4 * Copyright (C) International Business Machines Corp., 2002,2009
5 * Author(s): Steve French (sfrench@us.ibm.com)
7 * This library is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU Lesser General Public License as published
9 * by the Free Software Foundation; either version 2.1 of the License, or
10 * (at your option) any later version.
12 * This library is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See
15 * the GNU Lesser General Public License for more details.
17 * You should have received a copy of the GNU Lesser General Public License
18 * along with this library; if not, write to the Free Software
19 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
22 #include <linux/net.h>
23 #include <linux/string.h>
24 #include <linux/list.h>
25 #include <linux/wait.h>
26 #include <linux/slab.h>
27 #include <linux/pagemap.h>
28 #include <linux/ctype.h>
29 #include <linux/utsname.h>
30 #include <linux/mempool.h>
31 #include <linux/delay.h>
32 #include <linux/completion.h>
33 #include <linux/kthread.h>
34 #include <linux/pagevec.h>
35 #include <linux/freezer.h>
36 #include <linux/namei.h>
37 #include <asm/uaccess.h>
38 #include <asm/processor.h>
39 #include <linux/inet.h>
43 #include "cifsproto.h"
44 #include "cifs_unicode.h"
45 #include "cifs_debug.h"
46 #include "cifs_fs_sb.h"
49 #include "rfc1002pdu.h"
53 #define RFC1001_PORT 139
55 extern void SMBNTencrypt(unsigned char *passwd, unsigned char *c8,
58 extern mempool_t *cifs_req_poolp;
66 char *iocharset; /* local code page for mapping to and from Unicode */
67 char source_rfc1001_name[16]; /* netbios name of client */
68 char target_rfc1001_name[16]; /* netbios name of server for Win9x/ME */
82 bool no_psx_acl:1; /* set if posix acl support should be disabled */
84 bool no_xattr:1; /* set if xattr (EA) support should be disabled*/
85 bool server_ino:1; /* use inode numbers from server ie UniqueId */
87 bool remap:1; /* set to remap seven reserved chars in filenames */
88 bool posix_paths:1; /* unset to not ask for posix pathnames. */
91 bool nullauth:1; /* attempt to authenticate with null user */
92 bool nocase:1; /* request case insensitive filenames */
93 bool nobrl:1; /* disable sending byte range locks to srv */
94 bool mand_lock:1; /* send mandatory not posix byte range lock reqs */
95 bool seal:1; /* request transport encryption on share */
96 bool nodfs:1; /* Do not request DFS, even if available */
97 bool local_lease:1; /* check leases only on local system, not remote */
100 bool nostrictsync:1; /* do not force expensive SMBflush on every sync */
101 bool fsc:1; /* enable fscache */
102 bool mfsymlinks:1; /* use Minshall+French Symlinks */
106 bool sockopt_tcp_nodelay:1;
107 unsigned short int port;
109 struct sockaddr_storage srcaddr; /* allow binding to a local IP */
110 struct nls_table *local_nls;
113 /* FIXME: should these be tunable? */
114 #define TLINK_ERROR_EXPIRE (1 * HZ)
115 #define TLINK_IDLE_EXPIRE (600 * HZ)
117 static int ipv4_connect(struct TCP_Server_Info *server);
118 static int ipv6_connect(struct TCP_Server_Info *server);
119 static void cifs_prune_tlinks(struct work_struct *work);
122 * cifs tcp session reconnection
124 * mark tcp session as reconnecting so temporarily locked
125 * mark all smb sessions as reconnecting for tcp session
126 * reconnect tcp session
127 * wake up waiters on reconnection? - (not needed currently)
130 cifs_reconnect(struct TCP_Server_Info *server)
133 struct list_head *tmp, *tmp2;
134 struct cifsSesInfo *ses;
135 struct cifsTconInfo *tcon;
136 struct mid_q_entry *mid_entry;
138 spin_lock(&GlobalMid_Lock);
139 if (server->tcpStatus == CifsExiting) {
140 /* the demux thread will exit normally
141 next time through the loop */
142 spin_unlock(&GlobalMid_Lock);
145 server->tcpStatus = CifsNeedReconnect;
146 spin_unlock(&GlobalMid_Lock);
149 cFYI(1, "Reconnecting tcp session");
151 /* before reconnecting the tcp session, mark the smb session (uid)
152 and the tid bad so they are not used until reconnected */
153 spin_lock(&cifs_tcp_ses_lock);
154 list_for_each(tmp, &server->smb_ses_list) {
155 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
156 ses->need_reconnect = true;
158 list_for_each(tmp2, &ses->tcon_list) {
159 tcon = list_entry(tmp2, struct cifsTconInfo, tcon_list);
160 tcon->need_reconnect = true;
163 spin_unlock(&cifs_tcp_ses_lock);
164 /* do not want to be sending data on a socket we are freeing */
165 mutex_lock(&server->srv_mutex);
166 if (server->ssocket) {
167 cFYI(1, "State: 0x%x Flags: 0x%lx", server->ssocket->state,
168 server->ssocket->flags);
169 kernel_sock_shutdown(server->ssocket, SHUT_WR);
170 cFYI(1, "Post shutdown state: 0x%x Flags: 0x%lx",
171 server->ssocket->state,
172 server->ssocket->flags);
173 sock_release(server->ssocket);
174 server->ssocket = NULL;
176 server->sequence_number = 0;
177 server->session_estab = false;
178 kfree(server->session_key.response);
179 server->session_key.response = NULL;
180 server->session_key.len = 0;
182 spin_lock(&GlobalMid_Lock);
183 list_for_each(tmp, &server->pending_mid_q) {
184 mid_entry = list_entry(tmp, struct
187 if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
188 /* Mark other intransit requests as needing
189 retry so we do not immediately mark the
190 session bad again (ie after we reconnect
191 below) as they timeout too */
192 mid_entry->midState = MID_RETRY_NEEDED;
195 spin_unlock(&GlobalMid_Lock);
196 mutex_unlock(&server->srv_mutex);
198 while ((server->tcpStatus != CifsExiting) &&
199 (server->tcpStatus != CifsGood)) {
201 if (server->addr.sockAddr6.sin6_family == AF_INET6)
202 rc = ipv6_connect(server);
204 rc = ipv4_connect(server);
206 cFYI(1, "reconnect error %d", rc);
209 atomic_inc(&tcpSesReconnectCount);
210 spin_lock(&GlobalMid_Lock);
211 if (server->tcpStatus != CifsExiting)
212 server->tcpStatus = CifsGood;
213 spin_unlock(&GlobalMid_Lock);
214 /* atomic_set(&server->inFlight,0);*/
215 wake_up(&server->response_q);
223 0 not a transact2, or all data present
224 >0 transact2 with that much data missing
225 -EINVAL = invalid transact2
228 static int check2ndT2(struct smb_hdr *pSMB, unsigned int maxBufSize)
230 struct smb_t2_rsp *pSMBt;
232 int data_in_this_rsp;
235 if (pSMB->Command != SMB_COM_TRANSACTION2)
238 /* check for plausible wct, bcc and t2 data and parm sizes */
239 /* check for parm and data offset going beyond end of smb */
240 if (pSMB->WordCount != 10) { /* coalesce_t2 depends on this */
241 cFYI(1, "invalid transact2 word count");
245 pSMBt = (struct smb_t2_rsp *)pSMB;
247 total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
248 data_in_this_rsp = le16_to_cpu(pSMBt->t2_rsp.DataCount);
250 remaining = total_data_size - data_in_this_rsp;
254 else if (remaining < 0) {
255 cFYI(1, "total data %d smaller than data in frame %d",
256 total_data_size, data_in_this_rsp);
259 cFYI(1, "missing %d bytes from transact2, check next response",
261 if (total_data_size > maxBufSize) {
262 cERROR(1, "TotalDataSize %d is over maximum buffer %d",
263 total_data_size, maxBufSize);
270 static int coalesce_t2(struct smb_hdr *psecond, struct smb_hdr *pTargetSMB)
272 struct smb_t2_rsp *pSMB2 = (struct smb_t2_rsp *)psecond;
273 struct smb_t2_rsp *pSMBt = (struct smb_t2_rsp *)pTargetSMB;
278 char *data_area_of_target;
279 char *data_area_of_buf2;
282 total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
284 if (total_data_size != le16_to_cpu(pSMB2->t2_rsp.TotalDataCount)) {
285 cFYI(1, "total data size of primary and secondary t2 differ");
288 total_in_buf = le16_to_cpu(pSMBt->t2_rsp.DataCount);
290 remaining = total_data_size - total_in_buf;
295 if (remaining == 0) /* nothing to do, ignore */
298 total_in_buf2 = le16_to_cpu(pSMB2->t2_rsp.DataCount);
299 if (remaining < total_in_buf2) {
300 cFYI(1, "transact2 2nd response contains too much data");
303 /* find end of first SMB data area */
304 data_area_of_target = (char *)&pSMBt->hdr.Protocol +
305 le16_to_cpu(pSMBt->t2_rsp.DataOffset);
306 /* validate target area */
308 data_area_of_buf2 = (char *) &pSMB2->hdr.Protocol +
309 le16_to_cpu(pSMB2->t2_rsp.DataOffset);
311 data_area_of_target += total_in_buf;
313 /* copy second buffer into end of first buffer */
314 memcpy(data_area_of_target, data_area_of_buf2, total_in_buf2);
315 total_in_buf += total_in_buf2;
316 pSMBt->t2_rsp.DataCount = cpu_to_le16(total_in_buf);
317 byte_count = le16_to_cpu(BCC_LE(pTargetSMB));
318 byte_count += total_in_buf2;
319 BCC_LE(pTargetSMB) = cpu_to_le16(byte_count);
321 byte_count = pTargetSMB->smb_buf_length;
322 byte_count += total_in_buf2;
324 /* BB also add check that we are not beyond maximum buffer size */
326 pTargetSMB->smb_buf_length = byte_count;
328 if (remaining == total_in_buf2) {
329 cFYI(1, "found the last secondary response");
330 return 0; /* we are done */
331 } else /* more responses to go */
337 cifs_demultiplex_thread(struct TCP_Server_Info *server)
340 unsigned int pdu_length, total_read;
341 struct smb_hdr *smb_buffer = NULL;
342 struct smb_hdr *bigbuf = NULL;
343 struct smb_hdr *smallbuf = NULL;
344 struct msghdr smb_msg;
346 struct socket *csocket = server->ssocket;
347 struct list_head *tmp;
348 struct cifsSesInfo *ses;
349 struct task_struct *task_to_wake = NULL;
350 struct mid_q_entry *mid_entry;
352 bool isLargeBuf = false;
356 current->flags |= PF_MEMALLOC;
357 cFYI(1, "Demultiplex PID: %d", task_pid_nr(current));
359 length = atomic_inc_return(&tcpSesAllocCount);
361 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
365 while (server->tcpStatus != CifsExiting) {
368 if (bigbuf == NULL) {
369 bigbuf = cifs_buf_get();
371 cERROR(1, "No memory for large SMB response");
373 /* retry will check if exiting */
376 } else if (isLargeBuf) {
377 /* we are reusing a dirty large buf, clear its start */
378 memset(bigbuf, 0, sizeof(struct smb_hdr));
381 if (smallbuf == NULL) {
382 smallbuf = cifs_small_buf_get();
384 cERROR(1, "No memory for SMB response");
386 /* retry will check if exiting */
389 /* beginning of smb buffer is cleared in our buf_get */
390 } else /* if existing small buf clear beginning */
391 memset(smallbuf, 0, sizeof(struct smb_hdr));
395 smb_buffer = smallbuf;
396 iov.iov_base = smb_buffer;
398 smb_msg.msg_control = NULL;
399 smb_msg.msg_controllen = 0;
400 pdu_length = 4; /* enough to get RFC1001 header */
403 kernel_recvmsg(csocket, &smb_msg,
404 &iov, 1, pdu_length, 0 /* BB other flags? */);
406 if (server->tcpStatus == CifsExiting) {
408 } else if (server->tcpStatus == CifsNeedReconnect) {
409 cFYI(1, "Reconnect after server stopped responding");
410 cifs_reconnect(server);
411 cFYI(1, "call to reconnect done");
412 csocket = server->ssocket;
414 } else if (length == -ERESTARTSYS ||
417 msleep(1); /* minimum sleep to prevent looping
418 allowing socket to clear and app threads to set
419 tcpStatus CifsNeedReconnect if server hung */
420 if (pdu_length < 4) {
421 iov.iov_base = (4 - pdu_length) +
423 iov.iov_len = pdu_length;
424 smb_msg.msg_control = NULL;
425 smb_msg.msg_controllen = 0;
429 } else if (length <= 0) {
430 cFYI(1, "Reconnect after unexpected peek error %d",
432 cifs_reconnect(server);
433 csocket = server->ssocket;
434 wake_up(&server->response_q);
436 } else if (length < pdu_length) {
437 cFYI(1, "requested %d bytes but only got %d bytes",
439 pdu_length -= length;
444 /* The right amount was read from socket - 4 bytes */
445 /* so we can now interpret the length field */
447 /* the first byte big endian of the length field,
448 is actually not part of the length but the type
449 with the most common, zero, as regular data */
450 temp = *((char *) smb_buffer);
452 /* Note that FC 1001 length is big endian on the wire,
453 but we convert it here so it is always manipulated
454 as host byte order */
455 pdu_length = be32_to_cpu((__force __be32)smb_buffer->smb_buf_length);
456 smb_buffer->smb_buf_length = pdu_length;
458 cFYI(1, "rfc1002 length 0x%x", pdu_length+4);
460 if (temp == (char) RFC1002_SESSION_KEEP_ALIVE) {
462 } else if (temp == (char)RFC1002_POSITIVE_SESSION_RESPONSE) {
463 cFYI(1, "Good RFC 1002 session rsp");
465 } else if (temp == (char)RFC1002_NEGATIVE_SESSION_RESPONSE) {
466 /* we get this from Windows 98 instead of
467 an error on SMB negprot response */
468 cFYI(1, "Negative RFC1002 Session Response Error 0x%x)",
470 /* give server a second to clean up */
472 /* always try 445 first on reconnect since we get NACK
473 * on some if we ever connected to port 139 (the NACK
474 * is since we do not begin with RFC1001 session
477 cifs_set_port((struct sockaddr *)
478 &server->addr.sockAddr, CIFS_PORT);
479 cifs_reconnect(server);
480 csocket = server->ssocket;
481 wake_up(&server->response_q);
483 } else if (temp != (char) 0) {
484 cERROR(1, "Unknown RFC 1002 frame");
