         mutex_unlock(&server->srv_mutex);
414                         msleep(3000);
415                 } else {
416                         atomic_inc(&tcpSesReconnectCount);
417                         spin_lock(&GlobalMid_Lock);
418                         if (server->tcpStatus != CifsExiting)
419                                 server->tcpStatus = CifsNeedNegotiate;
420                         spin_unlock(&GlobalMid_Lock);
421                         mutex_unlock(&server->srv_mutex);
422                 }
423         } while (server->tcpStatus == CifsNeedReconnect);
424
425         if (server->tcpStatus == CifsNeedNegotiate)
426                 mod_delayed_work(cifsiod_wq, &server->echo, 0);
427
428         return rc;
429 }
430
431 static void
432 cifs_echo_request(struct work_struct *work)
433 {
434         int rc;
435         struct TCP_Server_Info *server = container_of(work,
436                                         struct TCP_Server_Info, echo.work);
437         unsigned long echo_interval;
438
439         /*
440          * If we need to renegotiate, set echo interval to zero to
441          * immediately call echo service where we can renegotiate.
442          */
443         if (server->tcpStatus == CifsNeedNegotiate)
444                 echo_interval = 0;
445         else
446                 echo_interval = server->echo_interval;
447
448         /*
449          * We cannot send an echo if it is disabled.
450          * Also, no need to ping if we got a response recently.
451          */
452
453         if (server->tcpStatus == CifsNeedReconnect ||
454             server->tcpStatus == CifsExiting ||
455             server->tcpStatus == CifsNew ||
456             (server->ops->can_echo && !server->ops->can_echo(server)) ||
457             time_before(jiffies, server->lstrp + echo_interval - HZ))
458                 goto requeue_echo;
459
460         rc = server->ops->echo ? server->ops->echo(server) : -ENOSYS;
461         if (rc)
462                 cifs_dbg(FYI, "Unable to send echo request to server: %s\n",
463                          server->hostname);
464
465 requeue_echo:
466         queue_delayed_work(cifsiod_wq, &server->echo, server->echo_interval);
467 }
468
469 static bool
470 allocate_buffers(struct TCP_Server_Info *server)
471 {
472         if (!server->bigbuf) {
473                 server->bigbuf = (char *)cifs_buf_get();
474                 if (!server->bigbuf) {
475                         cifs_dbg(VFS, "No memory for large SMB response\n");
476                         msleep(3000);
477                         /* retry will check if exiting */
478                         return false;
479                 }
480         } else if (server->large_buf) {
481                 /* we are reusing a dirty large buf, clear its start */
482                 memset(server->bigbuf, 0, HEADER_SIZE(server));
483         }
484
485         if (!server->smallbuf) {
486                 server->smallbuf = (char *)cifs_small_buf_get();
487                 if (!server->smallbuf) {
488                         cifs_dbg(VFS, "No memory for SMB response\n");
489                         msleep(1000);
490                         /* retry will check if exiting */
491                         return false;
492                 }
493                 /* beginning of smb buffer is cleared in our buf_get */
494         } else {
495                 /* if existing small buf clear beginning */
496                 memset(server->smallbuf, 0, HEADER_SIZE(server));
497         }
498
499         return true;
500 }
501
502 static bool
503 server_unresponsive(struct TCP_Server_Info *server)
504 {
505         /*
506          * We need to wait 2 echo intervals to make sure we handle such
507          * situations right:
508          * 1s  client sends a normal SMB request
509          * 2s  client gets a response
510          * 30s echo workqueue job pops, and decides we got a response recently
511          *     and don't need to send another
512          * ...
513          * 65s kernel_recvmsg times out, and we see that we haven't gotten
514          *     a response in >60s.
515          */
516         if (server->tcpStatus == CifsGood &&
517             time_after(jiffies, server->lstrp + 2 * server->echo_interval)) {
518                 cifs_dbg(VFS, "Server %s has not responded in %lu seconds. Reconnecting...\n",
519                          server->hostname, (2 * server->echo_interval) / HZ);
520                 cifs_reconnect(server);
521                 wake_up(&server->response_q);
522                 return true;
523         }
524
525         return false;
526 }
527
528 static int
529 cifs_readv_from_socket(struct TCP_Server_Info *server, struct msghdr *smb_msg)
530 {
531         int length = 0;
532         int total_read;
533
534         smb_msg->msg_control = NULL;
535         smb_msg->msg_controllen = 0;
536
537         for (total_read = 0; msg_data_left(smb_msg); total_read += length) {
538                 try_to_freeze();
539
540                 if (server_unresponsive(server))
541                         return -ECONNABORTED;
542
543                 length = sock_recvmsg(server->ssocket, smb_msg, 0);
544
545                 if (server->tcpStatus == CifsExiting)
546                         return -ESHUTDOWN;
547
548                 if (server->tcpStatus == CifsNeedReconnect) {
549                         cifs_reconnect(server);
550                         return -ECONNABORTED;
551                 }
552
553                 if (length == -ERESTARTSYS ||
554                     length == -EAGAIN ||
555                     length == -EINTR) {
556                         /*
557                          * Minimum sleep to prevent looping, allowing socket
558                          * to clear and app threads to set tcpStatus
559                          * CifsNeedReconnect if server hung.
560                          */
561                         usleep_range(1000, 2000);
562                         length = 0;
563                         continue;
564                 }
565
566                 if (length <= 0) {
567                         cifs_dbg(FYI, "Received no data or error: %d\n", length);
568                         cifs_reconnect(server);
569                         return -ECONNABORTED;
570                 }
571         }
572         return total_read;
573 }
574
575 int
576 cifs_read_from_socket(struct TCP_Server_Info *server, char *buf,
577                       unsigned int to_read)
578 {
579         struct msghdr smb_msg;
580         struct kvec iov = {.iov_base = buf, .iov_len = to_read};
581         iov_iter_kvec(&smb_msg.msg_iter, READ | ITER_KVEC, &iov, 1, to_read);
582
583         return cifs_readv_from_socket(server, &smb_msg);
584 }
585
586 int
587 cifs_read_page_from_socket(struct TCP_Server_Info *server, struct page *page,
588                       unsigned int to_read)
589 {
590         struct msghdr smb_msg;
591         struct bio_vec bv = {.bv_page = page, .bv_len = to_read};
592         iov_iter_bvec(&smb_msg.msg_iter, READ | ITER_BVEC, &bv, 1, to_read);
593         return cifs_readv_from_socket(server, &smb_msg);
594 }
595
596 static bool
597 is_smb_response(struct TCP_Server_Info *server, unsigned char type)
598 {
599         /*
600          * The first byte big endian of the length field,
601          * is actually not part of the length but the type
602          * with the most common, zero, as regular data.
603          */
604         switch (type) {
605         case RFC1002_SESSION_MESSAGE:
606                 /* Regular SMB response */
607                 return true;
608         case RFC1002_SESSION_KEEP_ALIVE:
609                 cifs_dbg(FYI, "RFC 1002 session keep alive\n");
610                 break;
611         case RFC1002_POSITIVE_SESSION_RESPONSE:
612                 cifs_dbg(FYI, "RFC 1002 positive session response\n");
613                 break;
614         case RFC1002_NEGATIVE_SESSION_RESPONSE:
615                 /*
616                  * We get this from Windows 98 instead of an error on
617                  * SMB negprot response.
618                  */
619                 cifs_dbg(FYI, "RFC 1002 negative session response\n");
620                 /* give server a second to clean up */
621                 msleep(1000);
622                 /*
623                  * Always try 445 first on reconnect since we get NACK
624                  * on some if we ever connected to port 139 (the NACK
625                  * is since we do not begin with RFC1001 session
626                  * initialize frame).
627                  */
628                 cifs_set_port((struct sockaddr *)&server->dstaddr, CIFS_PORT);
629                 cifs_reconnect(server);
630                 wake_up(&server->response_q);
631                 break;
632         default:
633                 cifs_dbg(VFS, "RFC 1002 unknown response type 0x%x\n", type);
634                 cifs_reconnect(server);
635         }
636
637         return false;
638 }
639
640 void
641 dequeue_mid(struct mid_q_entry *mid, bool malformed)
642 {
643 #ifdef CONFIG_CIFS_STATS2
644         mid->when_received = jiffies;
645 #endif
646         spin_lock(&GlobalMid_Lock);
647         if (!malformed)
648                 mid->mid_state = MID_RESPONSE_RECEIVED;
649         else
650                 mid->mid_state = MID_RESPONSE_MALFORMED;
651         list_del_init(&mid->qhead);
652         spin_unlock(&GlobalMid_Lock);
653 }
654
655 static void
656 handle_mid(struct mid_q_entry *mid, struct TCP_Server_Info *server,
657            char *buf, int malformed)
658 {
659         if (server->ops->check_trans2 &&
660             server->ops->check_trans2(mid, server, buf, malformed))
661                 return;
662         mid->resp_buf = buf;
663         mid->large_buf = server->large_buf;
664         /* Was previous buf put in mpx struct for multi-rsp? */
665         if (!mid->multiRsp) {
666                 /* smb buffer will be freed by user thread */
667                 if (server->large_buf)
668                         server->bigbuf = NULL;
669                 else
670                         server->smallbuf = NULL;
671         }
672         dequeue_mid(mid, malformed);
673 }
674
675 static void clean_demultiplex_info(struct TCP_Server_Info *server)
676 {
677         int length;
678
679         /* take it off the list, if it's not already */
680         spin_lock(&cifs_tcp_ses_lock);
681         list_del_init(&server->tcp_ses_list);
682         spin_unlock(&cifs_tcp_ses_lock);
683
684         spin_lock(&GlobalMid_Lock);
685         server->tcpStatus = CifsExiting;
686         spin_unlock(&GlobalMid_Lock);
687         wake_up_all(&server->response_q);
688
689         /* check if we have blocked requests that need to free */
690         spin_lock(&server->req_lock);
691         if (server->credits <= 0)
692                 server->credits = 1;
693         spin_unlock(&server->req_lock);
694         /*
695          * Although there should not be any requests blocked on this queue it
696          * can not hurt to be paranoid and try to wake up requests that may
697          * haven been blocked when more than 50 at time were on the wire to the
698          * same server - they now will see the session is in exit state and get
699          * out of SendReceive.
700          */
701         wake_up_all(&server->request_q);
702         /* give those requests time to exit */
703         msleep(125);
704
705         if (server->ssocket) {
706                 sock_release(server->ssocket);
707                 server->ssocket = NULL;
708         }
709
710         if (!list_empty(&server->pending_mid_q)) {
711                 struct list_head dispose_list;
712                 struct mid_q_entry *mid_entry;
713                 struct list_head *tmp, *tmp2;
714
715                 INIT_LIST_HEAD(&dispose_list);
716                 spin_lock(&GlobalMid_Lock);
717                 list_for_each_safe(tmp, tmp2, &server->pending_mid_q) {
718                         mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
719                         cifs_dbg(FYI, "Clearing mid 0x%llx\n", mid_entry->mid);
720                         mid_entry->mid_state = MID_SHUTDOWN;
721                         list_move(&mid_entry->qhead, &dispose_list);
722                 }
723                 spin_unlock(&GlobalMid_Lock);
724
725                 /* now walk dispose list and issue callbacks */
726                 list_for_each_safe(tmp, tmp2, &dispose_list) {
727                         mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
728                         cifs_dbg(FYI, "Callback mid 0x%llx\n", mid_entry->mid);
729                         list_del_init(&mid_entry->qhead);
730                         mid_entry->callback(mid_entry);
731                 }
732                 /* 1/8th of sec is more than enough time for them to exit */
733                 msleep(125);
734         }
735
736         if (!list_empty(&server->pending_mid_q)) {
737                 /*
738                  * mpx threads have not exited yet give them at least the smb
739                  * send timeout time for long ops.
740                  *
741                  * Due to delays on oplock break requests, we need to wait at
742                  * least 45 seconds before giving up on a request getting a
743                  * response and going ahead and killing cifsd.
744                  */
745                 cifs_dbg(FYI, "Wait for exit from demultiplex thread\n");
746                 msleep(46000);
747                 /*
748                  * If threads still have not exited they are probably never
749                  * coming home not much else we can do but free the memory.
750                  */
751         }
752
753         kfree(server->hostname);
754         kfree(server);
755
756         length = atomic_dec_return(&tcpSesAllocCount);
757         if (length > 0)
758                 mempool_resize(cifs_req_poolp, length + cifs_min_rcv);
759 }
760
761 static int
762 standard_receive3(struct TCP_Server_Info *server, struct mid_q_entry *mid)
763 {
764         int length;
765         char *buf = server->smallbuf;
766         unsigned int pdu_length = get_rfc1002_length(buf);
767
768         /* make sure this will fit in a large buffer */
769         if (pdu_length > CIFSMaxBufSize + MAX_HEADER_SIZE(server) - 4) {
770                 cifs_dbg(VFS, "SMB response too long (%u bytes)\n", pdu_length);
771                 cifs_reconnect(server);
772                 wake_up(&server->response_q);
773                 return -ECONNABORTED;
774         }
775
776         /* switch to large buffer if too big for a small one */
777         if (pdu_length > MAX_CIFS_SMALL_BUFFER_SIZE - 4) {
778                 server->large_buf = true;
779                 memcpy(server->bigbuf, buf, server->total_read);
780                 buf = server->bigbuf;
781         }
782
783         /* now read the rest */
784         length = cifs_read_from_socket(server, buf + HEADER_SIZE(server) - 1,
785                                 pdu_length - HEADER_SIZE(server) + 1 + 4);
786         if (length < 0)
787                 return length;
788         server->total_read += length;
789
790         dump_smb(buf, server->total_read);
791
792         return cifs_handle_standard(server, mid);
793 }
794
795 int
796 cifs_handle_standard(struct TCP_Server_Info *server, struct mid_q_entry *mid)
797 {
798         char *buf = server->large_buf ? server->bigbuf : server->smallbuf;
799         int length;
800
801         /*
802          * We know that we received enough to get to the MID as we
803          * checked the pdu_length earlier. Now check to see
804          * if the rest of the header is OK. We borrow the length
805          * var for the rest of the loop to avoid a new stack var.
806          *
807          * 48 bytes is enough to display the header and a little bit
808          * into the payload for debugging purposes.
809          */
810         length = server->ops->check_message(buf, server->total_read, server);
811         if (length != 0)
812                 cifs_dump_mem("Bad SMB: ", buf,
813                         min_t(unsigned int, server->total_read, 48));
814
815         if (server->ops->is_status_pending &&
816             server->ops->is_status_pending(buf, server, length))
817                 return -1;
818
819         if (!mid)
820                 return length;
821
822         handle_mid(mid, server, buf, length);
823         return 0;
824 }
825
826 static int
827 cifs_demultiplex_thread(void *p)
828 {
829         int length;
830         struct TCP_Server_Info *server = p;
831         unsigned int pdu_length;
832         char *buf = NULL;
833         struct task_struct *task_to_wake = NULL;
834         struct mid_q_entry *mid_entry;
835
836         current->flags |= PF_MEMALLOC;
837         cifs_dbg(FYI, "Demultiplex PID: %d\n", task_pid_nr(current));
838
839         length = atomic_inc_return(&tcpSesAllocCount);
840         if (length > 1)
841                 mempool_resize(cifs_req_poolp, length + cifs_min_rcv);
842
843         set_freezable();
844         while (server->tcpStatus != CifsExiting) {
845                 if (try_to_freeze())
846                         continue;
847
848                 if (!allocate_buffers(server))
849                         continue;
850
851                 server->large_buf = false;
852                 buf = server->smallbuf;
853                 pdu_length = 4; /* enough to get RFC1001 header */
854
855                 length = cifs_read_from_socket(server, buf, pdu_length);
856                 if (length < 0)
857                         continue;
858                 server->total_read = length;
859
860                 /*
861                  * The right amount was read from socket - 4 bytes,
862                  * so we can now interpret the length field.
863                  */
864                 pdu_length = get_rfc1002_length(buf);
865
866                 cifs_dbg(FYI, "RFC1002 header 0x%x\n", pdu_length);
867                 if (!is_smb_response(server, buf[0]))
868                         continue;
869
870                 /* make sure we have enough to get to the MID */
871                 if (pdu_length < HEADER_SIZE(server) - 1 - 4) {
872                         cifs_dbg(VFS, "SMB response too short (%u bytes)\n",
873                                  pdu_length);
874                         cifs_reconnect(server);
875                         wake_up(&server->response_q);
876                         continue;
877                 }
878
879                 /* read down to the MID */
880                 length = cifs_read_from_socket(server, buf + 4,
881                                                HEADER_SIZE(server) - 1 - 4);
882                 if (length < 0)
883                         continue;
884                 server->total_read += length;
885
886                 if (server->ops->is_transform_hdr &&
887                     server->ops->receive_transform &&
888                     server->ops->is_transform_hdr(buf)) {
889                         length = server->ops->receive_transform(server,
890                                                                 &mid_entry);
891                 } else {
892                         mid_entry = server->ops->find_mid(server, buf);
893
894                         if (!mid_entry || !mid_entry->receive)
895                                 length = standard_receive3(server, mid_entry);
896                         else
897                                 length = mid_entry->receive(server, mid_entry);
898                 }
899
900                 if (length < 0)
901                         continue;
902
903                 if (server->large_buf)
904                         buf = server->bigbuf;
905
906                 server->lstrp = jiffies;
907                 if (mid_entry != NULL) {
908                         if ((mid_entry->mid_flags & MID_WAIT_CANCELLED) &&
909                              mid_entry->mid_state == MID_RESPONSE_RECEIVED &&
910                                         server->ops->handle_cancelled_mid)
911                                 server->ops->handle_cancelled_mid(
912                                                         mid_entry->resp_buf,
913                                                         server);
914
915                         if (!mid_entry->multiRsp || mid_entry->multiEnd)
916                                 mid_entry->callback(mid_entry);
917                 } else if (server->ops->is_oplock_break &&
918                            server->ops->is_oplock_break(buf, server)) {
919                         cifs_dbg(FYI, "Received oplock break\n");
920                 } else {
921                         cifs_dbg(VFS, "No task to wake, unknown frame received! NumMids %d\n",
922                                  atomic_read(&midCount));
923                         cifs_dump_mem("Received Data is: ", buf,
924                                       HEADER_SIZE(server));
925 #ifdef CONFIG_CIFS_DEBUG2
926                         if (server->ops->dump_detail)
927                                 server->ops->dump_detail(buf);
928                         cifs_dump_mids(server);
929 #endif /* CIFS_DEBUG2 */
930
931                 }
932         } /* end while !EXITING */
933
934         /* buffer usually freed in free_mid - need to free it here on exit */
935         cifs_buf_release(server->bigbuf);
936         if (server->smallbuf) /* no sense logging a debug message if NULL */
937                 cifs_small_buf_release(server->smallbuf);
938
939         task_to_wake = xchg(&server->tsk, NULL);
940         clean_demultiplex_info(server);
941
942         /* if server->tsk was NULL then wait for a signal before exiting */
943         if (!task_to_wake) {
944                 set_current_state(TASK_INTERRUPTIBLE);
945                 while (!signal_pending(current)) {
946                         schedule();
947                         set_current_state(TASK_INTERRUPTIBLE);
948                 }
949                 set_current_state(TASK_RUNNING);
950         }
951
952         module_put_and_exit(0);
953 }
954
955 /* extract the host portion of the UNC string */
956 static char *
957 extract_hostname(const char *unc)
958 {
959         const char *src;
960         char *dst, *delim;
961         unsigned int len;
962
963         /* skip double chars at beginning of string */
964         /* BB: check validity of these bytes? */
965         src = unc + 2;
966
967         /* delimiter between hostname and sharename is always '\\' now */
968         delim = strchr(src, '\\');
969         if (!delim)
970                 return ERR_PTR(-EINVAL);
971
972         len = delim - src;
973         dst = kmalloc((len + 1), GFP_KERNEL);
974         if (dst == NULL)
975                 return ERR_PTR(-ENOMEM);
976
977         memcpy(dst, src, len);
978         dst[len] = '\0';
979
980         return dst;
981 }
982
983 static int get_option_ul(substring_t args[], unsigned long *option)
984 {
985         int rc;
986         char *string;
987
988         string = match_strdup(args);
989         if (string == NULL)
990                 return -ENOMEM;
991         rc = kstrtoul(string, 0, option);
992         kfree(string);
993
994         return rc;
995 }
996
997 static int get_option_uid(substring_t args[], kuid_t *result)
998 {
999         unsigned long value;
1000         kuid_t uid;
1001         int rc;
1002
1003         rc = get_option_ul(args, &value);
1004         if (rc)
1005                 return rc;
1006
1007         uid = make_kuid(current_user_ns(), value);
1008         if (!uid_valid(uid))
1009                 return -EINVAL;
1010
1011         *result = uid;
1012         return 0;
1013 }
1014
1015 static int get_option_gid(substring_t args[], kgid_t *result)
1016 {
1017         unsigned long value;
1018         kgid_t gid;
1019         int rc;
1020
1021         rc = get_option_ul(args, &value);
1022         if (rc)
1023                 return rc;
1024
1025         gid = make_kgid(current_user_ns(), value);
1026         if (!gid_valid(gid))
1027                 return -EINVAL;
1028
1029         *result = gid;
1030         return 0;
1031 }
1032
1033 static int cifs_parse_security_flavors(char *value,
1034                                        struct smb_vol *vol)
1035 {
1036
1037         substring_t args[MAX_OPT_ARGS];
1038
1039         /*
1040          * With mount options, the last one should win. Reset any existing
1041          * settings back to default.
