4 * Copyright (C) International Business Machines Corp., 2002,2009
5 * Author(s): Steve French (sfrench@us.ibm.com)
7 * This library is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU Lesser General Public License as published
9 * by the Free Software Foundation; either version 2.1 of the License, or
10 * (at your option) any later version.
12 * This library is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See
15 * the GNU Lesser General Public License for more details.
17 * You should have received a copy of the GNU Lesser General Public License
18 * along with this library; if not, write to the Free Software
19 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
22 #include <linux/net.h>
23 #include <linux/string.h>
24 #include <linux/list.h>
25 #include <linux/wait.h>
26 #include <linux/slab.h>
27 #include <linux/pagemap.h>
28 #include <linux/ctype.h>
29 #include <linux/utsname.h>
30 #include <linux/mempool.h>
31 #include <linux/delay.h>
32 #include <linux/completion.h>
33 #include <linux/kthread.h>
34 #include <linux/pagevec.h>
35 #include <linux/freezer.h>
36 #include <linux/namei.h>
37 #include <asm/uaccess.h>
38 #include <asm/processor.h>
39 #include <linux/inet.h>
43 #include "cifsproto.h"
44 #include "cifs_unicode.h"
45 #include "cifs_debug.h"
46 #include "cifs_fs_sb.h"
49 #include "rfc1002pdu.h"
53 #define RFC1001_PORT 139
55 /* SMB echo "timeout" -- FIXME: tunable? */
56 #define SMB_ECHO_INTERVAL (60 * HZ)
58 extern mempool_t *cifs_req_poolp;
60 /* FIXME: should these be tunable? */
61 #define TLINK_ERROR_EXPIRE (1 * HZ)
62 #define TLINK_IDLE_EXPIRE (600 * HZ)
64 static int ip_connect(struct TCP_Server_Info *server);
65 static int generic_ip_connect(struct TCP_Server_Info *server);
66 static void tlink_rb_insert(struct rb_root *root, struct tcon_link *new_tlink);
67 static void cifs_prune_tlinks(struct work_struct *work);
70 * cifs tcp session reconnection
72 * mark tcp session as reconnecting so temporarily locked
73 * mark all smb sessions as reconnecting for tcp session
74 * reconnect tcp session
75 * wake up waiters on reconnection? - (not needed currently)
78 cifs_reconnect(struct TCP_Server_Info *server)
81 struct list_head *tmp, *tmp2;
83 struct cifs_tcon *tcon;
84 struct mid_q_entry *mid_entry;
85 struct list_head retry_list;
87 spin_lock(&GlobalMid_Lock);
88 if (server->tcpStatus == CifsExiting) {
89 /* the demux thread will exit normally
90 next time through the loop */
91 spin_unlock(&GlobalMid_Lock);
94 server->tcpStatus = CifsNeedReconnect;
95 spin_unlock(&GlobalMid_Lock);
98 cFYI(1, "Reconnecting tcp session");
100 /* before reconnecting the tcp session, mark the smb session (uid)
101 and the tid bad so they are not used until reconnected */
102 cFYI(1, "%s: marking sessions and tcons for reconnect", __func__);
103 spin_lock(&cifs_tcp_ses_lock);
104 list_for_each(tmp, &server->smb_ses_list) {
105 ses = list_entry(tmp, struct cifs_ses, smb_ses_list);
106 ses->need_reconnect = true;
108 list_for_each(tmp2, &ses->tcon_list) {
109 tcon = list_entry(tmp2, struct cifs_tcon, tcon_list);
110 tcon->need_reconnect = true;
113 spin_unlock(&cifs_tcp_ses_lock);
115 /* do not want to be sending data on a socket we are freeing */
116 cFYI(1, "%s: tearing down socket", __func__);
117 mutex_lock(&server->srv_mutex);
118 if (server->ssocket) {
119 cFYI(1, "State: 0x%x Flags: 0x%lx", server->ssocket->state,
120 server->ssocket->flags);
121 kernel_sock_shutdown(server->ssocket, SHUT_WR);
122 cFYI(1, "Post shutdown state: 0x%x Flags: 0x%lx",
123 server->ssocket->state,
124 server->ssocket->flags);
125 sock_release(server->ssocket);
126 server->ssocket = NULL;
128 server->sequence_number = 0;
129 server->session_estab = false;
130 kfree(server->session_key.response);
131 server->session_key.response = NULL;
132 server->session_key.len = 0;
133 server->lstrp = jiffies;
134 mutex_unlock(&server->srv_mutex);
136 /* mark submitted MIDs for retry and issue callback */
137 INIT_LIST_HEAD(&retry_list);
138 cFYI(1, "%s: moving mids to private list", __func__);
139 spin_lock(&GlobalMid_Lock);
140 list_for_each_safe(tmp, tmp2, &server->pending_mid_q) {
141 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
142 if (mid_entry->midState == MID_REQUEST_SUBMITTED)
143 mid_entry->midState = MID_RETRY_NEEDED;
144 list_move(&mid_entry->qhead, &retry_list);
146 spin_unlock(&GlobalMid_Lock);
148 cFYI(1, "%s: issuing mid callbacks", __func__);
149 list_for_each_safe(tmp, tmp2, &retry_list) {
150 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
151 list_del_init(&mid_entry->qhead);
152 mid_entry->callback(mid_entry);
155 while (server->tcpStatus == CifsNeedReconnect) {
158 /* we should try only the port we connected to before */
159 rc = generic_ip_connect(server);
161 cFYI(1, "reconnect error %d", rc);
164 atomic_inc(&tcpSesReconnectCount);
165 spin_lock(&GlobalMid_Lock);
166 if (server->tcpStatus != CifsExiting)
167 server->tcpStatus = CifsNeedNegotiate;
168 spin_unlock(&GlobalMid_Lock);
177 0 not a transact2, or all data present
178 >0 transact2 with that much data missing
179 -EINVAL = invalid transact2
182 static int check2ndT2(struct smb_hdr *pSMB, unsigned int maxBufSize)
184 struct smb_t2_rsp *pSMBt;
186 __u16 total_data_size, data_in_this_rsp;
188 if (pSMB->Command != SMB_COM_TRANSACTION2)
191 /* check for plausible wct, bcc and t2 data and parm sizes */
192 /* check for parm and data offset going beyond end of smb */
193 if (pSMB->WordCount != 10) { /* coalesce_t2 depends on this */
194 cFYI(1, "invalid transact2 word count");
198 pSMBt = (struct smb_t2_rsp *)pSMB;
200 total_data_size = get_unaligned_le16(&pSMBt->t2_rsp.TotalDataCount);
201 data_in_this_rsp = get_unaligned_le16(&pSMBt->t2_rsp.DataCount);
203 if (total_data_size == data_in_this_rsp)
205 else if (total_data_size < data_in_this_rsp) {
206 cFYI(1, "total data %d smaller than data in frame %d",
207 total_data_size, data_in_this_rsp);
211 remaining = total_data_size - data_in_this_rsp;
213 cFYI(1, "missing %d bytes from transact2, check next response",
215 if (total_data_size > maxBufSize) {
216 cERROR(1, "TotalDataSize %d is over maximum buffer %d",
217 total_data_size, maxBufSize);
223 static int coalesce_t2(struct smb_hdr *psecond, struct smb_hdr *pTargetSMB)
225 struct smb_t2_rsp *pSMB2 = (struct smb_t2_rsp *)psecond;
226 struct smb_t2_rsp *pSMBt = (struct smb_t2_rsp *)pTargetSMB;
227 char *data_area_of_target;
228 char *data_area_of_buf2;
230 unsigned int byte_count, total_in_buf;
231 __u16 total_data_size, total_in_buf2;
233 total_data_size = get_unaligned_le16(&pSMBt->t2_rsp.TotalDataCount);
235 if (total_data_size !=
236 get_unaligned_le16(&pSMB2->t2_rsp.TotalDataCount))
237 cFYI(1, "total data size of primary and secondary t2 differ");
239 total_in_buf = get_unaligned_le16(&pSMBt->t2_rsp.DataCount);
241 remaining = total_data_size - total_in_buf;
246 if (remaining == 0) /* nothing to do, ignore */
249 total_in_buf2 = get_unaligned_le16(&pSMB2->t2_rsp.DataCount);
250 if (remaining < total_in_buf2) {
251 cFYI(1, "transact2 2nd response contains too much data");
254 /* find end of first SMB data area */
255 data_area_of_target = (char *)&pSMBt->hdr.Protocol +
256 get_unaligned_le16(&pSMBt->t2_rsp.DataOffset);
257 /* validate target area */
259 data_area_of_buf2 = (char *)&pSMB2->hdr.Protocol +
260 get_unaligned_le16(&pSMB2->t2_rsp.DataOffset);
262 data_area_of_target += total_in_buf;
264 /* copy second buffer into end of first buffer */
265 total_in_buf += total_in_buf2;
266 /* is the result too big for the field? */
267 if (total_in_buf > USHRT_MAX)
269 put_unaligned_le16(total_in_buf, &pSMBt->t2_rsp.DataCount);
272 byte_count = get_bcc(pTargetSMB);
273 byte_count += total_in_buf2;
274 /* is the result too big for the field? */
275 if (byte_count > USHRT_MAX)
277 put_bcc(byte_count, pTargetSMB);
279 byte_count = be32_to_cpu(pTargetSMB->smb_buf_length);
280 byte_count += total_in_buf2;
281 /* don't allow buffer to overflow */
282 if (byte_count > CIFSMaxBufSize)
284 pTargetSMB->smb_buf_length = cpu_to_be32(byte_count);
286 memcpy(data_area_of_target, data_area_of_buf2, total_in_buf2);
288 if (remaining == total_in_buf2) {
289 cFYI(1, "found the last secondary response");
290 return 0; /* we are done */
291 } else /* more responses to go */
296 cifs_echo_request(struct work_struct *work)
299 struct TCP_Server_Info *server = container_of(work,
300 struct TCP_Server_Info, echo.work);
303 * We cannot send an echo until the NEGOTIATE_PROTOCOL request is
304 * done, which is indicated by maxBuf != 0. Also, no need to ping if
305 * we got a response recently
307 if (server->maxBuf == 0 ||
308 time_before(jiffies, server->lstrp + SMB_ECHO_INTERVAL - HZ))
311 rc = CIFSSMBEcho(server);
313 cFYI(1, "Unable to send echo request to server: %s",
317 queue_delayed_work(system_nrt_wq, &server->echo, SMB_ECHO_INTERVAL);
321 cifs_demultiplex_thread(struct TCP_Server_Info *server)
324 unsigned int pdu_length, total_read;
325 struct smb_hdr *smb_buffer = NULL;
326 struct smb_hdr *bigbuf = NULL;
327 struct smb_hdr *smallbuf = NULL;
328 struct msghdr smb_msg;
330 struct socket *csocket = server->ssocket;
331 struct list_head *tmp, *tmp2;
332 struct task_struct *task_to_wake = NULL;
333 struct mid_q_entry *mid_entry;
335 bool isLargeBuf = false;
339 current->flags |= PF_MEMALLOC;
340 cFYI(1, "Demultiplex PID: %d", task_pid_nr(current));
342 length = atomic_inc_return(&tcpSesAllocCount);
344 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
348 while (server->tcpStatus != CifsExiting) {
351 if (bigbuf == NULL) {
352 bigbuf = cifs_buf_get();
354 cERROR(1, "No memory for large SMB response");
356 /* retry will check if exiting */
359 } else if (isLargeBuf) {
360 /* we are reusing a dirty large buf, clear its start */
361 memset(bigbuf, 0, sizeof(struct smb_hdr));
364 if (smallbuf == NULL) {
365 smallbuf = cifs_small_buf_get();
367 cERROR(1, "No memory for SMB response");
369 /* retry will check if exiting */
372 /* beginning of smb buffer is cleared in our buf_get */
373 } else /* if existing small buf clear beginning */
374 memset(smallbuf, 0, sizeof(struct smb_hdr));
378 smb_buffer = smallbuf;
379 iov.iov_base = smb_buffer;
381 smb_msg.msg_control = NULL;
382 smb_msg.msg_controllen = 0;
383 pdu_length = 4; /* enough to get RFC1001 header */
386 if (echo_retries > 0 && server->tcpStatus == CifsGood &&
387 time_after(jiffies, server->lstrp +
388 (echo_retries * SMB_ECHO_INTERVAL))) {
389 cERROR(1, "Server %s has not responded in %d seconds. "
390 "Reconnecting...", server->hostname,
391 (echo_retries * SMB_ECHO_INTERVAL / HZ));
392 cifs_reconnect(server);
393 csocket = server->ssocket;
394 wake_up(&server->response_q);
399 kernel_recvmsg(csocket, &smb_msg,
400 &iov, 1, pdu_length, 0 /* BB other flags? */);
402 if (server->tcpStatus == CifsExiting) {
404 } else if (server->tcpStatus == CifsNeedReconnect) {
405 cFYI(1, "Reconnect after server stopped responding");
406 cifs_reconnect(server);
407 cFYI(1, "call to reconnect done");
408 csocket = server->ssocket;
410 } else if (length == -ERESTARTSYS ||
413 msleep(1); /* minimum sleep to prevent looping
414 allowing socket to clear and app threads to set
415 tcpStatus CifsNeedReconnect if server hung */
416 if (pdu_length < 4) {
417 iov.iov_base = (4 - pdu_length) +
419 iov.iov_len = pdu_length;
420 smb_msg.msg_control = NULL;
421 smb_msg.msg_controllen = 0;
425 } else if (length <= 0) {
426 cFYI(1, "Reconnect after unexpected peek error %d",
428 cifs_reconnect(server);
429 csocket = server->ssocket;
430 wake_up(&server->response_q);
432 } else if (length < pdu_length) {
433 cFYI(1, "requested %d bytes but only got %d bytes",
435 pdu_length -= length;
440 /* The right amount was read from socket - 4 bytes */
441 /* so we can now interpret the length field */
443 /* the first byte big endian of the length field,
444 is actually not part of the length but the type
445 with the most common, zero, as regular data */
446 temp = *((char *) smb_buffer);
448 /* Note that FC 1001 length is big endian on the wire,
449 but we convert it here so it is always manipulated
450 as host byte order */
451 pdu_length = be32_to_cpu(smb_buffer->smb_buf_length);
453 cFYI(1, "rfc1002 length 0x%x", pdu_length+4);
455 if (temp == (char) RFC1002_SESSION_KEEP_ALIVE) {
457 } else if (temp == (char)RFC1002_POSITIVE_SESSION_RESPONSE) {
458 cFYI(1, "Good RFC 1002 session rsp");
460 } else if (temp == (char)RFC1002_NEGATIVE_SESSION_RESPONSE) {
461 /* we get this from Windows 98 instead of
462 an error on SMB negprot response */
463 cFYI(1, "Negative RFC1002 Session Response Error 0x%x)",
465 /* give server a second to clean up */
467 /* always try 445 first on reconnect since we get NACK
468 * on some if we ever connected to port 139 (the NACK
469 * is since we do not begin with RFC1001 session
472 cifs_set_port((struct sockaddr *)
473 &server->dstaddr, CIFS_PORT);
474 cifs_reconnect(server);
475 csocket = server->ssocket;
476 wake_up(&server->response_q);
478 } else if (temp != (char) 0) {
479 cERROR(1, "Unknown RFC 1002 frame");
480 cifs_dump_mem(" Received Data: ", (char *)smb_buffer,
482 cifs_reconnect(server);
483 csocket = server->ssocket;
487 /* else we have an SMB response */
488 if ((pdu_length > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE - 4) ||
489 (pdu_length < sizeof(struct smb_hdr) - 1 - 4)) {
490 cERROR(1, "Invalid size SMB length %d pdu_length %d",
491 length, pdu_length+4);
492 cifs_reconnect(server);
493 csocket = server->ssocket;
494 wake_up(&server->response_q);
501 if (pdu_length > MAX_CIFS_SMALL_BUFFER_SIZE - 4) {
503 memcpy(bigbuf, smallbuf, 4);
507 iov.iov_base = 4 + (char *)smb_buffer;
508 iov.iov_len = pdu_length;
509 for (total_read = 0; total_read < pdu_length;
510 total_read += length) {
511 length = kernel_recvmsg(csocket, &smb_msg, &iov, 1,
512 pdu_length - total_read, 0);
513 if (server->tcpStatus == CifsExiting) {
517 } else if (server->tcpStatus == CifsNeedReconnect) {
518 cifs_reconnect(server);
519 csocket = server->ssocket;
520 /* Reconnect wakes up rspns q */
521 /* Now we will reread sock */
524 } else if (length == -ERESTARTSYS ||
527 msleep(1); /* minimum sleep to prevent looping,
528 allowing socket to clear and app
529 threads to set tcpStatus
530 CifsNeedReconnect if server hung*/
533 } else if (length <= 0) {
534 cERROR(1, "Received no data, expecting %d",
535 pdu_length - total_read);
536 cifs_reconnect(server);
537 csocket = server->ssocket;
544 else if (reconnect == 1)
547 total_read += 4; /* account for rfc1002 hdr */
549 dump_smb(smb_buffer, total_read);
552 * We know that we received enough to get to the MID as we
553 * checked the pdu_length earlier. Now check to see
554 * if the rest of the header is OK. We borrow the length
555 * var for the rest of the loop to avoid a new stack var.