485 cifs_dump_mem(" Received Data: ", (char *)smb_buffer,
487 cifs_reconnect(server);
488 csocket = server->ssocket;
492 /* else we have an SMB response */
493 if ((pdu_length > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE - 4) ||
494 (pdu_length < sizeof(struct smb_hdr) - 1 - 4)) {
495 cERROR(1, "Invalid size SMB length %d pdu_length %d",
496 length, pdu_length+4);
497 cifs_reconnect(server);
498 csocket = server->ssocket;
499 wake_up(&server->response_q);
506 if (pdu_length > MAX_CIFS_SMALL_BUFFER_SIZE - 4) {
508 memcpy(bigbuf, smallbuf, 4);
512 iov.iov_base = 4 + (char *)smb_buffer;
513 iov.iov_len = pdu_length;
514 for (total_read = 0; total_read < pdu_length;
515 total_read += length) {
516 length = kernel_recvmsg(csocket, &smb_msg, &iov, 1,
517 pdu_length - total_read, 0);
518 if (server->tcpStatus == CifsExiting) {
522 } else if (server->tcpStatus == CifsNeedReconnect) {
523 cifs_reconnect(server);
524 csocket = server->ssocket;
525 /* Reconnect wakes up rspns q */
526 /* Now we will reread sock */
529 } else if (length == -ERESTARTSYS ||
532 msleep(1); /* minimum sleep to prevent looping,
533 allowing socket to clear and app
534 threads to set tcpStatus
535 CifsNeedReconnect if server hung*/
538 } else if (length <= 0) {
539 cERROR(1, "Received no data, expecting %d",
540 pdu_length - total_read);
541 cifs_reconnect(server);
542 csocket = server->ssocket;
549 else if (reconnect == 1)
552 length += 4; /* account for rfc1002 hdr */
555 dump_smb(smb_buffer, length);
556 if (checkSMB(smb_buffer, smb_buffer->Mid, total_read+4)) {
557 cifs_dump_mem("Bad SMB: ", smb_buffer, 48);
563 spin_lock(&GlobalMid_Lock);
564 list_for_each(tmp, &server->pending_mid_q) {
565 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
567 if ((mid_entry->mid == smb_buffer->Mid) &&
568 (mid_entry->midState == MID_REQUEST_SUBMITTED) &&
569 (mid_entry->command == smb_buffer->Command)) {
570 if (check2ndT2(smb_buffer,server->maxBuf) > 0) {
571 /* We have a multipart transact2 resp */
573 if (mid_entry->resp_buf) {
574 /* merge response - fix up 1st*/
575 if (coalesce_t2(smb_buffer,
576 mid_entry->resp_buf)) {
577 mid_entry->multiRsp =
581 /* all parts received */
582 mid_entry->multiEnd =
588 cERROR(1, "1st trans2 resp needs bigbuf");
589 /* BB maybe we can fix this up, switch
590 to already allocated large buffer? */
592 /* Have first buffer */
593 mid_entry->resp_buf =
595 mid_entry->largeBuf =
602 mid_entry->resp_buf = smb_buffer;
603 mid_entry->largeBuf = isLargeBuf;
605 task_to_wake = mid_entry->tsk;
606 mid_entry->midState = MID_RESPONSE_RECEIVED;
607 #ifdef CONFIG_CIFS_STATS2
608 mid_entry->when_received = jiffies;
610 /* so we do not time out requests to server
611 which is still responding (since server could
612 be busy but not dead) */
613 server->lstrp = jiffies;
617 spin_unlock(&GlobalMid_Lock);
619 /* Was previous buf put in mpx struct for multi-rsp? */
621 /* smb buffer will be freed by user thread */
627 wake_up_process(task_to_wake);
628 } else if (!is_valid_oplock_break(smb_buffer, server) &&
630 cERROR(1, "No task to wake, unknown frame received! "
631 "NumMids %d", midCount.counter);
632 cifs_dump_mem("Received Data is: ", (char *)smb_buffer,
633 sizeof(struct smb_hdr));
634 #ifdef CONFIG_CIFS_DEBUG2
635 cifs_dump_detail(smb_buffer);
636 cifs_dump_mids(server);
637 #endif /* CIFS_DEBUG2 */
640 } /* end while !EXITING */
642 /* take it off the list, if it's not already */
643 spin_lock(&cifs_tcp_ses_lock);
644 list_del_init(&server->tcp_ses_list);
645 spin_unlock(&cifs_tcp_ses_lock);
647 spin_lock(&GlobalMid_Lock);
648 server->tcpStatus = CifsExiting;
649 spin_unlock(&GlobalMid_Lock);
650 wake_up_all(&server->response_q);
652 /* check if we have blocked requests that need to free */
653 /* Note that cifs_max_pending is normally 50, but
654 can be set at module install time to as little as two */
655 spin_lock(&GlobalMid_Lock);
656 if (atomic_read(&server->inFlight) >= cifs_max_pending)
657 atomic_set(&server->inFlight, cifs_max_pending - 1);
658 /* We do not want to set the max_pending too low or we
659 could end up with the counter going negative */
660 spin_unlock(&GlobalMid_Lock);
661 /* Although there should not be any requests blocked on
662 this queue it can not hurt to be paranoid and try to wake up requests
663 that may haven been blocked when more than 50 at time were on the wire
664 to the same server - they now will see the session is in exit state
665 and get out of SendReceive. */
666 wake_up_all(&server->request_q);
667 /* give those requests time to exit */
670 if (server->ssocket) {
671 sock_release(csocket);
672 server->ssocket = NULL;
674 /* buffer usuallly freed in free_mid - need to free it here on exit */
675 cifs_buf_release(bigbuf);
676 if (smallbuf) /* no sense logging a debug message if NULL */
677 cifs_small_buf_release(smallbuf);
680 * BB: we shouldn't have to do any of this. It shouldn't be
681 * possible to exit from the thread with active SMB sessions
683 spin_lock(&cifs_tcp_ses_lock);
684 if (list_empty(&server->pending_mid_q)) {
685 /* loop through server session structures attached to this and
687 list_for_each(tmp, &server->smb_ses_list) {
688 ses = list_entry(tmp, struct cifsSesInfo,
690 ses->status = CifsExiting;
693 spin_unlock(&cifs_tcp_ses_lock);
695 /* although we can not zero the server struct pointer yet,
696 since there are active requests which may depnd on them,
697 mark the corresponding SMB sessions as exiting too */
698 list_for_each(tmp, &server->smb_ses_list) {
699 ses = list_entry(tmp, struct cifsSesInfo,
701 ses->status = CifsExiting;
704 spin_lock(&GlobalMid_Lock);
705 list_for_each(tmp, &server->pending_mid_q) {
706 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
707 if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
708 cFYI(1, "Clearing Mid 0x%x - waking up ",
710 task_to_wake = mid_entry->tsk;
712 wake_up_process(task_to_wake);
715 spin_unlock(&GlobalMid_Lock);
716 spin_unlock(&cifs_tcp_ses_lock);
717 /* 1/8th of sec is more than enough time for them to exit */
721 if (!list_empty(&server->pending_mid_q)) {
722 /* mpx threads have not exited yet give them
723 at least the smb send timeout time for long ops */
724 /* due to delays on oplock break requests, we need
725 to wait at least 45 seconds before giving up
726 on a request getting a response and going ahead
728 cFYI(1, "Wait for exit from demultiplex thread");
730 /* if threads still have not exited they are probably never
731 coming home not much else we can do but free the memory */
734 /* last chance to mark ses pointers invalid
735 if there are any pointing to this (e.g
736 if a crazy root user tried to kill cifsd
737 kernel thread explicitly this might happen) */
738 /* BB: This shouldn't be necessary, see above */
739 spin_lock(&cifs_tcp_ses_lock);
740 list_for_each(tmp, &server->smb_ses_list) {
741 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
744 spin_unlock(&cifs_tcp_ses_lock);
746 kfree(server->hostname);
747 task_to_wake = xchg(&server->tsk, NULL);
750 length = atomic_dec_return(&tcpSesAllocCount);
752 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
755 /* if server->tsk was NULL then wait for a signal before exiting */
757 set_current_state(TASK_INTERRUPTIBLE);
758 while (!signal_pending(current)) {
760 set_current_state(TASK_INTERRUPTIBLE);
762 set_current_state(TASK_RUNNING);
765 module_put_and_exit(0);
768 /* extract the host portion of the UNC string */
770 extract_hostname(const char *unc)
776 /* skip double chars at beginning of string */
777 /* BB: check validity of these bytes? */
780 /* delimiter between hostname and sharename is always '\\' now */
781 delim = strchr(src, '\\');
783 return ERR_PTR(-EINVAL);
786 dst = kmalloc((len + 1), GFP_KERNEL);
788 return ERR_PTR(-ENOMEM);
790 memcpy(dst, src, len);
797 cifs_parse_mount_options(char *options, const char *devname,
802 unsigned int temp_len, i, j;
804 short int override_uid = -1;
805 short int override_gid = -1;
806 bool uid_specified = false;
807 bool gid_specified = false;
812 if (Local_System_Name[0] != 0)
813 memcpy(vol->source_rfc1001_name, Local_System_Name, 15);
815 char *nodename = utsname()->nodename;
816 int n = strnlen(nodename, 15);
817 memset(vol->source_rfc1001_name, 0x20, 15);
818 for (i = 0; i < n; i++) {
819 /* does not have to be perfect mapping since field is
820 informational, only used for servers that do not support
821 port 445 and it can be overridden at mount time */
822 vol->source_rfc1001_name[i] = toupper(nodename[i]);
825 vol->source_rfc1001_name[15] = 0;
826 /* null target name indicates to use *SMBSERVR default called name
827 if we end up sending RFC1001 session initialize */
828 vol->target_rfc1001_name[0] = 0;
829 vol->cred_uid = current_uid();
830 vol->linux_uid = current_uid();
831 vol->linux_gid = current_gid();
833 /* default to only allowing write access to owner of the mount */
834 vol->dir_mode = vol->file_mode = S_IRUGO | S_IXUGO | S_IWUSR;
836 /* vol->retry default is 0 (i.e. "soft" limited retry not hard retry) */
837 /* default is always to request posix paths. */
838 vol->posix_paths = 1;
839 /* default to using server inode numbers where available */
845 if (strncmp(options, "sep=", 4) == 0) {
846 if (options[4] != 0) {
847 separator[0] = options[4];
850 cFYI(1, "Null separator not allowed");
854 while ((data = strsep(&options, separator)) != NULL) {
857 if ((value = strchr(data, '=')) != NULL)
860 /* Have to parse this before we parse for "user" */
861 if (strnicmp(data, "user_xattr", 10) == 0) {
863 } else if (strnicmp(data, "nouser_xattr", 12) == 0) {
865 } else if (strnicmp(data, "user", 4) == 0) {
868 "CIFS: invalid or missing username\n");
869 return 1; /* needs_arg; */
870 } else if (!*value) {
871 /* null user, ie anonymous, authentication */
874 if (strnlen(value, 200) < 200) {
875 vol->username = value;
877 printk(KERN_WARNING "CIFS: username too long\n");
880 } else if (strnicmp(data, "pass", 4) == 0) {
882 vol->password = NULL;
884 } else if (value[0] == 0) {
885 /* check if string begins with double comma
886 since that would mean the password really
887 does start with a comma, and would not
888 indicate an empty string */
889 if (value[1] != separator[0]) {
890 vol->password = NULL;
894 temp_len = strlen(value);
895 /* removed password length check, NTLM passwords
896 can be arbitrarily long */
898 /* if comma in password, the string will be
899 prematurely null terminated. Commas in password are
900 specified across the cifs mount interface by a double
901 comma ie ,, and a comma used as in other cases ie ','
902 as a parameter delimiter/separator is single and due
903 to the strsep above is temporarily zeroed. */
905 /* NB: password legally can have multiple commas and
906 the only illegal character in a password is null */
908 if ((value[temp_len] == 0) &&
909 (value[temp_len+1] == separator[0])) {
911 value[temp_len] = separator[0];
912 temp_len += 2; /* move after second comma */
913 while (value[temp_len] != 0) {
914 if (value[temp_len] == separator[0]) {
915 if (value[temp_len+1] ==
917 /* skip second comma */
920 /* single comma indicating start
927 if (value[temp_len] == 0) {
931 /* point option to start of next parm */
932 options = value + temp_len + 1;
934 /* go from value to value + temp_len condensing
935 double commas to singles. Note that this ends up
936 allocating a few bytes too many, which is ok */
937 vol->password = kzalloc(temp_len, GFP_KERNEL);
938 if (vol->password == NULL) {
939 printk(KERN_WARNING "CIFS: no memory "
943 for (i = 0, j = 0; i < temp_len; i++, j++) {
944 vol->password[j] = value[i];
945 if (value[i] == separator[0]
946 && value[i+1] == separator[0]) {
947 /* skip second comma */
951 vol->password[j] = 0;
953 vol->password = kzalloc(temp_len+1, GFP_KERNEL);
954 if (vol->password == NULL) {
955 printk(KERN_WARNING "CIFS: no memory "
959 strcpy(vol->password, value);
961 } else if (!strnicmp(data, "ip", 2) ||
962 !strnicmp(data, "addr", 4)) {
963 if (!value || !*value) {
965 } else if (strnlen(value, INET6_ADDRSTRLEN) <
969 printk(KERN_WARNING "CIFS: ip address "
973 } else if (strnicmp(data, "sec", 3) == 0) {
974 if (!value || !*value) {
975 cERROR(1, "no security value specified");
977 } else if (strnicmp(value, "krb5i", 5) == 0) {
978 vol->secFlg |= CIFSSEC_MAY_KRB5 |
980 } else if (strnicmp(value, "krb5p", 5) == 0) {
981 /* vol->secFlg |= CIFSSEC_MUST_SEAL |
983 cERROR(1, "Krb5 cifs privacy not supported");
985 } else if (strnicmp(value, "krb5", 4) == 0) {
986 vol->secFlg |= CIFSSEC_MAY_KRB5;
987 #ifdef CONFIG_CIFS_EXPERIMENTAL
988 } else if (strnicmp(value, "ntlmsspi", 8) == 0) {
989 vol->secFlg |= CIFSSEC_MAY_NTLMSSP |
