connect.c 81.9 KB
Newer Older
L
Linus Torvalds 已提交
1 2 3
/*
 *   fs/cifs/connect.c
 *
4
 *   Copyright (C) International Business Machines  Corp., 2002,2009
L
Linus Torvalds 已提交
5 6 7 8 9 10 11 12 13 14 15 16 17 18
 *   Author(s): Steve French (sfrench@us.ibm.com)
 *
 *   This library is free software; you can redistribute it and/or modify
 *   it under the terms of the GNU Lesser General Public License as published
 *   by the Free Software Foundation; either version 2.1 of the License, or
 *   (at your option) any later version.
 *
 *   This library is distributed in the hope that it will be useful,
 *   but WITHOUT ANY WARRANTY; without even the implied warranty of
 *   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See
 *   the GNU Lesser General Public License for more details.
 *
 *   You should have received a copy of the GNU Lesser General Public License
 *   along with this library; if not, write to the Free Software
S
Steve French 已提交
19
 *   Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
L
Linus Torvalds 已提交
20 21 22 23 24 25 26 27 28 29
 */
#include <linux/fs.h>
#include <linux/net.h>
#include <linux/string.h>
#include <linux/list.h>
#include <linux/wait.h>
#include <linux/pagemap.h>
#include <linux/ctype.h>
#include <linux/utsname.h>
#include <linux/mempool.h>
30
#include <linux/delay.h>
31
#include <linux/completion.h>
32
#include <linux/kthread.h>
33
#include <linux/pagevec.h>
34
#include <linux/freezer.h>
35
#include <linux/namei.h>
L
Linus Torvalds 已提交
36 37
#include <asm/uaccess.h>
#include <asm/processor.h>
38
#include <linux/inet.h>
39
#include <net/ipv6.h>
L
Linus Torvalds 已提交
40 41 42 43 44 45 46 47 48
#include "cifspdu.h"
#include "cifsglob.h"
#include "cifsproto.h"
#include "cifs_unicode.h"
#include "cifs_debug.h"
#include "cifs_fs_sb.h"
#include "ntlmssp.h"
#include "nterr.h"
#include "rfc1002pdu.h"
49
#include "cn_cifs.h"
L
Linus Torvalds 已提交
50 51 52 53 54 55 56 57 58 59 60 61 62 63 64

#define CIFS_PORT 445
#define RFC1001_PORT 139

extern void SMBNTencrypt(unsigned char *passwd, unsigned char *c8,
			 unsigned char *p24);

extern mempool_t *cifs_req_poolp;

struct smb_vol {
	char *username;
	char *password;
	char *domainname;
	char *UNC;
	char *UNCip;
65
	char *in6_addr;   /* ipv6 address as human readable form of in6_addr */
L
Linus Torvalds 已提交
66 67
	char *iocharset;  /* local code page for mapping to and from Unicode */
	char source_rfc1001_name[16]; /* netbios name of client */
68
	char target_rfc1001_name[16]; /* netbios name of server for Win9x/ME */
L
Linus Torvalds 已提交
69 70 71 72
	uid_t linux_uid;
	gid_t linux_gid;
	mode_t file_mode;
	mode_t dir_mode;
73
	unsigned secFlg;
74 75 76 77 78 79
	bool rw:1;
	bool retry:1;
	bool intr:1;
	bool setuids:1;
	bool override_uid:1;
	bool override_gid:1;
80
	bool dynperm:1;
81 82 83 84 85 86
	bool noperm:1;
	bool no_psx_acl:1; /* set if posix acl support should be disabled */
	bool cifs_acl:1;
	bool no_xattr:1;   /* set if xattr (EA) support should be disabled*/
	bool server_ino:1; /* use inode numbers from server ie UniqueId */
	bool direct_io:1;
87 88
	bool remap:1;      /* set to remap seven reserved chars in filenames */
	bool posix_paths:1; /* unset to not ask for posix pathnames. */
89 90
	bool no_linux_ext:1;
	bool sfu_emul:1;
91 92 93
	bool nullauth:1;   /* attempt to authenticate with null user */
	bool nocase:1;     /* request case insensitive filenames */
	bool nobrl:1;      /* disable sending byte range locks to srv */
94
	bool mand_lock:1;  /* send mandatory not posix byte range lock reqs */
95
	bool seal:1;       /* request transport encryption on share */
S
Steve French 已提交
96 97
	bool nodfs:1;      /* Do not request DFS, even if available */
	bool local_lease:1; /* check leases only on local system, not remote */
98 99
	bool noblocksnd:1;
	bool noautotune:1;
100
	bool nostrictsync:1; /* do not force expensive SMBflush on every sync */
L
Linus Torvalds 已提交
101 102 103 104
	unsigned int rsize;
	unsigned int wsize;
	unsigned int sockopt;
	unsigned short int port;
S
Steve French 已提交
105
	char *prepath;
L
Linus Torvalds 已提交
106 107
};

108
static int ipv4_connect(struct TCP_Server_Info *server);
109
static int ipv6_connect(struct TCP_Server_Info *server);
L
Linus Torvalds 已提交
110

111 112 113 114 115 116 117 118
/*
 * cifs tcp session reconnection
 *
 * mark tcp session as reconnecting so temporarily locked
 * mark all smb sessions as reconnecting for tcp session
 * reconnect tcp session
 * wake up waiters on reconnection? - (not needed currently)
 */
119
static int
L
Linus Torvalds 已提交
120 121 122
cifs_reconnect(struct TCP_Server_Info *server)
{
	int rc = 0;
123
	struct list_head *tmp, *tmp2;
L
Linus Torvalds 已提交
124 125
	struct cifsSesInfo *ses;
	struct cifsTconInfo *tcon;
S
Steve French 已提交
126
	struct mid_q_entry *mid_entry;
127

L
Linus Torvalds 已提交
128
	spin_lock(&GlobalMid_Lock);
129
	if (server->tcpStatus == CifsExiting) {
S
Steve French 已提交
130
		/* the demux thread will exit normally
L
Linus Torvalds 已提交
131 132 133 134 135 136 137 138
		next time through the loop */
		spin_unlock(&GlobalMid_Lock);
		return rc;
	} else
		server->tcpStatus = CifsNeedReconnect;
	spin_unlock(&GlobalMid_Lock);
	server->maxBuf = 0;

139
	cFYI(1, ("Reconnecting tcp session"));
L
Linus Torvalds 已提交
140 141 142

	/* before reconnecting the tcp session, mark the smb session (uid)
		and the tid bad so they are not used until reconnected */
143 144 145 146 147
	read_lock(&cifs_tcp_ses_lock);
	list_for_each(tmp, &server->smb_ses_list) {
		ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
		ses->need_reconnect = true;
		ses->ipc_tid = 0;
148 149
		list_for_each(tmp2, &ses->tcon_list) {
			tcon = list_entry(tmp2, struct cifsTconInfo, tcon_list);
S
Steve French 已提交
150
			tcon->need_reconnect = true;
L
Linus Torvalds 已提交
151 152
		}
	}
153
	read_unlock(&cifs_tcp_ses_lock);
L
Linus Torvalds 已提交
154
	/* do not want to be sending data on a socket we are freeing */
J
Jeff Layton 已提交
155
	mutex_lock(&server->srv_mutex);
S
Steve French 已提交
156
	if (server->ssocket) {
S
Steve French 已提交
157
		cFYI(1, ("State: 0x%x Flags: 0x%lx", server->ssocket->state,
L
Linus Torvalds 已提交
158
			server->ssocket->flags));
159
		kernel_sock_shutdown(server->ssocket, SHUT_WR);
S
Steve French 已提交
160
		cFYI(1, ("Post shutdown state: 0x%x Flags: 0x%lx",
S
Steve French 已提交
161
			server->ssocket->state,
L
Linus Torvalds 已提交
162 163 164 165 166 167 168 169 170 171
			server->ssocket->flags));
		sock_release(server->ssocket);
		server->ssocket = NULL;
	}

	spin_lock(&GlobalMid_Lock);
	list_for_each(tmp, &server->pending_mid_q) {
		mid_entry = list_entry(tmp, struct
					mid_q_entry,
					qhead);
172
		if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
173 174 175 176
				/* Mark other intransit requests as needing
				   retry so we do not immediately mark the
				   session bad again (ie after we reconnect
				   below) as they timeout too */
177
			mid_entry->midState = MID_RETRY_NEEDED;
L
Linus Torvalds 已提交
178 179 180
		}
	}
	spin_unlock(&GlobalMid_Lock);
J
Jeff Layton 已提交
181
	mutex_unlock(&server->srv_mutex);
L
Linus Torvalds 已提交
182

183 184
	while ((server->tcpStatus != CifsExiting) &&
	       (server->tcpStatus != CifsGood)) {
185
		try_to_freeze();
186
		if (server->addr.sockAddr6.sin6_family == AF_INET6)
187
			rc = ipv6_connect(server);
188 189
		else
			rc = ipv4_connect(server);
S
Steve French 已提交
190 191
		if (rc) {
			cFYI(1, ("reconnect error %d", rc));
192
			msleep(3000);
L
Linus Torvalds 已提交
193 194 195
		} else {
			atomic_inc(&tcpSesReconnectCount);
			spin_lock(&GlobalMid_Lock);
196
			if (server->tcpStatus != CifsExiting)
L
Linus Torvalds 已提交
197
				server->tcpStatus = CifsGood;
198
			server->sequence_number = 0;
S
Steve French 已提交
199
			spin_unlock(&GlobalMid_Lock);
L
Linus Torvalds 已提交
200 201 202 203 204 205 206
	/*		atomic_set(&server->inFlight,0);*/
			wake_up(&server->response_q);
		}
	}
	return rc;
}

S
Steve French 已提交
207
/*
208 209 210 211 212 213
	return codes:
		0 	not a transact2, or all data present
		>0 	transact2 with that much data missing
		-EINVAL = invalid transact2

 */
S
Steve French 已提交
214
static int check2ndT2(struct smb_hdr *pSMB, unsigned int maxBufSize)
215
{
S
Steve French 已提交
216 217
	struct smb_t2_rsp *pSMBt;
	int total_data_size;
218 219 220
	int data_in_this_rsp;
	int remaining;

S
Steve French 已提交
221
	if (pSMB->Command != SMB_COM_TRANSACTION2)
222 223
		return 0;