1042          */
1043         vol->sectype = Unspecified;
1044         vol->sign = false;
1045
1046         switch (match_token(value, cifs_secflavor_tokens, args)) {
1047         case Opt_sec_krb5p:
1048                 cifs_dbg(VFS, "sec=krb5p is not supported!\n");
1049                 return 1;
1050         case Opt_sec_krb5i:
1051                 vol->sign = true;
1052                 /* Fallthrough */
1053         case Opt_sec_krb5:
1054                 vol->sectype = Kerberos;
1055                 break;
1056         case Opt_sec_ntlmsspi:
1057                 vol->sign = true;
1058                 /* Fallthrough */
1059         case Opt_sec_ntlmssp:
1060                 vol->sectype = RawNTLMSSP;
1061                 break;
1062         case Opt_sec_ntlmi:
1063                 vol->sign = true;
1064                 /* Fallthrough */
1065         case Opt_ntlm:
1066                 vol->sectype = NTLM;
1067                 break;
1068         case Opt_sec_ntlmv2i:
1069                 vol->sign = true;
1070                 /* Fallthrough */
1071         case Opt_sec_ntlmv2:
1072                 vol->sectype = NTLMv2;
1073                 break;
1074 #ifdef CONFIG_CIFS_WEAK_PW_HASH
1075         case Opt_sec_lanman:
1076                 vol->sectype = LANMAN;
1077                 break;
1078 #endif
1079         case Opt_sec_none:
1080                 vol->nullauth = 1;
1081                 break;
1082         default:
1083                 cifs_dbg(VFS, "bad security option: %s\n", value);
1084                 return 1;
1085         }
1086
1087         return 0;
1088 }
1089
1090 static int
1091 cifs_parse_cache_flavor(char *value, struct smb_vol *vol)
1092 {
1093         substring_t args[MAX_OPT_ARGS];
1094
1095         switch (match_token(value, cifs_cacheflavor_tokens, args)) {
1096         case Opt_cache_loose:
1097                 vol->direct_io = false;
1098                 vol->strict_io = false;
1099                 break;
1100         case Opt_cache_strict:
1101                 vol->direct_io = false;
1102                 vol->strict_io = true;
1103                 break;
1104         case Opt_cache_none:
1105                 vol->direct_io = true;
1106                 vol->strict_io = false;
1107                 break;
1108         default:
1109                 cifs_dbg(VFS, "bad cache= option: %s\n", value);
1110                 return 1;
1111         }
1112         return 0;
1113 }
1114
1115 static int
1116 cifs_parse_smb_version(char *value, struct smb_vol *vol)
1117 {
1118         substring_t args[MAX_OPT_ARGS];
1119
1120         switch (match_token(value, cifs_smb_version_tokens, args)) {
1121         case Smb_1:
1122                 vol->ops = &smb1_operations;
1123                 vol->vals = &smb1_values;
1124                 break;
1125 #ifdef CONFIG_CIFS_SMB2
1126         case Smb_20:
1127                 vol->ops = &smb20_operations;
1128                 vol->vals = &smb20_values;
1129                 break;
1130         case Smb_21:
1131                 vol->ops = &smb21_operations;
1132                 vol->vals = &smb21_values;
1133                 break;
1134         case Smb_30:
1135                 vol->ops = &smb30_operations;
1136                 vol->vals = &smb30_values;
1137                 break;
1138         case Smb_302:
1139                 vol->ops = &smb30_operations; /* currently identical with 3.0 */
1140                 vol->vals = &smb302_values;
1141                 break;
1142 #ifdef CONFIG_CIFS_SMB311
1143         case Smb_311:
1144                 vol->ops = &smb311_operations;
1145                 vol->vals = &smb311_values;
1146                 break;
1147 #endif /* SMB311 */
1148 #endif
1149         default:
1150                 cifs_dbg(VFS, "Unknown vers= option specified: %s\n", value);
1151                 return 1;
1152         }
1153         return 0;
1154 }
1155
1156 /*
1157  * Parse a devname into substrings and populate the vol->UNC and vol->prepath
1158  * fields with the result. Returns 0 on success and an error otherwise.
1159  */
1160 static int
1161 cifs_parse_devname(const char *devname, struct smb_vol *vol)
1162 {
1163         char *pos;
1164         const char *delims = "/\\";
1165         size_t len;
1166
1167         /* make sure we have a valid UNC double delimiter prefix */
1168         len = strspn(devname, delims);
1169         if (len != 2)
1170                 return -EINVAL;
1171
1172         /* find delimiter between host and sharename */
1173         pos = strpbrk(devname + 2, delims);
1174         if (!pos)
1175                 return -EINVAL;
1176
1177         /* skip past delimiter */
1178         ++pos;
1179
1180         /* now go until next delimiter or end of string */
1181         len = strcspn(pos, delims);
1182
1183         /* move "pos" up to delimiter or NULL */
1184         pos += len;
1185         vol->UNC = kstrndup(devname, pos - devname, GFP_KERNEL);
1186         if (!vol->UNC)
1187                 return -ENOMEM;
1188
1189         convert_delimiter(vol->UNC, '\\');
1190
1191         /* skip any delimiter */
1192         if (*pos == '/' || *pos == '\\')
1193                 pos++;
1194
1195         /* If pos is NULL then no prepath */
1196         if (!*pos)
1197                 return 0;
1198
1199         vol->prepath = kstrdup(pos, GFP_KERNEL);
1200         if (!vol->prepath)
1201                 return -ENOMEM;
1202
1203         return 0;
1204 }
1205
1206 static int
1207 cifs_parse_mount_options(const char *mountdata, const char *devname,
1208                          struct smb_vol *vol)
1209 {
1210         char *data, *end;
1211         char *mountdata_copy = NULL, *options;
1212         unsigned int  temp_len, i, j;
1213         char separator[2];
1214         short int override_uid = -1;
1215         short int override_gid = -1;
1216         bool uid_specified = false;
1217         bool gid_specified = false;
1218         bool sloppy = false;
1219         char *invalid = NULL;
1220         char *nodename = utsname()->nodename;
1221         char *string = NULL;
1222         char *tmp_end, *value;
1223         char delim;
1224         bool got_ip = false;
1225         unsigned short port = 0;
1226         struct sockaddr *dstaddr = (struct sockaddr *)&vol->dstaddr;
1227
1228         separator[0] = ',';
1229         separator[1] = 0;
1230         delim = separator[0];
1231
1232         /* ensure we always start with zeroed-out smb_vol */
1233         memset(vol, 0, sizeof(*vol));
1234
1235         /*
1236          * does not have to be perfect mapping since field is
1237          * informational, only used for servers that do not support
1238          * port 445 and it can be overridden at mount time
1239          */
1240         memset(vol->source_rfc1001_name, 0x20, RFC1001_NAME_LEN);
1241         for (i = 0; i < strnlen(nodename, RFC1001_NAME_LEN); i++)
1242                 vol->source_rfc1001_name[i] = toupper(nodename[i]);
1243
1244         vol->source_rfc1001_name[RFC1001_NAME_LEN] = 0;
1245         /* null target name indicates to use *SMBSERVR default called name
1246            if we end up sending RFC1001 session initialize */
1247         vol->target_rfc1001_name[0] = 0;
1248         vol->cred_uid = current_uid();
1249         vol->linux_uid = current_uid();
1250         vol->linux_gid = current_gid();
1251
1252         /*
1253          * default to SFM style remapping of seven reserved characters
1254          * unless user overrides it or we negotiate CIFS POSIX where
1255          * it is unnecessary.  Can not simultaneously use more than one mapping
1256          * since then readdir could list files that open could not open
1257          */
1258         vol->remap = true;
1259
1260         /* default to only allowing write access to owner of the mount */
1261         vol->dir_mode = vol->file_mode = S_IRUGO | S_IXUGO | S_IWUSR;
1262
1263         /* vol->retry default is 0 (i.e. "soft" limited retry not hard retry) */
1264         /* default is always to request posix paths. */
1265         vol->posix_paths = 1;
1266         /* default to using server inode numbers where available */
1267         vol->server_ino = 1;
1268
1269         /* default is to use strict cifs caching semantics */
1270         vol->strict_io = true;
1271
1272         vol->actimeo = CIFS_DEF_ACTIMEO;
1273
1274         /* FIXME: add autonegotiation -- for now, SMB1 is default */
1275         vol->ops = &smb1_operations;
1276         vol->vals = &smb1_values;
1277
1278         vol->echo_interval = SMB_ECHO_INTERVAL_DEFAULT;
1279
1280         if (!mountdata)
1281                 goto cifs_parse_mount_err;
1282
1283         mountdata_copy = kstrndup(mountdata, PAGE_SIZE, GFP_KERNEL);
1284         if (!mountdata_copy)
1285                 goto cifs_parse_mount_err;
1286
1287         options = mountdata_copy;
1288         end = options + strlen(options);
1289
1290         if (strncmp(options, "sep=", 4) == 0) {
1291                 if (options[4] != 0) {
1292                         separator[0] = options[4];
1293                         options += 5;
1294                 } else {
1295                         cifs_dbg(FYI, "Null separator not allowed\n");
1296                 }
1297         }
1298         vol->backupuid_specified = false; /* no backup intent for a user */
1299         vol->backupgid_specified = false; /* no backup intent for a group */
1300
1301         switch (cifs_parse_devname(devname, vol)) {
1302         case 0:
1303                 break;
1304         case -ENOMEM:
1305                 cifs_dbg(VFS, "Unable to allocate memory for devname.\n");
1306                 goto cifs_parse_mount_err;
1307         case -EINVAL:
1308                 cifs_dbg(VFS, "Malformed UNC in devname.\n");
1309                 goto cifs_parse_mount_err;
1310         default:
1311                 cifs_dbg(VFS, "Unknown error parsing devname.\n");
1312                 goto cifs_parse_mount_err;
1313         }
1314
1315         while ((data = strsep(&options, separator)) != NULL) {
1316                 substring_t args[MAX_OPT_ARGS];
1317                 unsigned long option;
1318                 int token;
1319
1320                 if (!*data)
1321                         continue;
1322
1323                 token = match_token(data, cifs_mount_option_tokens, args);
1324
1325                 switch (token) {
1326
1327                 /* Ingnore the following */
1328                 case Opt_ignore:
1329                         break;
1330
1331                 /* Boolean values */
1332                 case Opt_user_xattr:
1333                         vol->no_xattr = 0;
1334                         break;
1335                 case Opt_nouser_xattr:
1336                         vol->no_xattr = 1;
1337                         break;
1338                 case Opt_forceuid:
1339                         override_uid = 1;
1340                         break;
1341                 case Opt_noforceuid:
1342                         override_uid = 0;
1343                         break;
1344                 case Opt_forcegid:
1345                         override_gid = 1;
1346                         break;
1347                 case Opt_noforcegid:
1348                         override_gid = 0;
1349                         break;
1350                 case Opt_noblocksend:
1351                         vol->noblocksnd = 1;
1352                         break;
1353                 case Opt_noautotune:
1354                         vol->noautotune = 1;
1355                         break;
1356                 case Opt_hard:
1357                         vol->retry = 1;
1358                         break;
1359                 case Opt_soft:
1360                         vol->retry = 0;
1361                         break;
1362                 case Opt_perm:
1363                         vol->noperm = 0;
1364                         break;
1365                 case Opt_noperm:
1366                         vol->noperm = 1;
1367                         break;
1368                 case Opt_mapchars:
1369                         vol->sfu_remap = true;
1370                         vol->remap = false; /* disable SFM mapping */
1371                         break;
1372                 case Opt_nomapchars:
1373                         vol->sfu_remap = false;
1374                         break;
1375                 case Opt_mapposix:
1376                         vol->remap = true;
1377                         vol->sfu_remap = false; /* disable SFU mapping */
1378                         break;
1379                 case Opt_nomapposix:
1380                         vol->remap = false;
1381                         break;
1382                 case Opt_sfu:
1383                         vol->sfu_emul = 1;
1384                         break;
1385                 case Opt_nosfu:
1386                         vol->sfu_emul = 0;
1387                         break;
1388                 case Opt_nodfs:
1389                         vol->nodfs = 1;
1390                         break;
1391                 case Opt_posixpaths:
1392                         vol->posix_paths = 1;
1393                         break;
1394                 case Opt_noposixpaths:
1395                         vol->posix_paths = 0;
1396                         break;
1397                 case Opt_nounix:
1398                         vol->no_linux_ext = 1;
1399                         break;
1400                 case Opt_nocase:
1401                         vol->nocase = 1;
1402                         break;
1403                 case Opt_brl:
1404                         vol->nobrl =  0;
1405                         break;
1406                 case Opt_nobrl:
1407                         vol->nobrl =  1;
1408                         /*
1409                          * turn off mandatory locking in mode
1410                          * if remote locking is turned off since the
1411                          * local vfs will do advisory
1412                          */
1413                         if (vol->file_mode ==
1414                                 (S_IALLUGO & ~(S_ISUID | S_IXGRP)))
1415                                 vol->file_mode = S_IALLUGO;
1416                         break;
1417                 case Opt_forcemandatorylock:
1418                         vol->mand_lock = 1;
1419                         break;
1420                 case Opt_setuids:
1421                         vol->setuids = 1;
1422                         break;
1423                 case Opt_nosetuids:
1424                         vol->setuids = 0;
1425                         break;
1426                 case Opt_setuidfromacl:
1427                         vol->setuidfromacl = 1;
1428                         break;
1429                 case Opt_dynperm:
1430                         vol->dynperm = true;
1431                         break;
1432                 case Opt_nodynperm:
1433                         vol->dynperm = false;
1434                         break;
1435                 case Opt_nohard:
1436                         vol->retry = 0;
1437                         break;
1438                 case Opt_nosoft:
1439                         vol->retry = 1;
1440                         break;
1441                 case Opt_nointr:
1442                         vol->intr = 0;
1443                         break;
1444                 case Opt_intr:
1445                         vol->intr = 1;
1446                         break;
1447                 case Opt_nostrictsync:
1448                         vol->nostrictsync = 1;
1449                         break;
1450                 case Opt_strictsync:
1451                         vol->nostrictsync = 0;
1452                         break;
1453                 case Opt_serverino:
1454                         vol->server_ino = 1;
1455                         break;
1456                 case Opt_noserverino:
1457                         vol->server_ino = 0;
1458                         break;
1459                 case Opt_rwpidforward:
1460                         vol->rwpidforward = 1;
1461                         break;
1462                 case Opt_cifsacl:
1463                         vol->cifs_acl = 1;
1464                         break;
1465                 case Opt_nocifsacl:
1466                         vol->cifs_acl = 0;
1467                         break;
1468                 case Opt_acl:
1469                         vol->no_psx_acl = 0;
1470                         break;
1471                 case Opt_noacl:
1472                         vol->no_psx_acl = 1;
1473                         break;
1474                 case Opt_locallease:
1475                         vol->local_lease = 1;
1476                         break;
1477                 case Opt_sign:
1478                         vol->sign = true;
1479                         break;
1480                 case Opt_seal:
1481                         /* we do not do the following in secFlags because seal
1482                          * is a per tree connection (mount) not a per socket
1483                          * or per-smb connection option in the protocol
1484                          * vol->secFlg |= CIFSSEC_MUST_SEAL;
1485                          */
1486                         vol->seal = 1;
1487                         break;
1488                 case Opt_noac:
1489                         pr_warn("CIFS: Mount option noac not supported. Instead set /proc/fs/cifs/LookupCacheEnabled to 0\n");
1490                         break;
1491                 case Opt_fsc:
1492 #ifndef CONFIG_CIFS_FSCACHE
1493                         cifs_dbg(VFS, "FS-Cache support needs CONFIG_CIFS_FSCACHE kernel config option set\n");
1494                         goto cifs_parse_mount_err;
1495 #endif
1496                         vol->fsc = true;
1497                         break;
1498                 case Opt_mfsymlinks:
1499                         vol->mfsymlinks = true;
1500                         break;
1501                 case Opt_multiuser:
1502                         vol->multiuser = true;
1503                         break;
1504                 case Opt_sloppy:
1505                         sloppy = true;
1506                         break;
1507                 case Opt_nosharesock:
1508                         vol->nosharesock = true;
1509                         break;
1510                 case Opt_nopersistent:
1511                         vol->nopersistent = true;
1512                         if (vol->persistent) {
1513                                 cifs_dbg(VFS,
1514                                   "persistenthandles mount options conflict\n");
1515                                 goto cifs_parse_mount_err;
1516                         }
1517                         break;
1518                 case Opt_persistent:
1519                         vol->persistent = true;
1520                         if ((vol->nopersistent) || (vol->resilient)) {
1521                                 cifs_dbg(VFS,
1522                                   "persistenthandles mount options conflict\n");
1523                                 goto cifs_parse_mount_err;
1524                         }
1525                         break;
1526                 case Opt_resilient:
1527                         vol->resilient = true;
1528                         if (vol->persistent) {
1529                                 cifs_dbg(VFS,
1530                                   "persistenthandles mount options conflict\n");
1531                                 goto cifs_parse_mount_err;
1532                         }
1533                         break;
1534                 case Opt_noresilient:
1535                         vol->resilient = false; /* already the default */
1536                         break;
1537                 case Opt_domainauto:
1538                         vol->domainauto = true;
1539                         break;
1540
1541                 /* Numeric Values */
1542                 case Opt_backupuid:
1543                         if (get_option_uid(args, &vol->backupuid)) {
1544                                 cifs_dbg(VFS, "%s: Invalid backupuid value\n",
1545                                          __func__);
1546                                 goto cifs_parse_mount_err;
1547                         }
1548                         vol->backupuid_specified = true;
1549                         break;
1550                 case Opt_backupgid:
1551                         if (get_option_gid(args, &vol->backupgid)) {
1552                                 cifs_dbg(VFS, "%s: Invalid backupgid value\n",
1553                                          __func__);
1554                                 goto cifs_parse_mount_err;
1555                         }
1556                         vol->backupgid_specified = true;
1557                         break;
1558                 case Opt_uid:
1559                         if (get_option_uid(args, &vol->linux_uid)) {
1560                                 cifs_dbg(VFS, "%s: Invalid uid value\n",
1561                                          __func__);
1562                                 goto cifs_parse_mount_err;
1563                         }
1564                         uid_specified = true;
1565                         break;
1566                 case Opt_cruid:
1567                         if (get_option_uid(args, &vol->cred_uid)) {
1568                                 cifs_dbg(VFS, "%s: Invalid cruid value\n",
1569                                          __func__);
1570                                 goto cifs_parse_mount_err;
1571                         }
1572                         break;
1573                 case Opt_gid:
1574                         if (get_option_gid(args, &vol->linux_gid)) {
1575                                 cifs_dbg(VFS, "%s: Invalid gid value\n",