991 } else if (strnicmp(value, "ntlmssp", 7) == 0) {
992 vol->secFlg |= CIFSSEC_MAY_NTLMSSP;
994 } else if (strnicmp(value, "ntlmv2i", 7) == 0) {
995 vol->secFlg |= CIFSSEC_MAY_NTLMV2 |
997 } else if (strnicmp(value, "ntlmv2", 6) == 0) {
998 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
999 } else if (strnicmp(value, "ntlmi", 5) == 0) {
1000 vol->secFlg |= CIFSSEC_MAY_NTLM |
1002 } else if (strnicmp(value, "ntlm", 4) == 0) {
1003 /* ntlm is default so can be turned off too */
1004 vol->secFlg |= CIFSSEC_MAY_NTLM;
1005 } else if (strnicmp(value, "nontlm", 6) == 0) {
1006 /* BB is there a better way to do this? */
1007 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
1008 #ifdef CONFIG_CIFS_WEAK_PW_HASH
1009 } else if (strnicmp(value, "lanman", 6) == 0) {
1010 vol->secFlg |= CIFSSEC_MAY_LANMAN;
1012 } else if (strnicmp(value, "none", 4) == 0) {
1015 cERROR(1, "bad security option: %s", value);
1018 } else if ((strnicmp(data, "unc", 3) == 0)
1019 || (strnicmp(data, "target", 6) == 0)
1020 || (strnicmp(data, "path", 4) == 0)) {
1021 if (!value || !*value) {
1022 printk(KERN_WARNING "CIFS: invalid path to "
1023 "network resource\n");
1024 return 1; /* needs_arg; */
1026 if ((temp_len = strnlen(value, 300)) < 300) {
1027 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1028 if (vol->UNC == NULL)
1030 strcpy(vol->UNC, value);
1031 if (strncmp(vol->UNC, "//", 2) == 0) {
1034 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1036 "CIFS: UNC Path does not begin "
1037 "with // or \\\\ \n");
1041 printk(KERN_WARNING "CIFS: UNC name too long\n");
1044 } else if ((strnicmp(data, "domain", 3) == 0)
1045 || (strnicmp(data, "workgroup", 5) == 0)) {
1046 if (!value || !*value) {
1047 printk(KERN_WARNING "CIFS: invalid domain name\n");
1048 return 1; /* needs_arg; */
1050 /* BB are there cases in which a comma can be valid in
1051 a domain name and need special handling? */
1052 if (strnlen(value, 256) < 256) {
1053 vol->domainname = value;
1054 cFYI(1, "Domain name set");
1056 printk(KERN_WARNING "CIFS: domain name too "
1060 } else if (strnicmp(data, "srcaddr", 7) == 0) {
1061 vol->srcaddr.ss_family = AF_UNSPEC;
1063 if (!value || !*value) {
1064 printk(KERN_WARNING "CIFS: srcaddr value"
1065 " not specified.\n");
1066 return 1; /* needs_arg; */
1068 i = cifs_convert_address((struct sockaddr *)&vol->srcaddr,
1069 value, strlen(value));
1071 printk(KERN_WARNING "CIFS: Could not parse"
1076 } else if (strnicmp(data, "prefixpath", 10) == 0) {
1077 if (!value || !*value) {
1079 "CIFS: invalid path prefix\n");
1080 return 1; /* needs_argument */
1082 if ((temp_len = strnlen(value, 1024)) < 1024) {
1083 if (value[0] != '/')
1084 temp_len++; /* missing leading slash */
1085 vol->prepath = kmalloc(temp_len+1, GFP_KERNEL);
1086 if (vol->prepath == NULL)
1088 if (value[0] != '/') {
1089 vol->prepath[0] = '/';
1090 strcpy(vol->prepath+1, value);
1092 strcpy(vol->prepath, value);
1093 cFYI(1, "prefix path %s", vol->prepath);
1095 printk(KERN_WARNING "CIFS: prefix too long\n");
1098 } else if (strnicmp(data, "iocharset", 9) == 0) {
1099 if (!value || !*value) {
1100 printk(KERN_WARNING "CIFS: invalid iocharset "
1102 return 1; /* needs_arg; */
1104 if (strnlen(value, 65) < 65) {
1105 if (strnicmp(value, "default", 7))
1106 vol->iocharset = value;
1107 /* if iocharset not set then load_nls_default
1108 is used by caller */
1109 cFYI(1, "iocharset set to %s", value);
1111 printk(KERN_WARNING "CIFS: iocharset name "
1115 } else if (!strnicmp(data, "uid", 3) && value && *value) {
1116 vol->linux_uid = simple_strtoul(value, &value, 0);
1117 uid_specified = true;
1118 } else if (!strnicmp(data, "forceuid", 8)) {
1120 } else if (!strnicmp(data, "noforceuid", 10)) {
1122 } else if (!strnicmp(data, "gid", 3) && value && *value) {
1123 vol->linux_gid = simple_strtoul(value, &value, 0);
1124 gid_specified = true;
1125 } else if (!strnicmp(data, "forcegid", 8)) {
1127 } else if (!strnicmp(data, "noforcegid", 10)) {
1129 } else if (strnicmp(data, "file_mode", 4) == 0) {
1130 if (value && *value) {
1132 simple_strtoul(value, &value, 0);
1134 } else if (strnicmp(data, "dir_mode", 4) == 0) {
1135 if (value && *value) {
1137 simple_strtoul(value, &value, 0);
1139 } else if (strnicmp(data, "dirmode", 4) == 0) {
1140 if (value && *value) {
1142 simple_strtoul(value, &value, 0);
1144 } else if (strnicmp(data, "port", 4) == 0) {
1145 if (value && *value) {
1147 simple_strtoul(value, &value, 0);
1149 } else if (strnicmp(data, "rsize", 5) == 0) {
1150 if (value && *value) {
1152 simple_strtoul(value, &value, 0);
1154 } else if (strnicmp(data, "wsize", 5) == 0) {
1155 if (value && *value) {
1157 simple_strtoul(value, &value, 0);
1159 } else if (strnicmp(data, "sockopt", 5) == 0) {
1160 if (!value || !*value) {
1161 cERROR(1, "no socket option specified");
1163 } else if (strnicmp(value, "TCP_NODELAY", 11) == 0) {
1164 vol->sockopt_tcp_nodelay = 1;
1166 } else if (strnicmp(data, "netbiosname", 4) == 0) {
1167 if (!value || !*value || (*value == ' ')) {
1168 cFYI(1, "invalid (empty) netbiosname");
1170 memset(vol->source_rfc1001_name, 0x20, 15);
1171 for (i = 0; i < 15; i++) {
1172 /* BB are there cases in which a comma can be
1173 valid in this workstation netbios name (and need
1174 special handling)? */
1176 /* We do not uppercase netbiosname for user */
1180 vol->source_rfc1001_name[i] =
1183 /* The string has 16th byte zero still from
1184 set at top of the function */
1185 if ((i == 15) && (value[i] != 0))
1186 printk(KERN_WARNING "CIFS: netbiosname"
1187 " longer than 15 truncated.\n");
1189 } else if (strnicmp(data, "servern", 7) == 0) {
1190 /* servernetbiosname specified override *SMBSERVER */
1191 if (!value || !*value || (*value == ' ')) {
1192 cFYI(1, "empty server netbiosname specified");
1194 /* last byte, type, is 0x20 for servr type */
1195 memset(vol->target_rfc1001_name, 0x20, 16);
1197 for (i = 0; i < 15; i++) {
1198 /* BB are there cases in which a comma can be
1199 valid in this workstation netbios name
1200 (and need special handling)? */
1202 /* user or mount helper must uppercase
1207 vol->target_rfc1001_name[i] =
1210 /* The string has 16th byte zero still from
1211 set at top of the function */
1212 if ((i == 15) && (value[i] != 0))
1213 printk(KERN_WARNING "CIFS: server net"
1214 "biosname longer than 15 truncated.\n");
1216 } else if (strnicmp(data, "credentials", 4) == 0) {
1218 } else if (strnicmp(data, "version", 3) == 0) {
1220 } else if (strnicmp(data, "guest", 5) == 0) {
1222 } else if (strnicmp(data, "rw", 2) == 0) {
1224 } else if (strnicmp(data, "ro", 2) == 0) {
1226 } else if (strnicmp(data, "noblocksend", 11) == 0) {
1227 vol->noblocksnd = 1;
1228 } else if (strnicmp(data, "noautotune", 10) == 0) {
1229 vol->noautotune = 1;
1230 } else if ((strnicmp(data, "suid", 4) == 0) ||
1231 (strnicmp(data, "nosuid", 6) == 0) ||
1232 (strnicmp(data, "exec", 4) == 0) ||
1233 (strnicmp(data, "noexec", 6) == 0) ||
1234 (strnicmp(data, "nodev", 5) == 0) ||
1235 (strnicmp(data, "noauto", 6) == 0) ||
1236 (strnicmp(data, "dev", 3) == 0)) {
1237 /* The mount tool or mount.cifs helper (if present)
1238 uses these opts to set flags, and the flags are read
1239 by the kernel vfs layer before we get here (ie
1240 before read super) so there is no point trying to
1241 parse these options again and set anything and it
1242 is ok to just ignore them */
1244 } else if (strnicmp(data, "hard", 4) == 0) {
1246 } else if (strnicmp(data, "soft", 4) == 0) {
1248 } else if (strnicmp(data, "perm", 4) == 0) {
1250 } else if (strnicmp(data, "noperm", 6) == 0) {
1252 } else if (strnicmp(data, "mapchars", 8) == 0) {
1254 } else if (strnicmp(data, "nomapchars", 10) == 0) {
1256 } else if (strnicmp(data, "sfu", 3) == 0) {
1258 } else if (strnicmp(data, "nosfu", 5) == 0) {
1260 } else if (strnicmp(data, "nodfs", 5) == 0) {
1262 } else if (strnicmp(data, "posixpaths", 10) == 0) {
1263 vol->posix_paths = 1;
1264 } else if (strnicmp(data, "noposixpaths", 12) == 0) {
1265 vol->posix_paths = 0;
1266 } else if (strnicmp(data, "nounix", 6) == 0) {
1267 vol->no_linux_ext = 1;
1268 } else if (strnicmp(data, "nolinux", 7) == 0) {
1269 vol->no_linux_ext = 1;
1270 } else if ((strnicmp(data, "nocase", 6) == 0) ||
1271 (strnicmp(data, "ignorecase", 10) == 0)) {
1273 } else if (strnicmp(data, "mand", 4) == 0) {
1275 } else if (strnicmp(data, "nomand", 6) == 0) {
1277 } else if (strnicmp(data, "_netdev", 7) == 0) {
1279 } else if (strnicmp(data, "brl", 3) == 0) {
1281 } else if ((strnicmp(data, "nobrl", 5) == 0) ||
1282 (strnicmp(data, "nolock", 6) == 0)) {
1284 /* turn off mandatory locking in mode
1285 if remote locking is turned off since the
1286 local vfs will do advisory */
1287 if (vol->file_mode ==
1288 (S_IALLUGO & ~(S_ISUID | S_IXGRP)))
1289 vol->file_mode = S_IALLUGO;
1290 } else if (strnicmp(data, "forcemandatorylock", 9) == 0) {
1291 /* will take the shorter form "forcemand" as well */
1292 /* This mount option will force use of mandatory
1293 (DOS/Windows style) byte range locks, instead of
1294 using posix advisory byte range locks, even if the
1295 Unix extensions are available and posix locks would
1296 be supported otherwise. If Unix extensions are not
1297 negotiated this has no effect since mandatory locks
1298 would be used (mandatory locks is all that those
1299 those servers support) */
1301 } else if (strnicmp(data, "setuids", 7) == 0) {
1303 } else if (strnicmp(data, "nosetuids", 9) == 0) {
1305 } else if (strnicmp(data, "dynperm", 7) == 0) {
1306 vol->dynperm = true;
1307 } else if (strnicmp(data, "nodynperm", 9) == 0) {
1308 vol->dynperm = false;
1309 } else if (strnicmp(data, "nohard", 6) == 0) {
1311 } else if (strnicmp(data, "nosoft", 6) == 0) {
1313 } else if (strnicmp(data, "nointr", 6) == 0) {
1315 } else if (strnicmp(data, "intr", 4) == 0) {
1317 } else if (strnicmp(data, "nostrictsync", 12) == 0) {
1318 vol->nostrictsync = 1;
1319 } else if (strnicmp(data, "strictsync", 10) == 0) {
1320 vol->nostrictsync = 0;
1321 } else if (strnicmp(data, "serverino", 7) == 0) {
1322 vol->server_ino = 1;
1323 } else if (strnicmp(data, "noserverino", 9) == 0) {
1324 vol->server_ino = 0;
1325 } else if (strnicmp(data, "cifsacl", 7) == 0) {
1327 } else if (strnicmp(data, "nocifsacl", 9) == 0) {
1329 } else if (strnicmp(data, "acl", 3) == 0) {
1330 vol->no_psx_acl = 0;
1331 } else if (strnicmp(data, "noacl", 5) == 0) {
1332 vol->no_psx_acl = 1;
1333 #ifdef CONFIG_CIFS_EXPERIMENTAL
1334 } else if (strnicmp(data, "locallease", 6) == 0) {
1335 vol->local_lease = 1;
1337 } else if (strnicmp(data, "sign", 4) == 0) {
1338 vol->secFlg |= CIFSSEC_MUST_SIGN;
1339 } else if (strnicmp(data, "seal", 4) == 0) {
1340 /* we do not do the following in secFlags because seal
1341 is a per tree connection (mount) not a per socket
1342 or per-smb connection option in the protocol */
1343 /* vol->secFlg |= CIFSSEC_MUST_SEAL; */
1345 } else if (strnicmp(data, "direct", 6) == 0) {
1347 } else if (strnicmp(data, "forcedirectio", 13) == 0) {
1349 } else if (strnicmp(data, "noac", 4) == 0) {
1350 printk(KERN_WARNING "CIFS: Mount option noac not "
1351 "supported. Instead set "
1352 "/proc/fs/cifs/LookupCacheEnabled to 0\n");
1353 } else if (strnicmp(data, "fsc", 3) == 0) {
1355 } else if (strnicmp(data, "mfsymlinks", 10) == 0) {
1356 vol->mfsymlinks = true;
1357 } else if (strnicmp(data, "multiuser", 8) == 0) {
1358 vol->multiuser = true;
1360 printk(KERN_WARNING "CIFS: Unknown mount option %s\n",
1363 if (vol->UNC == NULL) {
1364 if (devname == NULL) {
1365 printk(KERN_WARNING "CIFS: Missing UNC name for mount "
1369 if ((temp_len = strnlen(devname, 300)) < 300) {
1370 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1371 if (vol->UNC == NULL)
1373 strcpy(vol->UNC, devname);
1374 if (strncmp(vol->UNC, "//", 2) == 0) {
1377 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1378 printk(KERN_WARNING "CIFS: UNC Path does not "
1379 "begin with // or \\\\ \n");
1382 value = strpbrk(vol->UNC+2, "/\\");
1386 printk(KERN_WARNING "CIFS: UNC name too long\n");
1391 if (vol->multiuser && !(vol->secFlg & CIFSSEC_MAY_KRB5)) {
1392 cERROR(1, "Multiuser mounts currently require krb5 "
1397 if (vol->UNCip == NULL)
1398 vol->UNCip = &vol->UNC[2];
1401 vol->override_uid = override_uid;
1402 else if (override_uid == 1)
1403 printk(KERN_NOTICE "CIFS: ignoring forceuid mount option "
1404 "specified with no uid= option.\n");
1407 vol->override_gid = override_gid;
1408 else if (override_gid == 1)
1409 printk(KERN_NOTICE "CIFS: ignoring forcegid mount option "
1410 "specified with no gid= option.\n");
1415 /** Returns true if srcaddr isn't specified and rhs isn't
1416 * specified, or if srcaddr is specified and
1417 * matches the IP address of the rhs argument.