557 * 48 bytes is enough to display the header and a little bit
558 * into the payload for debugging purposes.
560 length = checkSMB(smb_buffer, smb_buffer->Mid, total_read);
562 cifs_dump_mem("Bad SMB: ", smb_buffer,
563 min_t(unsigned int, total_read, 48));
566 server->lstrp = jiffies;
568 spin_lock(&GlobalMid_Lock);
569 list_for_each_safe(tmp, tmp2, &server->pending_mid_q) {
570 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
572 if (mid_entry->mid != smb_buffer->Mid ||
573 mid_entry->midState != MID_REQUEST_SUBMITTED ||
574 mid_entry->command != smb_buffer->Command) {
580 check2ndT2(smb_buffer, server->maxBuf) > 0) {
581 /* We have a multipart transact2 resp */
583 if (mid_entry->resp_buf) {
584 /* merge response - fix up 1st*/
585 length = coalesce_t2(smb_buffer,
586 mid_entry->resp_buf);
589 mid_entry->multiRsp = true;
592 /* all parts received or
593 * packet is malformed
595 mid_entry->multiEnd = true;
601 * FIXME: switch to already
602 * allocated largebuf?
604 cERROR(1, "1st trans2 resp "
607 /* Have first buffer */
608 mid_entry->resp_buf =
610 mid_entry->largeBuf = true;
616 mid_entry->resp_buf = smb_buffer;
617 mid_entry->largeBuf = isLargeBuf;
620 mid_entry->midState = MID_RESPONSE_RECEIVED;
622 mid_entry->midState = MID_RESPONSE_MALFORMED;
623 #ifdef CONFIG_CIFS_STATS2
624 mid_entry->when_received = jiffies;
626 list_del_init(&mid_entry->qhead);
629 spin_unlock(&GlobalMid_Lock);
631 if (mid_entry != NULL) {
632 mid_entry->callback(mid_entry);
633 /* Was previous buf put in mpx struct for multi-rsp? */
635 /* smb buffer will be freed by user thread */
641 } else if (length != 0) {
642 /* response sanity checks failed */
644 } else if (!is_valid_oplock_break(smb_buffer, server) &&
646 cERROR(1, "No task to wake, unknown frame received! "
647 "NumMids %d", atomic_read(&midCount));
648 cifs_dump_mem("Received Data is: ", (char *)smb_buffer,
649 sizeof(struct smb_hdr));
650 #ifdef CONFIG_CIFS_DEBUG2
651 cifs_dump_detail(smb_buffer);
652 cifs_dump_mids(server);
653 #endif /* CIFS_DEBUG2 */
656 } /* end while !EXITING */
658 /* take it off the list, if it's not already */
659 spin_lock(&cifs_tcp_ses_lock);
660 list_del_init(&server->tcp_ses_list);
661 spin_unlock(&cifs_tcp_ses_lock);
663 spin_lock(&GlobalMid_Lock);
664 server->tcpStatus = CifsExiting;
665 spin_unlock(&GlobalMid_Lock);
666 wake_up_all(&server->response_q);
668 /* check if we have blocked requests that need to free */
669 /* Note that cifs_max_pending is normally 50, but
670 can be set at module install time to as little as two */
671 spin_lock(&GlobalMid_Lock);
672 if (atomic_read(&server->inFlight) >= cifs_max_pending)
673 atomic_set(&server->inFlight, cifs_max_pending - 1);
674 /* We do not want to set the max_pending too low or we
675 could end up with the counter going negative */
676 spin_unlock(&GlobalMid_Lock);
677 /* Although there should not be any requests blocked on
678 this queue it can not hurt to be paranoid and try to wake up requests
679 that may haven been blocked when more than 50 at time were on the wire
680 to the same server - they now will see the session is in exit state
681 and get out of SendReceive. */
682 wake_up_all(&server->request_q);
683 /* give those requests time to exit */
686 if (server->ssocket) {
687 sock_release(csocket);
688 server->ssocket = NULL;
690 /* buffer usually freed in free_mid - need to free it here on exit */
691 cifs_buf_release(bigbuf);
692 if (smallbuf) /* no sense logging a debug message if NULL */
693 cifs_small_buf_release(smallbuf);
695 if (!list_empty(&server->pending_mid_q)) {
696 struct list_head dispose_list;
698 INIT_LIST_HEAD(&dispose_list);
699 spin_lock(&GlobalMid_Lock);
700 list_for_each_safe(tmp, tmp2, &server->pending_mid_q) {
701 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
702 cFYI(1, "Clearing mid 0x%x", mid_entry->mid);
703 mid_entry->midState = MID_SHUTDOWN;
704 list_move(&mid_entry->qhead, &dispose_list);
706 spin_unlock(&GlobalMid_Lock);
708 /* now walk dispose list and issue callbacks */
709 list_for_each_safe(tmp, tmp2, &dispose_list) {
710 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
711 cFYI(1, "Callback mid 0x%x", mid_entry->mid);
712 list_del_init(&mid_entry->qhead);
713 mid_entry->callback(mid_entry);
715 /* 1/8th of sec is more than enough time for them to exit */
719 if (!list_empty(&server->pending_mid_q)) {
720 /* mpx threads have not exited yet give them
721 at least the smb send timeout time for long ops */
722 /* due to delays on oplock break requests, we need
723 to wait at least 45 seconds before giving up
724 on a request getting a response and going ahead
726 cFYI(1, "Wait for exit from demultiplex thread");
728 /* if threads still have not exited they are probably never
729 coming home not much else we can do but free the memory */
732 kfree(server->hostname);
733 task_to_wake = xchg(&server->tsk, NULL);
736 length = atomic_dec_return(&tcpSesAllocCount);
738 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
741 /* if server->tsk was NULL then wait for a signal before exiting */
743 set_current_state(TASK_INTERRUPTIBLE);
744 while (!signal_pending(current)) {
746 set_current_state(TASK_INTERRUPTIBLE);
748 set_current_state(TASK_RUNNING);
751 module_put_and_exit(0);
754 /* extract the host portion of the UNC string */
756 extract_hostname(const char *unc)
762 /* skip double chars at beginning of string */
763 /* BB: check validity of these bytes? */
766 /* delimiter between hostname and sharename is always '\\' now */
767 delim = strchr(src, '\\');
769 return ERR_PTR(-EINVAL);
772 dst = kmalloc((len + 1), GFP_KERNEL);
774 return ERR_PTR(-ENOMEM);
776 memcpy(dst, src, len);
783 cifs_parse_mount_options(const char *mountdata, const char *devname,
786 char *value, *data, *end;
787 char *mountdata_copy = NULL, *options;
788 unsigned int temp_len, i, j;
790 short int override_uid = -1;
791 short int override_gid = -1;
792 bool uid_specified = false;
793 bool gid_specified = false;
794 char *nodename = utsname()->nodename;
800 * does not have to be perfect mapping since field is
801 * informational, only used for servers that do not support
802 * port 445 and it can be overridden at mount time
804 memset(vol->source_rfc1001_name, 0x20, RFC1001_NAME_LEN);
805 for (i = 0; i < strnlen(nodename, RFC1001_NAME_LEN); i++)
806 vol->source_rfc1001_name[i] = toupper(nodename[i]);
808 vol->source_rfc1001_name[RFC1001_NAME_LEN] = 0;
809 /* null target name indicates to use *SMBSERVR default called name
810 if we end up sending RFC1001 session initialize */
811 vol->target_rfc1001_name[0] = 0;
812 vol->cred_uid = current_uid();
813 vol->linux_uid = current_uid();
814 vol->linux_gid = current_gid();
816 /* default to only allowing write access to owner of the mount */
817 vol->dir_mode = vol->file_mode = S_IRUGO | S_IXUGO | S_IWUSR;
819 /* vol->retry default is 0 (i.e. "soft" limited retry not hard retry) */
820 /* default is always to request posix paths. */
821 vol->posix_paths = 1;
822 /* default to using server inode numbers where available */
825 vol->actimeo = CIFS_DEF_ACTIMEO;
828 goto cifs_parse_mount_err;
830 mountdata_copy = kstrndup(mountdata, PAGE_SIZE, GFP_KERNEL);
832 goto cifs_parse_mount_err;
834 options = mountdata_copy;
835 end = options + strlen(options);
836 if (strncmp(options, "sep=", 4) == 0) {
837 if (options[4] != 0) {
838 separator[0] = options[4];
841 cFYI(1, "Null separator not allowed");
845 while ((data = strsep(&options, separator)) != NULL) {
848 if ((value = strchr(data, '=')) != NULL)
851 /* Have to parse this before we parse for "user" */
852 if (strnicmp(data, "user_xattr", 10) == 0) {
854 } else if (strnicmp(data, "nouser_xattr", 12) == 0) {
856 } else if (strnicmp(data, "user", 4) == 0) {
859 "CIFS: invalid or missing username\n");
860 goto cifs_parse_mount_err;
861 } else if (!*value) {
862 /* null user, ie anonymous, authentication */
865 if (strnlen(value, MAX_USERNAME_SIZE) <
867 vol->username = kstrdup(value, GFP_KERNEL);
868 if (!vol->username) {
869 printk(KERN_WARNING "CIFS: no memory "
871 goto cifs_parse_mount_err;
874 printk(KERN_WARNING "CIFS: username too long\n");
875 goto cifs_parse_mount_err;
877 } else if (strnicmp(data, "pass", 4) == 0) {
879 vol->password = NULL;
881 } else if (value[0] == 0) {
882 /* check if string begins with double comma
883 since that would mean the password really
884 does start with a comma, and would not
885 indicate an empty string */
886 if (value[1] != separator[0]) {
887 vol->password = NULL;
891 temp_len = strlen(value);
892 /* removed password length check, NTLM passwords
893 can be arbitrarily long */
895 /* if comma in password, the string will be
896 prematurely null terminated. Commas in password are
897 specified across the cifs mount interface by a double
898 comma ie ,, and a comma used as in other cases ie ','
899 as a parameter delimiter/separator is single and due
900 to the strsep above is temporarily zeroed. */
902 /* NB: password legally can have multiple commas and
903 the only illegal character in a password is null */
905 if ((value[temp_len] == 0) &&
906 (value + temp_len < end) &&
907 (value[temp_len+1] == separator[0])) {
909 value[temp_len] = separator[0];
910 temp_len += 2; /* move after second comma */
911 while (value[temp_len] != 0) {
912 if (value[temp_len] == separator[0]) {
913 if (value[temp_len+1] ==
915 /* skip second comma */
918 /* single comma indicating start
925 if (value[temp_len] == 0) {
929 /* point option to start of next parm */
930 options = value + temp_len + 1;
932 /* go from value to value + temp_len condensing
933 double commas to singles. Note that this ends up
934 allocating a few bytes too many, which is ok */
935 vol->password = kzalloc(temp_len, GFP_KERNEL);
936 if (vol->password == NULL) {
937 printk(KERN_WARNING "CIFS: no memory "
939 goto cifs_parse_mount_err;
941 for (i = 0, j = 0; i < temp_len; i++, j++) {
942 vol->password[j] = value[i];
943 if (value[i] == separator[0]
944 && value[i+1] == separator[0]) {
945 /* skip second comma */
949 vol->password[j] = 0;
951 vol->password = kzalloc(temp_len+1, GFP_KERNEL);
952 if (vol->password == NULL) {
953 printk(KERN_WARNING "CIFS: no memory "
955 goto cifs_parse_mount_err;
957 strcpy(vol->password, value);
959 } else if (!strnicmp(data, "ip", 2) ||
960 !strnicmp(data, "addr", 4)) {
961 if (!value || !*value) {
963 } else if (strnlen(value, INET6_ADDRSTRLEN) <
965 vol->UNCip = kstrdup(value, GFP_KERNEL);
967 printk(KERN_WARNING "CIFS: no memory "
969 goto cifs_parse_mount_err;
972 printk(KERN_WARNING "CIFS: ip address "
974 goto cifs_parse_mount_err;
976 } else if (strnicmp(data, "sec", 3) == 0) {
977 if (!value || !*value) {
978 cERROR(1, "no security value specified");
980 } else if (strnicmp(value, "krb5i", 5) == 0) {
981 vol->secFlg |= CIFSSEC_MAY_KRB5 |
983 } else if (strnicmp(value, "krb5p", 5) == 0) {
984 /* vol->secFlg |= CIFSSEC_MUST_SEAL |
986 cERROR(1, "Krb5 cifs privacy not supported");
987 goto cifs_parse_mount_err;
988 } else if (strnicmp(value, "krb5", 4) == 0) {
989 vol->secFlg |= CIFSSEC_MAY_KRB5;
990 } else if (strnicmp(value, "ntlmsspi", 8) == 0) {
991 vol->secFlg |= CIFSSEC_MAY_NTLMSSP |
993 } else if (strnicmp(value, "ntlmssp", 7) == 0) {
994 vol->secFlg |= CIFSSEC_MAY_NTLMSSP;
995 } else if (strnicmp(value, "ntlmv2i", 7) == 0) {
996 vol->secFlg |= CIFSSEC_MAY_NTLMV2 |
998 } else if (strnicmp(value, "ntlmv2", 6) == 0) {
999 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
1000 } else if (strnicmp(value, "ntlmi", 5) == 0) {
1001 vol->secFlg |= CIFSSEC_MAY_NTLM |
1003 } else if (strnicmp(value, "ntlm", 4) == 0) {
1004 /* ntlm is default so can be turned off too */
1005 vol->secFlg |= CIFSSEC_MAY_NTLM;
1006 } else if (strnicmp(value, "nontlm", 6) == 0) {
1007 /* BB is there a better way to do this? */
1008 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
1009 #ifdef CONFIG_CIFS_WEAK_PW_HASH
1010 } else if (strnicmp(value, "lanman", 6) == 0) {
1011 vol->secFlg |= CIFSSEC_MAY_LANMAN;
1013 } else if (strnicmp(value, "none", 4) == 0) {
1016 cERROR(1, "bad security option: %s", value);
1017 goto cifs_parse_mount_err;
1019 } else if (strnicmp(data, "vers", 3) == 0) {
1020 if (!value || !*value) {
1021 cERROR(1, "no protocol version specified"
1022 " after vers= mount option");
1023 } else if ((strnicmp(value, "cifs", 4) == 0) ||
1024 (strnicmp(value, "1", 1) == 0)) {
1025 /* this is the default */
1028 } else if ((strnicmp(data, "unc", 3) == 0)
1029 || (strnicmp(data, "target", 6) == 0)
1030 || (strnicmp(data, "path", 4) == 0)) {
1031 if (!value || !*value) {
1032 printk(KERN_WARNING "CIFS: invalid path to "
1033 "network resource\n");
1034 goto cifs_parse_mount_err;
1036 if ((temp_len = strnlen(value, 300)) < 300) {
1037 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1038 if (vol->UNC == NULL)
1039 goto cifs_parse_mount_err;