1576                                          __func__);
1577                                 goto cifs_parse_mount_err;
1578                         }
1579                         gid_specified = true;
1580                         break;
1581                 case Opt_file_mode:
1582                         if (get_option_ul(args, &option)) {
1583                                 cifs_dbg(VFS, "%s: Invalid file_mode value\n",
1584                                          __func__);
1585                                 goto cifs_parse_mount_err;
1586                         }
1587                         vol->file_mode = option;
1588                         break;
1589                 case Opt_dirmode:
1590                         if (get_option_ul(args, &option)) {
1591                                 cifs_dbg(VFS, "%s: Invalid dir_mode value\n",
1592                                          __func__);
1593                                 goto cifs_parse_mount_err;
1594                         }
1595                         vol->dir_mode = option;
1596                         break;
1597                 case Opt_port:
1598                         if (get_option_ul(args, &option) ||
1599                             option > USHRT_MAX) {
1600                                 cifs_dbg(VFS, "%s: Invalid port value\n",
1601                                          __func__);
1602                                 goto cifs_parse_mount_err;
1603                         }
1604                         port = (unsigned short)option;
1605                         break;
1606                 case Opt_rsize:
1607                         if (get_option_ul(args, &option)) {
1608                                 cifs_dbg(VFS, "%s: Invalid rsize value\n",
1609                                          __func__);
1610                                 goto cifs_parse_mount_err;
1611                         }
1612                         vol->rsize = option;
1613                         break;
1614                 case Opt_wsize:
1615                         if (get_option_ul(args, &option)) {
1616                                 cifs_dbg(VFS, "%s: Invalid wsize value\n",
1617                                          __func__);
1618                                 goto cifs_parse_mount_err;
1619                         }
1620                         vol->wsize = option;
1621                         break;
1622                 case Opt_actimeo:
1623                         if (get_option_ul(args, &option)) {
1624                                 cifs_dbg(VFS, "%s: Invalid actimeo value\n",
1625                                          __func__);
1626                                 goto cifs_parse_mount_err;
1627                         }
1628                         vol->actimeo = HZ * option;
1629                         if (vol->actimeo > CIFS_MAX_ACTIMEO) {
1630                                 cifs_dbg(VFS, "attribute cache timeout too large\n");
1631                                 goto cifs_parse_mount_err;
1632                         }
1633                         break;
1634                 case Opt_echo_interval:
1635                         if (get_option_ul(args, &option)) {
1636                                 cifs_dbg(VFS, "%s: Invalid echo interval value\n",
1637                                          __func__);
1638                                 goto cifs_parse_mount_err;
1639                         }
1640                         vol->echo_interval = option;
1641                         break;
1642                 case Opt_snapshot:
1643                         if (get_option_ul(args, &option)) {
1644                                 cifs_dbg(VFS, "%s: Invalid snapshot time\n",
1645                                          __func__);
1646                                 goto cifs_parse_mount_err;
1647                         }
1648                         vol->snapshot_time = option;
1649                         break;
1650                 case Opt_max_credits:
1651                         if (get_option_ul(args, &option) || (option < 20) ||
1652                             (option > 60000)) {
1653                                 cifs_dbg(VFS, "%s: Invalid max_credits value\n",
1654                                          __func__);
1655                                 goto cifs_parse_mount_err;
1656                         }
1657                         vol->max_credits = option;
1658                         break;
1659
1660                 /* String Arguments */
1661
1662                 case Opt_blank_user:
1663                         /* null user, ie. anonymous authentication */
1664                         vol->nullauth = 1;
1665                         vol->username = NULL;
1666                         break;
1667                 case Opt_user:
1668                         string = match_strdup(args);
1669                         if (string == NULL)
1670                                 goto out_nomem;
1671
1672                         if (strnlen(string, CIFS_MAX_USERNAME_LEN) >
1673                                                         CIFS_MAX_USERNAME_LEN) {
1674                                 pr_warn("CIFS: username too long\n");
1675                                 goto cifs_parse_mount_err;
1676                         }
1677
1678                         kfree(vol->username);
1679                         vol->username = kstrdup(string, GFP_KERNEL);
1680                         if (!vol->username)
1681                                 goto cifs_parse_mount_err;
1682                         break;
1683                 case Opt_blank_pass:
1684                         /* passwords have to be handled differently
1685                          * to allow the character used for deliminator
1686                          * to be passed within them
1687                          */
1688
1689                         /*
1690                          * Check if this is a case where the  password
1691                          * starts with a delimiter
1692                          */
1693                         tmp_end = strchr(data, '=');
1694                         tmp_end++;
1695                         if (!(tmp_end < end && tmp_end[1] == delim)) {
1696                                 /* No it is not. Set the password to NULL */
1697                                 kfree(vol->password);
1698                                 vol->password = NULL;
1699                                 break;
1700                         }
1701                         /* Yes it is. Drop down to Opt_pass below.*/
1702                 case Opt_pass:
1703                         /* Obtain the value string */
1704                         value = strchr(data, '=');
1705                         value++;
1706
1707                         /* Set tmp_end to end of the string */
1708                         tmp_end = (char *) value + strlen(value);
1709
1710                         /* Check if following character is the deliminator
1711                          * If yes, we have encountered a double deliminator
1712                          * reset the NULL character to the deliminator
1713                          */
1714                         if (tmp_end < end && tmp_end[1] == delim) {
1715                                 tmp_end[0] = delim;
1716
1717                                 /* Keep iterating until we get to a single
1718                                  * deliminator OR the end
1719                                  */
1720                                 while ((tmp_end = strchr(tmp_end, delim))
1721                                         != NULL && (tmp_end[1] == delim)) {
1722                                                 tmp_end = (char *) &tmp_end[2];
1723                                 }
1724
1725                                 /* Reset var options to point to next element */
1726                                 if (tmp_end) {
1727                                         tmp_end[0] = '\0';
1728                                         options = (char *) &tmp_end[1];
1729                                 } else
1730                                         /* Reached the end of the mount option
1731                                          * string */
1732                                         options = end;
1733                         }
1734
1735                         kfree(vol->password);
1736                         /* Now build new password string */
1737                         temp_len = strlen(value);
1738                         vol->password = kzalloc(temp_len+1, GFP_KERNEL);
1739                         if (vol->password == NULL) {
1740                                 pr_warn("CIFS: no memory for password\n");
1741                                 goto cifs_parse_mount_err;
1742                         }
1743
1744                         for (i = 0, j = 0; i < temp_len; i++, j++) {
1745                                 vol->password[j] = value[i];
1746                                 if ((value[i] == delim) &&
1747                                      value[i+1] == delim)
1748                                         /* skip the second deliminator */
1749                                         i++;
1750                         }
1751                         vol->password[j] = '\0';
1752                         break;
1753                 case Opt_blank_ip:
1754                         /* FIXME: should this be an error instead? */
1755                         got_ip = false;
1756                         break;
1757                 case Opt_ip:
1758                         string = match_strdup(args);
1759                         if (string == NULL)
1760                                 goto out_nomem;
1761
1762                         if (!cifs_convert_address(dstaddr, string,
1763                                         strlen(string))) {
1764                                 pr_err("CIFS: bad ip= option (%s).\n", string);
1765                                 goto cifs_parse_mount_err;
1766                         }
1767                         got_ip = true;
1768                         break;
1769                 case Opt_domain:
1770                         string = match_strdup(args);
1771                         if (string == NULL)
1772                                 goto out_nomem;
1773
1774                         if (strnlen(string, CIFS_MAX_DOMAINNAME_LEN)
1775                                         == CIFS_MAX_DOMAINNAME_LEN) {
1776                                 pr_warn("CIFS: domain name too long\n");
1777                                 goto cifs_parse_mount_err;
1778                         }
1779
1780                         kfree(vol->domainname);
1781                         vol->domainname = kstrdup(string, GFP_KERNEL);
1782                         if (!vol->domainname) {
1783                                 pr_warn("CIFS: no memory for domainname\n");
1784                                 goto cifs_parse_mount_err;
1785                         }
1786                         cifs_dbg(FYI, "Domain name set\n");
1787                         break;
1788                 case Opt_srcaddr:
1789                         string = match_strdup(args);
1790                         if (string == NULL)
1791                                 goto out_nomem;
1792
1793                         if (!cifs_convert_address(
1794                                         (struct sockaddr *)&vol->srcaddr,
1795                                         string, strlen(string))) {
1796                                 pr_warn("CIFS: Could not parse srcaddr: %s\n",
1797                                         string);
1798                                 goto cifs_parse_mount_err;
1799                         }
1800                         break;
1801                 case Opt_iocharset:
1802                         string = match_strdup(args);
1803                         if (string == NULL)
1804                                 goto out_nomem;
1805
1806                         if (strnlen(string, 1024) >= 65) {
1807                                 pr_warn("CIFS: iocharset name too long.\n");
1808                                 goto cifs_parse_mount_err;
1809                         }
1810
1811                          if (strncasecmp(string, "default", 7) != 0) {
1812                                 kfree(vol->iocharset);
1813                                 vol->iocharset = kstrdup(string,
1814                                                          GFP_KERNEL);
1815                                 if (!vol->iocharset) {
1816                                         pr_warn("CIFS: no memory for charset\n");
1817                                         goto cifs_parse_mount_err;
1818                                 }
1819                         }
1820                         /* if iocharset not set then load_nls_default
1821                          * is used by caller
1822                          */
1823                          cifs_dbg(FYI, "iocharset set to %s\n", string);
1824                         break;
1825                 case Opt_netbiosname:
1826                         string = match_strdup(args);
1827                         if (string == NULL)
1828                                 goto out_nomem;
1829
1830                         memset(vol->source_rfc1001_name, 0x20,
1831                                 RFC1001_NAME_LEN);
1832                         /*
1833                          * FIXME: are there cases in which a comma can
1834                          * be valid in workstation netbios name (and
1835                          * need special handling)?
1836                          */
1837                         for (i = 0; i < RFC1001_NAME_LEN; i++) {
1838                                 /* don't ucase netbiosname for user */
1839                                 if (string[i] == 0)
1840                                         break;
1841                                 vol->source_rfc1001_name[i] = string[i];
1842                         }
1843                         /* The string has 16th byte zero still from
1844                          * set at top of the function
1845                          */
1846                         if (i == RFC1001_NAME_LEN && string[i] != 0)
1847                                 pr_warn("CIFS: netbiosname longer than 15 truncated.\n");
1848                         break;
1849                 case Opt_servern:
1850                         /* servernetbiosname specified override *SMBSERVER */
1851                         string = match_strdup(args);
1852                         if (string == NULL)
1853                                 goto out_nomem;
1854
1855                         /* last byte, type, is 0x20 for servr type */
1856                         memset(vol->target_rfc1001_name, 0x20,
1857                                 RFC1001_NAME_LEN_WITH_NULL);
1858
1859                         /* BB are there cases in which a comma can be
1860                            valid in this workstation netbios name
1861                            (and need special handling)? */
1862
1863                         /* user or mount helper must uppercase the
1864                            netbios name */
1865                         for (i = 0; i < 15; i++) {
1866                                 if (string[i] == 0)
1867                                         break;
1868                                 vol->target_rfc1001_name[i] = string[i];
1869                         }
1870                         /* The string has 16th byte zero still from
1871                            set at top of the function  */
1872                         if (i == RFC1001_NAME_LEN && string[i] != 0)
1873                                 pr_warn("CIFS: server netbiosname longer than 15 truncated.\n");
1874                         break;
1875                 case Opt_ver:
1876                         string = match_strdup(args);
1877                         if (string == NULL)
1878                                 goto out_nomem;
1879
1880                         if (strncasecmp(string, "1", 1) == 0) {
1881                                 /* This is the default */
1882                                 break;
1883                         }
1884                         /* For all other value, error */
1885                         pr_warn("CIFS: Invalid version specified\n");
1886                         goto cifs_parse_mount_err;
1887                 case Opt_vers:
1888                         string = match_strdup(args);
1889                         if (string == NULL)
1890                                 goto out_nomem;
1891
1892                         if (cifs_parse_smb_version(string, vol) != 0)
1893                                 goto cifs_parse_mount_err;
1894                         break;
1895                 case Opt_sec:
1896                         string = match_strdup(args);
1897                         if (string == NULL)
1898                                 goto out_nomem;
1899
1900                         if (cifs_parse_security_flavors(string, vol) != 0)
1901                                 goto cifs_parse_mount_err;
1902                         break;
1903                 case Opt_cache:
1904                         string = match_strdup(args);
1905                         if (string == NULL)
1906                                 goto out_nomem;
1907
1908                         if (cifs_parse_cache_flavor(string, vol) != 0)
1909                                 goto cifs_parse_mount_err;
1910                         break;
1911                 default:
1912                         /*
1913                          * An option we don't recognize. Save it off for later
1914                          * if we haven't already found one
1915                          */
1916                         if (!invalid)
1917                                 invalid = data;
1918                         break;
1919                 }
1920                 /* Free up any allocated string */
1921                 kfree(string);
1922                 string = NULL;
1923         }
1924
1925         if (!sloppy && invalid) {
1926                 pr_err("CIFS: Unknown mount option \"%s\"\n", invalid);
1927                 goto cifs_parse_mount_err;
1928         }
1929
1930 #ifndef CONFIG_KEYS
1931         /* Muliuser mounts require CONFIG_KEYS support */
1932         if (vol->multiuser) {
1933                 cifs_dbg(VFS, "Multiuser mounts require kernels with CONFIG_KEYS enabled\n");
1934                 goto cifs_parse_mount_err;
1935         }
1936 #endif
1937         if (!vol->UNC) {
1938                 cifs_dbg(VFS, "CIFS mount error: No usable UNC path provided in device string!\n");
1939                 goto cifs_parse_mount_err;
1940         }
1941
1942         /* make sure UNC has a share name */
1943         if (!strchr(vol->UNC + 3, '\\')) {
1944                 cifs_dbg(VFS, "Malformed UNC. Unable to find share name.\n");
1945                 goto cifs_parse_mount_err;
1946         }
1947
1948         if (!got_ip) {
1949                 int len;
1950                 const char *slash;
1951
1952                 /* No ip= option specified? Try to get it from UNC */
1953                 /* Use the address part of the UNC. */
1954                 slash = strchr(&vol->UNC[2], '\\');
1955                 len = slash - &vol->UNC[2];
1956                 if (!cifs_convert_address(dstaddr, &vol->UNC[2], len)) {
1957                         pr_err("Unable to determine destination address.\n");
1958                         goto cifs_parse_mount_err;
1959                 }
1960         }
1961
1962         /* set the port that we got earlier */
1963         cifs_set_port(dstaddr, port);
1964
1965         if (uid_specified)
1966                 vol->override_uid = override_uid;
1967         else if (override_uid == 1)
1968                 pr_notice("CIFS: ignoring forceuid mount option specified with no uid= option.\n");
1969
1970         if (gid_specified)
1971                 vol->override_gid = override_gid;
1972         else if (override_gid == 1)
1973                 pr_notice("CIFS: ignoring forcegid mount option specified with no gid= option.\n");
1974
1975         kfree(mountdata_copy);
1976         return 0;
1977
1978 out_nomem:
1979         pr_warn("Could not allocate temporary buffer\n");
1980 cifs_parse_mount_err:
1981         kfree(string);
1982         kfree(mountdata_copy);
1983         return 1;
1984 }
1985
1986 /** Returns true if srcaddr isn't specified and rhs isn't
1987  * specified, or if srcaddr is specified and
1988  * matches the IP address of the rhs argument.
1989  */
1990 static bool
1991 srcip_matches(struct sockaddr *srcaddr, struct sockaddr *rhs)
1992 {
1993         switch (srcaddr->sa_family) {
1994         case AF_UNSPEC:
1995                 return (rhs->sa_family == AF_UNSPEC);
1996         case AF_INET: {
1997                 struct sockaddr_in *saddr4 = (struct sockaddr_in *)srcaddr;
1998                 struct sockaddr_in *vaddr4 = (struct sockaddr_in *)rhs;
1999                 return (saddr4->sin_addr.s_addr == vaddr4->sin_addr.s_addr);
2000         }
2001         case AF_INET6: {
2002                 struct sockaddr_in6 *saddr6 = (struct sockaddr_in6 *)srcaddr;
2003                 struct sockaddr_in6 *vaddr6 = (struct sockaddr_in6 *)rhs;
2004                 return ipv6_addr_equal(&saddr6->sin6_addr, &vaddr6->sin6_addr);
2005         }
2006         default:
2007                 WARN_ON(1);
2008                 return false; /* don't expect to be here */
2009         }
2010 }
2011
2012 /*
2013  * If no port is specified in addr structure, we try to match with 445 port
2014  * and if it fails - with 139 ports. It should be called only if address
2015  * families of server and addr are equal.