1420 srcip_matches(struct sockaddr *srcaddr, struct sockaddr *rhs)
1422 switch (srcaddr->sa_family) {
1424 return (rhs->sa_family == AF_UNSPEC);
1426 struct sockaddr_in *saddr4 = (struct sockaddr_in *)srcaddr;
1427 struct sockaddr_in *vaddr4 = (struct sockaddr_in *)rhs;
1428 return (saddr4->sin_addr.s_addr == vaddr4->sin_addr.s_addr);
1431 struct sockaddr_in6 *saddr6 = (struct sockaddr_in6 *)srcaddr;
1432 struct sockaddr_in6 *vaddr6 = (struct sockaddr_in6 *)&rhs;
1433 return ipv6_addr_equal(&saddr6->sin6_addr, &vaddr6->sin6_addr);
1437 return false; /* don't expect to be here */
1443 match_address(struct TCP_Server_Info *server, struct sockaddr *addr,
1444 struct sockaddr *srcaddr)
1446 struct sockaddr_in *addr4 = (struct sockaddr_in *)addr;
1447 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)addr;
1449 switch (addr->sa_family) {
1451 if (addr4->sin_addr.s_addr !=
1452 server->addr.sockAddr.sin_addr.s_addr)
1454 if (addr4->sin_port &&
1455 addr4->sin_port != server->addr.sockAddr.sin_port)
1459 if (!ipv6_addr_equal(&addr6->sin6_addr,
1460 &server->addr.sockAddr6.sin6_addr))
1462 if (addr6->sin6_scope_id !=
1463 server->addr.sockAddr6.sin6_scope_id)
1465 if (addr6->sin6_port &&
1466 addr6->sin6_port != server->addr.sockAddr6.sin6_port)
1471 if (!srcip_matches(srcaddr, (struct sockaddr *)&server->srcaddr))
1478 match_security(struct TCP_Server_Info *server, struct smb_vol *vol)
1480 unsigned int secFlags;
1482 if (vol->secFlg & (~(CIFSSEC_MUST_SIGN | CIFSSEC_MUST_SEAL)))
1483 secFlags = vol->secFlg;
1485 secFlags = global_secflags | vol->secFlg;
1487 switch (server->secType) {
1489 if (!(secFlags & (CIFSSEC_MAY_LANMAN|CIFSSEC_MAY_PLNTXT)))
1493 if (!(secFlags & CIFSSEC_MAY_NTLMV2))
1497 if (!(secFlags & CIFSSEC_MAY_NTLM))
1501 if (!(secFlags & CIFSSEC_MAY_KRB5))
1505 if (!(secFlags & CIFSSEC_MAY_NTLMSSP))
1509 /* shouldn't happen */
1513 /* now check if signing mode is acceptible */
1514 if ((secFlags & CIFSSEC_MAY_SIGN) == 0 &&
1515 (server->secMode & SECMODE_SIGN_REQUIRED))
1517 else if (((secFlags & CIFSSEC_MUST_SIGN) == CIFSSEC_MUST_SIGN) &&
1519 (SECMODE_SIGN_ENABLED|SECMODE_SIGN_REQUIRED)) == 0)
1525 static struct TCP_Server_Info *
1526 cifs_find_tcp_session(struct sockaddr *addr, struct smb_vol *vol)
1528 struct TCP_Server_Info *server;
1530 spin_lock(&cifs_tcp_ses_lock);
1531 list_for_each_entry(server, &cifs_tcp_ses_list, tcp_ses_list) {
1532 if (!match_address(server, addr,
1533 (struct sockaddr *)&vol->srcaddr))
1536 if (!match_security(server, vol))
1539 ++server->srv_count;
1540 spin_unlock(&cifs_tcp_ses_lock);
1541 cFYI(1, "Existing tcp session with server found");
1544 spin_unlock(&cifs_tcp_ses_lock);
1549 cifs_put_tcp_session(struct TCP_Server_Info *server)
1551 struct task_struct *task;
1553 spin_lock(&cifs_tcp_ses_lock);
1554 if (--server->srv_count > 0) {
1555 spin_unlock(&cifs_tcp_ses_lock);
1559 list_del_init(&server->tcp_ses_list);
1560 spin_unlock(&cifs_tcp_ses_lock);
1562 spin_lock(&GlobalMid_Lock);
1563 server->tcpStatus = CifsExiting;
1564 spin_unlock(&GlobalMid_Lock);
1566 cifs_fscache_release_client_cookie(server);
1568 kfree(server->session_key.response);
1569 server->session_key.response = NULL;
1570 server->session_key.len = 0;
1572 task = xchg(&server->tsk, NULL);
1574 force_sig(SIGKILL, task);
1577 static struct TCP_Server_Info *
1578 cifs_get_tcp_session(struct smb_vol *volume_info)
1580 struct TCP_Server_Info *tcp_ses = NULL;
1581 struct sockaddr_storage addr;
1582 struct sockaddr_in *sin_server = (struct sockaddr_in *) &addr;
1583 struct sockaddr_in6 *sin_server6 = (struct sockaddr_in6 *) &addr;
1586 memset(&addr, 0, sizeof(struct sockaddr_storage));
1588 cFYI(1, "UNC: %s ip: %s", volume_info->UNC, volume_info->UNCip);
1590 if (volume_info->UNCip && volume_info->UNC) {
1591 rc = cifs_fill_sockaddr((struct sockaddr *)&addr,
1593 strlen(volume_info->UNCip),
1596 /* we failed translating address */
1600 } else if (volume_info->UNCip) {
1601 /* BB using ip addr as tcp_ses name to connect to the
1603 cERROR(1, "Connecting to DFS root not implemented yet");
1606 } else /* which tcp_sess DFS root would we conect to */ {
1607 cERROR(1, "CIFS mount error: No UNC path (e.g. -o "
1608 "unc=//192.168.1.100/public) specified");
1613 /* see if we already have a matching tcp_ses */
1614 tcp_ses = cifs_find_tcp_session((struct sockaddr *)&addr, volume_info);
1618 tcp_ses = kzalloc(sizeof(struct TCP_Server_Info), GFP_KERNEL);
1624 tcp_ses->hostname = extract_hostname(volume_info->UNC);
1625 if (IS_ERR(tcp_ses->hostname)) {
1626 rc = PTR_ERR(tcp_ses->hostname);
1630 tcp_ses->noblocksnd = volume_info->noblocksnd;
1631 tcp_ses->noautotune = volume_info->noautotune;
1632 tcp_ses->tcp_nodelay = volume_info->sockopt_tcp_nodelay;
1633 atomic_set(&tcp_ses->inFlight, 0);
1634 init_waitqueue_head(&tcp_ses->response_q);
1635 init_waitqueue_head(&tcp_ses->request_q);
1636 INIT_LIST_HEAD(&tcp_ses->pending_mid_q);
1637 mutex_init(&tcp_ses->srv_mutex);
1638 memcpy(tcp_ses->workstation_RFC1001_name,
1639 volume_info->source_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1640 memcpy(tcp_ses->server_RFC1001_name,
1641 volume_info->target_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1642 tcp_ses->session_estab = false;
1643 tcp_ses->sequence_number = 0;
1644 INIT_LIST_HEAD(&tcp_ses->tcp_ses_list);
1645 INIT_LIST_HEAD(&tcp_ses->smb_ses_list);
1648 * at this point we are the only ones with the pointer
1649 * to the struct since the kernel thread not created yet
1650 * no need to spinlock this init of tcpStatus or srv_count
1652 tcp_ses->tcpStatus = CifsNew;
1653 memcpy(&tcp_ses->srcaddr, &volume_info->srcaddr,
1654 sizeof(tcp_ses->srcaddr));
1655 ++tcp_ses->srv_count;
1657 if (addr.ss_family == AF_INET6) {
1658 cFYI(1, "attempting ipv6 connect");
1659 /* BB should we allow ipv6 on port 139? */
1660 /* other OS never observed in Wild doing 139 with v6 */
1661 memcpy(&tcp_ses->addr.sockAddr6, sin_server6,
1662 sizeof(struct sockaddr_in6));
1663 rc = ipv6_connect(tcp_ses);
1665 memcpy(&tcp_ses->addr.sockAddr, sin_server,
1666 sizeof(struct sockaddr_in));
1667 rc = ipv4_connect(tcp_ses);
1670 cERROR(1, "Error connecting to socket. Aborting operation");
1675 * since we're in a cifs function already, we know that
1676 * this will succeed. No need for try_module_get().