1040 strcpy(vol->UNC, value);
1041 if (strncmp(vol->UNC, "//", 2) == 0) {
1044 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1046 "CIFS: UNC Path does not begin "
1047 "with // or \\\\ \n");
1048 goto cifs_parse_mount_err;
1051 printk(KERN_WARNING "CIFS: UNC name too long\n");
1052 goto cifs_parse_mount_err;
1054 } else if ((strnicmp(data, "domain", 3) == 0)
1055 || (strnicmp(data, "workgroup", 5) == 0)) {
1056 if (!value || !*value) {
1057 printk(KERN_WARNING "CIFS: invalid domain name\n");
1058 goto cifs_parse_mount_err;
1060 /* BB are there cases in which a comma can be valid in
1061 a domain name and need special handling? */
1062 if (strnlen(value, 256) < 256) {
1063 vol->domainname = kstrdup(value, GFP_KERNEL);
1064 if (!vol->domainname) {
1065 printk(KERN_WARNING "CIFS: no memory "
1066 "for domainname\n");
1067 goto cifs_parse_mount_err;
1069 cFYI(1, "Domain name set");
1071 printk(KERN_WARNING "CIFS: domain name too "
1073 goto cifs_parse_mount_err;
1075 } else if (strnicmp(data, "srcaddr", 7) == 0) {
1076 vol->srcaddr.ss_family = AF_UNSPEC;
1078 if (!value || !*value) {
1079 printk(KERN_WARNING "CIFS: srcaddr value"
1080 " not specified.\n");
1081 goto cifs_parse_mount_err;
1083 i = cifs_convert_address((struct sockaddr *)&vol->srcaddr,
1084 value, strlen(value));
1086 printk(KERN_WARNING "CIFS: Could not parse"
1089 goto cifs_parse_mount_err;
1091 } else if (strnicmp(data, "prefixpath", 10) == 0) {
1092 if (!value || !*value) {
1094 "CIFS: invalid path prefix\n");
1095 goto cifs_parse_mount_err;
1097 if ((temp_len = strnlen(value, 1024)) < 1024) {
1098 if (value[0] != '/')
1099 temp_len++; /* missing leading slash */
1100 vol->prepath = kmalloc(temp_len+1, GFP_KERNEL);
1101 if (vol->prepath == NULL)
1102 goto cifs_parse_mount_err;
1103 if (value[0] != '/') {
1104 vol->prepath[0] = '/';
1105 strcpy(vol->prepath+1, value);
1107 strcpy(vol->prepath, value);
1108 cFYI(1, "prefix path %s", vol->prepath);
1110 printk(KERN_WARNING "CIFS: prefix too long\n");
1111 goto cifs_parse_mount_err;
1113 } else if (strnicmp(data, "iocharset", 9) == 0) {
1114 if (!value || !*value) {
1115 printk(KERN_WARNING "CIFS: invalid iocharset "
1117 goto cifs_parse_mount_err;
1119 if (strnlen(value, 65) < 65) {
1120 if (strnicmp(value, "default", 7)) {
1121 vol->iocharset = kstrdup(value,
1124 if (!vol->iocharset) {
1125 printk(KERN_WARNING "CIFS: no "
1128 goto cifs_parse_mount_err;
1131 /* if iocharset not set then load_nls_default
1132 is used by caller */
1133 cFYI(1, "iocharset set to %s", value);
1135 printk(KERN_WARNING "CIFS: iocharset name "
1137 goto cifs_parse_mount_err;
1139 } else if (!strnicmp(data, "uid", 3) && value && *value) {
1140 vol->linux_uid = simple_strtoul(value, &value, 0);
1141 uid_specified = true;
1142 } else if (!strnicmp(data, "cruid", 5) && value && *value) {
1143 vol->cred_uid = simple_strtoul(value, &value, 0);
1144 } else if (!strnicmp(data, "forceuid", 8)) {
1146 } else if (!strnicmp(data, "noforceuid", 10)) {
1148 } else if (!strnicmp(data, "gid", 3) && value && *value) {
1149 vol->linux_gid = simple_strtoul(value, &value, 0);
1150 gid_specified = true;
1151 } else if (!strnicmp(data, "forcegid", 8)) {
1153 } else if (!strnicmp(data, "noforcegid", 10)) {
1155 } else if (strnicmp(data, "file_mode", 4) == 0) {
1156 if (value && *value) {
1158 simple_strtoul(value, &value, 0);
1160 } else if (strnicmp(data, "dir_mode", 4) == 0) {
1161 if (value && *value) {
1163 simple_strtoul(value, &value, 0);
1165 } else if (strnicmp(data, "dirmode", 4) == 0) {
1166 if (value && *value) {
1168 simple_strtoul(value, &value, 0);
1170 } else if (strnicmp(data, "port", 4) == 0) {
1171 if (value && *value) {
1173 simple_strtoul(value, &value, 0);
1175 } else if (strnicmp(data, "rsize", 5) == 0) {
1176 if (value && *value) {
1178 simple_strtoul(value, &value, 0);
1180 } else if (strnicmp(data, "wsize", 5) == 0) {
1181 if (value && *value) {
1183 simple_strtoul(value, &value, 0);
1185 } else if (strnicmp(data, "sockopt", 5) == 0) {
1186 if (!value || !*value) {
1187 cERROR(1, "no socket option specified");
1189 } else if (strnicmp(value, "TCP_NODELAY", 11) == 0) {
1190 vol->sockopt_tcp_nodelay = 1;
1192 } else if (strnicmp(data, "netbiosname", 4) == 0) {
1193 if (!value || !*value || (*value == ' ')) {
1194 cFYI(1, "invalid (empty) netbiosname");
1196 memset(vol->source_rfc1001_name, 0x20,
1199 * FIXME: are there cases in which a comma can
1200 * be valid in workstation netbios name (and
1201 * need special handling)?
1203 for (i = 0; i < RFC1001_NAME_LEN; i++) {
1204 /* don't ucase netbiosname for user */
1207 vol->source_rfc1001_name[i] = value[i];
1209 /* The string has 16th byte zero still from
1210 set at top of the function */
1211 if (i == RFC1001_NAME_LEN && value[i] != 0)
1212 printk(KERN_WARNING "CIFS: netbiosname"
1213 " longer than 15 truncated.\n");
1215 } else if (strnicmp(data, "servern", 7) == 0) {
1216 /* servernetbiosname specified override *SMBSERVER */
1217 if (!value || !*value || (*value == ' ')) {
1218 cFYI(1, "empty server netbiosname specified");
1220 /* last byte, type, is 0x20 for servr type */
1221 memset(vol->target_rfc1001_name, 0x20,
1222 RFC1001_NAME_LEN_WITH_NULL);
1224 for (i = 0; i < 15; i++) {
1225 /* BB are there cases in which a comma can be
1226 valid in this workstation netbios name
1227 (and need special handling)? */
1229 /* user or mount helper must uppercase
1234 vol->target_rfc1001_name[i] =
1237 /* The string has 16th byte zero still from
1238 set at top of the function */
1239 if (i == RFC1001_NAME_LEN && value[i] != 0)
1240 printk(KERN_WARNING "CIFS: server net"
1241 "biosname longer than 15 truncated.\n");
1243 } else if (strnicmp(data, "actimeo", 7) == 0) {
1244 if (value && *value) {
1245 vol->actimeo = HZ * simple_strtoul(value,
1247 if (vol->actimeo > CIFS_MAX_ACTIMEO) {
1248 cERROR(1, "CIFS: attribute cache"
1249 "timeout too large");
1250 goto cifs_parse_mount_err;
1253 } else if (strnicmp(data, "credentials", 4) == 0) {
1255 } else if (strnicmp(data, "version", 3) == 0) {
1257 } else if (strnicmp(data, "guest", 5) == 0) {
1259 } else if (strnicmp(data, "rw", 2) == 0) {
1261 } else if (strnicmp(data, "ro", 2) == 0) {
1263 } else if (strnicmp(data, "noblocksend", 11) == 0) {
1264 vol->noblocksnd = 1;
1265 } else if (strnicmp(data, "noautotune", 10) == 0) {
1266 vol->noautotune = 1;
1267 } else if ((strnicmp(data, "suid", 4) == 0) ||
1268 (strnicmp(data, "nosuid", 6) == 0) ||
1269 (strnicmp(data, "exec", 4) == 0) ||
1270 (strnicmp(data, "noexec", 6) == 0) ||
1271 (strnicmp(data, "nodev", 5) == 0) ||
1272 (strnicmp(data, "noauto", 6) == 0) ||
1273 (strnicmp(data, "dev", 3) == 0)) {
1274 /* The mount tool or mount.cifs helper (if present)
1275 uses these opts to set flags, and the flags are read
1276 by the kernel vfs layer before we get here (ie
1277 before read super) so there is no point trying to
1278 parse these options again and set anything and it
1279 is ok to just ignore them */
1281 } else if (strnicmp(data, "hard", 4) == 0) {
1283 } else if (strnicmp(data, "soft", 4) == 0) {
1285 } else if (strnicmp(data, "perm", 4) == 0) {
1287 } else if (strnicmp(data, "noperm", 6) == 0) {
1289 } else if (strnicmp(data, "mapchars", 8) == 0) {
1291 } else if (strnicmp(data, "nomapchars", 10) == 0) {
1293 } else if (strnicmp(data, "sfu", 3) == 0) {
1295 } else if (strnicmp(data, "nosfu", 5) == 0) {
1297 } else if (strnicmp(data, "nodfs", 5) == 0) {
1299 } else if (strnicmp(data, "posixpaths", 10) == 0) {
1300 vol->posix_paths = 1;
1301 } else if (strnicmp(data, "noposixpaths", 12) == 0) {
1302 vol->posix_paths = 0;
1303 } else if (strnicmp(data, "nounix", 6) == 0) {
1304 vol->no_linux_ext = 1;
1305 } else if (strnicmp(data, "nolinux", 7) == 0) {
1306 vol->no_linux_ext = 1;
1307 } else if ((strnicmp(data, "nocase", 6) == 0) ||
1308 (strnicmp(data, "ignorecase", 10) == 0)) {
1310 } else if (strnicmp(data, "mand", 4) == 0) {
1312 } else if (strnicmp(data, "nomand", 6) == 0) {
1314 } else if (strnicmp(data, "_netdev", 7) == 0) {
1316 } else if (strnicmp(data, "brl", 3) == 0) {
1318 } else if ((strnicmp(data, "nobrl", 5) == 0) ||
1319 (strnicmp(data, "nolock", 6) == 0)) {
1321 /* turn off mandatory locking in mode
1322 if remote locking is turned off since the
1323 local vfs will do advisory */
1324 if (vol->file_mode ==
1325 (S_IALLUGO & ~(S_ISUID | S_IXGRP)))
1326 vol->file_mode = S_IALLUGO;
1327 } else if (strnicmp(data, "forcemandatorylock", 9) == 0) {
1328 /* will take the shorter form "forcemand" as well */
1329 /* This mount option will force use of mandatory
1330 (DOS/Windows style) byte range locks, instead of
1331 using posix advisory byte range locks, even if the
1332 Unix extensions are available and posix locks would
1333 be supported otherwise. If Unix extensions are not
1334 negotiated this has no effect since mandatory locks
1335 would be used (mandatory locks is all that those
1336 those servers support) */
1338 } else if (strnicmp(data, "setuids", 7) == 0) {
1340 } else if (strnicmp(data, "nosetuids", 9) == 0) {
1342 } else if (strnicmp(data, "dynperm", 7) == 0) {
1343 vol->dynperm = true;
1344 } else if (strnicmp(data, "nodynperm", 9) == 0) {
1345 vol->dynperm = false;
1346 } else if (strnicmp(data, "nohard", 6) == 0) {
1348 } else if (strnicmp(data, "nosoft", 6) == 0) {
1350 } else if (strnicmp(data, "nointr", 6) == 0) {
1352 } else if (strnicmp(data, "intr", 4) == 0) {
1354 } else if (strnicmp(data, "nostrictsync", 12) == 0) {
1355 vol->nostrictsync = 1;
1356 } else if (strnicmp(data, "strictsync", 10) == 0) {
1357 vol->nostrictsync = 0;
1358 } else if (strnicmp(data, "serverino", 7) == 0) {
1359 vol->server_ino = 1;
1360 } else if (strnicmp(data, "noserverino", 9) == 0) {
1361 vol->server_ino = 0;
1362 } else if (strnicmp(data, "rwpidforward", 4) == 0) {
1363 vol->rwpidforward = 1;
1364 } else if (strnicmp(data, "cifsacl", 7) == 0) {
1366 } else if (strnicmp(data, "nocifsacl", 9) == 0) {
1368 } else if (strnicmp(data, "acl", 3) == 0) {
1369 vol->no_psx_acl = 0;
1370 } else if (strnicmp(data, "noacl", 5) == 0) {
1371 vol->no_psx_acl = 1;
1372 } else if (strnicmp(data, "locallease", 6) == 0) {
1373 vol->local_lease = 1;
1374 } else if (strnicmp(data, "sign", 4) == 0) {
1375 vol->secFlg |= CIFSSEC_MUST_SIGN;
1376 } else if (strnicmp(data, "seal", 4) == 0) {
1377 /* we do not do the following in secFlags because seal
1378 is a per tree connection (mount) not a per socket
1379 or per-smb connection option in the protocol */
1380 /* vol->secFlg |= CIFSSEC_MUST_SEAL; */
1382 } else if (strnicmp(data, "direct", 6) == 0) {
1384 } else if (strnicmp(data, "forcedirectio", 13) == 0) {
1386 } else if (strnicmp(data, "strictcache", 11) == 0) {
1388 } else if (strnicmp(data, "noac", 4) == 0) {
1389 printk(KERN_WARNING "CIFS: Mount option noac not "
1390 "supported. Instead set "
1391 "/proc/fs/cifs/LookupCacheEnabled to 0\n");
1392 } else if (strnicmp(data, "fsc", 3) == 0) {
1393 #ifndef CONFIG_CIFS_FSCACHE
1394 cERROR(1, "FS-Cache support needs CONFIG_CIFS_FSCACHE "
1395 "kernel config option set");
1396 goto cifs_parse_mount_err;
1399 } else if (strnicmp(data, "mfsymlinks", 10) == 0) {
1400 vol->mfsymlinks = true;
1401 } else if (strnicmp(data, "multiuser", 8) == 0) {
1402 vol->multiuser = true;
1404 printk(KERN_WARNING "CIFS: Unknown mount option %s\n",
1407 if (vol->UNC == NULL) {
1408 if (devname == NULL) {
1409 printk(KERN_WARNING "CIFS: Missing UNC name for mount "
1411 goto cifs_parse_mount_err;
1413 if ((temp_len = strnlen(devname, 300)) < 300) {
1414 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1415 if (vol->UNC == NULL)
1416 goto cifs_parse_mount_err;
1417 strcpy(vol->UNC, devname);
1418 if (strncmp(vol->UNC, "//", 2) == 0) {
1421 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1422 printk(KERN_WARNING "CIFS: UNC Path does not "
1423 "begin with // or \\\\ \n");
1424 goto cifs_parse_mount_err;
1426 value = strpbrk(vol->UNC+2, "/\\");
1430 printk(KERN_WARNING "CIFS: UNC name too long\n");
1431 goto cifs_parse_mount_err;
1435 if (vol->multiuser && !(vol->secFlg & CIFSSEC_MAY_KRB5)) {
1436 cERROR(1, "Multiuser mounts currently require krb5 "
1438 goto cifs_parse_mount_err;
1441 if (vol->UNCip == NULL)
1442 vol->UNCip = &vol->UNC[2];
1445 vol->override_uid = override_uid;
1446 else if (override_uid == 1)
1447 printk(KERN_NOTICE "CIFS: ignoring forceuid mount option "
1448 "specified with no uid= option.\n");
1451 vol->override_gid = override_gid;
1452 else if (override_gid == 1)
1453 printk(KERN_NOTICE "CIFS: ignoring forcegid mount option "
1454 "specified with no gid= option.\n");
1456 kfree(mountdata_copy);
1459 cifs_parse_mount_err:
1460 kfree(mountdata_copy);
1464 /** Returns true if srcaddr isn't specified and rhs isn't
1465 * specified, or if srcaddr is specified and
1466 * matches the IP address of the rhs argument.