S
Steve French 已提交
224 225 226
	/* check for plausible wct, bcc and t2 data and parm sizes */
	/* check for parm and data offset going beyond end of smb */
	if (pSMB->WordCount != 10) { /* coalesce_t2 depends on this */
S
Steve French 已提交
227
		cFYI(1, ("invalid transact2 word count"));
228 229 230 231 232 233 234 235 236 237
		return -EINVAL;
	}

	pSMBt = (struct smb_t2_rsp *)pSMB;

	total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
	data_in_this_rsp = le16_to_cpu(pSMBt->t2_rsp.DataCount);

	remaining = total_data_size - data_in_this_rsp;

S
Steve French 已提交
238
	if (remaining == 0)
239
		return 0;
S
Steve French 已提交
240
	else if (remaining < 0) {
S
Steve French 已提交
241
		cFYI(1, ("total data %d smaller than data in frame %d",
242 243 244
			total_data_size, data_in_this_rsp));
		return -EINVAL;
	} else {
S
Steve French 已提交
245
		cFYI(1, ("missing %d bytes from transact2, check next response",
246
			remaining));
S
Steve French 已提交
247 248 249 250
		if (total_data_size > maxBufSize) {
			cERROR(1, ("TotalDataSize %d is over maximum buffer %d",
				total_data_size, maxBufSize));
			return -EINVAL;
251 252 253 254 255
		}
		return remaining;
	}
}

S
Steve French 已提交
256
static int coalesce_t2(struct smb_hdr *psecond, struct smb_hdr *pTargetSMB)
257 258 259 260 261 262 263
{
	struct smb_t2_rsp *pSMB2 = (struct smb_t2_rsp *)psecond;
	struct smb_t2_rsp *pSMBt  = (struct smb_t2_rsp *)pTargetSMB;
	int total_data_size;
	int total_in_buf;
	int remaining;
	int total_in_buf2;
S
Steve French 已提交
264 265
	char *data_area_of_target;
	char *data_area_of_buf2;
266 267 268 269
	__u16 byte_count;

	total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);

S
Steve French 已提交
270
	if (total_data_size != le16_to_cpu(pSMB2->t2_rsp.TotalDataCount)) {
271
		cFYI(1, ("total data size of primary and secondary t2 differ"));
272 273 274 275 276
	}

	total_in_buf = le16_to_cpu(pSMBt->t2_rsp.DataCount);

	remaining = total_data_size - total_in_buf;
277

S
Steve French 已提交
278
	if (remaining < 0)
279 280
		return -EINVAL;

S
Steve French 已提交
281
	if (remaining == 0) /* nothing to do, ignore */
282
		return 0;
283

284
	total_in_buf2 = le16_to_cpu(pSMB2->t2_rsp.DataCount);
S
Steve French 已提交
285
	if (remaining < total_in_buf2) {
S
Steve French 已提交
286
		cFYI(1, ("transact2 2nd response contains too much data"));
287 288 289
	}

	/* find end of first SMB data area */
S
Steve French 已提交
290
	data_area_of_target = (char *)&pSMBt->hdr.Protocol +
291 292 293 294
				le16_to_cpu(pSMBt->t2_rsp.DataOffset);
	/* validate target area */

	data_area_of_buf2 = (char *) &pSMB2->hdr.Protocol +
S
Steve French 已提交
295
					le16_to_cpu(pSMB2->t2_rsp.DataOffset);
296 297 298 299

	data_area_of_target += total_in_buf;

	/* copy second buffer into end of first buffer */
S
Steve French 已提交
300
	memcpy(data_area_of_target, data_area_of_buf2, total_in_buf2);
301 302 303 304 305 306
	total_in_buf += total_in_buf2;
	pSMBt->t2_rsp.DataCount = cpu_to_le16(total_in_buf);
	byte_count = le16_to_cpu(BCC_LE(pTargetSMB));
	byte_count += total_in_buf2;
	BCC_LE(pTargetSMB) = cpu_to_le16(byte_count);

307
	byte_count = pTargetSMB->smb_buf_length;
308 309 310
	byte_count += total_in_buf2;

	/* BB also add check that we are not beyond maximum buffer size */
311

312
	pTargetSMB->smb_buf_length = byte_count;
313

S
Steve French 已提交
314
	if (remaining == total_in_buf2) {
S
Steve French 已提交
315
		cFYI(1, ("found the last secondary response"));
316 317 318 319 320 321
		return 0; /* we are done */
	} else /* more responses to go */
		return 1;

}

L
Linus Torvalds 已提交
322 323 324 325 326 327
static int
cifs_demultiplex_thread(struct TCP_Server_Info *server)
{
	int length;
	unsigned int pdu_length, total_read;
	struct smb_hdr *smb_buffer = NULL;
328 329
	struct smb_hdr *bigbuf = NULL;
	struct smb_hdr *smallbuf = NULL;
L
Linus Torvalds 已提交
330 331 332 333 334 335 336
	struct msghdr smb_msg;
	struct kvec iov;
	struct socket *csocket = server->ssocket;
	struct list_head *tmp;
	struct cifsSesInfo *ses;
	struct task_struct *task_to_wake = NULL;
	struct mid_q_entry *mid_entry;
337
	char temp;
338 339
	bool isLargeBuf = false;
	bool isMultiRsp;
340
	int reconnect;
L
Linus Torvalds 已提交
341 342

	current->flags |= PF_MEMALLOC;
343
	cFYI(1, ("Demultiplex PID: %d", task_pid_nr(current)));
344 345 346

	length = atomic_inc_return(&tcpSesAllocCount);
	if (length > 1)
347 348
		mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
				GFP_KERNEL);
L
Linus Torvalds 已提交
349

350
	set_freezable();
351
	while (server->tcpStatus != CifsExiting) {
352 353
		if (try_to_freeze())
			continue;
354 355
		if (bigbuf == NULL) {
			bigbuf = cifs_buf_get();
356 357
			if (!bigbuf) {
				cERROR(1, ("No memory for large SMB response"));
358 359 360 361
				msleep(3000);
				/* retry will check if exiting */
				continue;
			}
362 363
		} else if (isLargeBuf) {
			/* we are reusing a dirty large buf, clear its start */
364
			memset(bigbuf, 0, sizeof(struct smb_hdr));
L
Linus Torvalds 已提交
365
		}
366 367 368

		if (smallbuf == NULL) {
			smallbuf = cifs_small_buf_get();
369 370
			if (!smallbuf) {
				cERROR(1, ("No memory for SMB response"));
371 372 373 374 375 376
				msleep(1000);
				/* retry will check if exiting */
				continue;
			}
			/* beginning of smb buffer is cleared in our buf_get */
		} else /* if existing small buf clear beginning */
377
			memset(smallbuf, 0, sizeof(struct smb_hdr));
378

379 380
		isLargeBuf = false;
		isMultiRsp = false;
381
		smb_buffer = smallbuf;
L
Linus Torvalds 已提交
382 383 384 385
		iov.iov_base = smb_buffer;
		iov.iov_len = 4;
		smb_msg.msg_control = NULL;
		smb_msg.msg_controllen = 0;
386 387
		pdu_length = 4; /* enough to get RFC1001 header */
incomplete_rcv:
L
Linus Torvalds 已提交
388 389
		length =
		    kernel_recvmsg(csocket, &smb_msg,
390
				&iov, 1, pdu_length, 0 /* BB other flags? */);
L
Linus Torvalds 已提交
391

392
		if (server->tcpStatus == CifsExiting) {
L
Linus Torvalds 已提交
393 394
			break;
		} else if (server->tcpStatus == CifsNeedReconnect) {
395
			cFYI(1, ("Reconnect after server stopped responding"));
L
Linus Torvalds 已提交
396
			cifs_reconnect(server);
397
			cFYI(1, ("call to reconnect done"));
L
Linus Torvalds 已提交
398 399 400
			csocket = server->ssocket;
			continue;
		} else if ((length == -ERESTARTSYS) || (length == -EAGAIN)) {
401
			msleep(1); /* minimum sleep to prevent looping
L
Linus Torvalds 已提交
402 403
				allowing socket to clear and app threads to set
				tcpStatus CifsNeedReconnect if server hung */
404 405 406 407 408 409
			if (pdu_length < 4) {
				iov.iov_base = (4 - pdu_length) +
							(char *)smb_buffer;
				iov.iov_len = pdu_length;
				smb_msg.msg_control = NULL;
				smb_msg.msg_controllen = 0;
410
				goto incomplete_rcv;
411
			} else
412
				continue;
L
Linus Torvalds 已提交
413
		} else if (length <= 0) {
414 415
			if (server->tcpStatus == CifsNew) {
				cFYI(1, ("tcp session abend after SMBnegprot"));
416 417 418 419
				/* some servers kill the TCP session rather than
				   returning an SMB negprot error, in which
				   case reconnecting here is not going to help,
				   and so simply return error to mount */
L
Linus Torvalds 已提交
420 421
				break;
			}
422
			if (!try_to_freeze() && (length == -EINTR)) {
S
Steve French 已提交
423
				cFYI(1, ("cifsd thread killed"));
L
Linus Torvalds 已提交
424 425
				break;
			}
S
Steve French 已提交
426
			cFYI(1, ("Reconnect after unexpected peek error %d",
427
				length));
L
Linus Torvalds 已提交
428 429 430 431
			cifs_reconnect(server);
			csocket = server->ssocket;
			wake_up(&server->response_q);
			continue;
432 433 434
		} else if (length < pdu_length) {
			cFYI(1, ("requested %d bytes but only got %d bytes",
				  pdu_length, length));
435 436 437
			pdu_length -= length;
			msleep(1);
			goto incomplete_rcv;
438
		}
L
Linus Torvalds 已提交
439

440 441
		/* The right amount was read from socket - 4 bytes */
		/* so we can now interpret the length field */
442

443 444 445 446
		/* the first byte big endian of the length field,
		is actually not part of the length but the type
		with the most common, zero, as regular data */
		temp = *((char *) smb_buffer);
447

S
Steve French 已提交
448
		/* Note that FC 1001 length is big endian on the wire,
449 450
		but we convert it here so it is always manipulated
		as host byte order */
451
		pdu_length = be32_to_cpu((__force __be32)smb_buffer->smb_buf_length);
452 453
		smb_buffer->smb_buf_length = pdu_length;