2016  */
2017 static bool
2018 match_port(struct TCP_Server_Info *server, struct sockaddr *addr)
2019 {
2020         __be16 port, *sport;
2021
2022         switch (addr->sa_family) {
2023         case AF_INET:
2024                 sport = &((struct sockaddr_in *) &server->dstaddr)->sin_port;
2025                 port = ((struct sockaddr_in *) addr)->sin_port;
2026                 break;
2027         case AF_INET6:
2028                 sport = &((struct sockaddr_in6 *) &server->dstaddr)->sin6_port;
2029                 port = ((struct sockaddr_in6 *) addr)->sin6_port;
2030                 break;
2031         default:
2032                 WARN_ON(1);
2033                 return false;
2034         }
2035
2036         if (!port) {
2037                 port = htons(CIFS_PORT);
2038                 if (port == *sport)
2039                         return true;
2040
2041                 port = htons(RFC1001_PORT);
2042         }
2043
2044         return port == *sport;
2045 }
2046
2047 static bool
2048 match_address(struct TCP_Server_Info *server, struct sockaddr *addr,
2049               struct sockaddr *srcaddr)
2050 {
2051         switch (addr->sa_family) {
2052         case AF_INET: {
2053                 struct sockaddr_in *addr4 = (struct sockaddr_in *)addr;
2054                 struct sockaddr_in *srv_addr4 =
2055                                         (struct sockaddr_in *)&server->dstaddr;
2056
2057                 if (addr4->sin_addr.s_addr != srv_addr4->sin_addr.s_addr)
2058                         return false;
2059                 break;
2060         }
2061         case AF_INET6: {
2062                 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)addr;
2063                 struct sockaddr_in6 *srv_addr6 =
2064                                         (struct sockaddr_in6 *)&server->dstaddr;
2065
2066                 if (!ipv6_addr_equal(&addr6->sin6_addr,
2067                                      &srv_addr6->sin6_addr))
2068                         return false;
2069                 if (addr6->sin6_scope_id != srv_addr6->sin6_scope_id)
2070                         return false;
2071                 break;
2072         }
2073         default:
2074                 WARN_ON(1);
2075                 return false; /* don't expect to be here */
2076         }
2077
2078         if (!srcip_matches(srcaddr, (struct sockaddr *)&server->srcaddr))
2079                 return false;
2080
2081         return true;
2082 }
2083
2084 static bool
2085 match_security(struct TCP_Server_Info *server, struct smb_vol *vol)
2086 {
2087         /*
2088          * The select_sectype function should either return the vol->sectype
2089          * that was specified, or "Unspecified" if that sectype was not
2090          * compatible with the given NEGOTIATE request.
2091          */
2092         if (server->ops->select_sectype(server, vol->sectype)
2093              == Unspecified)
2094                 return false;
2095
2096         /*
2097          * Now check if signing mode is acceptable. No need to check
2098          * global_secflags at this point since if MUST_SIGN is set then
2099          * the server->sign had better be too.
2100          */
2101         if (vol->sign && !server->sign)
2102                 return false;
2103
2104         return true;
2105 }
2106
2107 static int match_server(struct TCP_Server_Info *server, struct smb_vol *vol)
2108 {
2109         struct sockaddr *addr = (struct sockaddr *)&vol->dstaddr;
2110
2111         if (vol->nosharesock)
2112                 return 0;
2113
2114         if ((server->vals != vol->vals) || (server->ops != vol->ops))
2115                 return 0;
2116
2117         if (!net_eq(cifs_net_ns(server), current->nsproxy->net_ns))
2118                 return 0;
2119
2120         if (!match_address(server, addr,
2121                            (struct sockaddr *)&vol->srcaddr))
2122                 return 0;
2123
2124         if (!match_port(server, addr))
2125                 return 0;
2126
2127         if (!match_security(server, vol))
2128                 return 0;
2129
2130         if (server->echo_interval != vol->echo_interval * HZ)
2131                 return 0;
2132
2133         return 1;
2134 }
2135
2136 static struct TCP_Server_Info *
2137 cifs_find_tcp_session(struct smb_vol *vol)
2138 {
2139         struct TCP_Server_Info *server;
2140
2141         spin_lock(&cifs_tcp_ses_lock);
2142         list_for_each_entry(server, &cifs_tcp_ses_list, tcp_ses_list) {
2143                 if (!match_server(server, vol))
2144                         continue;
2145
2146                 ++server->srv_count;
2147                 spin_unlock(&cifs_tcp_ses_lock);
2148                 cifs_dbg(FYI, "Existing tcp session with server found\n");
2149                 return server;
2150         }
2151         spin_unlock(&cifs_tcp_ses_lock);
2152         return NULL;
2153 }
2154
2155 void
2156 cifs_put_tcp_session(struct TCP_Server_Info *server, int from_reconnect)
2157 {
2158         struct task_struct *task;
2159
2160         spin_lock(&cifs_tcp_ses_lock);
2161         if (--server->srv_count > 0) {
2162                 spin_unlock(&cifs_tcp_ses_lock);
2163                 return;
2164         }
2165
2166         put_net(cifs_net_ns(server));
2167
2168         list_del_init(&server->tcp_ses_list);
2169         spin_unlock(&cifs_tcp_ses_lock);
2170
2171         cancel_delayed_work_sync(&server->echo);
2172
2173 #ifdef CONFIG_CIFS_SMB2
2174         if (from_reconnect)
2175                 /*
2176                  * Avoid deadlock here: reconnect work calls
2177                  * cifs_put_tcp_session() at its end. Need to be sure
2178                  * that reconnect work does nothing with server pointer after
2179                  * that step.
2180                  */
2181                 cancel_delayed_work(&server->reconnect);
2182         else
2183                 cancel_delayed_work_sync(&server->reconnect);
2184 #endif
2185
2186         spin_lock(&GlobalMid_Lock);
2187         server->tcpStatus = CifsExiting;
2188         spin_unlock(&GlobalMid_Lock);
2189
2190         cifs_crypto_secmech_release(server);
2191         cifs_fscache_release_client_cookie(server);
2192
2193         kfree(server->session_key.response);
2194         server->session_key.response = NULL;
2195         server->session_key.len = 0;
2196
2197         task = xchg(&server->tsk, NULL);
2198         if (task)
2199                 force_sig(SIGKILL, task);
2200 }
2201
2202 static struct TCP_Server_Info *
2203 cifs_get_tcp_session(struct smb_vol *volume_info)
2204 {
2205         struct TCP_Server_Info *tcp_ses = NULL;
2206         int rc;
2207
2208         cifs_dbg(FYI, "UNC: %s\n", volume_info->UNC);
2209
2210         /* see if we already have a matching tcp_ses */
2211         tcp_ses = cifs_find_tcp_session(volume_info);
2212         if (tcp_ses)
2213                 return tcp_ses;
2214
2215         tcp_ses = kzalloc(sizeof(struct TCP_Server_Info), GFP_KERNEL);
2216         if (!tcp_ses) {
2217                 rc = -ENOMEM;
2218                 goto out_err;
2219         }
2220
2221         tcp_ses->ops = volume_info->ops;
2222         tcp_ses->vals = volume_info->vals;
2223         cifs_set_net_ns(tcp_ses, get_net(current->nsproxy->net_ns));
2224         tcp_ses->hostname = extract_hostname(volume_info->UNC);
2225         if (IS_ERR(tcp_ses->hostname)) {
2226                 rc = PTR_ERR(tcp_ses->hostname);
2227                 goto out_err_crypto_release;
2228         }
2229
2230         tcp_ses->noblocksnd = volume_info->noblocksnd;
2231         tcp_ses->noautotune = volume_info->noautotune;
2232         tcp_ses->tcp_nodelay = volume_info->sockopt_tcp_nodelay;
2233         tcp_ses->in_flight = 0;
2234         tcp_ses->credits = 1;
2235         init_waitqueue_head(&tcp_ses->response_q);
2236         init_waitqueue_head(&tcp_ses->request_q);
2237         INIT_LIST_HEAD(&tcp_ses->pending_mid_q);
2238         mutex_init(&tcp_ses->srv_mutex);
2239         memcpy(tcp_ses->workstation_RFC1001_name,
2240                 volume_info->source_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
2241         memcpy(tcp_ses->server_RFC1001_name,
2242                 volume_info->target_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
2243         tcp_ses->session_estab = false;
2244         tcp_ses->sequence_number = 0;
2245         tcp_ses->lstrp = jiffies;
2246         spin_lock_init(&tcp_ses->req_lock);
2247         INIT_LIST_HEAD(&tcp_ses->tcp_ses_list);
2248         INIT_LIST_HEAD(&tcp_ses->smb_ses_list);
2249         INIT_DELAYED_WORK(&tcp_ses->echo, cifs_echo_request);
2250 #ifdef CONFIG_CIFS_SMB2
2251         INIT_DELAYED_WORK(&tcp_ses->reconnect, smb2_reconnect_server);
2252         mutex_init(&tcp_ses->reconnect_mutex);
2253 #endif
2254         memcpy(&tcp_ses->srcaddr, &volume_info->srcaddr,
2255                sizeof(tcp_ses->srcaddr));
2256         memcpy(&tcp_ses->dstaddr, &volume_info->dstaddr,
2257                 sizeof(tcp_ses->dstaddr));
2258 #ifdef CONFIG_CIFS_SMB2
2259         generate_random_uuid(tcp_ses->client_guid);
2260 #endif
2261         /*
2262          * at this point we are the only ones with the pointer
2263          * to the struct since the kernel thread not created yet
2264          * no need to spinlock this init of tcpStatus or srv_count
2265          */
2266         tcp_ses->tcpStatus = CifsNew;
2267         ++tcp_ses->srv_count;
2268
2269         if (volume_info->echo_interval >= SMB_ECHO_INTERVAL_MIN &&
2270                 volume_info->echo_interval <= SMB_ECHO_INTERVAL_MAX)
2271                 tcp_ses->echo_interval = volume_info->echo_interval * HZ;
2272         else
2273                 tcp_ses->echo_interval = SMB_ECHO_INTERVAL_DEFAULT * HZ;
2274
2275         rc = ip_connect(tcp_ses);
2276         if (rc < 0) {
2277                 cifs_dbg(VFS, "Error connecting to socket. Aborting operation.\n");
2278                 goto out_err_crypto_release;
2279         }
2280
2281         /*
2282          * since we're in a cifs function already, we know that
2283          * this will succeed. No need for try_module_get().
2284          */
2285         __module_get(THIS_MODULE);
2286         tcp_ses->tsk = kthread_run(cifs_demultiplex_thread,
2287                                   tcp_ses, "cifsd");
2288         if (IS_ERR(tcp_ses->tsk)) {
2289                 rc = PTR_ERR(tcp_ses->tsk);
2290                 cifs_dbg(VFS, "error %d create cifsd thread\n", rc);
2291                 module_put(THIS_MODULE);
2292                 goto out_err_crypto_release;
2293         }
2294         tcp_ses->tcpStatus = CifsNeedNegotiate;
2295
2296         /* thread spawned, put it on the list */
2297         spin_lock(&cifs_tcp_ses_lock);
2298         list_add(&tcp_ses->tcp_ses_list, &cifs_tcp_ses_list);
2299         spin_unlock(&cifs_tcp_ses_lock);
2300
2301         cifs_fscache_get_client_cookie(tcp_ses);
2302
2303         /* queue echo request delayed work */
2304         queue_delayed_work(cifsiod_wq, &tcp_ses->echo, tcp_ses->echo_interval);
2305
2306         return tcp_ses;
2307
2308 out_err_crypto_release:
2309         cifs_crypto_secmech_release(tcp_ses);
2310
2311         put_net(cifs_net_ns(tcp_ses));
2312
2313 out_err:
2314         if (tcp_ses) {
2315                 if (!IS_ERR(tcp_ses->hostname))
2316                         kfree(tcp_ses->hostname);
2317                 if (tcp_ses->ssocket)
2318                         sock_release(tcp_ses->ssocket);
2319                 kfree(tcp_ses);
2320         }
2321         return ERR_PTR(rc);
2322 }
2323
2324 static int match_session(struct cifs_ses *ses, struct smb_vol *vol)
2325 {
2326         if (vol->sectype != Unspecified &&
2327             vol->sectype != ses->sectype)
2328                 return 0;
2329
2330         switch (ses->sectype) {
2331         case Kerberos:
2332                 if (!uid_eq(vol->cred_uid, ses->cred_uid))
2333                         return 0;
2334                 break;
2335         default:
2336                 /* NULL username means anonymous session */
2337                 if (ses->user_name == NULL) {
2338                         if (!vol->nullauth)
2339                                 return 0;
2340                         break;
2341                 }
2342
2343                 /* anything else takes username/password */
2344                 if (strncmp(ses->user_name,
2345                             vol->username ? vol->username : "",
2346                             CIFS_MAX_USERNAME_LEN))
2347                         return 0;
2348                 if ((vol->username && strlen(vol->username) != 0) &&
2349                     ses->password != NULL &&
2350                     strncmp(ses->password,
2351                             vol->password ? vol->password : "",
2352                             CIFS_MAX_PASSWORD_LEN))
2353                         return 0;
2354         }
2355         return 1;
2356 }
2357
2358 static struct cifs_ses *
2359 cifs_find_smb_ses(struct TCP_Server_Info *server, struct smb_vol *vol)
2360 {
2361         struct cifs_ses *ses;
2362
2363         spin_lock(&cifs_tcp_ses_lock);
2364         list_for_each_entry(ses, &server->smb_ses_list, smb_ses_list) {
2365                 if (ses->status == CifsExiting)
2366                         continue;
2367                 if (!match_session(ses, vol))
2368                         continue;
2369                 ++ses->ses_count;
2370                 spin_unlock(&cifs_tcp_ses_lock);
2371                 return ses;
2372         }
2373         spin_unlock(&cifs_tcp_ses_lock);
2374         return NULL;
2375 }
2376
2377 static void
2378 cifs_put_smb_ses(struct cifs_ses *ses)
2379 {
2380         unsigned int rc, xid;
2381         struct TCP_Server_Info *server = ses->server;
2382
2383         cifs_dbg(FYI, "%s: ses_count=%d\n", __func__, ses->ses_count);
2384
2385         spin_lock(&cifs_tcp_ses_lock);
2386         if (ses->status == CifsExiting) {
2387                 spin_unlock(&cifs_tcp_ses_lock);
2388                 return;
2389         }
2390         if (--ses->ses_count > 0) {
2391                 spin_unlock(&cifs_tcp_ses_lock);
2392                 return;
2393         }
2394         if (ses->status == CifsGood)
2395                 ses->status = CifsExiting;
2396         spin_unlock(&cifs_tcp_ses_lock);
2397
2398         if (ses->status == CifsExiting && server->ops->logoff) {
2399                 xid = get_xid();
2400                 rc = server->ops->logoff(xid, ses);
2401                 if (rc)
2402                         cifs_dbg(VFS, "%s: Session Logoff failure rc=%d\n",
2403                                 __func__, rc);
2404                 _free_xid(xid);
2405         }
2406
2407         spin_lock(&cifs_tcp_ses_lock);
2408         list_del_init(&ses->smb_ses_list);
2409         spin_unlock(&cifs_tcp_ses_lock);
2410
2411         sesInfoFree(ses);
2412         cifs_put_tcp_session(server, 0);
2413 }
2414
2415 #ifdef CONFIG_KEYS
2416
2417 /* strlen("cifs:a:") + CIFS_MAX_DOMAINNAME_LEN + 1 */
2418 #define CIFSCREDS_DESC_SIZE (7 + CIFS_MAX_DOMAINNAME_LEN + 1)
2419
2420 /* Populate username and pw fields from keyring if possible */
2421 static int
2422 cifs_set_cifscreds(struct smb_vol *vol, struct cifs_ses *ses)
2423 {
2424         int rc = 0;
2425         const char *delim, *payload;
2426         char *desc;
2427         ssize_t len;
2428         struct key *key;
2429         struct TCP_Server_Info *server = ses->server;
2430         struct sockaddr_in *sa;
2431         struct sockaddr_in6 *sa6;
2432         const struct user_key_payload *upayload;
2433
2434         desc = kmalloc(CIFSCREDS_DESC_SIZE, GFP_KERNEL);
2435         if (!desc)
2436                 return -ENOMEM;
2437
2438         /* try to find an address key first */
2439         switch (server->dstaddr.ss_family) {
2440         case AF_INET:
2441                 sa = (struct sockaddr_in *)&server->dstaddr;
2442                 sprintf(desc, "cifs:a:%pI4", &sa->sin_addr.s_addr);
2443                 break;
2444         case AF_INET6:
2445                 sa6 = (struct sockaddr_in6 *)&server->dstaddr;
2446                 sprintf(desc, "cifs:a:%pI6c", &sa6->sin6_addr.s6_addr);
2447                 break;
2448         default:
2449                 cifs_dbg(FYI, "Bad ss_family (%hu)\n",
2450                          server->dstaddr.ss_family);
2451                 rc = -EINVAL;
2452                 goto out_err;
2453         }
2454
2455         cifs_dbg(FYI, "%s: desc=%s\n", __func__, desc);
2456         key = request_key(&key_type_logon, desc, "");
2457         if (IS_ERR(key)) {
2458                 if (!ses->domainName) {
2459                         cifs_dbg(FYI, "domainName is NULL\n");
2460                         rc = PTR_ERR(key);
2461                         goto out_err;
2462                 }
2463
2464                 /* didn't work, try to find a domain key */
2465                 sprintf(desc, "cifs:d:%s", ses->domainName);
2466                 cifs_dbg(FYI, "%s: desc=%s\n", __func__, desc);
2467                 key = request_key(&key_type_logon, desc, "");
2468                 if (IS_ERR(key)) {
2469                         rc = PTR_ERR(key);
2470                         goto out_err;
2471                 }
2472         }
2473
2474         down_read(&key->sem);
2475         upayload = user_key_payload_locked(key);
2476         if (IS_ERR_OR_NULL(upayload)) {
2477                 rc = upayload ? PTR_ERR(upayload) : -EINVAL;
2478                 goto out_key_put;
2479         }
2480
2481         /* find first : in payload */
2482         payload = upayload->data;
2483         delim = strnchr(payload, upayload->datalen, ':');
2484         cifs_dbg(FYI, "payload=%s\n", payload);
2485         if (!delim) {
2486                 cifs_dbg(FYI, "Unable to find ':' in payload (datalen=%d)\n",
2487                          upayload->datalen);
2488                 rc = -EINVAL;
2489                 goto out_key_put;
2490         }
2491
2492         len = delim - payload;
2493         if (len > CIFS_MAX_USERNAME_LEN || len <= 0) {
2494                 cifs_dbg(FYI, "Bad value from username search (len=%zd)\n",
2495                          len);
2496                 rc = -EINVAL;
2497                 goto out_key_put;
2498         }
2499
2500         vol->username = kstrndup(payload, len, GFP_KERNEL);
2501         if (!vol->username) {
2502                 cifs_dbg(FYI, "Unable to allocate %zd bytes for username\n",
2503                          len);
2504                 rc = -ENOMEM;
2505                 goto out_key_put;
2506         }
2507         cifs_dbg(FYI, "%s: username=%s\n", __func__, vol->username);
2508
2509         len = key->datalen - (len + 1);
2510         if (len > CIFS_MAX_PASSWORD_LEN || len <= 0) {
2511                 cifs_dbg(FYI, "Bad len for password search (len=%zd)\n", len);
2512                 rc = -EINVAL;
2513                 kfree(vol->username);
2514                 vol->username = NULL;