1469 srcip_matches(struct sockaddr *srcaddr, struct sockaddr *rhs)
1471 switch (srcaddr->sa_family) {
1473 return (rhs->sa_family == AF_UNSPEC);
1475 struct sockaddr_in *saddr4 = (struct sockaddr_in *)srcaddr;
1476 struct sockaddr_in *vaddr4 = (struct sockaddr_in *)rhs;
1477 return (saddr4->sin_addr.s_addr == vaddr4->sin_addr.s_addr);
1480 struct sockaddr_in6 *saddr6 = (struct sockaddr_in6 *)srcaddr;
1481 struct sockaddr_in6 *vaddr6 = (struct sockaddr_in6 *)&rhs;
1482 return ipv6_addr_equal(&saddr6->sin6_addr, &vaddr6->sin6_addr);
1486 return false; /* don't expect to be here */
1491 * If no port is specified in addr structure, we try to match with 445 port
1492 * and if it fails - with 139 ports. It should be called only if address
1493 * families of server and addr are equal.
1496 match_port(struct TCP_Server_Info *server, struct sockaddr *addr)
1498 __be16 port, *sport;
1500 switch (addr->sa_family) {
1502 sport = &((struct sockaddr_in *) &server->dstaddr)->sin_port;
1503 port = ((struct sockaddr_in *) addr)->sin_port;
1506 sport = &((struct sockaddr_in6 *) &server->dstaddr)->sin6_port;
1507 port = ((struct sockaddr_in6 *) addr)->sin6_port;
1515 port = htons(CIFS_PORT);
1519 port = htons(RFC1001_PORT);
1522 return port == *sport;
1526 match_address(struct TCP_Server_Info *server, struct sockaddr *addr,
1527 struct sockaddr *srcaddr)
1529 switch (addr->sa_family) {
1531 struct sockaddr_in *addr4 = (struct sockaddr_in *)addr;
1532 struct sockaddr_in *srv_addr4 =
1533 (struct sockaddr_in *)&server->dstaddr;
1535 if (addr4->sin_addr.s_addr != srv_addr4->sin_addr.s_addr)
1540 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)addr;
1541 struct sockaddr_in6 *srv_addr6 =
1542 (struct sockaddr_in6 *)&server->dstaddr;
1544 if (!ipv6_addr_equal(&addr6->sin6_addr,
1545 &srv_addr6->sin6_addr))
1547 if (addr6->sin6_scope_id != srv_addr6->sin6_scope_id)
1553 return false; /* don't expect to be here */
1556 if (!srcip_matches(srcaddr, (struct sockaddr *)&server->srcaddr))
1563 match_security(struct TCP_Server_Info *server, struct smb_vol *vol)
1565 unsigned int secFlags;
1567 if (vol->secFlg & (~(CIFSSEC_MUST_SIGN | CIFSSEC_MUST_SEAL)))
1568 secFlags = vol->secFlg;
1570 secFlags = global_secflags | vol->secFlg;
1572 switch (server->secType) {
1574 if (!(secFlags & (CIFSSEC_MAY_LANMAN|CIFSSEC_MAY_PLNTXT)))
1578 if (!(secFlags & CIFSSEC_MAY_NTLMV2))
1582 if (!(secFlags & CIFSSEC_MAY_NTLM))
1586 if (!(secFlags & CIFSSEC_MAY_KRB5))
1590 if (!(secFlags & CIFSSEC_MAY_NTLMSSP))
1594 /* shouldn't happen */
1598 /* now check if signing mode is acceptable */
1599 if ((secFlags & CIFSSEC_MAY_SIGN) == 0 &&
1600 (server->sec_mode & SECMODE_SIGN_REQUIRED))
1602 else if (((secFlags & CIFSSEC_MUST_SIGN) == CIFSSEC_MUST_SIGN) &&
1604 (SECMODE_SIGN_ENABLED|SECMODE_SIGN_REQUIRED)) == 0)
1610 static int match_server(struct TCP_Server_Info *server, struct sockaddr *addr,
1611 struct smb_vol *vol)
1613 if (!net_eq(cifs_net_ns(server), current->nsproxy->net_ns))
1616 if (!match_address(server, addr,
1617 (struct sockaddr *)&vol->srcaddr))
1620 if (!match_port(server, addr))
1623 if (!match_security(server, vol))
1629 static struct TCP_Server_Info *
1630 cifs_find_tcp_session(struct sockaddr *addr, struct smb_vol *vol)
1632 struct TCP_Server_Info *server;
1634 spin_lock(&cifs_tcp_ses_lock);
1635 list_for_each_entry(server, &cifs_tcp_ses_list, tcp_ses_list) {
1636 if (!match_server(server, addr, vol))
1639 ++server->srv_count;
1640 spin_unlock(&cifs_tcp_ses_lock);
1641 cFYI(1, "Existing tcp session with server found");
1644 spin_unlock(&cifs_tcp_ses_lock);
1649 cifs_put_tcp_session(struct TCP_Server_Info *server)
1651 struct task_struct *task;
1653 spin_lock(&cifs_tcp_ses_lock);
1654 if (--server->srv_count > 0) {
1655 spin_unlock(&cifs_tcp_ses_lock);
1659 put_net(cifs_net_ns(server));
1661 list_del_init(&server->tcp_ses_list);
1662 spin_unlock(&cifs_tcp_ses_lock);
1664 cancel_delayed_work_sync(&server->echo);
1666 spin_lock(&GlobalMid_Lock);
1667 server->tcpStatus = CifsExiting;
1668 spin_unlock(&GlobalMid_Lock);
1670 cifs_crypto_shash_release(server);
1671 cifs_fscache_release_client_cookie(server);
1673 kfree(server->session_key.response);
1674 server->session_key.response = NULL;
1675 server->session_key.len = 0;
1677 task = xchg(&server->tsk, NULL);
1679 force_sig(SIGKILL, task);
1682 static struct TCP_Server_Info *
1683 cifs_get_tcp_session(struct smb_vol *volume_info)
1685 struct TCP_Server_Info *tcp_ses = NULL;
1686 struct sockaddr_storage addr;
1687 struct sockaddr_in *sin_server = (struct sockaddr_in *) &addr;
1688 struct sockaddr_in6 *sin_server6 = (struct sockaddr_in6 *) &addr;
1691 memset(&addr, 0, sizeof(struct sockaddr_storage));
1693 cFYI(1, "UNC: %s ip: %s", volume_info->UNC, volume_info->UNCip);
1695 if (volume_info->UNCip && volume_info->UNC) {
1696 rc = cifs_fill_sockaddr((struct sockaddr *)&addr,
1698 strlen(volume_info->UNCip),
1701 /* we failed translating address */
1705 } else if (volume_info->UNCip) {
1706 /* BB using ip addr as tcp_ses name to connect to the
1708 cERROR(1, "Connecting to DFS root not implemented yet");
1711 } else /* which tcp_sess DFS root would we conect to */ {
1712 cERROR(1, "CIFS mount error: No UNC path (e.g. -o "
1713 "unc=//192.168.1.100/public) specified");
1718 /* see if we already have a matching tcp_ses */
1719 tcp_ses = cifs_find_tcp_session((struct sockaddr *)&addr, volume_info);
1723 tcp_ses = kzalloc(sizeof(struct TCP_Server_Info), GFP_KERNEL);
1729 rc = cifs_crypto_shash_allocate(tcp_ses);
1731 cERROR(1, "could not setup hash structures rc %d", rc);
1735 cifs_set_net_ns(tcp_ses, get_net(current->nsproxy->net_ns));
1736 tcp_ses->hostname = extract_hostname(volume_info->UNC);
1737 if (IS_ERR(tcp_ses->hostname)) {
1738 rc = PTR_ERR(tcp_ses->hostname);
1739 goto out_err_crypto_release;
1742 tcp_ses->noblocksnd = volume_info->noblocksnd;
1743 tcp_ses->noautotune = volume_info->noautotune;
1744 tcp_ses->tcp_nodelay = volume_info->sockopt_tcp_nodelay;
1745 atomic_set(&tcp_ses->inFlight, 0);
1746 init_waitqueue_head(&tcp_ses->response_q);
1747 init_waitqueue_head(&tcp_ses->request_q);
1748 INIT_LIST_HEAD(&tcp_ses->pending_mid_q);
1749 mutex_init(&tcp_ses->srv_mutex);
1750 memcpy(tcp_ses->workstation_RFC1001_name,
1751 volume_info->source_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1752 memcpy(tcp_ses->server_RFC1001_name,
1753 volume_info->target_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1754 tcp_ses->session_estab = false;
1755 tcp_ses->sequence_number = 0;
1756 tcp_ses->lstrp = jiffies;
1757 INIT_LIST_HEAD(&tcp_ses->tcp_ses_list);
1758 INIT_LIST_HEAD(&tcp_ses->smb_ses_list);
1759 INIT_DELAYED_WORK(&tcp_ses->echo, cifs_echo_request);
1762 * at this point we are the only ones with the pointer
1763 * to the struct since the kernel thread not created yet
1764 * no need to spinlock this init of tcpStatus or srv_count
1766 tcp_ses->tcpStatus = CifsNew;
1767 memcpy(&tcp_ses->srcaddr, &volume_info->srcaddr,
1768 sizeof(tcp_ses->srcaddr));
1769 ++tcp_ses->srv_count;
1771 if (addr.ss_family == AF_INET6) {
1772 cFYI(1, "attempting ipv6 connect");
1773 /* BB should we allow ipv6 on port 139? */
1774 /* other OS never observed in Wild doing 139 with v6 */
1775 memcpy(&tcp_ses->dstaddr, sin_server6,
1776 sizeof(struct sockaddr_in6));
1778 memcpy(&tcp_ses->dstaddr, sin_server,
1779 sizeof(struct sockaddr_in));
1781 rc = ip_connect(tcp_ses);
1783 cERROR(1, "Error connecting to socket. Aborting operation");
1784 goto out_err_crypto_release;
1788 * since we're in a cifs function already, we know that
1789 * this will succeed. No need for try_module_get().