S
Steve French 已提交
454
		cFYI(1, ("rfc1002 length 0x%x", pdu_length+4));
455

456
		if (temp == (char) RFC1002_SESSION_KEEP_ALIVE) {
S
Steve French 已提交
457
			continue;
458
		} else if (temp == (char)RFC1002_POSITIVE_SESSION_RESPONSE) {
S
Steve French 已提交
459
			cFYI(1, ("Good RFC 1002 session rsp"));
460
			continue;
461
		} else if (temp == (char)RFC1002_NEGATIVE_SESSION_RESPONSE) {
S
Steve French 已提交
462
			/* we get this from Windows 98 instead of
463
			   an error on SMB negprot response */
S
Steve French 已提交
464
			cFYI(1, ("Negative RFC1002 Session Response Error 0x%x)",
465
				pdu_length));
S
Steve French 已提交
466 467
			if (server->tcpStatus == CifsNew) {
				/* if nack on negprot (rather than
468 469 470 471 472 473 474 475 476
				ret of smb negprot error) reconnecting
				not going to help, ret error to mount */
				break;
			} else {
				/* give server a second to
				clean up before reconnect attempt */
				msleep(1000);
				/* always try 445 first on reconnect
				since we get NACK on some if we ever
S
Steve French 已提交
477
				connected to port 139 (the NACK is
478 479
				since we do not begin with RFC1001
				session initialize frame) */
S
Steve French 已提交
480
				server->addr.sockAddr.sin_port =
481
					htons(CIFS_PORT);
L
Linus Torvalds 已提交
482 483
				cifs_reconnect(server);
				csocket = server->ssocket;
484
				wake_up(&server->response_q);
L
Linus Torvalds 已提交
485
				continue;
486
			}
487
		} else if (temp != (char) 0) {
S
Steve French 已提交
488
			cERROR(1, ("Unknown RFC 1002 frame"));
489 490
			cifs_dump_mem(" Received Data: ", (char *)smb_buffer,
				      length);
491 492 493
			cifs_reconnect(server);
			csocket = server->ssocket;
			continue;
494 495 496
		}

		/* else we have an SMB response */
S
Steve French 已提交
497
		if ((pdu_length > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE - 4) ||
498
			    (pdu_length < sizeof(struct smb_hdr) - 1 - 4)) {
499
			cERROR(1, ("Invalid size SMB length %d pdu_length %d",
500
					length, pdu_length+4));
501 502 503 504
			cifs_reconnect(server);
			csocket = server->ssocket;
			wake_up(&server->response_q);
			continue;
S
Steve French 已提交
505
		}
506 507 508 509

		/* else length ok */
		reconnect = 0;

S
Steve French 已提交
510
		if (pdu_length > MAX_CIFS_SMALL_BUFFER_SIZE - 4) {
511
			isLargeBuf = true;
512 513 514 515 516 517
			memcpy(bigbuf, smallbuf, 4);
			smb_buffer = bigbuf;
		}
		length = 0;
		iov.iov_base = 4 + (char *)smb_buffer;
		iov.iov_len = pdu_length;
S
Steve French 已提交
518
		for (total_read = 0; total_read < pdu_length;
519 520 521
		     total_read += length) {
			length = kernel_recvmsg(csocket, &smb_msg, &iov, 1,
						pdu_length - total_read, 0);
522
			if ((server->tcpStatus == CifsExiting) ||
523 524 525 526 527
			    (length == -EINTR)) {
				/* then will exit */
				reconnect = 2;
				break;
			} else if (server->tcpStatus == CifsNeedReconnect) {
528 529
				cifs_reconnect(server);
				csocket = server->ssocket;
S
Steve French 已提交
530
				/* Reconnect wakes up rspns q */
531 532 533
				/* Now we will reread sock */
				reconnect = 1;
				break;
S
Steve French 已提交
534
			} else if ((length == -ERESTARTSYS) ||
535 536
				   (length == -EAGAIN)) {
				msleep(1); /* minimum sleep to prevent looping,
S
Steve French 已提交
537
					      allowing socket to clear and app
538 539
					      threads to set tcpStatus
					      CifsNeedReconnect if server hung*/
540
				length = 0;
541
				continue;
542
			} else if (length <= 0) {
S
Steve French 已提交
543
				cERROR(1, ("Received no data, expecting %d",
544 545 546 547 548
					      pdu_length - total_read));
				cifs_reconnect(server);
				csocket = server->ssocket;
				reconnect = 1;
				break;
549
			}
550
		}
S
Steve French 已提交
551
		if (reconnect == 2)
552
			break;
S
Steve French 已提交
553
		else if (reconnect == 1)
554
			continue;
L
Linus Torvalds 已提交
555

556
		length += 4; /* account for rfc1002 hdr */
557

558

559
		dump_smb(smb_buffer, length);
560
		if (checkSMB(smb_buffer, smb_buffer->Mid, total_read+4)) {
561
			cifs_dump_mem("Bad SMB: ", smb_buffer, 48);
562 563
			continue;
		}
L
Linus Torvalds 已提交
564

565 566 567 568 569 570

		task_to_wake = NULL;
		spin_lock(&GlobalMid_Lock);
		list_for_each(tmp, &server->pending_mid_q) {
			mid_entry = list_entry(tmp, struct mid_q_entry, qhead);

571
			if ((mid_entry->mid == smb_buffer->Mid) &&
572 573
			    (mid_entry->midState == MID_REQUEST_SUBMITTED) &&
			    (mid_entry->command == smb_buffer->Command)) {
S
Steve French 已提交
574
				if (check2ndT2(smb_buffer,server->maxBuf) > 0) {
575
					/* We have a multipart transact2 resp */
576
					isMultiRsp = true;
S
Steve French 已提交
577
					if (mid_entry->resp_buf) {
578
						/* merge response - fix up 1st*/
579
						if (coalesce_t2(smb_buffer,
580
							mid_entry->resp_buf)) {
581 582
							mid_entry->multiRsp =
								 true;
583 584 585
							break;
						} else {
							/* all parts received */
586 587
							mid_entry->multiEnd =
								 true;
588
							goto multi_t2_fnd;
589 590
						}
					} else {
S
Steve French 已提交
591
						if (!isLargeBuf) {
592 593
							cERROR(1,("1st trans2 resp needs bigbuf"));
					/* BB maybe we can fix this up,  switch
594
					   to already allocated large buffer? */
595
						} else {
596
							/* Have first buffer */
597 598
							mid_entry->resp_buf =
								 smb_buffer;
599 600
							mid_entry->largeBuf =
								 true;
601 602 603 604
							bigbuf = NULL;
						}
					}
					break;
605
				}
606
				mid_entry->resp_buf = smb_buffer;
607
				mid_entry->largeBuf = isLargeBuf;
608 609 610
multi_t2_fnd:
				task_to_wake = mid_entry->tsk;
				mid_entry->midState = MID_RESPONSE_RECEIVED;
S
Steve French 已提交
611 612 613
#ifdef CONFIG_CIFS_STATS2
				mid_entry->when_received = jiffies;
#endif
614 615 616 617
				/* so we do not time out requests to  server
				which is still responding (since server could
				be busy but not dead) */
				server->lstrp = jiffies;
618
				break;
619
			}
L
Linus Torvalds 已提交
620
		}
621 622
		spin_unlock(&GlobalMid_Lock);
		if (task_to_wake) {
623
			/* Was previous buf put in mpx struct for multi-rsp? */
S
Steve French 已提交
624
			if (!isMultiRsp) {
625
				/* smb buffer will be freed by user thread */
626
				if (isLargeBuf)
627
					bigbuf = NULL;
628
				else
629 630
					smallbuf = NULL;
			}
631
			wake_up_process(task_to_wake);
632 633
		} else if (!is_valid_oplock_break(smb_buffer, server) &&
			   !isMultiRsp) {
634 635 636
			cERROR(1, ("No task to wake, unknown frame received! "
				   "NumMids %d", midCount.counter));
			cifs_dump_mem("Received Data is: ", (char *)smb_buffer,
637
				      sizeof(struct smb_hdr));
638 639 640 641
#ifdef CONFIG_CIFS_DEBUG2
			cifs_dump_detail(smb_buffer);
			cifs_dump_mids(server);
#endif /* CIFS_DEBUG2 */
642

643 644 645
		}
	} /* end while !EXITING */

646 647 648 649 650
	/* take it off the list, if it's not already */
	write_lock(&cifs_tcp_ses_lock);
	list_del_init(&server->tcp_ses_list);
	write_unlock(&cifs_tcp_ses_lock);

L
Linus Torvalds 已提交
651 652
	spin_lock(&GlobalMid_Lock);
	server->tcpStatus = CifsExiting;
653
	spin_unlock(&GlobalMid_Lock);
654
	wake_up_all(&server->response_q);
655

656 657 658
	/* check if we have blocked requests that need to free */
	/* Note that cifs_max_pending is normally 50, but
	can be set at module install time to as little as two */
659
	spin_lock(&GlobalMid_Lock);
S
Steve French 已提交
660
	if (atomic_read(&server->inFlight) >= cifs_max_pending)
661 662 663
		atomic_set(&server->inFlight, cifs_max_pending - 1);
	/* We do not want to set the max_pending too low or we
	could end up with the counter going negative */
L
Linus Torvalds 已提交
664
	spin_unlock(&GlobalMid_Lock);
665
	/* Although there should not be any requests blocked on
L
Linus Torvalds 已提交
666
	this queue it can not hurt to be paranoid and try to wake up requests
667
	that may haven been blocked when more than 50 at time were on the wire
L
Linus Torvalds 已提交
668 669 670 671
	to the same server - they now will see the session is in exit state
	and get out of SendReceive.  */
	wake_up_all(&server->request_q);
	/* give those requests time to exit */
672
	msleep(125);
673

S
Steve French 已提交
674
	if (server->ssocket) {
L
Linus Torvalds 已提交
675 676 677
		sock_release(csocket);
		server->ssocket = NULL;
	}
678
	/* buffer usuallly freed in free_mid - need to free it here on exit */
679 680
	cifs_buf_release(bigbuf);
	if (smallbuf) /* no sense logging a debug message if NULL */
681
		cifs_small_buf_release(smallbuf);
L
Linus Torvalds 已提交
682