2515                 goto out_key_put;
2516         }
2517
2518         ++delim;
2519         vol->password = kstrndup(delim, len, GFP_KERNEL);
2520         if (!vol->password) {
2521                 cifs_dbg(FYI, "Unable to allocate %zd bytes for password\n",
2522                          len);
2523                 rc = -ENOMEM;
2524                 kfree(vol->username);
2525                 vol->username = NULL;
2526                 goto out_key_put;
2527         }
2528
2529 out_key_put:
2530         up_read(&key->sem);
2531         key_put(key);
2532 out_err:
2533         kfree(desc);
2534         cifs_dbg(FYI, "%s: returning %d\n", __func__, rc);
2535         return rc;
2536 }
2537 #else /* ! CONFIG_KEYS */
2538 static inline int
2539 cifs_set_cifscreds(struct smb_vol *vol __attribute__((unused)),
2540                    struct cifs_ses *ses __attribute__((unused)))
2541 {
2542         return -ENOSYS;
2543 }
2544 #endif /* CONFIG_KEYS */
2545
2546 static struct cifs_ses *
2547 cifs_get_smb_ses(struct TCP_Server_Info *server, struct smb_vol *volume_info)
2548 {
2549         int rc = -ENOMEM;
2550         unsigned int xid;
2551         struct cifs_ses *ses;
2552         struct sockaddr_in *addr = (struct sockaddr_in *)&server->dstaddr;
2553         struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)&server->dstaddr;
2554
2555         xid = get_xid();
2556
2557         ses = cifs_find_smb_ses(server, volume_info);
2558         if (ses) {
2559                 cifs_dbg(FYI, "Existing smb sess found (status=%d)\n",
2560                          ses->status);
2561
2562                 mutex_lock(&ses->session_mutex);
2563                 rc = cifs_negotiate_protocol(xid, ses);
2564                 if (rc) {
2565                         mutex_unlock(&ses->session_mutex);
2566                         /* problem -- put our ses reference */
2567                         cifs_put_smb_ses(ses);
2568                         free_xid(xid);
2569                         return ERR_PTR(rc);
2570                 }
2571                 if (ses->need_reconnect) {
2572                         cifs_dbg(FYI, "Session needs reconnect\n");
2573                         rc = cifs_setup_session(xid, ses,
2574                                                 volume_info->local_nls);
2575                         if (rc) {
2576                                 mutex_unlock(&ses->session_mutex);
2577                                 /* problem -- put our reference */
2578                                 cifs_put_smb_ses(ses);
2579                                 free_xid(xid);
2580                                 return ERR_PTR(rc);
2581                         }
2582                 }
2583                 mutex_unlock(&ses->session_mutex);
2584
2585                 /* existing SMB ses has a server reference already */
2586                 cifs_put_tcp_session(server, 0);
2587                 free_xid(xid);
2588                 return ses;
2589         }
2590
2591         cifs_dbg(FYI, "Existing smb sess not found\n");
2592         ses = sesInfoAlloc();
2593         if (ses == NULL)
2594                 goto get_ses_fail;
2595
2596         /* new SMB session uses our server ref */
2597         ses->server = server;
2598         if (server->dstaddr.ss_family == AF_INET6)
2599                 sprintf(ses->serverName, "%pI6", &addr6->sin6_addr);
2600         else
2601                 sprintf(ses->serverName, "%pI4", &addr->sin_addr);
2602
2603         if (volume_info->username) {
2604                 ses->user_name = kstrdup(volume_info->username, GFP_KERNEL);
2605                 if (!ses->user_name)
2606                         goto get_ses_fail;
2607         }
2608
2609         /* volume_info->password freed at unmount */
2610         if (volume_info->password) {
2611                 ses->password = kstrdup(volume_info->password, GFP_KERNEL);
2612                 if (!ses->password)
2613                         goto get_ses_fail;
2614         }
2615         if (volume_info->domainname) {
2616                 ses->domainName = kstrdup(volume_info->domainname, GFP_KERNEL);
2617                 if (!ses->domainName)
2618                         goto get_ses_fail;
2619         }
2620         if (volume_info->domainauto)
2621                 ses->domainAuto = volume_info->domainauto;
2622         ses->cred_uid = volume_info->cred_uid;
2623         ses->linux_uid = volume_info->linux_uid;
2624
2625         ses->sectype = volume_info->sectype;
2626         ses->sign = volume_info->sign;
2627
2628         mutex_lock(&ses->session_mutex);
2629         rc = cifs_negotiate_protocol(xid, ses);
2630         if (!rc)
2631                 rc = cifs_setup_session(xid, ses, volume_info->local_nls);
2632         mutex_unlock(&ses->session_mutex);
2633         if (rc)
2634                 goto get_ses_fail;
2635
2636         /* success, put it on the list */
2637         spin_lock(&cifs_tcp_ses_lock);
2638         list_add(&ses->smb_ses_list, &server->smb_ses_list);
2639         spin_unlock(&cifs_tcp_ses_lock);
2640
2641         free_xid(xid);
2642         return ses;
2643
2644 get_ses_fail:
2645         sesInfoFree(ses);
2646         free_xid(xid);
2647         return ERR_PTR(rc);
2648 }
2649
2650 static int match_tcon(struct cifs_tcon *tcon, struct smb_vol *volume_info)
2651 {
2652         if (tcon->tidStatus == CifsExiting)
2653                 return 0;
2654         if (strncmp(tcon->treeName, volume_info->UNC, MAX_TREE_SIZE))
2655                 return 0;
2656         if (tcon->seal != volume_info->seal)
2657                 return 0;
2658 #ifdef CONFIG_CIFS_SMB2
2659         if (tcon->snapshot_time != volume_info->snapshot_time)
2660                 return 0;
2661 #endif /* CONFIG_CIFS_SMB2 */
2662         return 1;
2663 }
2664
2665 static struct cifs_tcon *
2666 cifs_find_tcon(struct cifs_ses *ses, struct smb_vol *volume_info)
2667 {
2668         struct list_head *tmp;
2669         struct cifs_tcon *tcon;
2670
2671         spin_lock(&cifs_tcp_ses_lock);
2672         list_for_each(tmp, &ses->tcon_list) {
2673                 tcon = list_entry(tmp, struct cifs_tcon, tcon_list);
2674                 if (!match_tcon(tcon, volume_info))
2675                         continue;
2676                 ++tcon->tc_count;
2677                 spin_unlock(&cifs_tcp_ses_lock);
2678                 return tcon;
2679         }
2680         spin_unlock(&cifs_tcp_ses_lock);
2681         return NULL;
2682 }
2683
2684 void
2685 cifs_put_tcon(struct cifs_tcon *tcon)
2686 {
2687         unsigned int xid;
2688         struct cifs_ses *ses = tcon->ses;
2689
2690         cifs_dbg(FYI, "%s: tc_count=%d\n", __func__, tcon->tc_count);
2691         spin_lock(&cifs_tcp_ses_lock);
2692         if (--tcon->tc_count > 0) {
2693                 spin_unlock(&cifs_tcp_ses_lock);
2694                 return;
2695         }
2696
2697         list_del_init(&tcon->tcon_list);
2698         spin_unlock(&cifs_tcp_ses_lock);
2699
2700         xid = get_xid();
2701         if (ses->server->ops->tree_disconnect)
2702                 ses->server->ops->tree_disconnect(xid, tcon);
2703         _free_xid(xid);
2704
2705         cifs_fscache_release_super_cookie(tcon);
2706         tconInfoFree(tcon);
2707         cifs_put_smb_ses(ses);
2708 }
2709
2710 static struct cifs_tcon *
2711 cifs_get_tcon(struct cifs_ses *ses, struct smb_vol *volume_info)
2712 {
2713         int rc, xid;
2714         struct cifs_tcon *tcon;
2715
2716         tcon = cifs_find_tcon(ses, volume_info);
2717         if (tcon) {
2718                 cifs_dbg(FYI, "Found match on UNC path\n");
2719                 /* existing tcon already has a reference */
2720                 cifs_put_smb_ses(ses);
2721                 return tcon;
2722         }
2723
2724         if (!ses->server->ops->tree_connect) {
2725                 rc = -ENOSYS;
2726                 goto out_fail;
2727         }
2728
2729         tcon = tconInfoAlloc();
2730         if (tcon == NULL) {
2731                 rc = -ENOMEM;
2732                 goto out_fail;
2733         }
2734
2735         if (volume_info->snapshot_time) {
2736 #ifdef CONFIG_CIFS_SMB2
2737                 if (ses->server->vals->protocol_id == 0) {
2738                         cifs_dbg(VFS,
2739                              "Use SMB2 or later for snapshot mount option\n");
2740                         rc = -EOPNOTSUPP;
2741                         goto out_fail;
2742                 } else
2743                         tcon->snapshot_time = volume_info->snapshot_time;
2744 #else
2745                 cifs_dbg(VFS, "Snapshot mount option requires SMB2 support\n");
2746                 rc = -EOPNOTSUPP;
2747                 goto out_fail;
2748 #endif /* CONFIG_CIFS_SMB2 */
2749         }
2750
2751         tcon->ses = ses;
2752         if (volume_info->password) {
2753                 tcon->password = kstrdup(volume_info->password, GFP_KERNEL);
2754                 if (!tcon->password) {
2755                         rc = -ENOMEM;
2756                         goto out_fail;
2757                 }
2758         }
2759
2760         /*
2761          * BB Do we need to wrap session_mutex around this TCon call and Unix
2762          * SetFS as we do on SessSetup and reconnect?
2763          */
2764         xid = get_xid();
2765         rc = ses->server->ops->tree_connect(xid, ses, volume_info->UNC, tcon,
2766                                             volume_info->local_nls);
2767         free_xid(xid);
2768         cifs_dbg(FYI, "Tcon rc = %d\n", rc);
2769         if (rc)
2770                 goto out_fail;
2771
2772         if (volume_info->nodfs) {
2773                 tcon->Flags &= ~SMB_SHARE_IS_IN_DFS;
2774                 cifs_dbg(FYI, "DFS disabled (%d)\n", tcon->Flags);
2775         }
2776         tcon->use_persistent = false;
2777         /* check if SMB2 or later, CIFS does not support persistent handles */
2778         if (volume_info->persistent) {
2779                 if (ses->server->vals->protocol_id == 0) {
2780                         cifs_dbg(VFS,
2781                              "SMB3 or later required for persistent handles\n");
2782                         rc = -EOPNOTSUPP;
2783                         goto out_fail;
2784 #ifdef CONFIG_CIFS_SMB2
2785                 } else if (ses->server->capabilities &
2786                            SMB2_GLOBAL_CAP_PERSISTENT_HANDLES)
2787                         tcon->use_persistent = true;
2788                 else /* persistent handles requested but not supported */ {
2789                         cifs_dbg(VFS,
2790                                 "Persistent handles not supported on share\n");
2791                         rc = -EOPNOTSUPP;
2792                         goto out_fail;
2793 #endif /* CONFIG_CIFS_SMB2 */
2794                 }
2795 #ifdef CONFIG_CIFS_SMB2
2796         } else if ((tcon->capabilities & SMB2_SHARE_CAP_CONTINUOUS_AVAILABILITY)
2797              && (ses->server->capabilities & SMB2_GLOBAL_CAP_PERSISTENT_HANDLES)
2798              && (volume_info->nopersistent == false)) {
2799                 cifs_dbg(FYI, "enabling persistent handles\n");
2800                 tcon->use_persistent = true;
2801 #endif /* CONFIG_CIFS_SMB2 */
2802         } else if (volume_info->resilient) {
2803                 if (ses->server->vals->protocol_id == 0) {
2804                         cifs_dbg(VFS,
2805                              "SMB2.1 or later required for resilient handles\n");
2806                         rc = -EOPNOTSUPP;
2807                         goto out_fail;
2808                 }
2809                 tcon->use_resilient = true;
2810         }
2811
2812         if (volume_info->seal) {
2813                 if (ses->server->vals->protocol_id == 0) {
2814                         cifs_dbg(VFS,
2815                                  "SMB3 or later required for encryption\n");
2816                         rc = -EOPNOTSUPP;
2817                         goto out_fail;
2818 #ifdef CONFIG_CIFS_SMB2
2819                 } else if (tcon->ses->server->capabilities &
2820                                         SMB2_GLOBAL_CAP_ENCRYPTION)
2821                         tcon->seal = true;
2822                 else {
2823                         cifs_dbg(VFS, "Encryption is not supported on share\n");
2824                         rc = -EOPNOTSUPP;
2825                         goto out_fail;
2826 #endif /* CONFIG_CIFS_SMB2 */
2827                 }
2828         }
2829
2830         /*
2831          * We can have only one retry value for a connection to a share so for
2832          * resources mounted more than once to the same server share the last
2833          * value passed in for the retry flag is used.
2834          */
2835         tcon->retry = volume_info->retry;
2836         tcon->nocase = volume_info->nocase;
2837         tcon->local_lease = volume_info->local_lease;
2838         INIT_LIST_HEAD(&tcon->pending_opens);
2839
2840         spin_lock(&cifs_tcp_ses_lock);
2841         list_add(&tcon->tcon_list, &ses->tcon_list);
2842         spin_unlock(&cifs_tcp_ses_lock);
2843
2844         cifs_fscache_get_super_cookie(tcon);
2845
2846         return tcon;
2847
2848 out_fail:
2849         tconInfoFree(tcon);
2850         return ERR_PTR(rc);
2851 }
2852
2853 void
2854 cifs_put_tlink(struct tcon_link *tlink)
2855 {
2856         if (!tlink || IS_ERR(tlink))
2857                 return;
2858
2859         if (!atomic_dec_and_test(&tlink->tl_count) ||
2860             test_bit(TCON_LINK_IN_TREE, &tlink->tl_flags)) {
2861                 tlink->tl_time = jiffies;
2862                 return;
2863         }
2864
2865         if (!IS_ERR(tlink_tcon(tlink)))
2866                 cifs_put_tcon(tlink_tcon(tlink));
2867         kfree(tlink);
2868         return;
2869 }
2870
2871 static inline struct tcon_link *
2872 cifs_sb_master_tlink(struct cifs_sb_info *cifs_sb)
2873 {
2874         return cifs_sb->master_tlink;
2875 }
2876
2877 static int
2878 compare_mount_options(struct super_block *sb, struct cifs_mnt_data *mnt_data)
2879 {
2880         struct cifs_sb_info *old = CIFS_SB(sb);
2881         struct cifs_sb_info *new = mnt_data->cifs_sb;
2882
2883         if ((sb->s_flags & CIFS_MS_MASK) != (mnt_data->flags & CIFS_MS_MASK))
2884                 return 0;
2885
2886         if ((old->mnt_cifs_flags & CIFS_MOUNT_MASK) !=
2887             (new->mnt_cifs_flags & CIFS_MOUNT_MASK))
2888                 return 0;
2889
2890         /*
2891          * We want to share sb only if we don't specify an r/wsize or
2892          * specified r/wsize is greater than or equal to existing one.
2893          */
2894         if (new->wsize && new->wsize < old->wsize)
2895                 return 0;
2896
2897         if (new->rsize && new->rsize < old->rsize)
2898                 return 0;
2899
2900         if (!uid_eq(old->mnt_uid, new->mnt_uid) || !gid_eq(old->mnt_gid, new->mnt_gid))
2901                 return 0;
2902
2903         if (old->mnt_file_mode != new->mnt_file_mode ||
2904             old->mnt_dir_mode != new->mnt_dir_mode)
2905                 return 0;
2906
2907         if (strcmp(old->local_nls->charset, new->local_nls->charset))
2908                 return 0;
2909
2910         if (old->actimeo != new->actimeo)
2911                 return 0;
2912
2913         return 1;
2914 }
2915
2916 static int
2917 match_prepath(struct super_block *sb, struct cifs_mnt_data *mnt_data)
2918 {
2919         struct cifs_sb_info *old = CIFS_SB(sb);
2920         struct cifs_sb_info *new = mnt_data->cifs_sb;
2921         bool old_set = old->mnt_cifs_flags & CIFS_MOUNT_USE_PREFIX_PATH;
2922         bool new_set = new->mnt_cifs_flags & CIFS_MOUNT_USE_PREFIX_PATH;
2923
2924         if (old_set && new_set && !strcmp(new->prepath, old->prepath))
2925                 return 1;
2926         else if (!old_set && !new_set)
2927                 return 1;
2928
2929         return 0;
2930 }
2931
2932 int
2933 cifs_match_super(struct super_block *sb, void *data)
2934 {
2935         struct cifs_mnt_data *mnt_data = (struct cifs_mnt_data *)data;
2936         struct smb_vol *volume_info;
2937         struct cifs_sb_info *cifs_sb;
2938         struct TCP_Server_Info *tcp_srv;
2939         struct cifs_ses *ses;
2940         struct cifs_tcon *tcon;
2941         struct tcon_link *tlink;
2942         int rc = 0;
2943
2944         spin_lock(&cifs_tcp_ses_lock);
2945         cifs_sb = CIFS_SB(sb);
2946         tlink = cifs_get_tlink(cifs_sb_master_tlink(cifs_sb));
2947         if (IS_ERR(tlink)) {
2948                 spin_unlock(&cifs_tcp_ses_lock);
2949                 return rc;
2950         }
2951         tcon = tlink_tcon(tlink);
2952         ses = tcon->ses;
2953         tcp_srv = ses->server;
2954
2955         volume_info = mnt_data->vol;
2956
2957         if (!match_server(tcp_srv, volume_info) ||
2958             !match_session(ses, volume_info) ||
2959             !match_tcon(tcon, volume_info) ||
2960             !match_prepath(sb, mnt_data)) {
2961                 rc = 0;
2962                 goto out;
2963         }
2964
2965         rc = compare_mount_options(sb, mnt_data);
2966 out:
2967         spin_unlock(&cifs_tcp_ses_lock);
2968         cifs_put_tlink(tlink);
2969         return rc;
2970 }
2971
2972 int
2973 get_dfs_path(const unsigned int xid, struct cifs_ses *ses, const char *old_path,
2974              const struct nls_table *nls_codepage, unsigned int *num_referrals,
2975              struct dfs_info3_param **referrals, int remap)
2976 {
2977         char *temp_unc;
2978         int rc = 0;
2979
2980         if (!ses->server->ops->tree_connect || !ses->server->ops->get_dfs_refer)
2981                 return -ENOSYS;
2982
2983         *num_referrals = 0;
2984         *referrals = NULL;
2985
2986         if (ses->ipc_tid == 0) {
2987                 temp_unc = kmalloc(2 /* for slashes */ +
2988                         strnlen(ses->serverName, SERVER_NAME_LEN_WITH_NULL * 2)
2989                                 + 1 + 4 /* slash IPC$ */ + 2, GFP_KERNEL);
2990                 if (temp_unc == NULL)
2991                         return -ENOMEM;
2992                 temp_unc[0] = '\\';
2993                 temp_unc[1] = '\\';
2994                 strcpy(temp_unc + 2, ses->serverName);
2995                 strcpy(temp_unc + 2 + strlen(ses->serverName), "\\IPC$");
2996                 rc = ses->server->ops->tree_connect(xid, ses, temp_unc, NULL,
2997                                                     nls_codepage);
2998                 cifs_dbg(FYI, "Tcon rc = %d ipc_tid = %d\n", rc, ses->ipc_tid);
2999                 kfree(temp_unc);
3000         }
3001         if (rc == 0)
3002                 rc = ses->server->ops->get_dfs_refer(xid, ses, old_path,
3003                                                      referrals, num_referrals,
3004                                                      nls_codepage, remap);
3005         /*
3006          * BB - map targetUNCs to dfs_info3 structures, here or in
3007          * ses->server->ops->get_dfs_refer.