1678 __module_get(THIS_MODULE);
1679 tcp_ses->tsk = kthread_run((void *)(void *)cifs_demultiplex_thread,
1681 if (IS_ERR(tcp_ses->tsk)) {
1682 rc = PTR_ERR(tcp_ses->tsk);
1683 cERROR(1, "error %d create cifsd thread", rc);
1684 module_put(THIS_MODULE);
1688 /* thread spawned, put it on the list */
1689 spin_lock(&cifs_tcp_ses_lock);
1690 list_add(&tcp_ses->tcp_ses_list, &cifs_tcp_ses_list);
1691 spin_unlock(&cifs_tcp_ses_lock);
1693 cifs_fscache_get_client_cookie(tcp_ses);
1699 if (!IS_ERR(tcp_ses->hostname))
1700 kfree(tcp_ses->hostname);
1701 if (tcp_ses->ssocket)
1702 sock_release(tcp_ses->ssocket);
1708 static struct cifsSesInfo *
1709 cifs_find_smb_ses(struct TCP_Server_Info *server, struct smb_vol *vol)
1711 struct cifsSesInfo *ses;
1713 spin_lock(&cifs_tcp_ses_lock);
1714 list_for_each_entry(ses, &server->smb_ses_list, smb_ses_list) {
1715 switch (server->secType) {
1717 if (vol->cred_uid != ses->cred_uid)
1721 /* anything else takes username/password */
1722 if (strncmp(ses->userName, vol->username,
1725 if (strlen(vol->username) != 0 &&
1726 ses->password != NULL &&
1727 strncmp(ses->password,
1728 vol->password ? vol->password : "",
1733 spin_unlock(&cifs_tcp_ses_lock);
1736 spin_unlock(&cifs_tcp_ses_lock);
1741 cifs_put_smb_ses(struct cifsSesInfo *ses)
1744 struct TCP_Server_Info *server = ses->server;
1746 cFYI(1, "%s: ses_count=%d\n", __func__, ses->ses_count);
1747 spin_lock(&cifs_tcp_ses_lock);
1748 if (--ses->ses_count > 0) {
1749 spin_unlock(&cifs_tcp_ses_lock);
1753 list_del_init(&ses->smb_ses_list);
1754 spin_unlock(&cifs_tcp_ses_lock);
1756 if (ses->status == CifsGood) {
1758 CIFSSMBLogoff(xid, ses);
1762 cifs_put_tcp_session(server);
1765 static struct cifsSesInfo *
1766 cifs_get_smb_ses(struct TCP_Server_Info *server, struct smb_vol *volume_info)
1768 int rc = -ENOMEM, xid;
1769 struct cifsSesInfo *ses;
1773 ses = cifs_find_smb_ses(server, volume_info);
1775 cFYI(1, "Existing smb sess found (status=%d)", ses->status);
1777 mutex_lock(&ses->session_mutex);
1778 rc = cifs_negotiate_protocol(xid, ses);
1780 mutex_unlock(&ses->session_mutex);
1781 /* problem -- put our ses reference */
1782 cifs_put_smb_ses(ses);
1786 if (ses->need_reconnect) {
1787 cFYI(1, "Session needs reconnect");
1788 rc = cifs_setup_session(xid, ses,
1789 volume_info->local_nls);
1791 mutex_unlock(&ses->session_mutex);
1792 /* problem -- put our reference */
1793 cifs_put_smb_ses(ses);
1798 mutex_unlock(&ses->session_mutex);
1800 /* existing SMB ses has a server reference already */
1801 cifs_put_tcp_session(server);
1806 cFYI(1, "Existing smb sess not found");
1807 ses = sesInfoAlloc();
1813 /* new SMB session uses our server ref */
1814 ses->server = server;
1815 if (server->addr.sockAddr6.sin6_family == AF_INET6)
1816 sprintf(ses->serverName, "%pI6",
1817 &server->addr.sockAddr6.sin6_addr);
1819 sprintf(ses->serverName, "%pI4",
1820 &server->addr.sockAddr.sin_addr.s_addr);
1822 if (volume_info->username)
1823 strncpy(ses->userName, volume_info->username,
1826 /* volume_info->password freed at unmount */
1827 if (volume_info->password) {
1828 ses->password = kstrdup(volume_info->password, GFP_KERNEL);
1832 if (volume_info->domainname) {
1833 int len = strlen(volume_info->domainname);
1834 ses->domainName = kmalloc(len + 1, GFP_KERNEL);
1835 if (ses->domainName)
1836 strcpy(ses->domainName, volume_info->domainname);
1838 ses->cred_uid = volume_info->cred_uid;
1839 ses->linux_uid = volume_info->linux_uid;
1840 ses->overrideSecFlg = volume_info->secFlg;
1842 mutex_lock(&ses->session_mutex);
1843 rc = cifs_negotiate_protocol(xid, ses);
1845 rc = cifs_setup_session(xid, ses, volume_info->local_nls);
1846 mutex_unlock(&ses->session_mutex);
1850 /* success, put it on the list */
1851 spin_lock(&cifs_tcp_ses_lock);
1852 list_add(&ses->smb_ses_list, &server->smb_ses_list);
1853 spin_unlock(&cifs_tcp_ses_lock);
1864 static struct cifsTconInfo *
1865 cifs_find_tcon(struct cifsSesInfo *ses, const char *unc)
1867 struct list_head *tmp;
1868 struct cifsTconInfo *tcon;
1870 spin_lock(&cifs_tcp_ses_lock);
1871 list_for_each(tmp, &ses->tcon_list) {
1872 tcon = list_entry(tmp, struct cifsTconInfo, tcon_list);
1873 if (tcon->tidStatus == CifsExiting)
1875 if (strncmp(tcon->treeName, unc, MAX_TREE_SIZE))
1879 spin_unlock(&cifs_tcp_ses_lock);
1882 spin_unlock(&cifs_tcp_ses_lock);
1887 cifs_put_tcon(struct cifsTconInfo *tcon)
1890 struct cifsSesInfo *ses = tcon->ses;
1892 cFYI(1, "%s: tc_count=%d\n", __func__, tcon->tc_count);
1893 spin_lock(&cifs_tcp_ses_lock);
1894 if (--tcon->tc_count > 0) {
1895 spin_unlock(&cifs_tcp_ses_lock);
1899 list_del_init(&tcon->tcon_list);
1900 spin_unlock(&cifs_tcp_ses_lock);
1903 CIFSSMBTDis(xid, tcon);
1906 cifs_fscache_release_super_cookie(tcon);
1908 cifs_put_smb_ses(ses);
1911 static struct cifsTconInfo *
1912 cifs_get_tcon(struct cifsSesInfo *ses, struct smb_vol *volume_info)
1915 struct cifsTconInfo *tcon;
1917 tcon = cifs_find_tcon(ses, volume_info->UNC);
1919 cFYI(1, "Found match on UNC path");
1920 /* existing tcon already has a reference */
1921 cifs_put_smb_ses(ses);
1922 if (tcon->seal != volume_info->seal)
1923 cERROR(1, "transport encryption setting "
1924 "conflicts with existing tid");
1928 tcon = tconInfoAlloc();
1935 if (volume_info->password) {
1936 tcon->password = kstrdup(volume_info->password, GFP_KERNEL);
1937 if (!tcon->password) {
1943 if (strchr(volume_info->UNC + 3, '\\') == NULL
1944 && strchr(volume_info->UNC + 3, '/') == NULL) {
1945 cERROR(1, "Missing share name");
1950 /* BB Do we need to wrap session_mutex around
1951 * this TCon call and Unix SetFS as
1952 * we do on SessSetup and reconnect? */
1954 rc = CIFSTCon(xid, ses, volume_info->UNC, tcon, volume_info->local_nls);
1956 cFYI(1, "CIFS Tcon rc = %d", rc);
1960 if (volume_info->nodfs) {
1961 tcon->Flags &= ~SMB_SHARE_IS_IN_DFS;
1962 cFYI(1, "DFS disabled (%d)", tcon->Flags);
1964 tcon->seal = volume_info->seal;
1965 /* we can have only one retry value for a connection
1966 to a share so for resources mounted more than once
1967 to the same server share the last value passed in
1968 for the retry flag is used */
1969 tcon->retry = volume_info->retry;
1970 tcon->nocase = volume_info->nocase;
1971 tcon->local_lease = volume_info->local_lease;
1973 spin_lock(&cifs_tcp_ses_lock);
1974 list_add(&tcon->tcon_list, &ses->tcon_list);
1975 spin_unlock(&cifs_tcp_ses_lock);
1977 cifs_fscache_get_super_cookie(tcon);
1987 cifs_put_tlink(struct tcon_link *tlink)
1989 if (!tlink || IS_ERR(tlink))
1992 if (!atomic_dec_and_test(&tlink->tl_count) ||
1993 test_bit(TCON_LINK_IN_TREE, &tlink->tl_flags)) {
1994 tlink->tl_time = jiffies;
1998 if (!IS_ERR(tlink_tcon(tlink)))
1999 cifs_put_tcon(tlink_tcon(tlink));
2005 get_dfs_path(int xid, struct cifsSesInfo *pSesInfo, const char *old_path,
2006 const struct nls_table *nls_codepage, unsigned int *pnum_referrals,
2007 struct dfs_info3_param **preferrals, int remap)
2012 *pnum_referrals = 0;
2015 if (pSesInfo->ipc_tid == 0) {
2016 temp_unc = kmalloc(2 /* for slashes */ +
2017 strnlen(pSesInfo->serverName,
2018 SERVER_NAME_LEN_WITH_NULL * 2)
2019 + 1 + 4 /* slash IPC$ */ + 2,
2021 if (temp_unc == NULL)
2025 strcpy(temp_unc + 2, pSesInfo->serverName);
2026 strcpy(temp_unc + 2 + strlen(pSesInfo->serverName), "\\IPC$");
2027 rc = CIFSTCon(xid, pSesInfo, temp_unc, NULL, nls_codepage);
2028 cFYI(1, "CIFS Tcon rc = %d ipc_tid = %d", rc, pSesInfo->ipc_tid);
2032 rc = CIFSGetDFSRefer(xid, pSesInfo, old_path, preferrals,
2033 pnum_referrals, nls_codepage, remap);
2034 /* BB map targetUNCs to dfs_info3 structures, here or
2035 in CIFSGetDFSRefer BB */
2040 #ifdef CONFIG_DEBUG_LOCK_ALLOC
2041 static struct lock_class_key cifs_key[2];
2042 static struct lock_class_key cifs_slock_key[2];
2045 cifs_reclassify_socket4(struct socket *sock)
2047 struct sock *sk = sock->sk;
2048 BUG_ON(sock_owned_by_user(sk));
2049 sock_lock_init_class_and_name(sk, "slock-AF_INET-CIFS",
2050 &cifs_slock_key[0], "sk_lock-AF_INET-CIFS", &cifs_key[0]);
2054 cifs_reclassify_socket6(struct socket *sock)
2056 struct sock *sk = sock->sk;
2057 BUG_ON(sock_owned_by_user(sk));
2058 sock_lock_init_class_and_name(sk, "slock-AF_INET6-CIFS",
2059 &cifs_slock_key[1], "sk_lock-AF_INET6-CIFS", &cifs_key[1]);
2063 cifs_reclassify_socket4(struct socket *sock)
2068 cifs_reclassify_socket6(struct socket *sock)
2073 /* See RFC1001 section 14 on representation of Netbios names */
2074 static void rfc1002mangle(char *target, char *source, unsigned int length)
2078 for (i = 0, j = 0; i < (length); i++) {
2079 /* mask a nibble at a time and encode */
2080 target[j] = 'A' + (0x0F & (source[i] >> 4));
2081 target[j+1] = 'A' + (0x0F & source[i]);
2088 bind_socket(struct TCP_Server_Info *server)
2091 if (server->srcaddr.ss_family != AF_UNSPEC) {
2092 /* Bind to the specified local IP address */
2093 struct socket *socket = server->ssocket;
2094 rc = socket->ops->bind(socket,
2095 (struct sockaddr *) &server->srcaddr,
2096 sizeof(server->srcaddr));
2098 struct sockaddr_in *saddr4;
2099 struct sockaddr_in6 *saddr6;
2100 saddr4 = (struct sockaddr_in *)&server->srcaddr;
2101 saddr6 = (struct sockaddr_in6 *)&server->srcaddr;
2102 if (saddr6->sin6_family == AF_INET6)
2104 "Failed to bind to: %pI6c, error: %d\n",
2105 &saddr6->sin6_addr, rc);
2108 "Failed to bind to: %pI4, error: %d\n",
2109 &saddr4->sin_addr.s_addr, rc);
2116 ipv4_connect(struct TCP_Server_Info *server)
2120 bool connected = false;
2121 __be16 orig_port = 0;
2122 struct socket *socket = server->ssocket;
2124 if (socket == NULL) {
2125 rc = sock_create_kern(PF_INET, SOCK_STREAM,
2126 IPPROTO_TCP, &socket);
2128 cERROR(1, "Error %d creating socket", rc);
2132 /* BB other socket options to set KEEPALIVE, NODELAY? */
2133 cFYI(1, "Socket created");
2134 server->ssocket = socket;
2135 socket->sk->sk_allocation = GFP_NOFS;
2136 cifs_reclassify_socket4(socket);
2139 rc = bind_socket(server);
2143 /* user overrode default port */
2144 if (server->addr.sockAddr.sin_port) {
2145 rc = socket->ops->connect(socket, (struct sockaddr *)
2146 &server->addr.sockAddr,
2147 sizeof(struct sockaddr_in), 0);
2153 /* save original port so we can retry user specified port
2154 later if fall back ports fail this time */
2155 orig_port = server->addr.sockAddr.sin_port;
2157 /* do not retry on the same port we just failed on */
2158 if (server->addr.sockAddr.sin_port != htons(CIFS_PORT)) {
2159 server->addr.sockAddr.sin_port = htons(CIFS_PORT);
2160 rc = socket->ops->connect(socket,
2162 &server->addr.sockAddr,
2163 sizeof(struct sockaddr_in), 0);
2169 server->addr.sockAddr.sin_port = htons(RFC1001_PORT);
2170 rc = socket->ops->connect(socket, (struct sockaddr *)
2171 &server->addr.sockAddr,
2172 sizeof(struct sockaddr_in), 0);
2177 /* give up here - unless we want to retry on different
2178 protocol families some day */
2181 server->addr.sockAddr.sin_port = orig_port;
2182 cFYI(1, "Error %d connecting to server via ipv4", rc);
2183 sock_release(socket);
2184 server->ssocket = NULL;
2190 * Eventually check for other socket options to change from
2191 * the default. sock_setsockopt not used because it expects
2194 socket->sk->sk_rcvtimeo = 7 * HZ;
2195 socket->sk->sk_sndtimeo = 5 * HZ;
2197 /* make the bufsizes depend on wsize/rsize and max requests */
2198 if (server->noautotune) {
2199 if (socket->sk->sk_sndbuf < (200 * 1024))
2200 socket->sk->sk_sndbuf = 200 * 1024;
2201 if (socket->sk->sk_rcvbuf < (140 * 1024))
2202 socket->sk->sk_rcvbuf = 140 * 1024;
2205 if (server->tcp_nodelay) {
2207 rc = kernel_setsockopt(socket, SOL_TCP, TCP_NODELAY,
2208 (char *)&val, sizeof(val));
2210 cFYI(1, "set TCP_NODELAY socket option error %d", rc);
2213 cFYI(1, "sndbuf %d rcvbuf %d rcvtimeo 0x%lx",
2214 socket->sk->sk_sndbuf,
2215 socket->sk->sk_rcvbuf, socket->sk->sk_rcvtimeo);
2217 /* send RFC1001 sessinit */
2218 if (server->addr.sockAddr.sin_port == htons(RFC1001_PORT)) {
2219 /* some servers require RFC1001 sessinit before sending
2220 negprot - BB check reconnection in case where second
2221 sessinit is sent but no second negprot */
2222 struct rfc1002_session_packet *ses_init_buf;
2223 struct smb_hdr *smb_buf;
2224 ses_init_buf = kzalloc(sizeof(struct rfc1002_session_packet),
2227 ses_init_buf->trailer.session_req.called_len = 32;
2228 if (server->server_RFC1001_name &&
2229 server->server_RFC1001_name[0] != 0)
2230 rfc1002mangle(ses_init_buf->trailer.