683 684 685 686 687
	/*
	 * BB: we shouldn't have to do any of this. It shouldn't be
	 * possible to exit from the thread with active SMB sessions
	 */
	read_lock(&cifs_tcp_ses_lock);
L
Linus Torvalds 已提交
688
	if (list_empty(&server->pending_mid_q)) {
689 690
		/* loop through server session structures attached to this and
		    mark them dead */
691 692 693 694 695
		list_for_each(tmp, &server->smb_ses_list) {
			ses = list_entry(tmp, struct cifsSesInfo,
					 smb_ses_list);
			ses->status = CifsExiting;
			ses->server = NULL;
L
Linus Torvalds 已提交
696
		}
697
		read_unlock(&cifs_tcp_ses_lock);
L
Linus Torvalds 已提交
698
	} else {
699 700 701
		/* although we can not zero the server struct pointer yet,
		since there are active requests which may depnd on them,
		mark the corresponding SMB sessions as exiting too */
702
		list_for_each(tmp, &server->smb_ses_list) {
703
			ses = list_entry(tmp, struct cifsSesInfo,
704 705
					 smb_ses_list);
			ses->status = CifsExiting;
706 707
		}

L
Linus Torvalds 已提交
708 709 710 711
		spin_lock(&GlobalMid_Lock);
		list_for_each(tmp, &server->pending_mid_q) {
		mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
			if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
712 713
				cFYI(1, ("Clearing Mid 0x%x - waking up ",
					 mid_entry->mid));
L
Linus Torvalds 已提交
714
				task_to_wake = mid_entry->tsk;
715
				if (task_to_wake)
L
Linus Torvalds 已提交
716 717 718 719
					wake_up_process(task_to_wake);
			}
		}
		spin_unlock(&GlobalMid_Lock);
720
		read_unlock(&cifs_tcp_ses_lock);
L
Linus Torvalds 已提交
721
		/* 1/8th of sec is more than enough time for them to exit */
722
		msleep(125);
L
Linus Torvalds 已提交
723 724
	}

725
	if (!list_empty(&server->pending_mid_q)) {
726
		/* mpx threads have not exited yet give them
L
Linus Torvalds 已提交
727
		at least the smb send timeout time for long ops */
728 729 730 731
		/* due to delays on oplock break requests, we need
		to wait at least 45 seconds before giving up
		on a request getting a response and going ahead
		and killing cifsd */
L
Linus Torvalds 已提交
732
		cFYI(1, ("Wait for exit from demultiplex thread"));
733
		msleep(46000);
L
Linus Torvalds 已提交
734 735 736 737
		/* if threads still have not exited they are probably never
		coming home not much else we can do but free the memory */
	}

738 739
	/* last chance to mark ses pointers invalid
	if there are any pointing to this (e.g
740
	if a crazy root user tried to kill cifsd
741
	kernel thread explicitly this might happen) */
742 743 744 745 746
	/* BB: This shouldn't be necessary, see above */
	read_lock(&cifs_tcp_ses_lock);
	list_for_each(tmp, &server->smb_ses_list) {
		ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
		ses->server = NULL;
747
	}
748
	read_unlock(&cifs_tcp_ses_lock);
749

750
	kfree(server->hostname);
751
	task_to_wake = xchg(&server->tsk, NULL);
752
	kfree(server);
753 754

	length = atomic_dec_return(&tcpSesAllocCount);
755 756 757
	if (length  > 0)
		mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
				GFP_KERNEL);
758

759 760 761 762 763 764 765 766 767 768
	/* if server->tsk was NULL then wait for a signal before exiting */
	if (!task_to_wake) {
		set_current_state(TASK_INTERRUPTIBLE);
		while (!signal_pending(current)) {
			schedule();
			set_current_state(TASK_INTERRUPTIBLE);
		}
		set_current_state(TASK_RUNNING);
	}

769
	module_put_and_exit(0);
L
Linus Torvalds 已提交
770 771
}

772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787 788 789 790 791 792 793 794 795 796 797 798 799
/* extract the host portion of the UNC string */
static char *
extract_hostname(const char *unc)
{
	const char *src;
	char *dst, *delim;
	unsigned int len;

	/* skip double chars at beginning of string */
	/* BB: check validity of these bytes? */
	src = unc + 2;

	/* delimiter between hostname and sharename is always '\\' now */
	delim = strchr(src, '\\');
	if (!delim)
		return ERR_PTR(-EINVAL);

	len = delim - src;
	dst = kmalloc((len + 1), GFP_KERNEL);
	if (dst == NULL)
		return ERR_PTR(-ENOMEM);

	memcpy(dst, src, len);
	dst[len] = '\0';

	return dst;
}

L
Linus Torvalds 已提交
800
static int
801 802
cifs_parse_mount_options(char *options, const char *devname,
			 struct smb_vol *vol)
L
Linus Torvalds 已提交
803 804 805 806 807 808 809
{
	char *value;
	char *data;
	unsigned int  temp_len, i, j;
	char separator[2];

	separator[0] = ',';
810
	separator[1] = 0;
L
Linus Torvalds 已提交
811

812
	if (Local_System_Name[0] != 0)
813
		memcpy(vol->source_rfc1001_name, Local_System_Name, 15);
814
	else {
815
		char *nodename = utsname()->nodename;
816 817 818
		int n = strnlen(nodename, 15);
		memset(vol->source_rfc1001_name, 0x20, 15);
		for (i = 0; i < n; i++) {
819 820 821
			/* does not have to be perfect mapping since field is
			informational, only used for servers that do not support
			port 445 and it can be overridden at mount time */
822
			vol->source_rfc1001_name[i] = toupper(nodename[i]);
823
		}
L
Linus Torvalds 已提交
824 825
	}
	vol->source_rfc1001_name[15] = 0;
826 827 828
	/* null target name indicates to use *SMBSERVR default called name
	   if we end up sending RFC1001 session initialize */
	vol->target_rfc1001_name[0] = 0;
829 830
	vol->linux_uid = current_uid();  /* use current_euid() instead? */
	vol->linux_gid = current_gid();
831 832 833

	/* default to only allowing write access to owner of the mount */
	vol->dir_mode = vol->file_mode = S_IRUGO | S_IXUGO | S_IWUSR;
L
Linus Torvalds 已提交
834 835

	/* vol->retry default is 0 (i.e. "soft" limited retry not hard retry) */
836
	vol->rw = true;
837 838
	/* default is always to request posix paths. */
	vol->posix_paths = 1;
839 840
	/* default to using server inode numbers where available */
	vol->server_ino = 1;
841

L
Linus Torvalds 已提交
842 843 844
	if (!options)
		return 1;

845
	if (strncmp(options, "sep=", 4) == 0) {
S
Steve French 已提交
846
		if (options[4] != 0) {
L
Linus Torvalds 已提交
847 848 849
			separator[0] = options[4];
			options += 5;
		} else {
S
Steve French 已提交
850
			cFYI(1, ("Null separator not allowed"));
L
Linus Torvalds 已提交
851 852
		}
	}
853

L
Linus Torvalds 已提交
854 855 856 857 858 859
	while ((data = strsep(&options, separator)) != NULL) {
		if (!*data)
			continue;
		if ((value = strchr(data, '=')) != NULL)
			*value++ = '\0';

860 861
		/* Have to parse this before we parse for "user" */
		if (strnicmp(data, "user_xattr", 10) == 0) {
L
Linus Torvalds 已提交
862
			vol->no_xattr = 0;
863
		} else if (strnicmp(data, "nouser_xattr", 12) == 0) {
L
Linus Torvalds 已提交
864 865
			vol->no_xattr = 1;
		} else if (strnicmp(data, "user", 4) == 0) {
S
Steve French 已提交
866
			if (!value) {
L
Linus Torvalds 已提交
867 868 869
				printk(KERN_WARNING
				       "CIFS: invalid or missing username\n");
				return 1;	/* needs_arg; */
S
Steve French 已提交
870
			} else if (!*value) {
S
Steve French 已提交
871 872
				/* null user, ie anonymous, authentication */
				vol->nullauth = 1;
L
Linus Torvalds 已提交
873 874 875 876 877 878 879 880 881 882 883
			}
			if (strnlen(value, 200) < 200) {
				vol->username = value;
			} else {
				printk(KERN_WARNING "CIFS: username too long\n");
				return 1;
			}
		} else if (strnicmp(data, "pass", 4) == 0) {
			if (!value) {
				vol->password = NULL;
				continue;
S
Steve French 已提交
884
			} else if (value[0] == 0) {
L
Linus Torvalds 已提交
885 886 887 888
				/* check if string begins with double comma
				   since that would mean the password really
				   does start with a comma, and would not
				   indicate an empty string */
S
Steve French 已提交
889
				if (value[1] != separator[0]) {
L
Linus Torvalds 已提交
890 891 892 893 894 895 896 897
					vol->password = NULL;
					continue;
				}
			}
			temp_len = strlen(value);
			/* removed password length check, NTLM passwords
				can be arbitrarily long */

898
			/* if comma in password, the string will be
L
Linus Torvalds 已提交
899 900 901 902 903 904 905 906 907
			prematurely null terminated.  Commas in password are
			specified across the cifs mount interface by a double
			comma ie ,, and a comma used as in other cases ie ','
			as a parameter delimiter/separator is single and due
			to the strsep above is temporarily zeroed. */

			/* NB: password legally can have multiple commas and
			the only illegal character in a password is null */