1791 __module_get(THIS_MODULE);
1792 tcp_ses->tsk = kthread_run((void *)(void *)cifs_demultiplex_thread,
1794 if (IS_ERR(tcp_ses->tsk)) {
1795 rc = PTR_ERR(tcp_ses->tsk);
1796 cERROR(1, "error %d create cifsd thread", rc);
1797 module_put(THIS_MODULE);
1798 goto out_err_crypto_release;
1800 tcp_ses->tcpStatus = CifsNeedNegotiate;
1802 /* thread spawned, put it on the list */
1803 spin_lock(&cifs_tcp_ses_lock);
1804 list_add(&tcp_ses->tcp_ses_list, &cifs_tcp_ses_list);
1805 spin_unlock(&cifs_tcp_ses_lock);
1807 cifs_fscache_get_client_cookie(tcp_ses);
1809 /* queue echo request delayed work */
1810 queue_delayed_work(system_nrt_wq, &tcp_ses->echo, SMB_ECHO_INTERVAL);
1814 out_err_crypto_release:
1815 cifs_crypto_shash_release(tcp_ses);
1817 put_net(cifs_net_ns(tcp_ses));
1821 if (!IS_ERR(tcp_ses->hostname))
1822 kfree(tcp_ses->hostname);
1823 if (tcp_ses->ssocket)
1824 sock_release(tcp_ses->ssocket);
1830 static int match_session(struct cifs_ses *ses, struct smb_vol *vol)
1832 switch (ses->server->secType) {
1834 if (vol->cred_uid != ses->cred_uid)
1838 /* anything else takes username/password */
1839 if (ses->user_name == NULL)
1841 if (strncmp(ses->user_name, vol->username,
1844 if (strlen(vol->username) != 0 &&
1845 ses->password != NULL &&
1846 strncmp(ses->password,
1847 vol->password ? vol->password : "",
1854 static struct cifs_ses *
1855 cifs_find_smb_ses(struct TCP_Server_Info *server, struct smb_vol *vol)
1857 struct cifs_ses *ses;
1859 spin_lock(&cifs_tcp_ses_lock);
1860 list_for_each_entry(ses, &server->smb_ses_list, smb_ses_list) {
1861 if (!match_session(ses, vol))
1864 spin_unlock(&cifs_tcp_ses_lock);
1867 spin_unlock(&cifs_tcp_ses_lock);
1872 cifs_put_smb_ses(struct cifs_ses *ses)
1875 struct TCP_Server_Info *server = ses->server;
1877 cFYI(1, "%s: ses_count=%d\n", __func__, ses->ses_count);
1878 spin_lock(&cifs_tcp_ses_lock);
1879 if (--ses->ses_count > 0) {
1880 spin_unlock(&cifs_tcp_ses_lock);
1884 list_del_init(&ses->smb_ses_list);
1885 spin_unlock(&cifs_tcp_ses_lock);
1887 if (ses->status == CifsGood) {
1889 CIFSSMBLogoff(xid, ses);
1893 cifs_put_tcp_session(server);
1896 static bool warned_on_ntlm; /* globals init to false automatically */
1898 static struct cifs_ses *
1899 cifs_get_smb_ses(struct TCP_Server_Info *server, struct smb_vol *volume_info)
1901 int rc = -ENOMEM, xid;
1902 struct cifs_ses *ses;
1903 struct sockaddr_in *addr = (struct sockaddr_in *)&server->dstaddr;
1904 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)&server->dstaddr;
1908 ses = cifs_find_smb_ses(server, volume_info);
1910 cFYI(1, "Existing smb sess found (status=%d)", ses->status);
1912 mutex_lock(&ses->session_mutex);
1913 rc = cifs_negotiate_protocol(xid, ses);
1915 mutex_unlock(&ses->session_mutex);
1916 /* problem -- put our ses reference */
1917 cifs_put_smb_ses(ses);
1921 if (ses->need_reconnect) {
1922 cFYI(1, "Session needs reconnect");
1923 rc = cifs_setup_session(xid, ses,
1924 volume_info->local_nls);
1926 mutex_unlock(&ses->session_mutex);
1927 /* problem -- put our reference */
1928 cifs_put_smb_ses(ses);
1933 mutex_unlock(&ses->session_mutex);
1935 /* existing SMB ses has a server reference already */
1936 cifs_put_tcp_session(server);
1941 cFYI(1, "Existing smb sess not found");
1942 ses = sesInfoAlloc();
1946 /* new SMB session uses our server ref */
1947 ses->server = server;
1948 if (server->dstaddr.ss_family == AF_INET6)
1949 sprintf(ses->serverName, "%pI6", &addr6->sin6_addr);
1951 sprintf(ses->serverName, "%pI4", &addr->sin_addr);
1953 if (volume_info->username) {
1954 ses->user_name = kstrdup(volume_info->username, GFP_KERNEL);
1955 if (!ses->user_name)
1959 /* volume_info->password freed at unmount */
1960 if (volume_info->password) {
1961 ses->password = kstrdup(volume_info->password, GFP_KERNEL);
1965 if (volume_info->domainname) {
1966 ses->domainName = kstrdup(volume_info->domainname, GFP_KERNEL);
1967 if (!ses->domainName)
1970 ses->cred_uid = volume_info->cred_uid;
1971 ses->linux_uid = volume_info->linux_uid;
1973 /* ntlmv2 is much stronger than ntlm security, and has been broadly
1974 supported for many years, time to update default security mechanism */
1975 if ((volume_info->secFlg == 0) && warned_on_ntlm == false) {
1976 warned_on_ntlm = true;
1977 cERROR(1, "default security mechanism requested. The default "
1978 "security mechanism will be upgraded from ntlm to "
1979 "ntlmv2 in kernel release 3.1");
1981 ses->overrideSecFlg = volume_info->secFlg;
1983 mutex_lock(&ses->session_mutex);
1984 rc = cifs_negotiate_protocol(xid, ses);
1986 rc = cifs_setup_session(xid, ses, volume_info->local_nls);
1987 mutex_unlock(&ses->session_mutex);
1991 /* success, put it on the list */
1992 spin_lock(&cifs_tcp_ses_lock);
1993 list_add(&ses->smb_ses_list, &server->smb_ses_list);
1994 spin_unlock(&cifs_tcp_ses_lock);
2005 static int match_tcon(struct cifs_tcon *tcon, const char *unc)
2007 if (tcon->tidStatus == CifsExiting)
2009 if (strncmp(tcon->treeName, unc, MAX_TREE_SIZE))
2014 static struct cifs_tcon *
2015 cifs_find_tcon(struct cifs_ses *ses, const char *unc)
2017 struct list_head *tmp;
2018 struct cifs_tcon *tcon;
2020 spin_lock(&cifs_tcp_ses_lock);
2021 list_for_each(tmp, &ses->tcon_list) {
2022 tcon = list_entry(tmp, struct cifs_tcon, tcon_list);
2023 if (!match_tcon(tcon, unc))
2026 spin_unlock(&cifs_tcp_ses_lock);
2029 spin_unlock(&cifs_tcp_ses_lock);
2034 cifs_put_tcon(struct cifs_tcon *tcon)
2037 struct cifs_ses *ses = tcon->ses;
2039 cFYI(1, "%s: tc_count=%d\n", __func__, tcon->tc_count);
2040 spin_lock(&cifs_tcp_ses_lock);
2041 if (--tcon->tc_count > 0) {
2042 spin_unlock(&cifs_tcp_ses_lock);
2046 list_del_init(&tcon->tcon_list);
2047 spin_unlock(&cifs_tcp_ses_lock);
2050 CIFSSMBTDis(xid, tcon);
2053 cifs_fscache_release_super_cookie(tcon);
2055 cifs_put_smb_ses(ses);
2058 static struct cifs_tcon *
2059 cifs_get_tcon(struct cifs_ses *ses, struct smb_vol *volume_info)
2062 struct cifs_tcon *tcon;
2064 tcon = cifs_find_tcon(ses, volume_info->UNC);
2066 cFYI(1, "Found match on UNC path");
2067 /* existing tcon already has a reference */
2068 cifs_put_smb_ses(ses);
2069 if (tcon->seal != volume_info->seal)
2070 cERROR(1, "transport encryption setting "
2071 "conflicts with existing tid");
2075 tcon = tconInfoAlloc();
2082 if (volume_info->password) {
2083 tcon->password = kstrdup(volume_info->password, GFP_KERNEL);
2084 if (!tcon->password) {
2090 if (strchr(volume_info->UNC + 3, '\\') == NULL
2091 && strchr(volume_info->UNC + 3, '/') == NULL) {
2092 cERROR(1, "Missing share name");
2097 /* BB Do we need to wrap session_mutex around
2098 * this TCon call and Unix SetFS as
2099 * we do on SessSetup and reconnect? */
2101 rc = CIFSTCon(xid, ses, volume_info->UNC, tcon, volume_info->local_nls);
2103 cFYI(1, "CIFS Tcon rc = %d", rc);
2107 if (volume_info->nodfs) {
2108 tcon->Flags &= ~SMB_SHARE_IS_IN_DFS;
2109 cFYI(1, "DFS disabled (%d)", tcon->Flags);
2111 tcon->seal = volume_info->seal;
2112 /* we can have only one retry value for a connection
2113 to a share so for resources mounted more than once
2114 to the same server share the last value passed in
2115 for the retry flag is used */
2116 tcon->retry = volume_info->retry;
2117 tcon->nocase = volume_info->nocase;
2118 tcon->local_lease = volume_info->local_lease;
2120 spin_lock(&cifs_tcp_ses_lock);
2121 list_add(&tcon->tcon_list, &ses->tcon_list);
2122 spin_unlock(&cifs_tcp_ses_lock);
2124 cifs_fscache_get_super_cookie(tcon);
2134 cifs_put_tlink(struct tcon_link *tlink)
2136 if (!tlink || IS_ERR(tlink))
2139 if (!atomic_dec_and_test(&tlink->tl_count) ||
2140 test_bit(TCON_LINK_IN_TREE, &tlink->tl_flags)) {
2141 tlink->tl_time = jiffies;
2145 if (!IS_ERR(tlink_tcon(tlink)))
2146 cifs_put_tcon(tlink_tcon(tlink));
2151 static inline struct tcon_link *
2152 cifs_sb_master_tlink(struct cifs_sb_info *cifs_sb);
2155 compare_mount_options(struct super_block *sb, struct cifs_mnt_data *mnt_data)
2157 struct cifs_sb_info *old = CIFS_SB(sb);
2158 struct cifs_sb_info *new = mnt_data->cifs_sb;
2160 if ((sb->s_flags & CIFS_MS_MASK) != (mnt_data->flags & CIFS_MS_MASK))
2163 if ((old->mnt_cifs_flags & CIFS_MOUNT_MASK) !=
2164 (new->mnt_cifs_flags & CIFS_MOUNT_MASK))
2167 if (old->rsize != new->rsize)
2171 * We want to share sb only if we don't specify wsize or specified wsize
2172 * is greater or equal than existing one.
2174 if (new->wsize && new->wsize < old->wsize)
2177 if (old->mnt_uid != new->mnt_uid || old->mnt_gid != new->mnt_gid)
2180 if (old->mnt_file_mode != new->mnt_file_mode ||
2181 old->mnt_dir_mode != new->mnt_dir_mode)
2184 if (strcmp(old->local_nls->charset, new->local_nls->charset))
2187 if (old->actimeo != new->actimeo)
2194 cifs_match_super(struct super_block *sb, void *data)
2196 struct cifs_mnt_data *mnt_data = (struct cifs_mnt_data *)data;
2197 struct smb_vol *volume_info;
2198 struct cifs_sb_info *cifs_sb;
2199 struct TCP_Server_Info *tcp_srv;
2200 struct cifs_ses *ses;
2201 struct cifs_tcon *tcon;
2202 struct tcon_link *tlink;
2203 struct sockaddr_storage addr;
2206 memset(&addr, 0, sizeof(struct sockaddr_storage));
2208 spin_lock(&cifs_tcp_ses_lock);
2209 cifs_sb = CIFS_SB(sb);
2210 tlink = cifs_get_tlink(cifs_sb_master_tlink(cifs_sb));
2211 if (IS_ERR(tlink)) {
2212 spin_unlock(&cifs_tcp_ses_lock);
2215 tcon = tlink_tcon(tlink);
2217 tcp_srv = ses->server;
2219 volume_info = mnt_data->vol;
2221 if (!volume_info->UNCip || !volume_info->UNC)
2224 rc = cifs_fill_sockaddr((struct sockaddr *)&addr,
2226 strlen(volume_info->UNCip),
2231 if (!match_server(tcp_srv, (struct sockaddr *)&addr, volume_info) ||
2232 !match_session(ses, volume_info) ||
2233 !match_tcon(tcon, volume_info->UNC)) {
2238 rc = compare_mount_options(sb, mnt_data);
2240 cifs_put_tlink(tlink);
2241 spin_unlock(&cifs_tcp_ses_lock);
2246 get_dfs_path(int xid, struct cifs_ses *pSesInfo, const char *old_path,
2247 const struct nls_table *nls_codepage, unsigned int *pnum_referrals,
2248 struct dfs_info3_param **preferrals, int remap)
2253 *pnum_referrals = 0;
2256 if (pSesInfo->ipc_tid == 0) {
2257 temp_unc = kmalloc(2 /* for slashes */ +
2258 strnlen(pSesInfo->serverName,
2259 SERVER_NAME_LEN_WITH_NULL * 2)
2260 + 1 + 4 /* slash IPC$ */ + 2,
2262 if (temp_unc == NULL)
2266 strcpy(temp_unc + 2, pSesInfo->serverName);
2267 strcpy(temp_unc + 2 + strlen(pSesInfo->serverName), "\\IPC$");
2268 rc = CIFSTCon(xid, pSesInfo, temp_unc, NULL, nls_codepage);
2269 cFYI(1, "CIFS Tcon rc = %d ipc_tid = %d", rc, pSesInfo->ipc_tid);
2273 rc = CIFSGetDFSRefer(xid, pSesInfo, old_path, preferrals,
2274 pnum_referrals, nls_codepage, remap);
2275 /* BB map targetUNCs to dfs_info3 structures, here or
2276 in CIFSGetDFSRefer BB */
2281 #ifdef CONFIG_DEBUG_LOCK_ALLOC
2282 static struct lock_class_key cifs_key[2];
2283 static struct lock_class_key cifs_slock_key[2];
2286 cifs_reclassify_socket4(struct socket *sock)
2288 struct sock *sk = sock->sk;
2289 BUG_ON(sock_owned_by_user(sk));
2290 sock_lock_init_class_and_name(sk, "slock-AF_INET-CIFS",
2291 &cifs_slock_key[0], "sk_lock-AF_INET-CIFS", &cifs_key[0]);
2295 cifs_reclassify_socket6(struct socket *sock)
2297 struct sock *sk = sock->sk;
2298 BUG_ON(sock_owned_by_user(sk));
2299 sock_lock_init_class_and_name(sk, "slock-AF_INET6-CIFS",
2300 &cifs_slock_key[1], "sk_lock-AF_INET6-CIFS", &cifs_key[1]);
2304 cifs_reclassify_socket4(struct socket *sock)
2309 cifs_reclassify_socket6(struct socket *sock)
2314 /* See RFC1001 section 14 on representation of Netbios names */
2315 static void rfc1002mangle(char *target, char *source, unsigned int length)
2319 for (i = 0, j = 0; i < (length); i++) {
2320 /* mask a nibble at a time and encode */
2321 target[j] = 'A' + (0x0F & (source[i] >> 4));
2322 target[j+1] = 'A' + (0x0F & source[i]);
2329 bind_socket(struct TCP_Server_Info *server)
2332 if (server->srcaddr.ss_family != AF_UNSPEC) {
2333 /* Bind to the specified local IP address */
2334 struct socket *socket = server->ssocket;
2335 rc = socket->ops->bind(socket,
2336 (struct sockaddr *) &server->srcaddr,
2337 sizeof(server->srcaddr));
2339 struct sockaddr_in *saddr4;
2340 struct sockaddr_in6 *saddr6;
2341 saddr4 = (struct sockaddr_in *)&server->srcaddr;
2342 saddr6 = (struct sockaddr_in6 *)&server->srcaddr;
2343 if (saddr6->sin6_family == AF_INET6)
2345 "Failed to bind to: %pI6c, error: %d\n",
2346 &saddr6->sin6_addr, rc);
2349 "Failed to bind to: %pI4, error: %d\n",
2350 &saddr4->sin_addr.s_addr, rc);
2357 ip_rfc1001_connect(struct TCP_Server_Info *server)
2361 * some servers require RFC1001 sessinit before sending
2362 * negprot - BB check reconnection in case where second
2363 * sessinit is sent but no second negprot
2365 struct rfc1002_session_packet *ses_init_buf;
2366 struct smb_hdr *smb_buf;
2367 ses_init_buf = kzalloc(sizeof(struct rfc1002_session_packet),
2370 ses_init_buf->trailer.session_req.called_len = 32;
2372 if (server->server_RFC1001_name &&
2373 server->server_RFC1001_name[0] != 0)
2374 rfc1002mangle(ses_init_buf->trailer.