3008          */
3009
3010         return rc;
3011 }
3012
3013 #ifdef CONFIG_DEBUG_LOCK_ALLOC
3014 static struct lock_class_key cifs_key[2];
3015 static struct lock_class_key cifs_slock_key[2];
3016
3017 static inline void
3018 cifs_reclassify_socket4(struct socket *sock)
3019 {
3020         struct sock *sk = sock->sk;
3021         BUG_ON(!sock_allow_reclassification(sk));
3022         sock_lock_init_class_and_name(sk, "slock-AF_INET-CIFS",
3023                 &cifs_slock_key[0], "sk_lock-AF_INET-CIFS", &cifs_key[0]);
3024 }
3025
3026 static inline void
3027 cifs_reclassify_socket6(struct socket *sock)
3028 {
3029         struct sock *sk = sock->sk;
3030         BUG_ON(!sock_allow_reclassification(sk));
3031         sock_lock_init_class_and_name(sk, "slock-AF_INET6-CIFS",
3032                 &cifs_slock_key[1], "sk_lock-AF_INET6-CIFS", &cifs_key[1]);
3033 }
3034 #else
3035 static inline void
3036 cifs_reclassify_socket4(struct socket *sock)
3037 {
3038 }
3039
3040 static inline void
3041 cifs_reclassify_socket6(struct socket *sock)
3042 {
3043 }
3044 #endif
3045
3046 /* See RFC1001 section 14 on representation of Netbios names */
3047 static void rfc1002mangle(char *target, char *source, unsigned int length)
3048 {
3049         unsigned int i, j;
3050
3051         for (i = 0, j = 0; i < (length); i++) {
3052                 /* mask a nibble at a time and encode */
3053                 target[j] = 'A' + (0x0F & (source[i] >> 4));
3054                 target[j+1] = 'A' + (0x0F & source[i]);
3055                 j += 2;
3056         }
3057
3058 }
3059
3060 static int
3061 bind_socket(struct TCP_Server_Info *server)
3062 {
3063         int rc = 0;
3064         if (server->srcaddr.ss_family != AF_UNSPEC) {
3065                 /* Bind to the specified local IP address */
3066                 struct socket *socket = server->ssocket;
3067                 rc = socket->ops->bind(socket,
3068                                        (struct sockaddr *) &server->srcaddr,
3069                                        sizeof(server->srcaddr));
3070                 if (rc < 0) {
3071                         struct sockaddr_in *saddr4;
3072                         struct sockaddr_in6 *saddr6;
3073                         saddr4 = (struct sockaddr_in *)&server->srcaddr;
3074                         saddr6 = (struct sockaddr_in6 *)&server->srcaddr;
3075                         if (saddr6->sin6_family == AF_INET6)
3076                                 cifs_dbg(VFS, "Failed to bind to: %pI6c, error: %d\n",
3077                                          &saddr6->sin6_addr, rc);
3078                         else
3079                                 cifs_dbg(VFS, "Failed to bind to: %pI4, error: %d\n",
3080                                          &saddr4->sin_addr.s_addr, rc);
3081                 }
3082         }
3083         return rc;
3084 }
3085
3086 static int
3087 ip_rfc1001_connect(struct TCP_Server_Info *server)
3088 {
3089         int rc = 0;
3090         /*
3091          * some servers require RFC1001 sessinit before sending
3092          * negprot - BB check reconnection in case where second
3093          * sessinit is sent but no second negprot
3094          */
3095         struct rfc1002_session_packet *ses_init_buf;
3096         struct smb_hdr *smb_buf;
3097         ses_init_buf = kzalloc(sizeof(struct rfc1002_session_packet),
3098                                GFP_KERNEL);
3099         if (ses_init_buf) {
3100                 ses_init_buf->trailer.session_req.called_len = 32;
3101
3102                 if (server->server_RFC1001_name[0] != 0)
3103                         rfc1002mangle(ses_init_buf->trailer.
3104                                       session_req.called_name,
3105                                       server->server_RFC1001_name,
3106                                       RFC1001_NAME_LEN_WITH_NULL);
3107                 else
3108                         rfc1002mangle(ses_init_buf->trailer.
3109                                       session_req.called_name,
3110                                       DEFAULT_CIFS_CALLED_NAME,
3111                                       RFC1001_NAME_LEN_WITH_NULL);
3112
3113                 ses_init_buf->trailer.session_req.calling_len = 32;
3114
3115                 /*
3116                  * calling name ends in null (byte 16) from old smb
3117                  * convention.
3118                  */
3119                 if (server->workstation_RFC1001_name[0] != 0)
3120                         rfc1002mangle(ses_init_buf->trailer.
3121                                       session_req.calling_name,
3122                                       server->workstation_RFC1001_name,
3123                                       RFC1001_NAME_LEN_WITH_NULL);
3124                 else
3125                         rfc1002mangle(ses_init_buf->trailer.
3126                                       session_req.calling_name,
3127                                       "LINUX_CIFS_CLNT",
3128                                       RFC1001_NAME_LEN_WITH_NULL);
3129
3130                 ses_init_buf->trailer.session_req.scope1 = 0;
3131                 ses_init_buf->trailer.session_req.scope2 = 0;
3132                 smb_buf = (struct smb_hdr *)ses_init_buf;
3133
3134                 /* sizeof RFC1002_SESSION_REQUEST with no scope */
3135                 smb_buf->smb_buf_length = cpu_to_be32(0x81000044);
3136                 rc = smb_send(server, smb_buf, 0x44);
3137                 kfree(ses_init_buf);
3138                 /*
3139                  * RFC1001 layer in at least one server
3140                  * requires very short break before negprot
3141                  * presumably because not expecting negprot
3142                  * to follow so fast.  This is a simple
3143                  * solution that works without
3144                  * complicating the code and causes no
3145                  * significant slowing down on mount
3146                  * for everyone else
3147                  */
3148                 usleep_range(1000, 2000);
3149         }
3150         /*
3151          * else the negprot may still work without this
3152          * even though malloc failed
3153          */
3154
3155         return rc;
3156 }
3157
3158 static int
3159 generic_ip_connect(struct TCP_Server_Info *server)
3160 {
3161         int rc = 0;
3162         __be16 sport;
3163         int slen, sfamily;
3164         struct socket *socket = server->ssocket;
3165         struct sockaddr *saddr;
3166
3167         saddr = (struct sockaddr *) &server->dstaddr;
3168
3169         if (server->dstaddr.ss_family == AF_INET6) {
3170                 sport = ((struct sockaddr_in6 *) saddr)->sin6_port;
3171                 slen = sizeof(struct sockaddr_in6);
3172                 sfamily = AF_INET6;
3173         } else {
3174                 sport = ((struct sockaddr_in *) saddr)->sin_port;
3175                 slen = sizeof(struct sockaddr_in);
3176                 sfamily = AF_INET;
3177         }
3178
3179         if (socket == NULL) {
3180                 rc = __sock_create(cifs_net_ns(server), sfamily, SOCK_STREAM,
3181                                    IPPROTO_TCP, &socket, 1);
3182                 if (rc < 0) {
3183                         cifs_dbg(VFS, "Error %d creating socket\n", rc);
3184                         server->ssocket = NULL;
3185                         return rc;
3186                 }
3187
3188                 /* BB other socket options to set KEEPALIVE, NODELAY? */
3189                 cifs_dbg(FYI, "Socket created\n");
3190                 server->ssocket = socket;
3191                 socket->sk->sk_allocation = GFP_NOFS;
3192                 if (sfamily == AF_INET6)
3193                         cifs_reclassify_socket6(socket);
3194                 else
3195                         cifs_reclassify_socket4(socket);
3196         }
3197
3198         rc = bind_socket(server);
3199         if (rc < 0)
3200                 return rc;
3201
3202         /*
3203          * Eventually check for other socket options to change from
3204          * the default. sock_setsockopt not used because it expects
3205          * user space buffer
3206          */
3207         socket->sk->sk_rcvtimeo = 7 * HZ;
3208         socket->sk->sk_sndtimeo = 5 * HZ;
3209
3210         /* make the bufsizes depend on wsize/rsize and max requests */
3211         if (server->noautotune) {
3212                 if (socket->sk->sk_sndbuf < (200 * 1024))
3213                         socket->sk->sk_sndbuf = 200 * 1024;
3214                 if (socket->sk->sk_rcvbuf < (140 * 1024))
3215                         socket->sk->sk_rcvbuf = 140 * 1024;
3216         }
3217
3218         if (server->tcp_nodelay) {
3219                 int val = 1;
3220                 rc = kernel_setsockopt(socket, SOL_TCP, TCP_NODELAY,
3221                                 (char *)&val, sizeof(val));
3222                 if (rc)
3223                         cifs_dbg(FYI, "set TCP_NODELAY socket option error %d\n",
3224                                  rc);
3225         }
3226
3227         cifs_dbg(FYI, "sndbuf %d rcvbuf %d rcvtimeo 0x%lx\n",
3228                  socket->sk->sk_sndbuf,
3229                  socket->sk->sk_rcvbuf, socket->sk->sk_rcvtimeo);
3230
3231         rc = socket->ops->connect(socket, saddr, slen, 0);
3232         if (rc < 0) {
3233                 cifs_dbg(FYI, "Error %d connecting to server\n", rc);
3234                 sock_release(socket);
3235                 server->ssocket = NULL;
3236                 return rc;
3237         }
3238
3239         if (sport == htons(RFC1001_PORT))
3240                 rc = ip_rfc1001_connect(server);
3241
3242         return rc;
3243 }
3244
3245 static int
3246 ip_connect(struct TCP_Server_Info *server)
3247 {
3248         __be16 *sport;
3249         struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)&server->dstaddr;
3250         struct sockaddr_in *addr = (struct sockaddr_in *)&server->dstaddr;
3251
3252         if (server->dstaddr.ss_family == AF_INET6)
3253                 sport = &addr6->sin6_port;
3254         else
3255                 sport = &addr->sin_port;
3256
3257         if (*sport == 0) {
3258                 int rc;
3259
3260                 /* try with 445 port at first */
3261                 *sport = htons(CIFS_PORT);
3262
3263                 rc = generic_ip_connect(server);
3264                 if (rc >= 0)
3265                         return rc;
3266
3267                 /* if it failed, try with 139 port */
3268                 *sport = htons(RFC1001_PORT);
3269         }
3270
3271         return generic_ip_connect(server);
3272 }
3273
3274 void reset_cifs_unix_caps(unsigned int xid, struct cifs_tcon *tcon,
3275                           struct cifs_sb_info *cifs_sb, struct smb_vol *vol_info)
3276 {
3277         /* if we are reconnecting then should we check to see if
3278          * any requested capabilities changed locally e.g. via
3279          * remount but we can not do much about it here
3280          * if they have (even if we could detect it by the following)
3281          * Perhaps we could add a backpointer to array of sb from tcon
3282          * or if we change to make all sb to same share the same
3283          * sb as NFS - then we only have one backpointer to sb.
3284          * What if we wanted to mount the server share twice once with
3285          * and once without posixacls or posix paths? */
3286         __u64 saved_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
3287
3288         if (vol_info && vol_info->no_linux_ext) {
3289                 tcon->fsUnixInfo.Capability = 0;
3290                 tcon->unix_ext = 0; /* Unix Extensions disabled */
3291                 cifs_dbg(FYI, "Linux protocol extensions disabled\n");
3292                 return;
3293         } else if (vol_info)
3294                 tcon->unix_ext = 1; /* Unix Extensions supported */
3295
3296         if (tcon->unix_ext == 0) {
3297                 cifs_dbg(FYI, "Unix extensions disabled so not set on reconnect\n");
3298                 return;
3299         }
3300
3301         if (!CIFSSMBQFSUnixInfo(xid, tcon)) {
3302                 __u64 cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
3303                 cifs_dbg(FYI, "unix caps which server supports %lld\n", cap);
3304                 /* check for reconnect case in which we do not
3305                    want to change the mount behavior if we can avoid it */
3306                 if (vol_info == NULL) {
3307                         /* turn off POSIX ACL and PATHNAMES if not set
3308                            originally at mount time */
3309                         if ((saved_cap & CIFS_UNIX_POSIX_ACL_CAP) == 0)
3310                                 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
3311                         if ((saved_cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
3312                                 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
3313                                         cifs_dbg(VFS, "POSIXPATH support change\n");
3314                                 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
3315                         } else if ((cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
3316                                 cifs_dbg(VFS, "possible reconnect error\n");
3317                                 cifs_dbg(VFS, "server disabled POSIX path support\n");
3318                         }
3319                 }
3320
3321                 if (cap & CIFS_UNIX_TRANSPORT_ENCRYPTION_MANDATORY_CAP)
3322                         cifs_dbg(VFS, "per-share encryption not supported yet\n");
3323
3324                 cap &= CIFS_UNIX_CAP_MASK;
3325                 if (vol_info && vol_info->no_psx_acl)
3326                         cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
3327                 else if (CIFS_UNIX_POSIX_ACL_CAP & cap) {
3328                         cifs_dbg(FYI, "negotiated posix acl support\n");
3329                         if (cifs_sb)
3330                                 cifs_sb->mnt_cifs_flags |=
3331                                         CIFS_MOUNT_POSIXACL;
3332                 }
3333
3334                 if (vol_info && vol_info->posix_paths == 0)
3335                         cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
3336                 else if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) {
3337                         cifs_dbg(FYI, "negotiate posix pathnames\n");
3338                         if (cifs_sb)
3339                                 cifs_sb->mnt_cifs_flags |=
3340                                         CIFS_MOUNT_POSIX_PATHS;
3341                 }
3342
3343                 cifs_dbg(FYI, "Negotiate caps 0x%x\n", (int)cap);
3344 #ifdef CONFIG_CIFS_DEBUG2
3345                 if (cap & CIFS_UNIX_FCNTL_CAP)
3346                         cifs_dbg(FYI, "FCNTL cap\n");
3347                 if (cap & CIFS_UNIX_EXTATTR_CAP)
3348                         cifs_dbg(FYI, "EXTATTR cap\n");
3349                 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
3350                         cifs_dbg(FYI, "POSIX path cap\n");
3351                 if (cap & CIFS_UNIX_XATTR_CAP)
3352                         cifs_dbg(FYI, "XATTR cap\n");
3353                 if (cap & CIFS_UNIX_POSIX_ACL_CAP)
3354                         cifs_dbg(FYI, "POSIX ACL cap\n");
3355                 if (cap & CIFS_UNIX_LARGE_READ_CAP)
3356                         cifs_dbg(FYI, "very large read cap\n");
3357                 if (cap & CIFS_UNIX_LARGE_WRITE_CAP)
3358                         cifs_dbg(FYI, "very large write cap\n");
3359                 if (cap & CIFS_UNIX_TRANSPORT_ENCRYPTION_CAP)
3360                         cifs_dbg(FYI, "transport encryption cap\n");
3361                 if (cap & CIFS_UNIX_TRANSPORT_ENCRYPTION_MANDATORY_CAP)
3362                         cifs_dbg(FYI, "mandatory transport encryption cap\n");
3363 #endif /* CIFS_DEBUG2 */
3364                 if (CIFSSMBSetFSUnixInfo(xid, tcon, cap)) {
3365                         if (vol_info == NULL) {
3366                                 cifs_dbg(FYI, "resetting capabilities failed\n");
3367                         } else
3368                                 cifs_dbg(VFS, "Negotiating Unix capabilities with the server failed. Consider mounting with the Unix Extensions disabled if problems are found by specifying the nounix mount option.\n");
3369
3370                 }
3371         }
3372 }
3373
3374 int cifs_setup_cifs_sb(struct smb_vol *pvolume_info,
3375                         struct cifs_sb_info *cifs_sb)
3376 {
3377         INIT_DELAYED_WORK(&cifs_sb->prune_tlinks, cifs_prune_tlinks);
3378
3379         spin_lock_init(&cifs_sb->tlink_tree_lock);
3380         cifs_sb->tlink_tree = RB_ROOT;
3381
3382         /*
3383          * Temporarily set r/wsize for matching superblock. If we end up using
3384          * new sb then client will later negotiate it downward if needed.
3385          */
3386         cifs_sb->rsize = pvolume_info->rsize;
3387         cifs_sb->wsize = pvolume_info->wsize;
3388
3389         cifs_sb->mnt_uid = pvolume_info->linux_uid;
3390         cifs_sb->mnt_gid = pvolume_info->linux_gid;
3391         cifs_sb->mnt_file_mode = pvolume_info->file_mode;
3392         cifs_sb->mnt_dir_mode = pvolume_info->dir_mode;
3393         cifs_dbg(FYI, "file mode: 0x%hx  dir mode: 0x%hx\n",
3394                  cifs_sb->mnt_file_mode, cifs_sb->mnt_dir_mode);
3395
3396         cifs_sb->actimeo = pvolume_info->actimeo;
3397         cifs_sb->local_nls = pvolume_info->local_nls;
3398
3399         if (pvolume_info->noperm)
3400                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_PERM;
3401         if (pvolume_info->setuids)
3402                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SET_UID;
3403         if (pvolume_info->setuidfromacl)
3404                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_UID_FROM_ACL;
3405         if (pvolume_info->server_ino)
3406                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SERVER_INUM;
3407         if (pvolume_info->remap)
3408                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MAP_SFM_CHR;
3409         if (pvolume_info->sfu_remap)
3410                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MAP_SPECIAL_CHR;
3411         if (pvolume_info->no_xattr)
3412                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_XATTR;
3413         if (pvolume_info->sfu_emul)
3414                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_UNX_EMUL;
3415         if (pvolume_info->nobrl)
3416                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_BRL;
3417         if (pvolume_info->nostrictsync)
3418                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOSSYNC;
3419         if (pvolume_info->mand_lock)
3420                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOPOSIXBRL;
3421         if (pvolume_info->rwpidforward)
3422                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_RWPIDFORWARD;
3423         if (pvolume_info->cifs_acl)
3424                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_ACL;
3425         if (pvolume_info->backupuid_specified) {
3426                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_BACKUPUID;
3427                 cifs_sb->mnt_backupuid = pvolume_info->backupuid;
3428         }
3429         if (pvolume_info->backupgid_specified) {
3430                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_BACKUPGID;
3431                 cifs_sb->mnt_backupgid = pvolume_info->backupgid;
3432         }
3433         if (pvolume_info->override_uid)
3434                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_UID;
3435         if (pvolume_info->override_gid)
3436                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_GID;
3437         if (pvolume_info->dynperm)
3438                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DYNPERM;
3439         if (pvolume_info->fsc)
3440                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_FSCACHE;
3441         if (pvolume_info->multiuser)
3442                 cifs_sb->mnt_cifs_flags |= (CIFS_MOUNT_MULTIUSER |
3443                                             CIFS_MOUNT_NO_PERM);
3444         if (pvolume_info->strict_io)
3445                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_STRICT_IO;
3446         if (pvolume_info->direct_io) {
3447                 cifs_dbg(FYI, "mounting share using direct i/o\n");
3448                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DIRECT_IO;
3449         }
3450         if (pvolume_info->mfsymlinks) {
3451                 if (pvolume_info->sfu_emul) {
3452                         /*
3453                          * Our SFU ("Services for Unix" emulation does not allow
3454                          * creating symlinks but does allow reading existing SFU
3455                          * symlinks (it does allow both creating and reading SFU
3456                          * style mknod and FIFOs though). When "mfsymlinks" and
3457                          * "sfu" are both enabled at the same time, it allows
3458                          * reading both types of symlinks, but will only create
3459                          * them with mfsymlinks format. This allows better
3460                          * Apple compatibility (probably better for Samba too)
3461                          * while still recognizing old Windows style symlinks.