908
			if ((value[temp_len] == 0) &&
909
			    (value[temp_len+1] == separator[0])) {
L
Linus Torvalds 已提交
910 911
				/* reinsert comma */
				value[temp_len] = separator[0];
912 913
				temp_len += 2;  /* move after second comma */
				while (value[temp_len] != 0)  {
L
Linus Torvalds 已提交
914
					if (value[temp_len] == separator[0]) {
915
						if (value[temp_len+1] ==
916 917 918
						     separator[0]) {
						/* skip second comma */
							temp_len++;
919
						} else {
L
Linus Torvalds 已提交
920 921 922 923 924 925 926
						/* single comma indicating start
							 of next parm */
							break;
						}
					}
					temp_len++;
				}
S
Steve French 已提交
927
				if (value[temp_len] == 0) {
L
Linus Torvalds 已提交
928 929 930 931 932 933
					options = NULL;
				} else {
					value[temp_len] = 0;
					/* point option to start of next parm */
					options = value + temp_len + 1;
				}
934
				/* go from value to value + temp_len condensing
L
Linus Torvalds 已提交
935 936
				double commas to singles. Note that this ends up
				allocating a few bytes too many, which is ok */
937
				vol->password = kzalloc(temp_len, GFP_KERNEL);
S
Steve French 已提交
938
				if (vol->password == NULL) {
939 940
					printk(KERN_WARNING "CIFS: no memory "
							    "for password\n");
941 942
					return 1;
				}
943
				for (i = 0, j = 0; i < temp_len; i++, j++) {
L
Linus Torvalds 已提交
944
					vol->password[j] = value[i];
S
Steve French 已提交
945
					if (value[i] == separator[0]
946
						&& value[i+1] == separator[0]) {
L
Linus Torvalds 已提交
947 948 949 950 951 952
						/* skip second comma */
						i++;
					}
				}
				vol->password[j] = 0;
			} else {
953
				vol->password = kzalloc(temp_len+1, GFP_KERNEL);
S
Steve French 已提交
954
				if (vol->password == NULL) {
955 956
					printk(KERN_WARNING "CIFS: no memory "
							    "for password\n");
957 958
					return 1;
				}
L
Linus Torvalds 已提交
959 960 961 962 963
				strcpy(vol->password, value);
			}
		} else if (strnicmp(data, "ip", 2) == 0) {
			if (!value || !*value) {
				vol->UNCip = NULL;
964 965
			} else if (strnlen(value, INET6_ADDRSTRLEN) <
							INET6_ADDRSTRLEN) {
L
Linus Torvalds 已提交
966 967
				vol->UNCip = value;
			} else {
968 969
				printk(KERN_WARNING "CIFS: ip address "
						    "too long\n");
L
Linus Torvalds 已提交
970 971
				return 1;
			}
972 973 974 975 976 977
		} else if (strnicmp(data, "sec", 3) == 0) {
			if (!value || !*value) {
				cERROR(1, ("no security value specified"));
				continue;
			} else if (strnicmp(value, "krb5i", 5) == 0) {
				vol->secFlg |= CIFSSEC_MAY_KRB5 |
978
					CIFSSEC_MUST_SIGN;
979
			} else if (strnicmp(value, "krb5p", 5) == 0) {
980 981 982
				/* vol->secFlg |= CIFSSEC_MUST_SEAL |
					CIFSSEC_MAY_KRB5; */
				cERROR(1, ("Krb5 cifs privacy not supported"));
983 984
				return 1;
			} else if (strnicmp(value, "krb5", 4) == 0) {
985
				vol->secFlg |= CIFSSEC_MAY_KRB5;
986 987 988 989 990 991 992
#ifdef CONFIG_CIFS_EXPERIMENTAL
			} else if (strnicmp(value, "ntlmsspi", 8) == 0) {
				vol->secFlg |= CIFSSEC_MAY_NTLMSSP |
					CIFSSEC_MUST_SIGN;
			} else if (strnicmp(value, "ntlmssp", 7) == 0) {
				vol->secFlg |= CIFSSEC_MAY_NTLMSSP;
#endif
993
			} else if (strnicmp(value, "ntlmv2i", 7) == 0) {
994
				vol->secFlg |= CIFSSEC_MAY_NTLMV2 |
995
					CIFSSEC_MUST_SIGN;
996
			} else if (strnicmp(value, "ntlmv2", 6) == 0) {
997
				vol->secFlg |= CIFSSEC_MAY_NTLMV2;
998
			} else if (strnicmp(value, "ntlmi", 5) == 0) {
999
				vol->secFlg |= CIFSSEC_MAY_NTLM |
1000
					CIFSSEC_MUST_SIGN;
1001 1002
			} else if (strnicmp(value, "ntlm", 4) == 0) {
				/* ntlm is default so can be turned off too */
1003
				vol->secFlg |= CIFSSEC_MAY_NTLM;
1004
			} else if (strnicmp(value, "nontlm", 6) == 0) {
1005
				/* BB is there a better way to do this? */
1006
				vol->secFlg |= CIFSSEC_MAY_NTLMV2;
1007 1008
#ifdef CONFIG_CIFS_WEAK_PW_HASH
			} else if (strnicmp(value, "lanman", 6) == 0) {
1009
				vol->secFlg |= CIFSSEC_MAY_LANMAN;
1010
#endif
1011
			} else if (strnicmp(value, "none", 4) == 0) {
1012
				vol->nullauth = 1;
1013 1014 1015 1016
			} else {
				cERROR(1, ("bad security option: %s", value));
				return 1;
			}
L
Linus Torvalds 已提交
1017 1018 1019 1020
		} else if ((strnicmp(data, "unc", 3) == 0)
			   || (strnicmp(data, "target", 6) == 0)
			   || (strnicmp(data, "path", 4) == 0)) {
			if (!value || !*value) {
1021 1022
				printk(KERN_WARNING "CIFS: invalid path to "
						    "network resource\n");
L
Linus Torvalds 已提交
1023 1024 1025
				return 1;	/* needs_arg; */
			}
			if ((temp_len = strnlen(value, 300)) < 300) {
1026
				vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1027
				if (vol->UNC == NULL)
L
Linus Torvalds 已提交
1028
					return 1;
1029
				strcpy(vol->UNC, value);
L
Linus Torvalds 已提交
1030 1031 1032
				if (strncmp(vol->UNC, "//", 2) == 0) {
					vol->UNC[0] = '\\';
					vol->UNC[1] = '\\';
1033
				} else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
L
Linus Torvalds 已提交
1034
					printk(KERN_WARNING
1035 1036
					       "CIFS: UNC Path does not begin "
					       "with // or \\\\ \n");
L
Linus Torvalds 已提交
1037 1038 1039 1040 1041 1042 1043 1044 1045 1046 1047 1048 1049 1050
					return 1;
				}
			} else {
				printk(KERN_WARNING "CIFS: UNC name too long\n");
				return 1;
			}
		} else if ((strnicmp(data, "domain", 3) == 0)
			   || (strnicmp(data, "workgroup", 5) == 0)) {
			if (!value || !*value) {
				printk(KERN_WARNING "CIFS: invalid domain name\n");
				return 1;	/* needs_arg; */
			}
			/* BB are there cases in which a comma can be valid in
			a domain name and need special handling? */
1051
			if (strnlen(value, 256) < 256) {
L
Linus Torvalds 已提交
1052 1053 1054
				vol->domainname = value;
				cFYI(1, ("Domain name set"));
			} else {
1055 1056
				printk(KERN_WARNING "CIFS: domain name too "
						    "long\n");
L
Linus Torvalds 已提交
1057 1058
				return 1;
			}
1059 1060 1061 1062 1063 1064 1065
		} else if (strnicmp(data, "prefixpath", 10) == 0) {
			if (!value || !*value) {
				printk(KERN_WARNING
					"CIFS: invalid path prefix\n");
				return 1;       /* needs_argument */
			}
			if ((temp_len = strnlen(value, 1024)) < 1024) {
1066
				if (value[0] != '/')
1067
					temp_len++;  /* missing leading slash */
1068 1069 1070
				vol->prepath = kmalloc(temp_len+1, GFP_KERNEL);
				if (vol->prepath == NULL)
					return 1;
1071
				if (value[0] != '/') {
1072
					vol->prepath[0] = '/';
1073
					strcpy(vol->prepath+1, value);
1074
				} else
1075 1076 1077 1078 1079 1080
					strcpy(vol->prepath, value);
				cFYI(1, ("prefix path %s", vol->prepath));
			} else {
				printk(KERN_WARNING "CIFS: prefix too long\n");
				return 1;
			}
L
Linus Torvalds 已提交
1081 1082
		} else if (strnicmp(data, "iocharset", 9) == 0) {
			if (!value || !*value) {
1083 1084
				printk(KERN_WARNING "CIFS: invalid iocharset "
						    "specified\n");
L
Linus Torvalds 已提交
1085 1086 1087
				return 1;	/* needs_arg; */
			}
			if (strnlen(value, 65) < 65) {
1088
				if (strnicmp(value, "default", 7))
L
Linus Torvalds 已提交
1089
					vol->iocharset = value;
1090 1091 1092
				/* if iocharset not set then load_nls_default
				   is used by caller */
				cFYI(1, ("iocharset set to %s", value));
L
Linus Torvalds 已提交
1093
			} else {
1094 1095
				printk(KERN_WARNING "CIFS: iocharset name "
						    "too long.\n");
L
Linus Torvalds 已提交
1096 1097 1098 1099 1100 1101
				return 1;
			}
		} else if (strnicmp(data, "uid", 3) == 0) {
			if (value && *value) {
				vol->linux_uid =
					simple_strtoul(value, &value, 0);
1102
				vol->override_uid = 1;
L
Linus Torvalds 已提交
1103 1104 1105 1106 1107
			}
		} else if (strnicmp(data, "gid", 3) == 0) {
			if (value && *value) {
				vol->linux_gid =
					simple_strtoul(value, &value, 0);
1108
				vol->override_gid = 1;
L
Linus Torvalds 已提交
1109 1110 1111 1112 1113 1114 1115 1116 1117 1118 1119 1120 1121 1122 1123 1124 1125 1126 1127 1128 1129 1130 1131 1132 1133 1134 1135 1136 1137 1138 1139 1140 1141 1142 1143 1144 1145 1146
			}
		} else if (strnicmp(data, "file_mode", 4) == 0) {
			if (value && *value) {
				vol->file_mode =
					simple_strtoul(value, &value, 0);
			}
		} else if (strnicmp(data, "dir_mode", 4) == 0) {
			if (value && *value) {
				vol->dir_mode =
					simple_strtoul(value, &value, 0);
			}
		} else if (strnicmp(data, "dirmode", 4) == 0) {
			if (value && *value) {
				vol->dir_mode =
					simple_strtoul(value, &value, 0);
			}
		} else if (strnicmp(data, "port", 4) == 0) {
			if (value && *value) {
				vol->port =
					simple_strtoul(value, &value, 0);
			}
		} else if (strnicmp(data, "rsize", 5) == 0) {
			if (value && *value) {
				vol->rsize =
					simple_strtoul(value, &value, 0);
			}
		} else if (strnicmp(data, "wsize", 5) == 0) {
			if (value && *value) {
				vol->wsize =
					simple_strtoul(value, &value, 0);
			}
		} else if (strnicmp(data, "sockopt", 5) == 0) {
			if (value && *value) {
				vol->sockopt =
					simple_strtoul(value, &value, 0);
			}
		} else if (strnicmp(data, "netbiosname", 4) == 0) {
			if (!value || !*value || (*value == ' ')) {
1147
				cFYI(1, ("invalid (empty) netbiosname"));
L
Linus Torvalds 已提交
1148
			} else {
1149 1150 1151
				memset(vol->source_rfc1001_name, 0x20, 15);
				for (i = 0; i < 15; i++) {
				/* BB are there cases in which a comma can be
L
Linus Torvalds 已提交
1152 1153 1154 1155
				valid in this workstation netbios name (and need
				special handling)? */