2375 session_req.called_name,
2376 server->server_RFC1001_name,
2377 RFC1001_NAME_LEN_WITH_NULL);
2379 rfc1002mangle(ses_init_buf->trailer.
2380 session_req.called_name,
2381 DEFAULT_CIFS_CALLED_NAME,
2382 RFC1001_NAME_LEN_WITH_NULL);
2384 ses_init_buf->trailer.session_req.calling_len = 32;
2387 * calling name ends in null (byte 16) from old smb
2390 if (server->workstation_RFC1001_name &&
2391 server->workstation_RFC1001_name[0] != 0)
2392 rfc1002mangle(ses_init_buf->trailer.
2393 session_req.calling_name,
2394 server->workstation_RFC1001_name,
2395 RFC1001_NAME_LEN_WITH_NULL);
2397 rfc1002mangle(ses_init_buf->trailer.
2398 session_req.calling_name,
2400 RFC1001_NAME_LEN_WITH_NULL);
2402 ses_init_buf->trailer.session_req.scope1 = 0;
2403 ses_init_buf->trailer.session_req.scope2 = 0;
2404 smb_buf = (struct smb_hdr *)ses_init_buf;
2406 /* sizeof RFC1002_SESSION_REQUEST with no scope */
2407 smb_buf->smb_buf_length = cpu_to_be32(0x81000044);
2408 rc = smb_send(server, smb_buf, 0x44);
2409 kfree(ses_init_buf);
2411 * RFC1001 layer in at least one server
2412 * requires very short break before negprot
2413 * presumably because not expecting negprot
2414 * to follow so fast. This is a simple
2415 * solution that works without
2416 * complicating the code and causes no
2417 * significant slowing down on mount
2420 usleep_range(1000, 2000);
2423 * else the negprot may still work without this
2424 * even though malloc failed
2431 generic_ip_connect(struct TCP_Server_Info *server)
2436 struct socket *socket = server->ssocket;
2437 struct sockaddr *saddr;
2439 saddr = (struct sockaddr *) &server->dstaddr;
2441 if (server->dstaddr.ss_family == AF_INET6) {
2442 sport = ((struct sockaddr_in6 *) saddr)->sin6_port;
2443 slen = sizeof(struct sockaddr_in6);
2446 sport = ((struct sockaddr_in *) saddr)->sin_port;
2447 slen = sizeof(struct sockaddr_in);
2451 if (socket == NULL) {
2452 rc = __sock_create(cifs_net_ns(server), sfamily, SOCK_STREAM,
2453 IPPROTO_TCP, &socket, 1);
2455 cERROR(1, "Error %d creating socket", rc);
2456 server->ssocket = NULL;
2460 /* BB other socket options to set KEEPALIVE, NODELAY? */
2461 cFYI(1, "Socket created");
2462 server->ssocket = socket;
2463 socket->sk->sk_allocation = GFP_NOFS;
2464 if (sfamily == AF_INET6)
2465 cifs_reclassify_socket6(socket);
2467 cifs_reclassify_socket4(socket);
2470 rc = bind_socket(server);
2474 rc = socket->ops->connect(socket, saddr, slen, 0);
2476 cFYI(1, "Error %d connecting to server", rc);
2477 sock_release(socket);
2478 server->ssocket = NULL;
2483 * Eventually check for other socket options to change from
2484 * the default. sock_setsockopt not used because it expects
2487 socket->sk->sk_rcvtimeo = 7 * HZ;
2488 socket->sk->sk_sndtimeo = 5 * HZ;
2490 /* make the bufsizes depend on wsize/rsize and max requests */
2491 if (server->noautotune) {
2492 if (socket->sk->sk_sndbuf < (200 * 1024))
2493 socket->sk->sk_sndbuf = 200 * 1024;
2494 if (socket->sk->sk_rcvbuf < (140 * 1024))
2495 socket->sk->sk_rcvbuf = 140 * 1024;
2498 if (server->tcp_nodelay) {
2500 rc = kernel_setsockopt(socket, SOL_TCP, TCP_NODELAY,
2501 (char *)&val, sizeof(val));
2503 cFYI(1, "set TCP_NODELAY socket option error %d", rc);
2506 cFYI(1, "sndbuf %d rcvbuf %d rcvtimeo 0x%lx",
2507 socket->sk->sk_sndbuf,
2508 socket->sk->sk_rcvbuf, socket->sk->sk_rcvtimeo);
2510 if (sport == htons(RFC1001_PORT))
2511 rc = ip_rfc1001_connect(server);
2517 ip_connect(struct TCP_Server_Info *server)
2520 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)&server->dstaddr;
2521 struct sockaddr_in *addr = (struct sockaddr_in *)&server->dstaddr;
2523 if (server->dstaddr.ss_family == AF_INET6)
2524 sport = &addr6->sin6_port;
2526 sport = &addr->sin_port;
2531 /* try with 445 port at first */
2532 *sport = htons(CIFS_PORT);
2534 rc = generic_ip_connect(server);
2538 /* if it failed, try with 139 port */
2539 *sport = htons(RFC1001_PORT);
2542 return generic_ip_connect(server);
2545 void reset_cifs_unix_caps(int xid, struct cifs_tcon *tcon,
2546 struct super_block *sb, struct smb_vol *vol_info)
2548 /* if we are reconnecting then should we check to see if
2549 * any requested capabilities changed locally e.g. via
2550 * remount but we can not do much about it here
2551 * if they have (even if we could detect it by the following)
2552 * Perhaps we could add a backpointer to array of sb from tcon
2553 * or if we change to make all sb to same share the same
2554 * sb as NFS - then we only have one backpointer to sb.
2555 * What if we wanted to mount the server share twice once with
2556 * and once without posixacls or posix paths? */
2557 __u64 saved_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2559 if (vol_info && vol_info->no_linux_ext) {
2560 tcon->fsUnixInfo.Capability = 0;
2561 tcon->unix_ext = 0; /* Unix Extensions disabled */
2562 cFYI(1, "Linux protocol extensions disabled");
2564 } else if (vol_info)
2565 tcon->unix_ext = 1; /* Unix Extensions supported */
2567 if (tcon->unix_ext == 0) {
2568 cFYI(1, "Unix extensions disabled so not set on reconnect");
2572 if (!CIFSSMBQFSUnixInfo(xid, tcon)) {
2573 __u64 cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2574 cFYI(1, "unix caps which server supports %lld", cap);
2575 /* check for reconnect case in which we do not
2576 want to change the mount behavior if we can avoid it */
2577 if (vol_info == NULL) {
2578 /* turn off POSIX ACL and PATHNAMES if not set
2579 originally at mount time */
2580 if ((saved_cap & CIFS_UNIX_POSIX_ACL_CAP) == 0)
2581 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2582 if ((saved_cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2583 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2584 cERROR(1, "POSIXPATH support change");
2585 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2586 } else if ((cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2587 cERROR(1, "possible reconnect error");
2588 cERROR(1, "server disabled POSIX path support");
2592 if (cap & CIFS_UNIX_TRANSPORT_ENCRYPTION_MANDATORY_CAP)
2593 cERROR(1, "per-share encryption not supported yet");
2595 cap &= CIFS_UNIX_CAP_MASK;
2596 if (vol_info && vol_info->no_psx_acl)
2597 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2598 else if (CIFS_UNIX_POSIX_ACL_CAP & cap) {
2599 cFYI(1, "negotiated posix acl support");
2601 sb->s_flags |= MS_POSIXACL;
2604 if (vol_info && vol_info->posix_paths == 0)
2605 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2606 else if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) {
2607 cFYI(1, "negotiate posix pathnames");
2609 CIFS_SB(sb)->mnt_cifs_flags |=
2610 CIFS_MOUNT_POSIX_PATHS;
2613 if (sb && (CIFS_SB(sb)->rsize > 127 * 1024)) {
2614 if ((cap & CIFS_UNIX_LARGE_READ_CAP) == 0) {
2615 CIFS_SB(sb)->rsize = 127 * 1024;
2616 cFYI(DBG2, "larger reads not supported by srv");
2621 cFYI(1, "Negotiate caps 0x%x", (int)cap);
2622 #ifdef CONFIG_CIFS_DEBUG2
2623 if (cap & CIFS_UNIX_FCNTL_CAP)
2624 cFYI(1, "FCNTL cap");
2625 if (cap & CIFS_UNIX_EXTATTR_CAP)
2626 cFYI(1, "EXTATTR cap");
2627 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2628 cFYI(1, "POSIX path cap");
2629 if (cap & CIFS_UNIX_XATTR_CAP)
2630 cFYI(1, "XATTR cap");
2631 if (cap & CIFS_UNIX_POSIX_ACL_CAP)
2632 cFYI(1, "POSIX ACL cap");
2633 if (cap & CIFS_UNIX_LARGE_READ_CAP)
2634 cFYI(1, "very large read cap");
2635 if (cap & CIFS_UNIX_LARGE_WRITE_CAP)
2636 cFYI(1, "very large write cap");
2637 if (cap & CIFS_UNIX_TRANSPORT_ENCRYPTION_CAP)
2638 cFYI(1, "transport encryption cap");
2639 if (cap & CIFS_UNIX_TRANSPORT_ENCRYPTION_MANDATORY_CAP)
2640 cFYI(1, "mandatory transport encryption cap");
2641 #endif /* CIFS_DEBUG2 */
2642 if (CIFSSMBSetFSUnixInfo(xid, tcon, cap)) {
2643 if (vol_info == NULL) {
2644 cFYI(1, "resetting capabilities failed");
2646 cERROR(1, "Negotiating Unix capabilities "
2647 "with the server failed. Consider "
2648 "mounting with the Unix Extensions\n"
2649 "disabled, if problems are found, "
2650 "by specifying the nounix mount "
2657 void cifs_setup_cifs_sb(struct smb_vol *pvolume_info,
2658 struct cifs_sb_info *cifs_sb)
2660 INIT_DELAYED_WORK(&cifs_sb->prune_tlinks, cifs_prune_tlinks);
2662 if (pvolume_info->rsize > CIFSMaxBufSize) {
2663 cERROR(1, "rsize %d too large, using MaxBufSize",
2664 pvolume_info->rsize);
2665 cifs_sb->rsize = CIFSMaxBufSize;
2666 } else if ((pvolume_info->rsize) &&
2667 (pvolume_info->rsize <= CIFSMaxBufSize))
2668 cifs_sb->rsize = pvolume_info->rsize;
2670 cifs_sb->rsize = CIFSMaxBufSize;
2672 if (cifs_sb->rsize < 2048) {
2673 cifs_sb->rsize = 2048;
2674 /* Windows ME may prefer this */
2675 cFYI(1, "readsize set to minimum: 2048");
2679 * Temporarily set wsize for matching superblock. If we end up using
2680 * new sb then cifs_negotiate_wsize will later negotiate it downward
2683 cifs_sb->wsize = pvolume_info->wsize;
2685 cifs_sb->mnt_uid = pvolume_info->linux_uid;
2686 cifs_sb->mnt_gid = pvolume_info->linux_gid;
2687 cifs_sb->mnt_file_mode = pvolume_info->file_mode;
2688 cifs_sb->mnt_dir_mode = pvolume_info->dir_mode;
2689 cFYI(1, "file mode: 0x%x dir mode: 0x%x",
2690 cifs_sb->mnt_file_mode, cifs_sb->mnt_dir_mode);
2692 cifs_sb->actimeo = pvolume_info->actimeo;
2693 cifs_sb->local_nls = pvolume_info->local_nls;
2695 if (pvolume_info->noperm)
2696 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_PERM;
2697 if (pvolume_info->setuids)
2698 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SET_UID;
2699 if (pvolume_info->server_ino)
2700 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SERVER_INUM;
2701 if (pvolume_info->remap)
2702 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MAP_SPECIAL_CHR;
2703 if (pvolume_info->no_xattr)
2704 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_XATTR;
2705 if (pvolume_info->sfu_emul)
2706 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_UNX_EMUL;
2707 if (pvolume_info->nobrl)
2708 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_BRL;
2709 if (pvolume_info->nostrictsync)
2710 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOSSYNC;
2711 if (pvolume_info->mand_lock)
2712 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOPOSIXBRL;
2713 if (pvolume_info->rwpidforward)
2714 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_RWPIDFORWARD;
2715 if (pvolume_info->cifs_acl)
2716 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_ACL;
2717 if (pvolume_info->override_uid)
2718 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_UID;
2719 if (pvolume_info->override_gid)
2720 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_GID;
2721 if (pvolume_info->dynperm)
2722 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DYNPERM;
2723 if (pvolume_info->fsc)
2724 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_FSCACHE;
2725 if (pvolume_info->multiuser)
2726 cifs_sb->mnt_cifs_flags |= (CIFS_MOUNT_MULTIUSER |
2727 CIFS_MOUNT_NO_PERM);
2728 if (pvolume_info->strict_io)
2729 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_STRICT_IO;
2730 if (pvolume_info->direct_io) {
2731 cFYI(1, "mounting share using direct i/o");
2732 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DIRECT_IO;
2734 if (pvolume_info->mfsymlinks) {
2735 if (pvolume_info->sfu_emul) {
2736 cERROR(1, "mount option mfsymlinks ignored if sfu "
2737 "mount option is used");
2739 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MF_SYMLINKS;
2743 if ((pvolume_info->cifs_acl) && (pvolume_info->dynperm))
2744 cERROR(1, "mount option dynperm ignored if cifsacl "
2745 "mount option supported");
2749 * When the server supports very large writes via POSIX extensions, we can
2750 * allow up to 2^24 - PAGE_CACHE_SIZE.
2752 * Note that this might make for "interesting" allocation problems during
2753 * writeback however (as we have to allocate an array of pointers for the
2754 * pages). A 16M write means ~32kb page array with PAGE_CACHE_SIZE == 4096.
2756 #define CIFS_MAX_WSIZE ((1<<24) - PAGE_CACHE_SIZE)
2759 * When the server doesn't allow large posix writes, default to a wsize of
2760 * 128k - PAGE_CACHE_SIZE -- one page less than the largest frame size
2761 * described in RFC1001. This allows space for the header without going over
2764 #define CIFS_MAX_RFC1001_WSIZE (128 * 1024 - PAGE_CACHE_SIZE)
2767 * The default wsize is 1M. find_get_pages seems to return a maximum of 256
2768 * pages in a single call. With PAGE_CACHE_SIZE == 4k, this means we can fill
2769 * a single wsize request with a single call.