2231 session_req.called_name,
2232 server->server_RFC1001_name,
2233 RFC1001_NAME_LEN_WITH_NULL);
2235 rfc1002mangle(ses_init_buf->trailer.
2236 session_req.called_name,
2237 DEFAULT_CIFS_CALLED_NAME,
2238 RFC1001_NAME_LEN_WITH_NULL);
2240 ses_init_buf->trailer.session_req.calling_len = 32;
2242 /* calling name ends in null (byte 16) from old smb
2244 if (server->workstation_RFC1001_name &&
2245 server->workstation_RFC1001_name[0] != 0)
2246 rfc1002mangle(ses_init_buf->trailer.
2247 session_req.calling_name,
2248 server->workstation_RFC1001_name,
2249 RFC1001_NAME_LEN_WITH_NULL);
2251 rfc1002mangle(ses_init_buf->trailer.
2252 session_req.calling_name,
2254 RFC1001_NAME_LEN_WITH_NULL);
2256 ses_init_buf->trailer.session_req.scope1 = 0;
2257 ses_init_buf->trailer.session_req.scope2 = 0;
2258 smb_buf = (struct smb_hdr *)ses_init_buf;
2259 /* sizeof RFC1002_SESSION_REQUEST with no scope */
2260 smb_buf->smb_buf_length = 0x81000044;
2261 rc = smb_send(server, smb_buf, 0x44);
2262 kfree(ses_init_buf);
2263 msleep(1); /* RFC1001 layer in at least one server
2264 requires very short break before negprot
2265 presumably because not expecting negprot
2266 to follow so fast. This is a simple
2267 solution that works without
2268 complicating the code and causes no
2269 significant slowing down on mount
2270 for everyone else */
2272 /* else the negprot may still work without this
2273 even though malloc failed */
2281 ipv6_connect(struct TCP_Server_Info *server)
2285 bool connected = false;
2286 __be16 orig_port = 0;
2287 struct socket *socket = server->ssocket;
2289 if (socket == NULL) {
2290 rc = sock_create_kern(PF_INET6, SOCK_STREAM,
2291 IPPROTO_TCP, &socket);
2293 cERROR(1, "Error %d creating ipv6 socket", rc);
2298 /* BB other socket options to set KEEPALIVE, NODELAY? */
2299 cFYI(1, "ipv6 Socket created");
2300 server->ssocket = socket;
2301 socket->sk->sk_allocation = GFP_NOFS;
2302 cifs_reclassify_socket6(socket);
2305 rc = bind_socket(server);
2309 /* user overrode default port */
2310 if (server->addr.sockAddr6.sin6_port) {
2311 rc = socket->ops->connect(socket,
2312 (struct sockaddr *) &server->addr.sockAddr6,
2313 sizeof(struct sockaddr_in6), 0);
2319 /* save original port so we can retry user specified port
2320 later if fall back ports fail this time */
2322 orig_port = server->addr.sockAddr6.sin6_port;
2323 /* do not retry on the same port we just failed on */
2324 if (server->addr.sockAddr6.sin6_port != htons(CIFS_PORT)) {
2325 server->addr.sockAddr6.sin6_port = htons(CIFS_PORT);
2326 rc = socket->ops->connect(socket, (struct sockaddr *)
2327 &server->addr.sockAddr6,
2328 sizeof(struct sockaddr_in6), 0);
2334 server->addr.sockAddr6.sin6_port = htons(RFC1001_PORT);
2335 rc = socket->ops->connect(socket, (struct sockaddr *)
2336 &server->addr.sockAddr6,
2337 sizeof(struct sockaddr_in6), 0);
2342 /* give up here - unless we want to retry on different
2343 protocol families some day */
2346 server->addr.sockAddr6.sin6_port = orig_port;
2347 cFYI(1, "Error %d connecting to server via ipv6", rc);
2348 sock_release(socket);
2349 server->ssocket = NULL;
2354 * Eventually check for other socket options to change from
2355 * the default. sock_setsockopt not used because it expects
2358 socket->sk->sk_rcvtimeo = 7 * HZ;
2359 socket->sk->sk_sndtimeo = 5 * HZ;
2361 if (server->tcp_nodelay) {
2363 rc = kernel_setsockopt(socket, SOL_TCP, TCP_NODELAY,
2364 (char *)&val, sizeof(val));
2366 cFYI(1, "set TCP_NODELAY socket option error %d", rc);
2369 server->ssocket = socket;
2374 void reset_cifs_unix_caps(int xid, struct cifsTconInfo *tcon,
2375 struct super_block *sb, struct smb_vol *vol_info)
2377 /* if we are reconnecting then should we check to see if
2378 * any requested capabilities changed locally e.g. via
2379 * remount but we can not do much about it here
2380 * if they have (even if we could detect it by the following)
2381 * Perhaps we could add a backpointer to array of sb from tcon
2382 * or if we change to make all sb to same share the same
2383 * sb as NFS - then we only have one backpointer to sb.
2384 * What if we wanted to mount the server share twice once with
2385 * and once without posixacls or posix paths? */
2386 __u64 saved_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2388 if (vol_info && vol_info->no_linux_ext) {
2389 tcon->fsUnixInfo.Capability = 0;
2390 tcon->unix_ext = 0; /* Unix Extensions disabled */
2391 cFYI(1, "Linux protocol extensions disabled");
2393 } else if (vol_info)
2394 tcon->unix_ext = 1; /* Unix Extensions supported */
2396 if (tcon->unix_ext == 0) {
2397 cFYI(1, "Unix extensions disabled so not set on reconnect");
2401 if (!CIFSSMBQFSUnixInfo(xid, tcon)) {
2402 __u64 cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2404 /* check for reconnect case in which we do not
2405 want to change the mount behavior if we can avoid it */
2406 if (vol_info == NULL) {
2407 /* turn off POSIX ACL and PATHNAMES if not set
2408 originally at mount time */
2409 if ((saved_cap & CIFS_UNIX_POSIX_ACL_CAP) == 0)
2410 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2411 if ((saved_cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2412 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2413 cERROR(1, "POSIXPATH support change");
2414 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2415 } else if ((cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2416 cERROR(1, "possible reconnect error");
2417 cERROR(1, "server disabled POSIX path support");
2421 cap &= CIFS_UNIX_CAP_MASK;
2422 if (vol_info && vol_info->no_psx_acl)
2423 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2424 else if (CIFS_UNIX_POSIX_ACL_CAP & cap) {
2425 cFYI(1, "negotiated posix acl support");
2427 sb->s_flags |= MS_POSIXACL;
2430 if (vol_info && vol_info->posix_paths == 0)
2431 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2432 else if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) {
2433 cFYI(1, "negotiate posix pathnames");
2435 CIFS_SB(sb)->mnt_cifs_flags |=
2436 CIFS_MOUNT_POSIX_PATHS;
2439 /* We might be setting the path sep back to a different
2440 form if we are reconnecting and the server switched its
2441 posix path capability for this share */
2442 if (sb && (CIFS_SB(sb)->prepathlen > 0))
2443 CIFS_SB(sb)->prepath[0] = CIFS_DIR_SEP(CIFS_SB(sb));
2445 if (sb && (CIFS_SB(sb)->rsize > 127 * 1024)) {
2446 if ((cap & CIFS_UNIX_LARGE_READ_CAP) == 0) {
2447 CIFS_SB(sb)->rsize = 127 * 1024;
2448 cFYI(DBG2, "larger reads not supported by srv");
2453 cFYI(1, "Negotiate caps 0x%x", (int)cap);
2454 #ifdef CONFIG_CIFS_DEBUG2
2455 if (cap & CIFS_UNIX_FCNTL_CAP)
2456 cFYI(1, "FCNTL cap");
2457 if (cap & CIFS_UNIX_EXTATTR_CAP)
2458 cFYI(1, "EXTATTR cap");
2459 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2460 cFYI(1, "POSIX path cap");
2461 if (cap & CIFS_UNIX_XATTR_CAP)
2462 cFYI(1, "XATTR cap");
2463 if (cap & CIFS_UNIX_POSIX_ACL_CAP)
2464 cFYI(1, "POSIX ACL cap");
2465 if (cap & CIFS_UNIX_LARGE_READ_CAP)
2466 cFYI(1, "very large read cap");
2467 if (cap & CIFS_UNIX_LARGE_WRITE_CAP)
2468 cFYI(1, "very large write cap");
2469 #endif /* CIFS_DEBUG2 */
2470 if (CIFSSMBSetFSUnixInfo(xid, tcon, cap)) {
2471 if (vol_info == NULL) {
2472 cFYI(1, "resetting capabilities failed");
2474 cERROR(1, "Negotiating Unix capabilities "
2475 "with the server failed. Consider "
2476 "mounting with the Unix Extensions\n"
2477 "disabled, if problems are found, "
2478 "by specifying the nounix mount "
2486 convert_delimiter(char *path, char delim)
2499 for (i = 0; path[i] != '\0'; i++) {
2500 if (path[i] == old_delim)
2505 static void setup_cifs_sb(struct smb_vol *pvolume_info,
2506 struct cifs_sb_info *cifs_sb)
2508 INIT_DELAYED_WORK(&cifs_sb->prune_tlinks, cifs_prune_tlinks);
2510 if (pvolume_info->rsize > CIFSMaxBufSize) {
2511 cERROR(1, "rsize %d too large, using MaxBufSize",
2512 pvolume_info->rsize);
2513 cifs_sb->rsize = CIFSMaxBufSize;
2514 } else if ((pvolume_info->rsize) &&
2515 (pvolume_info->rsize <= CIFSMaxBufSize))
2516 cifs_sb->rsize = pvolume_info->rsize;
2518 cifs_sb->rsize = CIFSMaxBufSize;
2520 if (pvolume_info->wsize > PAGEVEC_SIZE * PAGE_CACHE_SIZE) {
2521 cERROR(1, "wsize %d too large, using 4096 instead",
2522 pvolume_info->wsize);
2523 cifs_sb->wsize = 4096;
2524 } else if (pvolume_info->wsize)
2525 cifs_sb->wsize = pvolume_info->wsize;
2527 cifs_sb->wsize = min_t(const int,
2528 PAGEVEC_SIZE * PAGE_CACHE_SIZE,
2530 /* old default of CIFSMaxBufSize was too small now
2531 that SMB Write2 can send multiple pages in kvec.