				/* We do not uppercase netbiosname for user */
1156
					if (value[i] == 0)
L
Linus Torvalds 已提交
1157
						break;
1158 1159 1160
					else
						vol->source_rfc1001_name[i] =
								value[i];
L
Linus Torvalds 已提交
1161 1162 1163
				}
				/* The string has 16th byte zero still from
				set at top of the function  */
1164 1165 1166
				if ((i == 15) && (value[i] != 0))
					printk(KERN_WARNING "CIFS: netbiosname"
						" longer than 15 truncated.\n");
1167 1168 1169 1170
			}
		} else if (strnicmp(data, "servern", 7) == 0) {
			/* servernetbiosname specified override *SMBSERVER */
			if (!value || !*value || (*value == ' ')) {
S
Steve French 已提交
1171
				cFYI(1, ("empty server netbiosname specified"));
1172 1173
			} else {
				/* last byte, type, is 0x20 for servr type */
1174
				memset(vol->target_rfc1001_name, 0x20, 16);
1175

1176
				for (i = 0; i < 15; i++) {
1177
				/* BB are there cases in which a comma can be
1178 1179
				   valid in this workstation netbios name
				   (and need special handling)? */
1180

1181 1182 1183
				/* user or mount helper must uppercase
				   the netbiosname */
					if (value[i] == 0)
1184 1185
						break;
					else
1186 1187
						vol->target_rfc1001_name[i] =
								value[i];
1188 1189 1190
				}
				/* The string has 16th byte zero still from
				   set at top of the function  */
1191 1192 1193
				if ((i == 15) && (value[i] != 0))
					printk(KERN_WARNING "CIFS: server net"
					"biosname longer than 15 truncated.\n");
L
Linus Torvalds 已提交
1194 1195 1196 1197 1198
			}
		} else if (strnicmp(data, "credentials", 4) == 0) {
			/* ignore */
		} else if (strnicmp(data, "version", 3) == 0) {
			/* ignore */
1199
		} else if (strnicmp(data, "guest", 5) == 0) {
L
Linus Torvalds 已提交
1200 1201
			/* ignore */
		} else if (strnicmp(data, "rw", 2) == 0) {
1202
			vol->rw = true;
1203 1204 1205 1206
		} else if (strnicmp(data, "noblocksend", 11) == 0) {
			vol->noblocksnd = 1;
		} else if (strnicmp(data, "noautotune", 10) == 0) {
			vol->noautotune = 1;
L
Linus Torvalds 已提交
1207 1208 1209 1210 1211 1212 1213 1214
		} else if ((strnicmp(data, "suid", 4) == 0) ||
				   (strnicmp(data, "nosuid", 6) == 0) ||
				   (strnicmp(data, "exec", 4) == 0) ||
				   (strnicmp(data, "noexec", 6) == 0) ||
				   (strnicmp(data, "nodev", 5) == 0) ||
				   (strnicmp(data, "noauto", 6) == 0) ||
				   (strnicmp(data, "dev", 3) == 0)) {
			/*  The mount tool or mount.cifs helper (if present)
1215 1216 1217 1218 1219
			    uses these opts to set flags, and the flags are read
			    by the kernel vfs layer before we get here (ie
			    before read super) so there is no point trying to
			    parse these options again and set anything and it
			    is ok to just ignore them */
L
Linus Torvalds 已提交
1220 1221
			continue;
		} else if (strnicmp(data, "ro", 2) == 0) {
1222
			vol->rw = false;
L
Linus Torvalds 已提交
1223 1224 1225 1226 1227 1228 1229 1230
		} else if (strnicmp(data, "hard", 4) == 0) {
			vol->retry = 1;
		} else if (strnicmp(data, "soft", 4) == 0) {
			vol->retry = 0;
		} else if (strnicmp(data, "perm", 4) == 0) {
			vol->noperm = 0;
		} else if (strnicmp(data, "noperm", 6) == 0) {
			vol->noperm = 1;
1231 1232 1233 1234
		} else if (strnicmp(data, "mapchars", 8) == 0) {
			vol->remap = 1;
		} else if (strnicmp(data, "nomapchars", 10) == 0) {
			vol->remap = 0;
1235 1236 1237 1238
		} else if (strnicmp(data, "sfu", 3) == 0) {
			vol->sfu_emul = 1;
		} else if (strnicmp(data, "nosfu", 5) == 0) {
			vol->sfu_emul = 0;
S
Steve French 已提交
1239 1240
		} else if (strnicmp(data, "nodfs", 5) == 0) {
			vol->nodfs = 1;
1241 1242 1243 1244
		} else if (strnicmp(data, "posixpaths", 10) == 0) {
			vol->posix_paths = 1;
		} else if (strnicmp(data, "noposixpaths", 12) == 0) {
			vol->posix_paths = 0;
1245 1246 1247 1248
		} else if (strnicmp(data, "nounix", 6) == 0) {
			vol->no_linux_ext = 1;
		} else if (strnicmp(data, "nolinux", 7) == 0) {
			vol->no_linux_ext = 1;
1249
		} else if ((strnicmp(data, "nocase", 6) == 0) ||
1250
			   (strnicmp(data, "ignorecase", 10)  == 0)) {
1251
			vol->nocase = 1;
1252 1253
		} else if (strnicmp(data, "brl", 3) == 0) {
			vol->nobrl =  0;
1254
		} else if ((strnicmp(data, "nobrl", 5) == 0) ||
1255
			   (strnicmp(data, "nolock", 6) == 0)) {
1256
			vol->nobrl =  1;
1257 1258 1259
			/* turn off mandatory locking in mode
			if remote locking is turned off since the
			local vfs will do advisory */
1260 1261
			if (vol->file_mode ==
				(S_IALLUGO & ~(S_ISUID | S_IXGRP)))
1262
				vol->file_mode = S_IALLUGO;
1263 1264 1265 1266 1267 1268 1269 1270 1271 1272 1273
		} else if (strnicmp(data, "forcemandatorylock", 9) == 0) {
			/* will take the shorter form "forcemand" as well */
			/* This mount option will force use of mandatory
			  (DOS/Windows style) byte range locks, instead of
			  using posix advisory byte range locks, even if the
			  Unix extensions are available and posix locks would
			  be supported otherwise. If Unix extensions are not
			  negotiated this has no effect since mandatory locks
			  would be used (mandatory locks is all that those
			  those servers support) */
			vol->mand_lock = 1;
L
Linus Torvalds 已提交
1274 1275 1276 1277
		} else if (strnicmp(data, "setuids", 7) == 0) {
			vol->setuids = 1;
		} else if (strnicmp(data, "nosetuids", 9) == 0) {
			vol->setuids = 0;
1278 1279 1280 1281
		} else if (strnicmp(data, "dynperm", 7) == 0) {
			vol->dynperm = true;
		} else if (strnicmp(data, "nodynperm", 9) == 0) {
			vol->dynperm = false;
L
Linus Torvalds 已提交
1282 1283 1284 1285 1286 1287 1288 1289
		} else if (strnicmp(data, "nohard", 6) == 0) {
			vol->retry = 0;
		} else if (strnicmp(data, "nosoft", 6) == 0) {
			vol->retry = 1;
		} else if (strnicmp(data, "nointr", 6) == 0) {
			vol->intr = 0;
		} else if (strnicmp(data, "intr", 4) == 0) {
			vol->intr = 1;
1290 1291 1292 1293
		} else if (strnicmp(data, "nostrictsync", 12) == 0) {
			vol->nostrictsync = 1;
		} else if (strnicmp(data, "strictsync", 10) == 0) {
			vol->nostrictsync = 0;
1294
		} else if (strnicmp(data, "serverino", 7) == 0) {
L
Linus Torvalds 已提交
1295
			vol->server_ino = 1;
1296
		} else if (strnicmp(data, "noserverino", 9) == 0) {
L
Linus Torvalds 已提交
1297
			vol->server_ino = 0;
1298
		} else if (strnicmp(data, "cifsacl", 7) == 0) {
1299 1300 1301
			vol->cifs_acl = 1;
		} else if (strnicmp(data, "nocifsacl", 9) == 0) {
			vol->cifs_acl = 0;
1302
		} else if (strnicmp(data, "acl", 3) == 0) {
L
Linus Torvalds 已提交
1303
			vol->no_psx_acl = 0;
1304
		} else if (strnicmp(data, "noacl", 5) == 0) {
L
Linus Torvalds 已提交
1305
			vol->no_psx_acl = 1;
S
Steve French 已提交
1306 1307 1308 1309
#ifdef CONFIG_CIFS_EXPERIMENTAL
		} else if (strnicmp(data, "locallease", 6) == 0) {
			vol->local_lease = 1;
#endif
1310
		} else if (strnicmp(data, "sign", 4) == 0) {
1311
			vol->secFlg |= CIFSSEC_MUST_SIGN;
1312 1313 1314 1315 1316 1317
		} else if (strnicmp(data, "seal", 4) == 0) {
			/* we do not do the following in secFlags because seal
			   is a per tree connection (mount) not a per socket
			   or per-smb connection option in the protocol */
			/* vol->secFlg |= CIFSSEC_MUST_SEAL; */
			vol->seal = 1;
1318
		} else if (strnicmp(data, "direct", 6) == 0) {
L
Linus Torvalds 已提交
1319
			vol->direct_io = 1;
1320
		} else if (strnicmp(data, "forcedirectio", 13) == 0) {
L
Linus Torvalds 已提交
1321
			vol->direct_io = 1;
1322
		} else if (strnicmp(data, "in6_addr", 8) == 0) {
L
Linus Torvalds 已提交
1323 1324 1325 1326 1327
			if (!value || !*value) {
				vol->in6_addr = NULL;
			} else if (strnlen(value, 49) == 48) {
				vol->in6_addr = value;
			} else {
1328 1329
				printk(KERN_WARNING "CIFS: ip v6 address not "
						    "48 characters long\n");
L
Linus Torvalds 已提交
1330 1331 1332
				return 1;
			}
		} else if (strnicmp(data, "noac", 4) == 0) {
1333 1334 1335
			printk(KERN_WARNING "CIFS: Mount option noac not "
				"supported. Instead set "
				"/proc/fs/cifs/LookupCacheEnabled to 0\n");
L
Linus Torvalds 已提交
1336
		} else
1337 1338
			printk(KERN_WARNING "CIFS: Unknown mount option %s\n",
						data);
L
Linus Torvalds 已提交
1339 1340
	}
	if (vol->UNC == NULL) {
1341
		if (devname == NULL) {
1342 1343
			printk(KERN_WARNING "CIFS: Missing UNC name for mount "
						"target\n");
L
Linus Torvalds 已提交
1344 1345 1346
			return 1;
		}
		if ((temp_len = strnlen(devname, 300)) < 300) {
1347
			vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1348
			if (vol->UNC == NULL)
L
Linus Torvalds 已提交
1349
				return 1;
1350
			strcpy(vol->UNC, devname);
L
Linus Torvalds 已提交
1351 1352 1353 1354
			if (strncmp(vol->UNC, "//", 2) == 0) {
				vol->UNC[0] = '\\';
				vol->UNC[1] = '\\';
			} else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1355 1356
				printk(KERN_WARNING "CIFS: UNC Path does not "
						    "begin with // or \\\\ \n");
L
Linus Torvalds 已提交
1357 1358
				return 1;
			}
1359 1360 1361
			value = strpbrk(vol->UNC+2, "/\\");
			if (value)
				*value = '\\';
L
Linus Torvalds 已提交
1362 1363 1364 1365 1366
		} else {
			printk(KERN_WARNING "CIFS: UNC name too long\n");
			return 1;
		}
	}
S
Steve French 已提交
1367
	if (vol->UNCip == NULL)
L
Linus Torvalds 已提交
1368 1369 1370 1371 1372
		vol->UNCip = &vol->UNC[2];