2771 #define CIFS_DEFAULT_WSIZE (1024 * 1024)
2774 cifs_negotiate_wsize(struct cifs_tcon *tcon, struct smb_vol *pvolume_info)
2776 __u64 unix_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2777 struct TCP_Server_Info *server = tcon->ses->server;
2778 unsigned int wsize = pvolume_info->wsize ? pvolume_info->wsize :
2781 /* can server support 24-bit write sizes? (via UNIX extensions) */
2782 if (!tcon->unix_ext || !(unix_cap & CIFS_UNIX_LARGE_WRITE_CAP))
2783 wsize = min_t(unsigned int, wsize, CIFS_MAX_RFC1001_WSIZE);
2785 /* no CAP_LARGE_WRITE_X? Limit it to 16 bits */
2786 if (!(server->capabilities & CAP_LARGE_WRITE_X))
2787 wsize = min_t(unsigned int, wsize, USHRT_MAX);
2789 /* hard limit of CIFS_MAX_WSIZE */
2790 wsize = min_t(unsigned int, wsize, CIFS_MAX_WSIZE);
2796 is_path_accessible(int xid, struct cifs_tcon *tcon,
2797 struct cifs_sb_info *cifs_sb, const char *full_path)
2800 FILE_ALL_INFO *pfile_info;
2802 pfile_info = kmalloc(sizeof(FILE_ALL_INFO), GFP_KERNEL);
2803 if (pfile_info == NULL)
2806 rc = CIFSSMBQPathInfo(xid, tcon, full_path, pfile_info,
2807 0 /* not legacy */, cifs_sb->local_nls,
2808 cifs_sb->mnt_cifs_flags &
2809 CIFS_MOUNT_MAP_SPECIAL_CHR);
2811 if (rc == -EOPNOTSUPP || rc == -EINVAL)
2812 rc = SMBQueryInformation(xid, tcon, full_path, pfile_info,
2813 cifs_sb->local_nls, cifs_sb->mnt_cifs_flags &
2814 CIFS_MOUNT_MAP_SPECIAL_CHR);
2820 cifs_cleanup_volume_info(struct smb_vol **pvolume_info)
2822 struct smb_vol *volume_info;
2824 if (!pvolume_info || !*pvolume_info)
2827 volume_info = *pvolume_info;
2828 kfree(volume_info->username);
2829 kzfree(volume_info->password);
2830 kfree(volume_info->UNC);
2831 kfree(volume_info->UNCip);
2832 kfree(volume_info->domainname);
2833 kfree(volume_info->iocharset);
2834 kfree(volume_info->prepath);
2836 *pvolume_info = NULL;
2840 #ifdef CONFIG_CIFS_DFS_UPCALL
2841 /* build_path_to_root returns full path to root when
2842 * we do not have an exiting connection (tcon) */
2844 build_unc_path_to_root(const struct smb_vol *volume_info,
2845 const struct cifs_sb_info *cifs_sb)
2849 int unc_len = strnlen(volume_info->UNC, MAX_TREE_SIZE + 1);
2850 full_path = kmalloc(unc_len + 1, GFP_KERNEL);
2851 if (full_path == NULL)
2852 return ERR_PTR(-ENOMEM);
2854 strncpy(full_path, volume_info->UNC, unc_len);
2855 full_path[unc_len] = 0; /* add trailing null */
2856 convert_delimiter(full_path, CIFS_DIR_SEP(cifs_sb));
2861 * Perform a dfs referral query for a share and (optionally) prefix
2863 * If a referral is found, cifs_sb->mountdata will be (re-)allocated
2864 * to a string containing updated options for the submount. Otherwise it
2865 * will be left untouched.
2867 * Returns the rc from get_dfs_path to the caller, which can be used to
2868 * determine whether there were referrals.
2871 expand_dfs_referral(int xid, struct cifs_ses *pSesInfo,
2872 struct smb_vol *volume_info, struct cifs_sb_info *cifs_sb,
2876 unsigned int num_referrals = 0;
2877 struct dfs_info3_param *referrals = NULL;
2878 char *full_path = NULL, *ref_path = NULL, *mdata = NULL;
2880 full_path = build_unc_path_to_root(volume_info, cifs_sb);
2881 if (IS_ERR(full_path))
2882 return PTR_ERR(full_path);
2884 /* For DFS paths, skip the first '\' of the UNC */
2885 ref_path = check_prefix ? full_path + 1 : volume_info->UNC + 1;
2887 rc = get_dfs_path(xid, pSesInfo , ref_path, cifs_sb->local_nls,
2888 &num_referrals, &referrals,
2889 cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
2891 if (!rc && num_referrals > 0) {
2892 char *fake_devname = NULL;
2894 mdata = cifs_compose_mount_options(cifs_sb->mountdata,
2895 full_path + 1, referrals,
2898 free_dfs_info_array(referrals, num_referrals);
2899 kfree(fake_devname);
2901 if (cifs_sb->mountdata != NULL)
2902 kfree(cifs_sb->mountdata);
2904 if (IS_ERR(mdata)) {
2905 rc = PTR_ERR(mdata);
2908 cifs_sb->mountdata = mdata;
2915 int cifs_setup_volume_info(struct smb_vol **pvolume_info, char *mount_data,
2916 const char *devname)
2918 struct smb_vol *volume_info;
2921 *pvolume_info = NULL;
2923 volume_info = kzalloc(sizeof(struct smb_vol), GFP_KERNEL);
2929 if (cifs_parse_mount_options(mount_data, devname,
2935 if (volume_info->nullauth) {
2936 cFYI(1, "null user");
2937 volume_info->username = "";
2938 } else if (volume_info->username) {
2939 /* BB fixme parse for domain name here */
2940 cFYI(1, "Username: %s", volume_info->username);
2942 cifserror("No username specified");
2943 /* In userspace mount helper we can get user name from alternate
2944 locations such as env variables and files on disk */
2949 /* this is needed for ASCII cp to Unicode converts */
2950 if (volume_info->iocharset == NULL) {
2951 /* load_nls_default cannot return null */
2952 volume_info->local_nls = load_nls_default();
2954 volume_info->local_nls = load_nls(volume_info->iocharset);
2955 if (volume_info->local_nls == NULL) {
2956 cERROR(1, "CIFS mount error: iocharset %s not found",
2957 volume_info->iocharset);
2963 *pvolume_info = volume_info;
2966 cifs_cleanup_volume_info(&volume_info);
2971 cifs_mount(struct super_block *sb, struct cifs_sb_info *cifs_sb,
2972 struct smb_vol *volume_info, const char *devname)
2976 struct cifs_ses *pSesInfo;
2977 struct cifs_tcon *tcon;
2978 struct TCP_Server_Info *srvTcp;
2980 struct tcon_link *tlink;
2981 #ifdef CONFIG_CIFS_DFS_UPCALL
2982 int referral_walks_count = 0;
2984 /* cleanup activities if we're chasing a referral */
2985 if (referral_walks_count) {
2987 cifs_put_tcon(tcon);
2989 cifs_put_smb_ses(pSesInfo);
2991 cifs_cleanup_volume_info(&volume_info);
3003 /* get a reference to a tcp session */
3004 srvTcp = cifs_get_tcp_session(volume_info);
3005 if (IS_ERR(srvTcp)) {
3006 rc = PTR_ERR(srvTcp);
3010 /* get a reference to a SMB session */
3011 pSesInfo = cifs_get_smb_ses(srvTcp, volume_info);
3012 if (IS_ERR(pSesInfo)) {
3013 rc = PTR_ERR(pSesInfo);
3015 goto mount_fail_check;
3018 if (pSesInfo->capabilities & CAP_LARGE_FILES)
3019 sb->s_maxbytes = MAX_LFS_FILESIZE;
3021 sb->s_maxbytes = MAX_NON_LFS;
3023 /* BB FIXME fix time_gran to be larger for LANMAN sessions */
3024 sb->s_time_gran = 100;
3026 /* search for existing tcon to this server share */
3027 tcon = cifs_get_tcon(pSesInfo, volume_info);
3031 goto remote_path_check;
3034 /* tell server which Unix caps we support */
3035 if (tcon->ses->capabilities & CAP_UNIX) {
3036 /* reset of caps checks mount to see if unix extensions
3037 disabled for just this mount */
3038 reset_cifs_unix_caps(xid, tcon, sb, volume_info);
3039 if ((tcon->ses->server->tcpStatus == CifsNeedReconnect) &&
3040 (le64_to_cpu(tcon->fsUnixInfo.Capability) &
3041 CIFS_UNIX_TRANSPORT_ENCRYPTION_MANDATORY_CAP)) {
3043 goto mount_fail_check;
3046 tcon->unix_ext = 0; /* server does not support them */
3048 /* do not care if following two calls succeed - informational */
3050 CIFSSMBQFSDeviceInfo(xid, tcon);
3051 CIFSSMBQFSAttributeInfo(xid, tcon);
3054 if ((tcon->unix_ext == 0) && (cifs_sb->rsize > (1024 * 127))) {
3055 cifs_sb->rsize = 1024 * 127;
3056 cFYI(DBG2, "no very large read support, rsize now 127K");
3058 if (!(tcon->ses->capabilities & CAP_LARGE_READ_X))
3059 cifs_sb->rsize = min(cifs_sb->rsize,
3060 (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
3062 cifs_sb->wsize = cifs_negotiate_wsize(tcon, volume_info);
3065 #ifdef CONFIG_CIFS_DFS_UPCALL
3067 * Perform an unconditional check for whether there are DFS
3068 * referrals for this path without prefix, to provide support
3069 * for DFS referrals from w2k8 servers which don't seem to respond
3070 * with PATH_NOT_COVERED to requests that include the prefix.
3071 * Chase the referral if found, otherwise continue normally.
3073 if (referral_walks_count == 0) {
3074 int refrc = expand_dfs_referral(xid, pSesInfo, volume_info,
3077 referral_walks_count++;
3078 goto try_mount_again;
3083 /* check if a whole path is not remote */
3085 /* build_path_to_root works only when we have a valid tcon */
3086 full_path = cifs_build_path_to_root(volume_info, cifs_sb, tcon);
3087 if (full_path == NULL) {
3089 goto mount_fail_check;
3091 rc = is_path_accessible(xid, tcon, cifs_sb, full_path);
3092 if (rc != 0 && rc != -EREMOTE) {
3094 goto mount_fail_check;
3099 /* get referral if needed */
3100 if (rc == -EREMOTE) {
3101 #ifdef CONFIG_CIFS_DFS_UPCALL
3102 if (referral_walks_count > MAX_NESTED_LINKS) {
3104 * BB: when we implement proper loop detection,
3105 * we will remove this check. But now we need it
3106 * to prevent an indefinite loop if 'DFS tree' is
3107 * misconfigured (i.e. has loops).