3462                          */
3463                         cifs_dbg(VFS, "mount options mfsymlinks and sfu both enabled\n");
3464                 }
3465                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MF_SYMLINKS;
3466         }
3467
3468         if ((pvolume_info->cifs_acl) && (pvolume_info->dynperm))
3469                 cifs_dbg(VFS, "mount option dynperm ignored if cifsacl mount option supported\n");
3470
3471         if (pvolume_info->prepath) {
3472                 cifs_sb->prepath = kstrdup(pvolume_info->prepath, GFP_KERNEL);
3473                 if (cifs_sb->prepath == NULL)
3474                         return -ENOMEM;
3475         }
3476
3477         return 0;
3478 }
3479
3480 static void
3481 cleanup_volume_info_contents(struct smb_vol *volume_info)
3482 {
3483         kfree(volume_info->username);
3484         kzfree(volume_info->password);
3485         kfree(volume_info->UNC);
3486         kfree(volume_info->domainname);
3487         kfree(volume_info->iocharset);
3488         kfree(volume_info->prepath);
3489 }
3490
3491 void
3492 cifs_cleanup_volume_info(struct smb_vol *volume_info)
3493 {
3494         if (!volume_info)
3495                 return;
3496         cleanup_volume_info_contents(volume_info);
3497         kfree(volume_info);
3498 }
3499
3500
3501 #ifdef CONFIG_CIFS_DFS_UPCALL
3502 /*
3503  * cifs_build_path_to_root returns full path to root when we do not have an
3504  * exiting connection (tcon)
3505  */
3506 static char *
3507 build_unc_path_to_root(const struct smb_vol *vol,
3508                 const struct cifs_sb_info *cifs_sb)
3509 {
3510         char *full_path, *pos;
3511         unsigned int pplen = vol->prepath ? strlen(vol->prepath) + 1 : 0;
3512         unsigned int unc_len = strnlen(vol->UNC, MAX_TREE_SIZE + 1);
3513
3514         full_path = kmalloc(unc_len + pplen + 1, GFP_KERNEL);
3515         if (full_path == NULL)
3516                 return ERR_PTR(-ENOMEM);
3517
3518         strncpy(full_path, vol->UNC, unc_len);
3519         pos = full_path + unc_len;
3520
3521         if (pplen) {
3522                 *pos = CIFS_DIR_SEP(cifs_sb);
3523                 strncpy(pos + 1, vol->prepath, pplen);
3524                 pos += pplen;
3525         }
3526
3527         *pos = '\0'; /* add trailing null */
3528         convert_delimiter(full_path, CIFS_DIR_SEP(cifs_sb));
3529         cifs_dbg(FYI, "%s: full_path=%s\n", __func__, full_path);
3530         return full_path;
3531 }
3532
3533 /*
3534  * Perform a dfs referral query for a share and (optionally) prefix
3535  *
3536  * If a referral is found, cifs_sb->mountdata will be (re-)allocated
3537  * to a string containing updated options for the submount.  Otherwise it
3538  * will be left untouched.
3539  *
3540  * Returns the rc from get_dfs_path to the caller, which can be used to
3541  * determine whether there were referrals.
3542  */
3543 static int
3544 expand_dfs_referral(const unsigned int xid, struct cifs_ses *ses,
3545                     struct smb_vol *volume_info, struct cifs_sb_info *cifs_sb,
3546                     int check_prefix)
3547 {
3548         int rc;
3549         unsigned int num_referrals = 0;
3550         struct dfs_info3_param *referrals = NULL;
3551         char *full_path = NULL, *ref_path = NULL, *mdata = NULL;
3552
3553         full_path = build_unc_path_to_root(volume_info, cifs_sb);
3554         if (IS_ERR(full_path))
3555                 return PTR_ERR(full_path);
3556
3557         /* For DFS paths, skip the first '\' of the UNC */
3558         ref_path = check_prefix ? full_path + 1 : volume_info->UNC + 1;
3559
3560         rc = get_dfs_path(xid, ses, ref_path, cifs_sb->local_nls,
3561                           &num_referrals, &referrals, cifs_remap(cifs_sb));
3562
3563         if (!rc && num_referrals > 0) {
3564                 char *fake_devname = NULL;
3565
3566                 mdata = cifs_compose_mount_options(cifs_sb->mountdata,
3567                                                    full_path + 1, referrals,
3568                                                    &fake_devname);
3569
3570                 free_dfs_info_array(referrals, num_referrals);
3571
3572                 if (IS_ERR(mdata)) {
3573                         rc = PTR_ERR(mdata);
3574                         mdata = NULL;
3575                 } else {
3576                         cleanup_volume_info_contents(volume_info);
3577                         rc = cifs_setup_volume_info(volume_info, mdata,
3578                                                         fake_devname);
3579                 }
3580                 kfree(fake_devname);
3581                 kfree(cifs_sb->mountdata);
3582                 cifs_sb->mountdata = mdata;
3583         }
3584         kfree(full_path);
3585         return rc;
3586 }
3587 #endif
3588
3589 static int
3590 cifs_setup_volume_info(struct smb_vol *volume_info, char *mount_data,
3591                         const char *devname)
3592 {
3593         int rc = 0;
3594
3595         if (cifs_parse_mount_options(mount_data, devname, volume_info))
3596                 return -EINVAL;
3597
3598         if (volume_info->nullauth) {
3599                 cifs_dbg(FYI, "Anonymous login\n");
3600                 kfree(volume_info->username);
3601                 volume_info->username = NULL;
3602         } else if (volume_info->username) {
3603                 /* BB fixme parse for domain name here */
3604                 cifs_dbg(FYI, "Username: %s\n", volume_info->username);
3605         } else {
3606                 cifs_dbg(VFS, "No username specified\n");
3607         /* In userspace mount helper we can get user name from alternate
3608            locations such as env variables and files on disk */
3609                 return -EINVAL;
3610         }
3611
3612         /* this is needed for ASCII cp to Unicode converts */
3613         if (volume_info->iocharset == NULL) {
3614                 /* load_nls_default cannot return null */
3615                 volume_info->local_nls = load_nls_default();
3616         } else {
3617                 volume_info->local_nls = load_nls(volume_info->iocharset);
3618                 if (volume_info->local_nls == NULL) {
3619                         cifs_dbg(VFS, "CIFS mount error: iocharset %s not found\n",
3620                                  volume_info->iocharset);
3621                         return -ELIBACC;
3622                 }
3623         }
3624
3625         return rc;
3626 }
3627
3628 struct smb_vol *
3629 cifs_get_volume_info(char *mount_data, const char *devname)
3630 {
3631         int rc;
3632         struct smb_vol *volume_info;
3633
3634         volume_info = kmalloc(sizeof(struct smb_vol), GFP_KERNEL);
3635         if (!volume_info)
3636                 return ERR_PTR(-ENOMEM);
3637
3638         rc = cifs_setup_volume_info(volume_info, mount_data, devname);
3639         if (rc) {
3640                 cifs_cleanup_volume_info(volume_info);
3641                 volume_info = ERR_PTR(rc);
3642         }
3643
3644         return volume_info;
3645 }
3646
3647 static int
3648 cifs_are_all_path_components_accessible(struct TCP_Server_Info *server,
3649                                         unsigned int xid,
3650                                         struct cifs_tcon *tcon,
3651                                         struct cifs_sb_info *cifs_sb,
3652                                         char *full_path)
3653 {
3654         int rc;
3655         char *s;
3656         char sep, tmp;
3657
3658         sep = CIFS_DIR_SEP(cifs_sb);
3659         s = full_path;
3660
3661         rc = server->ops->is_path_accessible(xid, tcon, cifs_sb, "");
3662         while (rc == 0) {
3663                 /* skip separators */
3664                 while (*s == sep)
3665                         s++;
3666                 if (!*s)
3667                         break;
3668                 /* next separator */
3669                 while (*s && *s != sep)
3670                         s++;
3671
3672                 /*
3673                  * temporarily null-terminate the path at the end of
3674                  * the current component
3675                  */
3676                 tmp = *s;
3677                 *s = 0;
3678                 rc = server->ops->is_path_accessible(xid, tcon, cifs_sb,
3679                                                      full_path);
3680                 *s = tmp;
3681         }
3682         return rc;
3683 }
3684
3685 int
3686 cifs_mount(struct cifs_sb_info *cifs_sb, struct smb_vol *volume_info)
3687 {
3688         int rc;
3689         unsigned int xid;
3690         struct cifs_ses *ses;
3691         struct cifs_tcon *tcon;
3692         struct TCP_Server_Info *server;
3693         char   *full_path;
3694         struct tcon_link *tlink;
3695 #ifdef CONFIG_CIFS_DFS_UPCALL
3696         int referral_walks_count = 0;
3697 #endif
3698
3699 #ifdef CONFIG_CIFS_DFS_UPCALL
3700 try_mount_again:
3701         /* cleanup activities if we're chasing a referral */
3702         if (referral_walks_count) {
3703                 if (tcon)
3704                         cifs_put_tcon(tcon);
3705                 else if (ses)
3706                         cifs_put_smb_ses(ses);
3707
3708                 cifs_sb->mnt_cifs_flags &= ~CIFS_MOUNT_POSIX_PATHS;
3709
3710                 free_xid(xid);
3711         }
3712 #endif
3713         rc = 0;
3714         tcon = NULL;
3715         ses = NULL;
3716         server = NULL;
3717         full_path = NULL;
3718         tlink = NULL;
3719
3720         xid = get_xid();
3721
3722         /* get a reference to a tcp session */
3723         server = cifs_get_tcp_session(volume_info);
3724         if (IS_ERR(server)) {
3725                 rc = PTR_ERR(server);
3726                 goto out;
3727         }
3728         if ((volume_info->max_credits < 20) ||
3729              (volume_info->max_credits > 60000))
3730                 server->max_credits = SMB2_MAX_CREDITS_AVAILABLE;
3731         else
3732                 server->max_credits = volume_info->max_credits;
3733         /* get a reference to a SMB session */
3734         ses = cifs_get_smb_ses(server, volume_info);
3735         if (IS_ERR(ses)) {
3736                 rc = PTR_ERR(ses);
3737                 ses = NULL;
3738                 goto mount_fail_check;
3739         }
3740
3741 #ifdef CONFIG_CIFS_SMB2
3742         if ((volume_info->persistent == true) && ((ses->server->capabilities &
3743                 SMB2_GLOBAL_CAP_PERSISTENT_HANDLES) == 0)) {
3744                 cifs_dbg(VFS, "persistent handles not supported by server\n");
3745                 rc = -EOPNOTSUPP;
3746                 goto mount_fail_check;
3747         }
3748 #endif /* CONFIG_CIFS_SMB2*/
3749
3750         /* search for existing tcon to this server share */
3751         tcon = cifs_get_tcon(ses, volume_info);
3752         if (IS_ERR(tcon)) {
3753                 rc = PTR_ERR(tcon);
3754                 tcon = NULL;
3755                 if (rc == -EACCES)
3756                         goto mount_fail_check;
3757
3758                 goto remote_path_check;
3759         }
3760
3761         /* tell server which Unix caps we support */
3762         if (cap_unix(tcon->ses)) {
3763                 /* reset of caps checks mount to see if unix extensions
3764                    disabled for just this mount */
3765                 reset_cifs_unix_caps(xid, tcon, cifs_sb, volume_info);
3766                 if ((tcon->ses->server->tcpStatus == CifsNeedReconnect) &&
3767                     (le64_to_cpu(tcon->fsUnixInfo.Capability) &
3768                      CIFS_UNIX_TRANSPORT_ENCRYPTION_MANDATORY_CAP)) {
3769                         rc = -EACCES;
3770                         goto mount_fail_check;
3771                 }
3772         } else
3773                 tcon->unix_ext = 0; /* server does not support them */
3774
3775         /* do not care if a following call succeed - informational */
3776         if (!tcon->ipc && server->ops->qfs_tcon)
3777                 server->ops->qfs_tcon(xid, tcon);
3778
3779         cifs_sb->wsize = server->ops->negotiate_wsize(tcon, volume_info);
3780         cifs_sb->rsize = server->ops->negotiate_rsize(tcon, volume_info);
3781
3782 remote_path_check:
3783 #ifdef CONFIG_CIFS_DFS_UPCALL
3784         /*
3785          * Perform an unconditional check for whether there are DFS
3786          * referrals for this path without prefix, to provide support
3787          * for DFS referrals from w2k8 servers which don't seem to respond
3788          * with PATH_NOT_COVERED to requests that include the prefix.
3789          * Chase the referral if found, otherwise continue normally.
3790          */
3791         if (referral_walks_count == 0) {
3792                 int refrc = expand_dfs_referral(xid, ses, volume_info, cifs_sb,
3793                                                 false);
3794                 if (!refrc) {
3795                         referral_walks_count++;
3796                         goto try_mount_again;
3797                 }
3798         }
3799 #endif
3800
3801         /* check if a whole path is not remote */
3802         if (!rc && tcon) {
3803                 if (!server->ops->is_path_accessible) {
3804                         rc = -ENOSYS;
3805                         goto mount_fail_check;
3806                 }
3807                 /*
3808                  * cifs_build_path_to_root works only when we have a valid tcon
3809                  */
3810                 full_path = cifs_build_path_to_root(volume_info, cifs_sb, tcon,
3811                                         tcon->Flags & SMB_SHARE_IS_IN_DFS);
3812                 if (full_path == NULL) {
3813                         rc = -ENOMEM;
3814                         goto mount_fail_check;
3815                 }
3816                 rc = server->ops->is_path_accessible(xid, tcon, cifs_sb,
3817                                                      full_path);
3818                 if (rc != 0 && rc != -EREMOTE) {
3819                         kfree(full_path);
3820                         goto mount_fail_check;
3821                 }
3822
3823                 if (rc != -EREMOTE) {
3824                         rc = cifs_are_all_path_components_accessible(server,
3825                                                              xid, tcon, cifs_sb,
3826                                                              full_path);
3827                         if (rc != 0) {
3828                                 cifs_dbg(VFS, "cannot query dirs between root and final path, "
3829                                          "enabling CIFS_MOUNT_USE_PREFIX_PATH\n");
3830                                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_USE_PREFIX_PATH;
3831                                 rc = 0;
3832                         }
3833                 }
3834                 kfree(full_path);
3835         }
3836
3837         /* get referral if needed */
3838         if (rc == -EREMOTE) {
3839 #ifdef CONFIG_CIFS_DFS_UPCALL
3840                 if (referral_walks_count > MAX_NESTED_LINKS) {
3841                         /*
3842                          * BB: when we implement proper loop detection,
3843                          *     we will remove this check. But now we need it
3844                          *     to prevent an indefinite loop if 'DFS tree' is
3845                          *     misconfigured (i.e. has loops).
3846                          */
3847                         rc = -ELOOP;
3848                         goto mount_fail_check;
3849                 }
3850
3851                 rc = expand_dfs_referral(xid, ses, volume_info, cifs_sb, true);
3852
3853                 if (!rc) {
3854                         referral_walks_count++;
3855                         goto try_mount_again;
3856                 }
3857                 goto mount_fail_check;
3858 #else /* No DFS support, return error on mount */
3859                 rc = -EOPNOTSUPP;
3860 #endif
3861         }
3862
3863         if (rc)
3864                 goto mount_fail_check;
3865
3866         /* now, hang the tcon off of the superblock */
3867         tlink = kzalloc(sizeof *tlink, GFP_KERNEL);
3868         if (tlink == NULL) {
3869                 rc = -ENOMEM;
3870                 goto mount_fail_check;
3871         }
3872
3873         tlink->tl_uid = ses->linux_uid;
3874         tlink->tl_tcon = tcon;
3875         tlink->tl_time = jiffies;
3876         set_bit(TCON_LINK_MASTER, &tlink->tl_flags);
3877         set_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3878
3879         cifs_sb->master_tlink = tlink;
3880         spin_lock(&cifs_sb->tlink_tree_lock);
3881         tlink_rb_insert(&cifs_sb->tlink_tree, tlink);
3882         spin_unlock(&cifs_sb->tlink_tree_lock);
3883
3884         queue_delayed_work(cifsiod_wq, &cifs_sb->prune_tlinks,
3885                                 TLINK_IDLE_EXPIRE);
3886
3887 mount_fail_check:
3888         /* on error free sesinfo and tcon struct if needed */
3889         if (rc) {
3890                 /* If find_unc succeeded then rc == 0 so we can not end */
3891                 /* up accidentally freeing someone elses tcon struct */
3892                 if (tcon)
3893                         cifs_put_tcon(tcon);
3894                 else if (ses)
3895                         cifs_put_smb_ses(ses);
3896                 else
3897                         cifs_put_tcp_session(server, 0);
3898         }
3899
3900 out:
3901         free_xid(xid);
3902         return rc;
3903 }
3904
3905 /*
3906  * Issue a TREE_CONNECT request. Note that for IPC$ shares, that the tcon
3907  * pointer may be NULL.