2532 RFC1001 does not describe what happens when frame
2533 bigger than 128K is sent so use that as max in
2534 conjunction with 52K kvec constraint on arch with 4K
2537 if (cifs_sb->rsize < 2048) {
2538 cifs_sb->rsize = 2048;
2539 /* Windows ME may prefer this */
2540 cFYI(1, "readsize set to minimum: 2048");
2542 /* calculate prepath */
2543 cifs_sb->prepath = pvolume_info->prepath;
2544 if (cifs_sb->prepath) {
2545 cifs_sb->prepathlen = strlen(cifs_sb->prepath);
2546 /* we can not convert the / to \ in the path
2547 separators in the prefixpath yet because we do not
2548 know (until reset_cifs_unix_caps is called later)
2549 whether POSIX PATH CAP is available. We normalize
2550 the / to \ after reset_cifs_unix_caps is called */
2551 pvolume_info->prepath = NULL;
2553 cifs_sb->prepathlen = 0;
2554 cifs_sb->mnt_uid = pvolume_info->linux_uid;
2555 cifs_sb->mnt_gid = pvolume_info->linux_gid;
2556 cifs_sb->mnt_file_mode = pvolume_info->file_mode;
2557 cifs_sb->mnt_dir_mode = pvolume_info->dir_mode;
2558 cFYI(1, "file mode: 0x%x dir mode: 0x%x",
2559 cifs_sb->mnt_file_mode, cifs_sb->mnt_dir_mode);
2561 if (pvolume_info->noperm)
2562 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_PERM;
2563 if (pvolume_info->setuids)
2564 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SET_UID;
2565 if (pvolume_info->server_ino)
2566 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SERVER_INUM;
2567 if (pvolume_info->remap)
2568 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MAP_SPECIAL_CHR;
2569 if (pvolume_info->no_xattr)
2570 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_XATTR;
2571 if (pvolume_info->sfu_emul)
2572 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_UNX_EMUL;
2573 if (pvolume_info->nobrl)
2574 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_BRL;
2575 if (pvolume_info->nostrictsync)
2576 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOSSYNC;
2577 if (pvolume_info->mand_lock)
2578 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOPOSIXBRL;
2579 if (pvolume_info->cifs_acl)
2580 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_ACL;
2581 if (pvolume_info->override_uid)
2582 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_UID;
2583 if (pvolume_info->override_gid)
2584 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_GID;
2585 if (pvolume_info->dynperm)
2586 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DYNPERM;
2587 if (pvolume_info->fsc)
2588 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_FSCACHE;
2589 if (pvolume_info->multiuser)
2590 cifs_sb->mnt_cifs_flags |= (CIFS_MOUNT_MULTIUSER |
2591 CIFS_MOUNT_NO_PERM);
2592 if (pvolume_info->direct_io) {
2593 cFYI(1, "mounting share using direct i/o");
2594 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DIRECT_IO;
2596 if (pvolume_info->mfsymlinks) {
2597 if (pvolume_info->sfu_emul) {
2598 cERROR(1, "mount option mfsymlinks ignored if sfu "
2599 "mount option is used");
2601 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MF_SYMLINKS;
2605 if ((pvolume_info->cifs_acl) && (pvolume_info->dynperm))
2606 cERROR(1, "mount option dynperm ignored if cifsacl "
2607 "mount option supported");
2611 is_path_accessible(int xid, struct cifsTconInfo *tcon,
2612 struct cifs_sb_info *cifs_sb, const char *full_path)
2615 FILE_ALL_INFO *pfile_info;
2617 pfile_info = kmalloc(sizeof(FILE_ALL_INFO), GFP_KERNEL);
2618 if (pfile_info == NULL)
2621 rc = CIFSSMBQPathInfo(xid, tcon, full_path, pfile_info,
2622 0 /* not legacy */, cifs_sb->local_nls,
2623 cifs_sb->mnt_cifs_flags &
2624 CIFS_MOUNT_MAP_SPECIAL_CHR);
2630 cleanup_volume_info(struct smb_vol **pvolume_info)
2632 struct smb_vol *volume_info;
2634 if (!pvolume_info || !*pvolume_info)
2637 volume_info = *pvolume_info;
2638 kzfree(volume_info->password);
2639 kfree(volume_info->UNC);
2640 kfree(volume_info->prepath);
2642 *pvolume_info = NULL;
2646 #ifdef CONFIG_CIFS_DFS_UPCALL
2647 /* build_path_to_root returns full path to root when
2648 * we do not have an exiting connection (tcon) */
2650 build_unc_path_to_root(const struct smb_vol *volume_info,
2651 const struct cifs_sb_info *cifs_sb)
2655 int unc_len = strnlen(volume_info->UNC, MAX_TREE_SIZE + 1);
2656 full_path = kmalloc(unc_len + cifs_sb->prepathlen + 1, GFP_KERNEL);
2657 if (full_path == NULL)
2658 return ERR_PTR(-ENOMEM);
2660 strncpy(full_path, volume_info->UNC, unc_len);
2661 if (cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) {
2663 for (i = 0; i < unc_len; i++) {
2664 if (full_path[i] == '\\')
2669 if (cifs_sb->prepathlen)
2670 strncpy(full_path + unc_len, cifs_sb->prepath,
2671 cifs_sb->prepathlen);
2673 full_path[unc_len + cifs_sb->prepathlen] = 0; /* add trailing null */
2679 cifs_mount(struct super_block *sb, struct cifs_sb_info *cifs_sb,
2680 char *mount_data_global, const char *devname)
2684 struct smb_vol *volume_info;
2685 struct cifsSesInfo *pSesInfo;
2686 struct cifsTconInfo *tcon;
2687 struct TCP_Server_Info *srvTcp;
2689 char *mount_data = mount_data_global;
2690 struct tcon_link *tlink;
2691 #ifdef CONFIG_CIFS_DFS_UPCALL
2692 struct dfs_info3_param *referrals = NULL;
2693 unsigned int num_referrals = 0;
2694 int referral_walks_count = 0;
2706 volume_info = kzalloc(sizeof(struct smb_vol), GFP_KERNEL);
2712 if (cifs_parse_mount_options(mount_data, devname, volume_info)) {
2717 if (volume_info->nullauth) {
2718 cFYI(1, "null user");
2719 volume_info->username = "";
2720 } else if (volume_info->username) {
2721 /* BB fixme parse for domain name here */
2722 cFYI(1, "Username: %s", volume_info->username);
2724 cifserror("No username specified");
2725 /* In userspace mount helper we can get user name from alternate
2726 locations such as env variables and files on disk */
2731 /* this is needed for ASCII cp to Unicode converts */
2732 if (volume_info->iocharset == NULL) {
2733 /* load_nls_default cannot return null */
2734 volume_info->local_nls = load_nls_default();
2736 volume_info->local_nls = load_nls(volume_info->iocharset);
2737 if (volume_info->local_nls == NULL) {
2738 cERROR(1, "CIFS mount error: iocharset %s not found",
2739 volume_info->iocharset);
2744 cifs_sb->local_nls = volume_info->local_nls;
2746 /* get a reference to a tcp session */
2747 srvTcp = cifs_get_tcp_session(volume_info);
2748 if (IS_ERR(srvTcp)) {
2749 rc = PTR_ERR(srvTcp);
2753 /* get a reference to a SMB session */
2754 pSesInfo = cifs_get_smb_ses(srvTcp, volume_info);
2755 if (IS_ERR(pSesInfo)) {
2756 rc = PTR_ERR(pSesInfo);
2758 goto mount_fail_check;
2761 setup_cifs_sb(volume_info, cifs_sb);
2762 if (pSesInfo->capabilities & CAP_LARGE_FILES)
2763 sb->s_maxbytes = MAX_LFS_FILESIZE;
2765 sb->s_maxbytes = MAX_NON_LFS;
2767 /* BB FIXME fix time_gran to be larger for LANMAN sessions */
2768 sb->s_time_gran = 100;
2770 /* search for existing tcon to this server share */
2771 tcon = cifs_get_tcon(pSesInfo, volume_info);
2775 goto remote_path_check;
2778 /* do not care if following two calls succeed - informational */
2780 CIFSSMBQFSDeviceInfo(xid, tcon);
2781 CIFSSMBQFSAttributeInfo(xid, tcon);
2784 /* tell server which Unix caps we support */
2785 if (tcon->ses->capabilities & CAP_UNIX)
2786 /* reset of caps checks mount to see if unix extensions
2787 disabled for just this mount */
2788 reset_cifs_unix_caps(xid, tcon, sb, volume_info);
2790 tcon->unix_ext = 0; /* server does not support them */
2792 /* convert forward to back slashes in prepath here if needed */
2793 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2794 convert_delimiter(cifs_sb->prepath, CIFS_DIR_SEP(cifs_sb));
2796 if ((tcon->unix_ext == 0) && (cifs_sb->rsize > (1024 * 127))) {
2797 cifs_sb->rsize = 1024 * 127;
2798 cFYI(DBG2, "no very large read support, rsize now 127K");
2800 if (!(tcon->ses->capabilities & CAP_LARGE_WRITE_X))
2801 cifs_sb->wsize = min(cifs_sb->wsize,
2802 (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2803 if (!(tcon->ses->capabilities & CAP_LARGE_READ_X))
2804 cifs_sb->rsize = min(cifs_sb->rsize,
2805 (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2808 /* check if a whole path (including prepath) is not remote */
2809 if (!rc && cifs_sb->prepathlen && tcon) {
2810 /* build_path_to_root works only when we have a valid tcon */
2811 full_path = cifs_build_path_to_root(cifs_sb);
2812 if (full_path == NULL) {
2814 goto mount_fail_check;
2816 rc = is_path_accessible(xid, tcon, cifs_sb, full_path);
2817 if (rc != -EREMOTE) {
2819 goto mount_fail_check;
2824 /* get referral if needed */
2825 if (rc == -EREMOTE) {
2826 #ifdef CONFIG_CIFS_DFS_UPCALL
2827 if (referral_walks_count > MAX_NESTED_LINKS) {
2829 * BB: when we implement proper loop detection,
2830 * we will remove this check. But now we need it
2831 * to prevent an indefinite loop if 'DFS tree' is
2832 * misconfigured (i.e. has loops).
2835 goto mount_fail_check;
2837 /* convert forward to back slashes in prepath here if needed */
2838 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2839 convert_delimiter(cifs_sb->prepath,
2840 CIFS_DIR_SEP(cifs_sb));
2841 full_path = build_unc_path_to_root(volume_info, cifs_sb);
2842 if (IS_ERR(full_path)) {
2843 rc = PTR_ERR(full_path);
2844 goto mount_fail_check;
2847 cFYI(1, "Getting referral for: %s", full_path);
2848 rc = get_dfs_path(xid, pSesInfo , full_path + 1,
2849 cifs_sb->local_nls, &num_referrals, &referrals,
2850 cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
2851 if (!rc && num_referrals > 0) {
2852 char *fake_devname = NULL;
2854 if (mount_data != mount_data_global)
2857 mount_data = cifs_compose_mount_options(
2858 cifs_sb->mountdata, full_path + 1,
2859 referrals, &fake_devname);
2861 free_dfs_info_array(referrals, num_referrals);
2862 kfree(fake_devname);
2865 if (IS_ERR(mount_data)) {
2866 rc = PTR_ERR(mount_data);
2868 goto mount_fail_check;
2872 cifs_put_tcon(tcon);
2874 cifs_put_smb_ses(pSesInfo);
2876 cleanup_volume_info(&volume_info);
2877 referral_walks_count++;
2879 goto try_mount_again;
2881 #else /* No DFS support, return error on mount */
2887 goto mount_fail_check;
2889 /* now, hang the tcon off of the superblock */
2890 tlink = kzalloc(sizeof *tlink, GFP_KERNEL);
2891 if (tlink == NULL) {
2893 goto mount_fail_check;
2896 tlink->tl_index = pSesInfo->linux_uid;
2897 tlink->tl_tcon = tcon;
2898 tlink->tl_time = jiffies;
2899 set_bit(TCON_LINK_MASTER, &tlink->tl_flags);
2900 set_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
2902 rc = radix_tree_preload(GFP_KERNEL);
2903 if (rc == -ENOMEM) {
2905 goto mount_fail_check;
2908 spin_lock(&cifs_sb->tlink_tree_lock);
2909 radix_tree_insert(&cifs_sb->tlink_tree, pSesInfo->linux_uid, tlink);
2910 radix_tree_tag_set(&cifs_sb->tlink_tree, pSesInfo->linux_uid,
2911 CIFS_TLINK_MASTER_TAG);
2912 spin_unlock(&cifs_sb->tlink_tree_lock);
2913 radix_tree_preload_end();
2915 queue_delayed_work(system_nrt_wq, &cifs_sb->prune_tlinks,
2919 /* on error free sesinfo and tcon struct if needed */
2921 if (mount_data != mount_data_global)
2923 /* If find_unc succeeded then rc == 0 so we can not end */
2924 /* up accidently freeing someone elses tcon struct */
2926 cifs_put_tcon(tcon);
2928 cifs_put_smb_ses(pSesInfo);
2930 cifs_put_tcp_session(srvTcp);
2934 /* volume_info->password is freed above when existing session found
2935 (in which case it is not needed anymore) but when new sesion is created
2936 the password ptr is put in the new session structure (in which case the
2937 password will be freed at unmount time) */
2939 /* zero out password before freeing */
2940 cleanup_volume_info(&volume_info);
2946 CIFSTCon(unsigned int xid, struct cifsSesInfo *ses,
2947 const char *tree, struct cifsTconInfo *tcon,
2948 const struct nls_table *nls_codepage)
2950 struct smb_hdr *smb_buffer;
2951 struct smb_hdr *smb_buffer_response;
2954 unsigned char *bcc_ptr;
2956 int length, bytes_left;
2962 smb_buffer = cifs_buf_get();
2963 if (smb_buffer == NULL)
2966 smb_buffer_response = smb_buffer;
2968 header_assemble(smb_buffer, SMB_COM_TREE_CONNECT_ANDX,
2969 NULL /*no tid */ , 4 /*wct */ );
2971 smb_buffer->Mid = GetNextMid(ses->server);
2972 smb_buffer->Uid = ses->Suid;
2973 pSMB = (TCONX_REQ *) smb_buffer;
2974 pSMBr = (TCONX_RSP *) smb_buffer_response;