	return 0;
}

1373
static struct TCP_Server_Info *
1374
cifs_find_tcp_session(struct sockaddr_storage *addr)
L
Linus Torvalds 已提交
1375 1376
{
	struct list_head *tmp;
1377 1378 1379 1380 1381 1382 1383 1384 1385 1386 1387 1388 1389 1390 1391
	struct TCP_Server_Info *server;
	struct sockaddr_in *addr4 = (struct sockaddr_in *) addr;
	struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *) addr;

	write_lock(&cifs_tcp_ses_lock);
	list_for_each(tmp, &cifs_tcp_ses_list) {
		server = list_entry(tmp, struct TCP_Server_Info,
				    tcp_ses_list);
		/*
		 * the demux thread can exit on its own while still in CifsNew
		 * so don't accept any sockets in that state. Since the
		 * tcpStatus never changes back to CifsNew it's safe to check
		 * for this without a lock.
		 */
		if (server->tcpStatus == CifsNew)
1392
			continue;
L
Linus Torvalds 已提交
1393

1394
		if (addr->ss_family == AF_INET &&
1395 1396 1397
		    (addr4->sin_addr.s_addr !=
		     server->addr.sockAddr.sin_addr.s_addr))
			continue;
1398
		else if (addr->ss_family == AF_INET6 &&
1399 1400
			 !ipv6_addr_equal(&server->addr.sockAddr6.sin6_addr,
					  &addr6->sin6_addr))
1401 1402
			continue;

1403 1404
		++server->srv_count;
		write_unlock(&cifs_tcp_ses_lock);
S
Steve French 已提交
1405
		cFYI(1, ("Existing tcp session with server found"));
1406
		return server;
L
Linus Torvalds 已提交
1407
	}
1408
	write_unlock(&cifs_tcp_ses_lock);
L
Linus Torvalds 已提交
1409 1410
	return NULL;
}
1411

1412
static void
1413
cifs_put_tcp_session(struct TCP_Server_Info *server)
L
Linus Torvalds 已提交
1414
{
1415
	struct task_struct *task;
1416

1417 1418 1419 1420
	write_lock(&cifs_tcp_ses_lock);
	if (--server->srv_count > 0) {
		write_unlock(&cifs_tcp_ses_lock);
		return;
L
Linus Torvalds 已提交
1421
	}
1422

1423 1424
	list_del_init(&server->tcp_ses_list);
	write_unlock(&cifs_tcp_ses_lock);
1425

1426 1427 1428
	spin_lock(&GlobalMid_Lock);
	server->tcpStatus = CifsExiting;
	spin_unlock(&GlobalMid_Lock);
1429

1430 1431 1432
	task = xchg(&server->tsk, NULL);
	if (task)
		force_sig(SIGKILL, task);
L
Linus Torvalds 已提交
1433 1434
}

1435 1436 1437 1438
static struct TCP_Server_Info *
cifs_get_tcp_session(struct smb_vol *volume_info)
{
	struct TCP_Server_Info *tcp_ses = NULL;
1439
	struct sockaddr_storage addr;
1440 1441 1442 1443
	struct sockaddr_in *sin_server = (struct sockaddr_in *) &addr;
	struct sockaddr_in6 *sin_server6 = (struct sockaddr_in6 *) &addr;
	int rc;

1444
	memset(&addr, 0, sizeof(struct sockaddr_storage));
1445 1446 1447 1448 1449 1450 1451 1452 1453 1454

	if (volume_info->UNCip && volume_info->UNC) {
		rc = cifs_inet_pton(AF_INET, volume_info->UNCip,
				    &sin_server->sin_addr.s_addr);

		if (rc <= 0) {
			/* not ipv4 address, try ipv6 */
			rc = cifs_inet_pton(AF_INET6, volume_info->UNCip,
					    &sin_server6->sin6_addr.in6_u);
			if (rc > 0)
1455
				addr.ss_family = AF_INET6;
1456
		} else {
1457
			addr.ss_family = AF_INET;
1458 1459 1460 1461 1462 1463 1464 1465 1466 1467 1468 1469 1470 1471 1472 1473 1474 1475 1476 1477 1478 1479 1480 1481 1482 1483 1484 1485 1486 1487 1488 1489 1490 1491 1492 1493 1494 1495 1496 1497 1498 1499 1500 1501 1502 1503 1504 1505 1506 1507 1508 1509 1510 1511 1512 1513 1514 1515 1516 1517 1518 1519 1520 1521
		}

		if (rc <= 0) {
			/* we failed translating address */
			rc = -EINVAL;
			goto out_err;
		}

		cFYI(1, ("UNC: %s ip: %s", volume_info->UNC,
			 volume_info->UNCip));
	} else if (volume_info->UNCip) {
		/* BB using ip addr as tcp_ses name to connect to the
		   DFS root below */
		cERROR(1, ("Connecting to DFS root not implemented yet"));
		rc = -EINVAL;
		goto out_err;
	} else /* which tcp_sess DFS root would we conect to */ {
		cERROR(1,
		       ("CIFS mount error: No UNC path (e.g. -o "
			"unc=//192.168.1.100/public) specified"));
		rc = -EINVAL;
		goto out_err;
	}

	/* see if we already have a matching tcp_ses */
	tcp_ses = cifs_find_tcp_session(&addr);
	if (tcp_ses)
		return tcp_ses;

	tcp_ses = kzalloc(sizeof(struct TCP_Server_Info), GFP_KERNEL);
	if (!tcp_ses) {
		rc = -ENOMEM;
		goto out_err;
	}

	tcp_ses->hostname = extract_hostname(volume_info->UNC);
	if (IS_ERR(tcp_ses->hostname)) {
		rc = PTR_ERR(tcp_ses->hostname);
		goto out_err;
	}

	tcp_ses->noblocksnd = volume_info->noblocksnd;
	tcp_ses->noautotune = volume_info->noautotune;
	atomic_set(&tcp_ses->inFlight, 0);
	init_waitqueue_head(&tcp_ses->response_q);
	init_waitqueue_head(&tcp_ses->request_q);
	INIT_LIST_HEAD(&tcp_ses->pending_mid_q);
	mutex_init(&tcp_ses->srv_mutex);
	memcpy(tcp_ses->workstation_RFC1001_name,
		volume_info->source_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
	memcpy(tcp_ses->server_RFC1001_name,
		volume_info->target_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
	tcp_ses->sequence_number = 0;
	INIT_LIST_HEAD(&tcp_ses->tcp_ses_list);
	INIT_LIST_HEAD(&tcp_ses->smb_ses_list);

	/*
	 * at this point we are the only ones with the pointer
	 * to the struct since the kernel thread not created yet
	 * no need to spinlock this init of tcpStatus or srv_count
	 */
	tcp_ses->tcpStatus = CifsNew;
	++tcp_ses->srv_count;

1522
	if (addr.ss_family == AF_INET6) {
1523 1524 1525 1526 1527 1528
		cFYI(1, ("attempting ipv6 connect"));
		/* BB should we allow ipv6 on port 139? */
		/* other OS never observed in Wild doing 139 with v6 */
		memcpy(&tcp_ses->addr.sockAddr6, sin_server6,
			sizeof(struct sockaddr_in6));
		sin_server6->sin6_port = htons(volume_info->port);
1529
		rc = ipv6_connect(tcp_ses);
1530 1531 1532 1533
	} else {
		memcpy(&tcp_ses->addr.sockAddr, sin_server,
			sizeof(struct sockaddr_in));
		sin_server->sin_port = htons(volume_info->port);
1534
		rc = ipv4_connect(tcp_ses);
1535 1536 1537 1538 1539 1540 1541 1542 1543 1544 1545 1546 1547 1548 1549 1550 1551 1552 1553 1554 1555 1556 1557 1558 1559 1560 1561 1562 1563 1564 1565 1566 1567 1568 1569 1570 1571
	}
	if (rc < 0) {
		cERROR(1, ("Error connecting to socket. Aborting operation"));
		goto out_err;
	}

	/*
	 * since we're in a cifs function already, we know that
	 * this will succeed. No need for try_module_get().
	 */
	__module_get(THIS_MODULE);
	tcp_ses->tsk = kthread_run((void *)(void *)cifs_demultiplex_thread,
				  tcp_ses, "cifsd");
	if (IS_ERR(tcp_ses->tsk)) {
		rc = PTR_ERR(tcp_ses->tsk);
		cERROR(1, ("error %d create cifsd thread", rc));
		module_put(THIS_MODULE);
		goto out_err;
	}