3908  */
3909 int
3910 CIFSTCon(const unsigned int xid, struct cifs_ses *ses,
3911          const char *tree, struct cifs_tcon *tcon,
3912          const struct nls_table *nls_codepage)
3913 {
3914         struct smb_hdr *smb_buffer;
3915         struct smb_hdr *smb_buffer_response;
3916         TCONX_REQ *pSMB;
3917         TCONX_RSP *pSMBr;
3918         unsigned char *bcc_ptr;
3919         int rc = 0;
3920         int length;
3921         __u16 bytes_left, count;
3922
3923         if (ses == NULL)
3924                 return -EIO;
3925
3926         smb_buffer = cifs_buf_get();
3927         if (smb_buffer == NULL)
3928                 return -ENOMEM;
3929
3930         smb_buffer_response = smb_buffer;
3931
3932         header_assemble(smb_buffer, SMB_COM_TREE_CONNECT_ANDX,
3933                         NULL /*no tid */ , 4 /*wct */ );
3934
3935         smb_buffer->Mid = get_next_mid(ses->server);
3936         smb_buffer->Uid = ses->Suid;
3937         pSMB = (TCONX_REQ *) smb_buffer;
3938         pSMBr = (TCONX_RSP *) smb_buffer_response;
3939
3940         pSMB->AndXCommand = 0xFF;
3941         pSMB->Flags = cpu_to_le16(TCON_EXTENDED_SECINFO);
3942         bcc_ptr = &pSMB->Password[0];
3943         if (!tcon || (ses->server->sec_mode & SECMODE_USER)) {
3944                 pSMB->PasswordLength = cpu_to_le16(1);  /* minimum */
3945                 *bcc_ptr = 0; /* password is null byte */
3946                 bcc_ptr++;              /* skip password */
3947                 /* already aligned so no need to do it below */
3948         } else {
3949                 pSMB->PasswordLength = cpu_to_le16(CIFS_AUTH_RESP_SIZE);
3950                 /* BB FIXME add code to fail this if NTLMv2 or Kerberos
3951                    specified as required (when that support is added to
3952                    the vfs in the future) as only NTLM or the much
3953                    weaker LANMAN (which we do not send by default) is accepted
3954                    by Samba (not sure whether other servers allow
3955                    NTLMv2 password here) */
3956 #ifdef CONFIG_CIFS_WEAK_PW_HASH
3957                 if ((global_secflags & CIFSSEC_MAY_LANMAN) &&
3958                     (ses->sectype == LANMAN))
3959                         calc_lanman_hash(tcon->password, ses->server->cryptkey,
3960                                          ses->server->sec_mode &
3961                                             SECMODE_PW_ENCRYPT ? true : false,
3962                                          bcc_ptr);
3963                 else
3964 #endif /* CIFS_WEAK_PW_HASH */
3965                 rc = SMBNTencrypt(tcon->password, ses->server->cryptkey,
3966                                         bcc_ptr, nls_codepage);
3967                 if (rc) {
3968                         cifs_dbg(FYI, "%s Can't generate NTLM rsp. Error: %d\n",
3969                                  __func__, rc);
3970                         cifs_buf_release(smb_buffer);
3971                         return rc;
3972                 }
3973
3974                 bcc_ptr += CIFS_AUTH_RESP_SIZE;
3975                 if (ses->capabilities & CAP_UNICODE) {
3976                         /* must align unicode strings */
3977                         *bcc_ptr = 0; /* null byte password */
3978                         bcc_ptr++;
3979                 }
3980         }
3981
3982         if (ses->server->sign)
3983                 smb_buffer->Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
3984
3985         if (ses->capabilities & CAP_STATUS32) {
3986                 smb_buffer->Flags2 |= SMBFLG2_ERR_STATUS;
3987         }
3988         if (ses->capabilities & CAP_DFS) {
3989                 smb_buffer->Flags2 |= SMBFLG2_DFS;
3990         }
3991         if (ses->capabilities & CAP_UNICODE) {
3992                 smb_buffer->Flags2 |= SMBFLG2_UNICODE;
3993                 length =
3994                     cifs_strtoUTF16((__le16 *) bcc_ptr, tree,
3995                         6 /* max utf8 char length in bytes */ *
3996                         (/* server len*/ + 256 /* share len */), nls_codepage);
3997                 bcc_ptr += 2 * length;  /* convert num 16 bit words to bytes */
3998                 bcc_ptr += 2;   /* skip trailing null */
3999         } else {                /* ASCII */
4000                 strcpy(bcc_ptr, tree);
4001                 bcc_ptr += strlen(tree) + 1;
4002         }
4003         strcpy(bcc_ptr, "?????");
4004         bcc_ptr += strlen("?????");
4005         bcc_ptr += 1;
4006         count = bcc_ptr - &pSMB->Password[0];
4007         pSMB->hdr.smb_buf_length = cpu_to_be32(be32_to_cpu(
4008                                         pSMB->hdr.smb_buf_length) + count);
4009         pSMB->ByteCount = cpu_to_le16(count);
4010
4011         rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response, &length,
4012                          0);
4013
4014         /* above now done in SendReceive */
4015         if ((rc == 0) && (tcon != NULL)) {
4016                 bool is_unicode;
4017
4018                 tcon->tidStatus = CifsGood;
4019                 tcon->need_reconnect = false;
4020                 tcon->tid = smb_buffer_response->Tid;
4021                 bcc_ptr = pByteArea(smb_buffer_response);
4022                 bytes_left = get_bcc(smb_buffer_response);
4023                 length = strnlen(bcc_ptr, bytes_left - 2);
4024                 if (smb_buffer->Flags2 & SMBFLG2_UNICODE)
4025                         is_unicode = true;
4026                 else
4027                         is_unicode = false;
4028
4029
4030                 /* skip service field (NB: this field is always ASCII) */
4031                 if (length == 3) {
4032                         if ((bcc_ptr[0] == 'I') && (bcc_ptr[1] == 'P') &&
4033                             (bcc_ptr[2] == 'C')) {
4034                                 cifs_dbg(FYI, "IPC connection\n");
4035                                 tcon->ipc = 1;
4036                         }
4037                 } else if (length == 2) {
4038                         if ((bcc_ptr[0] == 'A') && (bcc_ptr[1] == ':')) {
4039                                 /* the most common case */
4040                                 cifs_dbg(FYI, "disk share connection\n");
4041                         }
4042                 }
4043                 bcc_ptr += length + 1;
4044                 bytes_left -= (length + 1);
4045                 strlcpy(tcon->treeName, tree, sizeof(tcon->treeName));
4046
4047                 /* mostly informational -- no need to fail on error here */
4048                 kfree(tcon->nativeFileSystem);
4049                 tcon->nativeFileSystem = cifs_strndup_from_utf16(bcc_ptr,
4050                                                       bytes_left, is_unicode,
4051                                                       nls_codepage);
4052
4053                 cifs_dbg(FYI, "nativeFileSystem=%s\n", tcon->nativeFileSystem);
4054
4055                 if ((smb_buffer_response->WordCount == 3) ||
4056                          (smb_buffer_response->WordCount == 7))
4057                         /* field is in same location */
4058                         tcon->Flags = le16_to_cpu(pSMBr->OptionalSupport);
4059                 else
4060                         tcon->Flags = 0;
4061                 cifs_dbg(FYI, "Tcon flags: 0x%x\n", tcon->Flags);
4062         } else if ((rc == 0) && tcon == NULL) {
4063                 /* all we need to save for IPC$ connection */
4064                 ses->ipc_tid = smb_buffer_response->Tid;
4065         }
4066
4067         cifs_buf_release(smb_buffer);
4068         return rc;
4069 }
4070
4071 static void delayed_free(struct rcu_head *p)
4072 {
4073         struct cifs_sb_info *sbi = container_of(p, struct cifs_sb_info, rcu);
4074         unload_nls(sbi->local_nls);
4075         kfree(sbi);
4076 }
4077
4078 void
4079 cifs_umount(struct cifs_sb_info *cifs_sb)
4080 {
4081         struct rb_root *root = &cifs_sb->tlink_tree;
4082         struct rb_node *node;
4083         struct tcon_link *tlink;
4084
4085         cancel_delayed_work_sync(&cifs_sb->prune_tlinks);
4086
4087         spin_lock(&cifs_sb->tlink_tree_lock);
4088         while ((node = rb_first(root))) {
4089                 tlink = rb_entry(node, struct tcon_link, tl_rbnode);
4090                 cifs_get_tlink(tlink);
4091                 clear_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
4092                 rb_erase(node, root);
4093
4094                 spin_unlock(&cifs_sb->tlink_tree_lock);
4095                 cifs_put_tlink(tlink);
4096                 spin_lock(&cifs_sb->tlink_tree_lock);
4097         }
4098         spin_unlock(&cifs_sb->tlink_tree_lock);
4099
4100         kfree(cifs_sb->mountdata);
4101         kfree(cifs_sb->prepath);
4102         call_rcu(&cifs_sb->rcu, delayed_free);
4103 }
4104
4105 int
4106 cifs_negotiate_protocol(const unsigned int xid, struct cifs_ses *ses)
4107 {
4108         int rc = 0;
4109         struct TCP_Server_Info *server = ses->server;
4110
4111         if (!server->ops->need_neg || !server->ops->negotiate)
4112                 return -ENOSYS;
4113
4114         /* only send once per connect */
4115         if (!server->ops->need_neg(server))
4116                 return 0;
4117
4118         set_credits(server, 1);
4119
4120         rc = server->ops->negotiate(xid, ses);
4121         if (rc == 0) {
4122                 spin_lock(&GlobalMid_Lock);
4123                 if (server->tcpStatus == CifsNeedNegotiate)
4124                         server->tcpStatus = CifsGood;
4125                 else
4126                         rc = -EHOSTDOWN;
4127                 spin_unlock(&GlobalMid_Lock);
4128         }
4129
4130         return rc;
4131 }
4132
4133 int
4134 cifs_setup_session(const unsigned int xid, struct cifs_ses *ses,
4135                    struct nls_table *nls_info)
4136 {
4137         int rc = -ENOSYS;
4138         struct TCP_Server_Info *server = ses->server;
4139
4140         ses->capabilities = server->capabilities;
4141         if (linuxExtEnabled == 0)
4142                 ses->capabilities &= (~server->vals->cap_unix);
4143
4144         cifs_dbg(FYI, "Security Mode: 0x%x Capabilities: 0x%x TimeAdjust: %d\n",
4145                  server->sec_mode, server->capabilities, server->timeAdj);
4146
4147         if (server->ops->sess_setup)
4148                 rc = server->ops->sess_setup(xid, ses, nls_info);
4149
4150         if (rc)
4151                 cifs_dbg(VFS, "Send error in SessSetup = %d\n", rc);
4152
4153         return rc;
4154 }
4155
4156 static int
4157 cifs_set_vol_auth(struct smb_vol *vol, struct cifs_ses *ses)
4158 {
4159         vol->sectype = ses->sectype;
4160
4161         /* krb5 is special, since we don't need username or pw */
4162         if (vol->sectype == Kerberos)
4163                 return 0;
4164
4165         return cifs_set_cifscreds(vol, ses);
4166 }
4167
4168 static struct cifs_tcon *
4169 cifs_construct_tcon(struct cifs_sb_info *cifs_sb, kuid_t fsuid)
4170 {
4171         int rc;
4172         struct cifs_tcon *master_tcon = cifs_sb_master_tcon(cifs_sb);
4173         struct cifs_ses *ses;
4174         struct cifs_tcon *tcon = NULL;
4175         struct smb_vol *vol_info;
4176
4177         vol_info = kzalloc(sizeof(*vol_info), GFP_KERNEL);
4178         if (vol_info == NULL)
4179                 return ERR_PTR(-ENOMEM);
4180
4181         vol_info->local_nls = cifs_sb->local_nls;
4182         vol_info->linux_uid = fsuid;
4183         vol_info->cred_uid = fsuid;
4184         vol_info->UNC = master_tcon->treeName;
4185         vol_info->retry = master_tcon->retry;
4186         vol_info->nocase = master_tcon->nocase;
4187         vol_info->local_lease = master_tcon->local_lease;
4188         vol_info->no_linux_ext = !master_tcon->unix_ext;
4189         vol_info->sectype = master_tcon->ses->sectype;
4190         vol_info->sign = master_tcon->ses->sign;
4191
4192         rc = cifs_set_vol_auth(vol_info, master_tcon->ses);
4193         if (rc) {
4194                 tcon = ERR_PTR(rc);
4195                 goto out;
4196         }
4197
4198         /* get a reference for the same TCP session */
4199         spin_lock(&cifs_tcp_ses_lock);
4200         ++master_tcon->ses->server->srv_count;
4201         spin_unlock(&cifs_tcp_ses_lock);
4202
4203         ses = cifs_get_smb_ses(master_tcon->ses->server, vol_info);
4204         if (IS_ERR(ses)) {
4205                 tcon = (struct cifs_tcon *)ses;
4206                 cifs_put_tcp_session(master_tcon->ses->server, 0);
4207                 goto out;
4208         }
4209
4210         tcon = cifs_get_tcon(ses, vol_info);
4211         if (IS_ERR(tcon)) {
4212                 cifs_put_smb_ses(ses);
4213                 goto out;
4214         }
4215
4216         if (cap_unix(ses))
4217                 reset_cifs_unix_caps(0, tcon, NULL, vol_info);
4218 out:
4219         kfree(vol_info->username);
4220         kfree(vol_info->password);
4221         kfree(vol_info);
4222
4223         return tcon;
4224 }
4225
4226 struct cifs_tcon *
4227 cifs_sb_master_tcon(struct cifs_sb_info *cifs_sb)
4228 {
4229         return tlink_tcon(cifs_sb_master_tlink(cifs_sb));
4230 }
4231
4232 /* find and return a tlink with given uid */
4233 static struct tcon_link *
4234 tlink_rb_search(struct rb_root *root, kuid_t uid)
4235 {
4236         struct rb_node *node = root->rb_node;
4237         struct tcon_link *tlink;
4238
4239         while (node) {
4240                 tlink = rb_entry(node, struct tcon_link, tl_rbnode);
4241
4242                 if (uid_gt(tlink->tl_uid, uid))
4243                         node = node->rb_left;
4244                 else if (uid_lt(tlink->tl_uid, uid))
4245                         node = node->rb_right;
4246                 else
4247                         return tlink;
4248         }
4249         return NULL;
4250 }
4251
4252 /* insert a tcon_link into the tree */
4253 static void
4254 tlink_rb_insert(struct rb_root *root, struct tcon_link *new_tlink)
4255 {
4256         struct rb_node **new = &(root->rb_node), *parent = NULL;
4257         struct tcon_link *tlink;
4258
4259         while (*new) {
4260                 tlink = rb_entry(*new, struct tcon_link, tl_rbnode);
4261                 parent = *new;
4262
4263                 if (uid_gt(tlink->tl_uid, new_tlink->tl_uid))
4264                         new = &((*new)->rb_left);
4265                 else
4266                         new = &((*new)->rb_right);
4267         }
4268
4269         rb_link_node(&new_tlink->tl_rbnode, parent, new);
4270         rb_insert_color(&new_tlink->tl_rbnode, root);
4271 }
4272
4273 /*
4274  * Find or construct an appropriate tcon given a cifs_sb and the fsuid of the
4275  * current task.
4276  *
4277  * If the superblock doesn't refer to a multiuser mount, then just return
4278  * the master tcon for the mount.
4279  *
4280  * First, search the rbtree for an existing tcon for this fsuid. If one
4281  * exists, then check to see if it's pending construction. If it is then wait
4282  * for construction to complete. Once it's no longer pending, check to see if
4283  * it failed and either return an error or retry construction, depending on
4284  * the timeout.
4285  *
4286  * If one doesn't exist then insert a new tcon_link struct into the tree and
4287  * try to construct a new one.
4288  */
4289 struct tcon_link *
4290 cifs_sb_tlink(struct cifs_sb_info *cifs_sb)
4291 {
4292         int ret;
4293         kuid_t fsuid = current_fsuid();
4294         struct tcon_link *tlink, *newtlink;
4295
4296         if (!(cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MULTIUSER))
4297                 return cifs_get_tlink(cifs_sb_master_tlink(cifs_sb));
4298
4299         spin_lock(&cifs_sb->tlink_tree_lock);
4300         tlink = tlink_rb_search(&cifs_sb->tlink_tree, fsuid);
4301         if (tlink)
4302                 cifs_get_tlink(tlink);
4303         spin_unlock(&cifs_sb->tlink_tree_lock);
4304
4305         if (tlink == NULL) {
4306                 newtlink = kzalloc(sizeof(*tlink), GFP_KERNEL);
4307                 if (newtlink == NULL)
4308                         return ERR_PTR(-ENOMEM);
4309                 newtlink->tl_uid = fsuid;
4310                 newtlink->tl_tcon = ERR_PTR(-EACCES);
4311                 set_bit(TCON_LINK_PENDING, &newtlink->tl_flags);
4312                 set_bit(TCON_LINK_IN_TREE, &newtlink->tl_flags);
4313                 cifs_get_tlink(newtlink);
4314
4315                 spin_lock(&cifs_sb->tlink_tree_lock);
4316                 /* was one inserted after previous search? */
4317                 tlink = tlink_rb_search(&cifs_sb->tlink_tree, fsuid);
4318                 if (tlink) {
4319                         cifs_get_tlink(tlink);
4320                         spin_unlock(&cifs_sb->tlink_tree_lock);
4321                         kfree(newtlink);
4322                         goto wait_for_construction;
4323                 }
4324                 tlink = newtlink;
4325                 tlink_rb_insert(&cifs_sb->tlink_tree, tlink);
4326                 spin_unlock(&cifs_sb->tlink_tree_lock);
4327         } else {
4328 wait_for_construction:
4329                 ret = wait_on_bit(&tlink->tl_flags, TCON_LINK_PENDING,
4330                                   TASK_INTERRUPTIBLE);
4331                 if (ret) {
4332                         cifs_put_tlink(tlink);
4333                         return ERR_PTR(-ERESTARTSYS);
4334                 }
4335
4336                 /* if it's good, return it */
4337                 if (!IS_ERR(tlink->tl_tcon))
4338                         return tlink;
4339
4340                 /* return error if we tried this already recently */
4341                 if (time_before(jiffies, tlink->tl_time + TLINK_ERROR_EXPIRE)) {
4342                         cifs_put_tlink(tlink);
4343                         return ERR_PTR(-EACCES);
4344                 }
4345
4346                 if (test_and_set_bit(TCON_LINK_PENDING, &tlink->tl_flags))
4347                         goto wait_for_construction;
4348         }
4349
4350         tlink->tl_tcon = cifs_construct_tcon(cifs_sb, fsuid);
4351         clear_bit(TCON_LINK_PENDING, &tlink->tl_flags);
4352         wake_up_bit(&tlink->tl_flags, TCON_LINK_PENDING);
4353
4354         if (IS_ERR(tlink->tl_tcon)) {
4355                 cifs_put_tlink(tlink);
4356                 return ERR_PTR(-EACCES);
4357         }
4358
4359         return tlink;
4360 }
4361
4362 /*
4363  * periodic workqueue job that scans tcon_tree for a superblock and closes
4364  * out tcons.
4365  */
4366 static void
4367 cifs_prune_tlinks(struct work_struct *work)
4368 {
4369         struct cifs_sb_info *cifs_sb = container_of(work, struct cifs_sb_info,
4370                                                     prune_tlinks.work);
4371         struct rb_root *root = &cifs_sb->tlink_tree;
4372         struct rb_node *node = rb_first(root);
4373         struct rb_node *tmp;
4374         struct tcon_link *tlink;
4375
4376         /*
4377          * Because we drop the spinlock in the loop in order to put the tlink
4378          * it's not guarded against removal of links from the tree. The only
4379          * places that remove entries from the tree are this function and
4380          * umounts. Because this function is non-reentrant and is canceled
4381          * before umount can proceed, this is safe.
4382          */
4383         spin_lock(&cifs_sb->tlink_tree_lock);
4384         node = rb_first(root);
4385         while (node != NULL) {
4386                 tmp = node;
4387                 node = rb_next(tmp);
4388                 tlink = rb_entry(tmp, struct tcon_link, tl_rbnode);
4389
4390                 if (test_bit(TCON_LINK_MASTER, &tlink->tl_flags) ||
4391                     atomic_read(&tlink->tl_count) != 0 ||
4392                     time_after(tlink->tl_time + TLINK_IDLE_EXPIRE, jiffies))
4393                         continue;
4394
4395                 cifs_get_tlink(tlink);
4396                 clear_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
4397                 rb_erase(tmp, root);
4398
4399                 spin_unlock(&cifs_sb->tlink_tree_lock);
4400                 cifs_put_tlink(tlink);
4401                 spin_lock(&cifs_sb->tlink_tree_lock);
4402         }
4403         spin_unlock(&cifs_sb->tlink_tree_lock);
4404
4405         queue_delayed_work(cifsiod_wq, &cifs_sb->prune_tlinks,
4406                                 TLINK_IDLE_EXPIRE);
4407 }