2976 pSMB->AndXCommand = 0xFF;
2977 pSMB->Flags = cpu_to_le16(TCON_EXTENDED_SECINFO);
2978 bcc_ptr = &pSMB->Password[0];
2979 if ((ses->server->secMode) & SECMODE_USER) {
2980 pSMB->PasswordLength = cpu_to_le16(1); /* minimum */
2981 *bcc_ptr = 0; /* password is null byte */
2982 bcc_ptr++; /* skip password */
2983 /* already aligned so no need to do it below */
2985 pSMB->PasswordLength = cpu_to_le16(CIFS_SESS_KEY_SIZE);
2986 /* BB FIXME add code to fail this if NTLMv2 or Kerberos
2987 specified as required (when that support is added to
2988 the vfs in the future) as only NTLM or the much
2989 weaker LANMAN (which we do not send by default) is accepted
2990 by Samba (not sure whether other servers allow
2991 NTLMv2 password here) */
2992 #ifdef CONFIG_CIFS_WEAK_PW_HASH
2993 if ((global_secflags & CIFSSEC_MAY_LANMAN) &&
2994 (ses->server->secType == LANMAN))
2995 calc_lanman_hash(tcon->password, ses->cryptKey,
2996 ses->server->secMode &
2997 SECMODE_PW_ENCRYPT ? true : false,
3000 #endif /* CIFS_WEAK_PW_HASH */
3001 SMBNTencrypt(tcon->password, ses->cryptKey, bcc_ptr);
3003 bcc_ptr += CIFS_SESS_KEY_SIZE;
3004 if (ses->capabilities & CAP_UNICODE) {
3005 /* must align unicode strings */
3006 *bcc_ptr = 0; /* null byte password */
3011 if (ses->server->secMode &
3012 (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
3013 smb_buffer->Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
3015 if (ses->capabilities & CAP_STATUS32) {
3016 smb_buffer->Flags2 |= SMBFLG2_ERR_STATUS;
3018 if (ses->capabilities & CAP_DFS) {
3019 smb_buffer->Flags2 |= SMBFLG2_DFS;
3021 if (ses->capabilities & CAP_UNICODE) {
3022 smb_buffer->Flags2 |= SMBFLG2_UNICODE;
3024 cifs_strtoUCS((__le16 *) bcc_ptr, tree,
3025 6 /* max utf8 char length in bytes */ *
3026 (/* server len*/ + 256 /* share len */), nls_codepage);
3027 bcc_ptr += 2 * length; /* convert num 16 bit words to bytes */
3028 bcc_ptr += 2; /* skip trailing null */
3029 } else { /* ASCII */
3030 strcpy(bcc_ptr, tree);
3031 bcc_ptr += strlen(tree) + 1;
3033 strcpy(bcc_ptr, "?????");
3034 bcc_ptr += strlen("?????");
3036 count = bcc_ptr - &pSMB->Password[0];
3037 pSMB->hdr.smb_buf_length += count;
3038 pSMB->ByteCount = cpu_to_le16(count);
3040 rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response, &length,
3043 /* above now done in SendReceive */
3044 if ((rc == 0) && (tcon != NULL)) {
3047 tcon->tidStatus = CifsGood;
3048 tcon->need_reconnect = false;
3049 tcon->tid = smb_buffer_response->Tid;
3050 bcc_ptr = pByteArea(smb_buffer_response);
3051 bytes_left = BCC(smb_buffer_response);
3052 length = strnlen(bcc_ptr, bytes_left - 2);
3053 if (smb_buffer->Flags2 & SMBFLG2_UNICODE)
3059 /* skip service field (NB: this field is always ASCII) */
3061 if ((bcc_ptr[0] == 'I') && (bcc_ptr[1] == 'P') &&
3062 (bcc_ptr[2] == 'C')) {
3063 cFYI(1, "IPC connection");
3066 } else if (length == 2) {
3067 if ((bcc_ptr[0] == 'A') && (bcc_ptr[1] == ':')) {
3068 /* the most common case */
3069 cFYI(1, "disk share connection");
3072 bcc_ptr += length + 1;
3073 bytes_left -= (length + 1);
3074 strncpy(tcon->treeName, tree, MAX_TREE_SIZE);
3076 /* mostly informational -- no need to fail on error here */
3077 kfree(tcon->nativeFileSystem);
3078 tcon->nativeFileSystem = cifs_strndup_from_ucs(bcc_ptr,
3079 bytes_left, is_unicode,
3082 cFYI(1, "nativeFileSystem=%s", tcon->nativeFileSystem);
3084 if ((smb_buffer_response->WordCount == 3) ||
3085 (smb_buffer_response->WordCount == 7))
3086 /* field is in same location */
3087 tcon->Flags = le16_to_cpu(pSMBr->OptionalSupport);
3090 cFYI(1, "Tcon flags: 0x%x ", tcon->Flags);
3091 } else if ((rc == 0) && tcon == NULL) {
3092 /* all we need to save for IPC$ connection */
3093 ses->ipc_tid = smb_buffer_response->Tid;
3096 cifs_buf_release(smb_buffer);
3101 cifs_umount(struct super_block *sb, struct cifs_sb_info *cifs_sb)
3105 struct tcon_link *tlink[8];
3106 unsigned long index = 0;
3108 cancel_delayed_work_sync(&cifs_sb->prune_tlinks);
3111 spin_lock(&cifs_sb->tlink_tree_lock);
3112 ret = radix_tree_gang_lookup(&cifs_sb->tlink_tree,
3113 (void **)tlink, index,
3115 /* increment index for next pass */
3117 index = tlink[ret - 1]->tl_index + 1;
3118 for (i = 0; i < ret; i++) {
3119 cifs_get_tlink(tlink[i]);
3120 clear_bit(TCON_LINK_IN_TREE, &tlink[i]->tl_flags);
3121 radix_tree_delete(&cifs_sb->tlink_tree,
3122 tlink[i]->tl_index);
3124 spin_unlock(&cifs_sb->tlink_tree_lock);
3126 for (i = 0; i < ret; i++)
3127 cifs_put_tlink(tlink[i]);
3130 tmp = cifs_sb->prepath;
3131 cifs_sb->prepathlen = 0;
3132 cifs_sb->prepath = NULL;
3138 int cifs_negotiate_protocol(unsigned int xid, struct cifsSesInfo *ses)
3141 struct TCP_Server_Info *server = ses->server;
3143 /* only send once per connect */
3144 if (server->maxBuf != 0)
3147 rc = CIFSSMBNegotiate(xid, ses);
3148 if (rc == -EAGAIN) {
3149 /* retry only once on 1st time connection */
3150 rc = CIFSSMBNegotiate(xid, ses);
3155 spin_lock(&GlobalMid_Lock);
3156 if (server->tcpStatus != CifsExiting)
3157 server->tcpStatus = CifsGood;
3160 spin_unlock(&GlobalMid_Lock);
3168 int cifs_setup_session(unsigned int xid, struct cifsSesInfo *ses,
3169 struct nls_table *nls_info)
3172 struct TCP_Server_Info *server = ses->server;
3175 ses->capabilities = server->capabilities;
3176 if (linuxExtEnabled == 0)
3177 ses->capabilities &= (~CAP_UNIX);
3179 cFYI(1, "Security Mode: 0x%x Capabilities: 0x%x TimeAdjust: %d",
3180 server->secMode, server->capabilities, server->timeAdj);
3182 rc = CIFS_SessSetup(xid, ses, nls_info);
3184 cERROR(1, "Send error in SessSetup = %d", rc);
3186 mutex_lock(&ses->server->srv_mutex);
3187 if (!server->session_estab) {
3188 server->session_key.response = ses->auth_key.response;
3189 server->session_key.len = ses->auth_key.len;
3190 server->sequence_number = 0x2;
3191 server->session_estab = true;
3192 ses->auth_key.response = NULL;
3194 mutex_unlock(&server->srv_mutex);
3196 cFYI(1, "CIFS Session Established successfully");
3197 spin_lock(&GlobalMid_Lock);
3198 ses->status = CifsGood;
3199 ses->need_reconnect = false;
3200 spin_unlock(&GlobalMid_Lock);
3203 kfree(ses->auth_key.response);
3204 ses->auth_key.response = NULL;
3205 ses->auth_key.len = 0;
3210 static struct cifsTconInfo *
3211 cifs_construct_tcon(struct cifs_sb_info *cifs_sb, uid_t fsuid)
3213 struct cifsTconInfo *master_tcon = cifs_sb_master_tcon(cifs_sb);
3214 struct cifsSesInfo *ses;
3215 struct cifsTconInfo *tcon = NULL;
3216 struct smb_vol *vol_info;
3217 char username[MAX_USERNAME_SIZE + 1];
3219 vol_info = kzalloc(sizeof(*vol_info), GFP_KERNEL);
3220 if (vol_info == NULL) {
3221 tcon = ERR_PTR(-ENOMEM);
3225 snprintf(username, MAX_USERNAME_SIZE, "krb50x%x", fsuid);
3226 vol_info->username = username;
3227 vol_info->local_nls = cifs_sb->local_nls;
3228 vol_info->linux_uid = fsuid;
3229 vol_info->cred_uid = fsuid;
3230 vol_info->UNC = master_tcon->treeName;
3231 vol_info->retry = master_tcon->retry;
3232 vol_info->nocase = master_tcon->nocase;
3233 vol_info->local_lease = master_tcon->local_lease;
3234 vol_info->no_linux_ext = !master_tcon->unix_ext;
3236 /* FIXME: allow for other secFlg settings */
3237 vol_info->secFlg = CIFSSEC_MUST_KRB5;
3239 /* get a reference for the same TCP session */
3240 spin_lock(&cifs_tcp_ses_lock);
3241 ++master_tcon->ses->server->srv_count;
3242 spin_unlock(&cifs_tcp_ses_lock);
3244 ses = cifs_get_smb_ses(master_tcon->ses->server, vol_info);
3246 tcon = (struct cifsTconInfo *)ses;
3247 cifs_put_tcp_session(master_tcon->ses->server);
3251 tcon = cifs_get_tcon(ses, vol_info);
3253 cifs_put_smb_ses(ses);
3257 if (ses->capabilities & CAP_UNIX)
3258 reset_cifs_unix_caps(0, tcon, NULL, vol_info);
3265 static struct tcon_link *
3266 cifs_sb_master_tlink(struct cifs_sb_info *cifs_sb)
3268 struct tcon_link *tlink;
3271 spin_lock(&cifs_sb->tlink_tree_lock);
3272 ret = radix_tree_gang_lookup_tag(&cifs_sb->tlink_tree, (void **)&tlink,
3273 0, 1, CIFS_TLINK_MASTER_TAG);
3274 spin_unlock(&cifs_sb->tlink_tree_lock);
3276 /* the master tcon should always be present */
3283 struct cifsTconInfo *
3284 cifs_sb_master_tcon(struct cifs_sb_info *cifs_sb)
3286 return tlink_tcon(cifs_sb_master_tlink(cifs_sb));
3290 cifs_sb_tcon_pending_wait(void *unused)
3293 return signal_pending(current) ? -ERESTARTSYS : 0;
3297 * Find or construct an appropriate tcon given a cifs_sb and the fsuid of the
3300 * If the superblock doesn't refer to a multiuser mount, then just return
3301 * the master tcon for the mount.
3303 * First, search the radix tree for an existing tcon for this fsuid. If one
3304 * exists, then check to see if it's pending construction. If it is then wait
3305 * for construction to complete. Once it's no longer pending, check to see if
3306 * it failed and either return an error or retry construction, depending on
3309 * If one doesn't exist then insert a new tcon_link struct into the tree and
3310 * try to construct a new one.
3313 cifs_sb_tlink(struct cifs_sb_info *cifs_sb)
3316 unsigned long fsuid = (unsigned long) current_fsuid();
3317 struct tcon_link *tlink, *newtlink;
3319 if (!(cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MULTIUSER))
3320 return cifs_get_tlink(cifs_sb_master_tlink(cifs_sb));
3322 spin_lock(&cifs_sb->tlink_tree_lock);
3323 tlink = radix_tree_lookup(&cifs_sb->tlink_tree, fsuid);
3325 cifs_get_tlink(tlink);
3326 spin_unlock(&cifs_sb->tlink_tree_lock);
3328 if (tlink == NULL) {
3329 newtlink = kzalloc(sizeof(*tlink), GFP_KERNEL);
3330 if (newtlink == NULL)
3331 return ERR_PTR(-ENOMEM);
3332 newtlink->tl_index = fsuid;
3333 newtlink->tl_tcon = ERR_PTR(-EACCES);
3334 set_bit(TCON_LINK_PENDING, &newtlink->tl_flags);
3335 set_bit(TCON_LINK_IN_TREE, &newtlink->tl_flags);
3336 cifs_get_tlink(newtlink);
3338 ret = radix_tree_preload(GFP_KERNEL);
3341 return ERR_PTR(ret);
3344 spin_lock(&cifs_sb->tlink_tree_lock);
3345 /* was one inserted after previous search? */
3346 tlink = radix_tree_lookup(&cifs_sb->tlink_tree, fsuid);
3348 cifs_get_tlink(tlink);
3349 spin_unlock(&cifs_sb->tlink_tree_lock);
3350 radix_tree_preload_end();
3352 goto wait_for_construction;
3354 ret = radix_tree_insert(&cifs_sb->tlink_tree, fsuid, newtlink);
3355 spin_unlock(&cifs_sb->tlink_tree_lock);
3356 radix_tree_preload_end();
3359 return ERR_PTR(ret);
3363 wait_for_construction:
3364 ret = wait_on_bit(&tlink->tl_flags, TCON_LINK_PENDING,
3365 cifs_sb_tcon_pending_wait,
3366 TASK_INTERRUPTIBLE);
3368 cifs_put_tlink(tlink);
3369 return ERR_PTR(ret);
3372 /* if it's good, return it */
3373 if (!IS_ERR(tlink->tl_tcon))
3376 /* return error if we tried this already recently */
3377 if (time_before(jiffies, tlink->tl_time + TLINK_ERROR_EXPIRE)) {
3378 cifs_put_tlink(tlink);
3379 return ERR_PTR(-EACCES);
3382 if (test_and_set_bit(TCON_LINK_PENDING, &tlink->tl_flags))
3383 goto wait_for_construction;
3386 tlink->tl_tcon = cifs_construct_tcon(cifs_sb, fsuid);
3387 clear_bit(TCON_LINK_PENDING, &tlink->tl_flags);
3388 wake_up_bit(&tlink->tl_flags, TCON_LINK_PENDING);
3390 if (IS_ERR(tlink->tl_tcon)) {
3391 cifs_put_tlink(tlink);
3392 return ERR_PTR(-EACCES);
3399 * periodic workqueue job that scans tcon_tree for a superblock and closes
3403 cifs_prune_tlinks(struct work_struct *work)
3405 struct cifs_sb_info *cifs_sb = container_of(work, struct cifs_sb_info,
3407 struct tcon_link *tlink[8];
3408 unsigned long now = jiffies;
3409 unsigned long index = 0;
3413 spin_lock(&cifs_sb->tlink_tree_lock);
3414 ret = radix_tree_gang_lookup(&cifs_sb->tlink_tree,
3415 (void **)tlink, index,
3417 /* increment index for next pass */
3419 index = tlink[ret - 1]->tl_index + 1;
3420 for (i = 0; i < ret; i++) {
3421 if (test_bit(TCON_LINK_MASTER, &tlink[i]->tl_flags) ||
3422 atomic_read(&tlink[i]->tl_count) != 0 ||
3423 time_after(tlink[i]->tl_time + TLINK_IDLE_EXPIRE,
3428 cifs_get_tlink(tlink[i]);
3429 clear_bit(TCON_LINK_IN_TREE, &tlink[i]->tl_flags);
3430 radix_tree_delete(&cifs_sb->tlink_tree,
3431 tlink[i]->tl_index);
3433 spin_unlock(&cifs_sb->tlink_tree_lock);
3435 for (i = 0; i < ret; i++) {
3436 if (tlink[i] != NULL)
3437 cifs_put_tlink(tlink[i]);
3441 queue_delayed_work(system_nrt_wq, &cifs_sb->prune_tlinks,