3110 goto mount_fail_check;
3113 rc = expand_dfs_referral(xid, pSesInfo, volume_info, cifs_sb,
3117 referral_walks_count++;
3118 goto try_mount_again;
3120 goto mount_fail_check;
3121 #else /* No DFS support, return error on mount */
3127 goto mount_fail_check;
3129 /* now, hang the tcon off of the superblock */
3130 tlink = kzalloc(sizeof *tlink, GFP_KERNEL);
3131 if (tlink == NULL) {
3133 goto mount_fail_check;
3136 tlink->tl_uid = pSesInfo->linux_uid;
3137 tlink->tl_tcon = tcon;
3138 tlink->tl_time = jiffies;
3139 set_bit(TCON_LINK_MASTER, &tlink->tl_flags);
3140 set_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3142 cifs_sb->master_tlink = tlink;
3143 spin_lock(&cifs_sb->tlink_tree_lock);
3144 tlink_rb_insert(&cifs_sb->tlink_tree, tlink);
3145 spin_unlock(&cifs_sb->tlink_tree_lock);
3147 queue_delayed_work(system_nrt_wq, &cifs_sb->prune_tlinks,
3151 /* on error free sesinfo and tcon struct if needed */
3153 /* If find_unc succeeded then rc == 0 so we can not end */
3154 /* up accidentally freeing someone elses tcon struct */
3156 cifs_put_tcon(tcon);
3158 cifs_put_smb_ses(pSesInfo);
3160 cifs_put_tcp_session(srvTcp);
3164 /* volume_info->password is freed above when existing session found
3165 (in which case it is not needed anymore) but when new sesion is created
3166 the password ptr is put in the new session structure (in which case the
3167 password will be freed at unmount time) */
3169 /* zero out password before freeing */
3175 CIFSTCon(unsigned int xid, struct cifs_ses *ses,
3176 const char *tree, struct cifs_tcon *tcon,
3177 const struct nls_table *nls_codepage)
3179 struct smb_hdr *smb_buffer;
3180 struct smb_hdr *smb_buffer_response;
3183 unsigned char *bcc_ptr;
3186 __u16 bytes_left, count;
3191 smb_buffer = cifs_buf_get();
3192 if (smb_buffer == NULL)
3195 smb_buffer_response = smb_buffer;
3197 header_assemble(smb_buffer, SMB_COM_TREE_CONNECT_ANDX,
3198 NULL /*no tid */ , 4 /*wct */ );
3200 smb_buffer->Mid = GetNextMid(ses->server);
3201 smb_buffer->Uid = ses->Suid;
3202 pSMB = (TCONX_REQ *) smb_buffer;
3203 pSMBr = (TCONX_RSP *) smb_buffer_response;
3205 pSMB->AndXCommand = 0xFF;
3206 pSMB->Flags = cpu_to_le16(TCON_EXTENDED_SECINFO);
3207 bcc_ptr = &pSMB->Password[0];
3208 if ((ses->server->sec_mode) & SECMODE_USER) {
3209 pSMB->PasswordLength = cpu_to_le16(1); /* minimum */
3210 *bcc_ptr = 0; /* password is null byte */
3211 bcc_ptr++; /* skip password */
3212 /* already aligned so no need to do it below */
3214 pSMB->PasswordLength = cpu_to_le16(CIFS_AUTH_RESP_SIZE);
3215 /* BB FIXME add code to fail this if NTLMv2 or Kerberos
3216 specified as required (when that support is added to
3217 the vfs in the future) as only NTLM or the much
3218 weaker LANMAN (which we do not send by default) is accepted
3219 by Samba (not sure whether other servers allow
3220 NTLMv2 password here) */
3221 #ifdef CONFIG_CIFS_WEAK_PW_HASH
3222 if ((global_secflags & CIFSSEC_MAY_LANMAN) &&
3223 (ses->server->secType == LANMAN))
3224 calc_lanman_hash(tcon->password, ses->server->cryptkey,
3225 ses->server->sec_mode &
3226 SECMODE_PW_ENCRYPT ? true : false,
3229 #endif /* CIFS_WEAK_PW_HASH */
3230 rc = SMBNTencrypt(tcon->password, ses->server->cryptkey,
3233 bcc_ptr += CIFS_AUTH_RESP_SIZE;
3234 if (ses->capabilities & CAP_UNICODE) {
3235 /* must align unicode strings */
3236 *bcc_ptr = 0; /* null byte password */
3241 if (ses->server->sec_mode &
3242 (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
3243 smb_buffer->Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
3245 if (ses->capabilities & CAP_STATUS32) {
3246 smb_buffer->Flags2 |= SMBFLG2_ERR_STATUS;
3248 if (ses->capabilities & CAP_DFS) {
3249 smb_buffer->Flags2 |= SMBFLG2_DFS;
3251 if (ses->capabilities & CAP_UNICODE) {
3252 smb_buffer->Flags2 |= SMBFLG2_UNICODE;
3254 cifs_strtoUCS((__le16 *) bcc_ptr, tree,
3255 6 /* max utf8 char length in bytes */ *
3256 (/* server len*/ + 256 /* share len */), nls_codepage);
3257 bcc_ptr += 2 * length; /* convert num 16 bit words to bytes */
3258 bcc_ptr += 2; /* skip trailing null */
3259 } else { /* ASCII */
3260 strcpy(bcc_ptr, tree);
3261 bcc_ptr += strlen(tree) + 1;
3263 strcpy(bcc_ptr, "?????");
3264 bcc_ptr += strlen("?????");
3266 count = bcc_ptr - &pSMB->Password[0];
3267 pSMB->hdr.smb_buf_length = cpu_to_be32(be32_to_cpu(
3268 pSMB->hdr.smb_buf_length) + count);
3269 pSMB->ByteCount = cpu_to_le16(count);
3271 rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response, &length,
3274 /* above now done in SendReceive */
3275 if ((rc == 0) && (tcon != NULL)) {
3278 tcon->tidStatus = CifsGood;
3279 tcon->need_reconnect = false;
3280 tcon->tid = smb_buffer_response->Tid;
3281 bcc_ptr = pByteArea(smb_buffer_response);
3282 bytes_left = get_bcc(smb_buffer_response);
3283 length = strnlen(bcc_ptr, bytes_left - 2);
3284 if (smb_buffer->Flags2 & SMBFLG2_UNICODE)
3290 /* skip service field (NB: this field is always ASCII) */
3292 if ((bcc_ptr[0] == 'I') && (bcc_ptr[1] == 'P') &&
3293 (bcc_ptr[2] == 'C')) {
3294 cFYI(1, "IPC connection");
3297 } else if (length == 2) {
3298 if ((bcc_ptr[0] == 'A') && (bcc_ptr[1] == ':')) {
3299 /* the most common case */
3300 cFYI(1, "disk share connection");
3303 bcc_ptr += length + 1;
3304 bytes_left -= (length + 1);
3305 strncpy(tcon->treeName, tree, MAX_TREE_SIZE);
3307 /* mostly informational -- no need to fail on error here */
3308 kfree(tcon->nativeFileSystem);
3309 tcon->nativeFileSystem = cifs_strndup_from_ucs(bcc_ptr,
3310 bytes_left, is_unicode,
3313 cFYI(1, "nativeFileSystem=%s", tcon->nativeFileSystem);
3315 if ((smb_buffer_response->WordCount == 3) ||
3316 (smb_buffer_response->WordCount == 7))
3317 /* field is in same location */
3318 tcon->Flags = le16_to_cpu(pSMBr->OptionalSupport);
3321 cFYI(1, "Tcon flags: 0x%x ", tcon->Flags);
3322 } else if ((rc == 0) && tcon == NULL) {
3323 /* all we need to save for IPC$ connection */
3324 ses->ipc_tid = smb_buffer_response->Tid;
3327 cifs_buf_release(smb_buffer);
3332 cifs_umount(struct super_block *sb, struct cifs_sb_info *cifs_sb)
3334 struct rb_root *root = &cifs_sb->tlink_tree;
3335 struct rb_node *node;
3336 struct tcon_link *tlink;
3338 cancel_delayed_work_sync(&cifs_sb->prune_tlinks);
3340 spin_lock(&cifs_sb->tlink_tree_lock);
3341 while ((node = rb_first(root))) {
3342 tlink = rb_entry(node, struct tcon_link, tl_rbnode);
3343 cifs_get_tlink(tlink);
3344 clear_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3345 rb_erase(node, root);
3347 spin_unlock(&cifs_sb->tlink_tree_lock);
3348 cifs_put_tlink(tlink);
3349 spin_lock(&cifs_sb->tlink_tree_lock);
3351 spin_unlock(&cifs_sb->tlink_tree_lock);
3356 int cifs_negotiate_protocol(unsigned int xid, struct cifs_ses *ses)
3359 struct TCP_Server_Info *server = ses->server;
3361 /* only send once per connect */
3362 if (server->maxBuf != 0)
3365 rc = CIFSSMBNegotiate(xid, ses);
3366 if (rc == -EAGAIN) {
3367 /* retry only once on 1st time connection */
3368 rc = CIFSSMBNegotiate(xid, ses);
3373 spin_lock(&GlobalMid_Lock);
3374 if (server->tcpStatus != CifsExiting)
3375 server->tcpStatus = CifsGood;
3378 spin_unlock(&GlobalMid_Lock);
3386 int cifs_setup_session(unsigned int xid, struct cifs_ses *ses,
3387 struct nls_table *nls_info)
3390 struct TCP_Server_Info *server = ses->server;
3393 ses->capabilities = server->capabilities;
3394 if (linuxExtEnabled == 0)
3395 ses->capabilities &= (~CAP_UNIX);
3397 cFYI(1, "Security Mode: 0x%x Capabilities: 0x%x TimeAdjust: %d",
3398 server->sec_mode, server->capabilities, server->timeAdj);
3400 rc = CIFS_SessSetup(xid, ses, nls_info);
3402 cERROR(1, "Send error in SessSetup = %d", rc);
3404 mutex_lock(&ses->server->srv_mutex);
3405 if (!server->session_estab) {
3406 server->session_key.response = ses->auth_key.response;
3407 server->session_key.len = ses->auth_key.len;
3408 server->sequence_number = 0x2;
3409 server->session_estab = true;
3410 ses->auth_key.response = NULL;
3412 mutex_unlock(&server->srv_mutex);
3414 cFYI(1, "CIFS Session Established successfully");
3415 spin_lock(&GlobalMid_Lock);
3416 ses->status = CifsGood;
3417 ses->need_reconnect = false;
3418 spin_unlock(&GlobalMid_Lock);
3421 kfree(ses->auth_key.response);
3422 ses->auth_key.response = NULL;
3423 ses->auth_key.len = 0;
3424 kfree(ses->ntlmssp);
3425 ses->ntlmssp = NULL;
3430 static struct cifs_tcon *
3431 cifs_construct_tcon(struct cifs_sb_info *cifs_sb, uid_t fsuid)
3433 struct cifs_tcon *master_tcon = cifs_sb_master_tcon(cifs_sb);
3434 struct cifs_ses *ses;
3435 struct cifs_tcon *tcon = NULL;
3436 struct smb_vol *vol_info;
3437 char username[28]; /* big enough for "krb50x" + hex of ULONG_MAX 6+16 */
3438 /* We used to have this as MAX_USERNAME which is */
3439 /* way too big now (256 instead of 32) */
3441 vol_info = kzalloc(sizeof(*vol_info), GFP_KERNEL);
3442 if (vol_info == NULL) {
3443 tcon = ERR_PTR(-ENOMEM);
3447 snprintf(username, MAX_USERNAME_SIZE, "krb50x%x", fsuid);
3448 vol_info->username = username;
3449 vol_info->local_nls = cifs_sb->local_nls;
3450 vol_info->linux_uid = fsuid;
3451 vol_info->cred_uid = fsuid;
3452 vol_info->UNC = master_tcon->treeName;
3453 vol_info->retry = master_tcon->retry;
3454 vol_info->nocase = master_tcon->nocase;
3455 vol_info->local_lease = master_tcon->local_lease;
3456 vol_info->no_linux_ext = !master_tcon->unix_ext;
3458 /* FIXME: allow for other secFlg settings */
3459 vol_info->secFlg = CIFSSEC_MUST_KRB5;
3461 /* get a reference for the same TCP session */
3462 spin_lock(&cifs_tcp_ses_lock);
3463 ++master_tcon->ses->server->srv_count;
3464 spin_unlock(&cifs_tcp_ses_lock);
3466 ses = cifs_get_smb_ses(master_tcon->ses->server, vol_info);
3468 tcon = (struct cifs_tcon *)ses;
3469 cifs_put_tcp_session(master_tcon->ses->server);
3473 tcon = cifs_get_tcon(ses, vol_info);
3475 cifs_put_smb_ses(ses);
3479 if (ses->capabilities & CAP_UNIX)
3480 reset_cifs_unix_caps(0, tcon, NULL, vol_info);
3487 static inline struct tcon_link *
3488 cifs_sb_master_tlink(struct cifs_sb_info *cifs_sb)
3490 return cifs_sb->master_tlink;
3494 cifs_sb_master_tcon(struct cifs_sb_info *cifs_sb)
3496 return tlink_tcon(cifs_sb_master_tlink(cifs_sb));
3500 cifs_sb_tcon_pending_wait(void *unused)
3503 return signal_pending(current) ? -ERESTARTSYS : 0;
3506 /* find and return a tlink with given uid */
3507 static struct tcon_link *
3508 tlink_rb_search(struct rb_root *root, uid_t uid)
3510 struct rb_node *node = root->rb_node;
3511 struct tcon_link *tlink;
3514 tlink = rb_entry(node, struct tcon_link, tl_rbnode);
3516 if (tlink->tl_uid > uid)
3517 node = node->rb_left;
3518 else if (tlink->tl_uid < uid)
3519 node = node->rb_right;
3526 /* insert a tcon_link into the tree */
3528 tlink_rb_insert(struct rb_root *root, struct tcon_link *new_tlink)
3530 struct rb_node **new = &(root->rb_node), *parent = NULL;
3531 struct tcon_link *tlink;
3534 tlink = rb_entry(*new, struct tcon_link, tl_rbnode);
3537 if (tlink->tl_uid > new_tlink->tl_uid)
3538 new = &((*new)->rb_left);
3540 new = &((*new)->rb_right);
3543 rb_link_node(&new_tlink->tl_rbnode, parent, new);
3544 rb_insert_color(&new_tlink->tl_rbnode, root);
3548 * Find or construct an appropriate tcon given a cifs_sb and the fsuid of the
3551 * If the superblock doesn't refer to a multiuser mount, then just return
3552 * the master tcon for the mount.
3554 * First, search the rbtree for an existing tcon for this fsuid. If one
3555 * exists, then check to see if it's pending construction. If it is then wait
3556 * for construction to complete. Once it's no longer pending, check to see if
3557 * it failed and either return an error or retry construction, depending on
3560 * If one doesn't exist then insert a new tcon_link struct into the tree and
3561 * try to construct a new one.
3564 cifs_sb_tlink(struct cifs_sb_info *cifs_sb)
3567 uid_t fsuid = current_fsuid();
3568 struct tcon_link *tlink, *newtlink;
3570 if (!(cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MULTIUSER))
3571 return cifs_get_tlink(cifs_sb_master_tlink(cifs_sb));
3573 spin_lock(&cifs_sb->tlink_tree_lock);
3574 tlink = tlink_rb_search(&cifs_sb->tlink_tree, fsuid);
3576 cifs_get_tlink(tlink);
3577 spin_unlock(&cifs_sb->tlink_tree_lock);
3579 if (tlink == NULL) {
3580 newtlink = kzalloc(sizeof(*tlink), GFP_KERNEL);
3581 if (newtlink == NULL)
3582 return ERR_PTR(-ENOMEM);
3583 newtlink->tl_uid = fsuid;
3584 newtlink->tl_tcon = ERR_PTR(-EACCES);
3585 set_bit(TCON_LINK_PENDING, &newtlink->tl_flags);
3586 set_bit(TCON_LINK_IN_TREE, &newtlink->tl_flags);
3587 cifs_get_tlink(newtlink);
3589 spin_lock(&cifs_sb->tlink_tree_lock);
3590 /* was one inserted after previous search? */
3591 tlink = tlink_rb_search(&cifs_sb->tlink_tree, fsuid);
3593 cifs_get_tlink(tlink);
3594 spin_unlock(&cifs_sb->tlink_tree_lock);
3596 goto wait_for_construction;
3599 tlink_rb_insert(&cifs_sb->tlink_tree, tlink);
3600 spin_unlock(&cifs_sb->tlink_tree_lock);
3602 wait_for_construction:
3603 ret = wait_on_bit(&tlink->tl_flags, TCON_LINK_PENDING,
3604 cifs_sb_tcon_pending_wait,
3605 TASK_INTERRUPTIBLE);
3607 cifs_put_tlink(tlink);
3608 return ERR_PTR(ret);
3611 /* if it's good, return it */
3612 if (!IS_ERR(tlink->tl_tcon))
3615 /* return error if we tried this already recently */
3616 if (time_before(jiffies, tlink->tl_time + TLINK_ERROR_EXPIRE)) {
3617 cifs_put_tlink(tlink);
3618 return ERR_PTR(-EACCES);
3621 if (test_and_set_bit(TCON_LINK_PENDING, &tlink->tl_flags))
3622 goto wait_for_construction;
3625 tlink->tl_tcon = cifs_construct_tcon(cifs_sb, fsuid);
3626 clear_bit(TCON_LINK_PENDING, &tlink->tl_flags);
3627 wake_up_bit(&tlink->tl_flags, TCON_LINK_PENDING);
3629 if (IS_ERR(tlink->tl_tcon)) {
3630 cifs_put_tlink(tlink);
3631 return ERR_PTR(-EACCES);
3638 * periodic workqueue job that scans tcon_tree for a superblock and closes
3642 cifs_prune_tlinks(struct work_struct *work)
3644 struct cifs_sb_info *cifs_sb = container_of(work, struct cifs_sb_info,
3646 struct rb_root *root = &cifs_sb->tlink_tree;
3647 struct rb_node *node = rb_first(root);
3648 struct rb_node *tmp;
3649 struct tcon_link *tlink;
3652 * Because we drop the spinlock in the loop in order to put the tlink
3653 * it's not guarded against removal of links from the tree. The only
3654 * places that remove entries from the tree are this function and
3655 * umounts. Because this function is non-reentrant and is canceled
3656 * before umount can proceed, this is safe.
3658 spin_lock(&cifs_sb->tlink_tree_lock);
3659 node = rb_first(root);
3660 while (node != NULL) {
3662 node = rb_next(tmp);
3663 tlink = rb_entry(tmp, struct tcon_link, tl_rbnode);
3665 if (test_bit(TCON_LINK_MASTER, &tlink->tl_flags) ||
3666 atomic_read(&tlink->tl_count) != 0 ||
3667 time_after(tlink->tl_time + TLINK_IDLE_EXPIRE, jiffies))
3670 cifs_get_tlink(tlink);
3671 clear_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3672 rb_erase(tmp, root);
3674 spin_unlock(&cifs_sb->tlink_tree_lock);
3675 cifs_put_tlink(tlink);
3676 spin_lock(&cifs_sb->tlink_tree_lock);
3678 spin_unlock(&cifs_sb->tlink_tree_lock);
3680 queue_delayed_work(system_nrt_wq, &cifs_sb->prune_tlinks,