	/* thread spawned, put it on the list */
	write_lock(&cifs_tcp_ses_lock);
	list_add(&tcp_ses->tcp_ses_list, &cifs_tcp_ses_list);
	write_unlock(&cifs_tcp_ses_lock);

	return tcp_ses;

out_err:
	if (tcp_ses) {
		kfree(tcp_ses->hostname);
		if (tcp_ses->ssocket)
			sock_release(tcp_ses->ssocket);
		kfree(tcp_ses);
	}
	return ERR_PTR(rc);
}

1572 1573
static struct cifsSesInfo *
cifs_find_smb_ses(struct TCP_Server_Info *server, char *username)
L
Linus Torvalds 已提交
1574 1575
{
	struct list_head *tmp;
1576
	struct cifsSesInfo *ses;
1577

1578 1579 1580 1581
	write_lock(&cifs_tcp_ses_lock);
	list_for_each(tmp, &server->smb_ses_list) {
		ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
		if (strncmp(ses->userName, username, MAX_USERNAME_SIZE))
1582 1583
			continue;

1584 1585 1586 1587 1588 1589 1590
		++ses->ses_count;
		write_unlock(&cifs_tcp_ses_lock);
		return ses;
	}
	write_unlock(&cifs_tcp_ses_lock);
	return NULL;
}
1591

1592 1593 1594 1595 1596
static void
cifs_put_smb_ses(struct cifsSesInfo *ses)
{
	int xid;
	struct TCP_Server_Info *server = ses->server;
1597

1598 1599 1600 1601 1602
	write_lock(&cifs_tcp_ses_lock);
	if (--ses->ses_count > 0) {
		write_unlock(&cifs_tcp_ses_lock);
		return;
	}
1603

1604 1605
	list_del_init(&ses->smb_ses_list);
	write_unlock(&cifs_tcp_ses_lock);
1606

1607 1608 1609 1610 1611 1612 1613 1614
	if (ses->status == CifsGood) {
		xid = GetXid();
		CIFSSMBLogoff(xid, ses);
		_FreeXid(xid);
	}
	sesInfoFree(ses);
	cifs_put_tcp_session(server);
}
1615

1616 1617 1618 1619 1620 1621 1622 1623 1624 1625 1626 1627
static struct cifsTconInfo *
cifs_find_tcon(struct cifsSesInfo *ses, const char *unc)
{
	struct list_head *tmp;
	struct cifsTconInfo *tcon;

	write_lock(&cifs_tcp_ses_lock);
	list_for_each(tmp, &ses->tcon_list) {
		tcon = list_entry(tmp, struct cifsTconInfo, tcon_list);
		if (tcon->tidStatus == CifsExiting)
			continue;
		if (strncmp(tcon->treeName, unc, MAX_TREE_SIZE))
1628 1629
			continue;

1630 1631
		++tcon->tc_count;
		write_unlock(&cifs_tcp_ses_lock);
1632
		return tcon;
L
Linus Torvalds 已提交
1633
	}
1634
	write_unlock(&cifs_tcp_ses_lock);
L
Linus Torvalds 已提交
1635 1636 1637
	return NULL;
}

1638 1639 1640 1641 1642 1643 1644 1645 1646 1647 1648 1649 1650 1651 1652 1653 1654 1655 1656 1657 1658 1659 1660 1661
static void
cifs_put_tcon(struct cifsTconInfo *tcon)
{
	int xid;
	struct cifsSesInfo *ses = tcon->ses;

	write_lock(&cifs_tcp_ses_lock);
	if (--tcon->tc_count > 0) {
		write_unlock(&cifs_tcp_ses_lock);
		return;
	}

	list_del_init(&tcon->tcon_list);
	write_unlock(&cifs_tcp_ses_lock);

	xid = GetXid();
	CIFSSMBTDis(xid, tcon);
	_FreeXid(xid);

	DeleteTconOplockQEntries(tcon);
	tconInfoFree(tcon);
	cifs_put_smb_ses(ses);
}

L
Linus Torvalds 已提交
1662
int
1663 1664
get_dfs_path(int xid, struct cifsSesInfo *pSesInfo, const char *old_path,
	     const struct nls_table *nls_codepage, unsigned int *pnum_referrals,
S
Steve French 已提交
1665
	     struct dfs_info3_param **preferrals, int remap)
L
Linus Torvalds 已提交
1666 1667 1668 1669 1670
{
	char *temp_unc;
	int rc = 0;

	*pnum_referrals = 0;
S
Steve French 已提交
1671
	*preferrals = NULL;
L
Linus Torvalds 已提交
1672 1673 1674

	if (pSesInfo->ipc_tid == 0) {
		temp_unc = kmalloc(2 /* for slashes */ +
1675 1676
			strnlen(pSesInfo->serverName,
				SERVER_NAME_LEN_WITH_NULL * 2)
L
Linus Torvalds 已提交
1677 1678 1679 1680 1681 1682 1683 1684 1685 1686
				 + 1 + 4 /* slash IPC$ */  + 2,
				GFP_KERNEL);
		if (temp_unc == NULL)
			return -ENOMEM;
		temp_unc[0] = '\\';
		temp_unc[1] = '\\';
		strcpy(temp_unc + 2, pSesInfo->serverName);
		strcpy(temp_unc + 2 + strlen(pSesInfo->serverName), "\\IPC$");
		rc = CIFSTCon(xid, pSesInfo, temp_unc, NULL, nls_codepage);
		cFYI(1,
1687
		     ("CIFS Tcon rc = %d ipc_tid = %d", rc, pSesInfo->ipc_tid));
L
Linus Torvalds 已提交
1688 1689 1690
		kfree(temp_unc);
	}
	if (rc == 0)
S
Steve French 已提交
1691
		rc = CIFSGetDFSRefer(xid, pSesInfo, old_path, preferrals,
1692
				     pnum_referrals, nls_codepage, remap);
S
Steve French 已提交
1693 1694
	/* BB map targetUNCs to dfs_info3 structures, here or
		in CIFSGetDFSRefer BB */
L
Linus Torvalds 已提交
1695 1696 1697 1698

	return rc;
}

1699 1700 1701 1702 1703 1704 1705 1706 1707 1708 1709 1710 1711 1712 1713 1714 1715 1716 1717 1718 1719 1720 1721 1722 1723 1724 1725 1726 1727 1728 1729 1730 1731
#ifdef CONFIG_DEBUG_LOCK_ALLOC
static struct lock_class_key cifs_key[2];
static struct lock_class_key cifs_slock_key[2];

static inline void
cifs_reclassify_socket4(struct socket *sock)
{
	struct sock *sk = sock->sk;
	BUG_ON(sock_owned_by_user(sk));
	sock_lock_init_class_and_name(sk, "slock-AF_INET-CIFS",
		&cifs_slock_key[0], "sk_lock-AF_INET-CIFS", &cifs_key[0]);
}

static inline void
cifs_reclassify_socket6(struct socket *sock)
{
	struct sock *sk = sock->sk;
	BUG_ON(sock_owned_by_user(sk));
	sock_lock_init_class_and_name(sk, "slock-AF_INET6-CIFS",
		&cifs_slock_key[1], "sk_lock-AF_INET6-CIFS", &cifs_key[1]);
}
#else
static inline void
cifs_reclassify_socket4(struct socket *sock)
{
}

static inline void
cifs_reclassify_socket6(struct socket *sock)
{
}
#endif

L
Linus Torvalds 已提交
1732
/* See RFC1001 section 14 on representation of Netbios names */
1733
static void rfc1002mangle(char *target, char *source, unsigned int length)
L
Linus Torvalds 已提交
1734
{
1735
	unsigned int i, j;
L
Linus Torvalds 已提交
1736

1737
	for (i = 0, j = 0; i < (length); i++) {
L
Linus Torvalds 已提交
1738 1739 1740
		/* mask a nibble at a time and encode */
		target[j] = 'A' + (0x0F & (source[i] >> 4));
		target[j+1] = 'A' + (0x0F & source[i]);
1741
		j += 2;
L
Linus Torvalds 已提交
1742 1743 1744 1745 1746 1747
	}

}


static int
1748
ipv4_connect(struct TCP_Server_Info *server)
L
Linus Torvalds 已提交
1749 1750
{
	int rc = 0;
1751
	bool connected = false;
L
Linus Torvalds 已提交
1752
	__be16 orig_port = 0;
1753
	struct socket *socket = server->ssocket;
L
Linus Torvalds 已提交
1754

1755
	if (socket == NULL) {
1756
		rc = sock_create_kern(PF_INET, SOCK_STREAM,
1757
				      IPPROTO_TCP, &socket);
L
Linus Torvalds 已提交
1758
		if (rc < 0) {
1759
			cERROR(1, ("Error %d creating socket", rc));
L
Linus Torvalds 已提交
1760 1761
			return rc;
		}
1762 1763 1764 1765 1766 1767

		/* BB other socket options to set KEEPALIVE, NODELAY? */
		cFYI(1, ("Socket created"));
		server->ssocket = socket;
		socket->sk->sk_allocation = GFP_NOFS;
		cifs_reclassify_socket4(socket);
L
Linus Torvalds 已提交
1768 1769
	}

1770 1771 1772 1773 1774
	/* user overrode default port */
	if (server->addr.sockAddr.sin_port) {
		rc = socket->ops->connect(socket, (struct sockaddr *)
					  &server->addr.sockAddr,
					  sizeof(struct sockaddr_in), 0);
L
Linus Torvalds 已提交
1775
		if (rc >= 0)
1776
			connected = true;
1777
	}
L
Linus Torvalds 已提交
1778

S
Steve French 已提交
1779
	if (!connected) {
1780
		/* save original port so we can retry user specified port
L
Linus Torvalds 已提交
1781
			later if fall back ports fail this time  */
1782
		orig_port = server->addr.sockAddr.sin_port;
L
Linus Torvalds 已提交
1783 1784

		/* do not retry on the same port we just failed on */
1785 1786 1787 1788 1789 1790
		if (server->addr.sockAddr.sin_port != htons(CIFS_PORT)) {
			server->addr.sockAddr.sin_port = htons(CIFS_PORT);
			rc = socket->ops->connect(socket,
						(struct sockaddr *)
						&server->addr.sockAddr,
						sizeof(struct sockaddr_in), 0);
L
Linus Torvalds 已提交
1791
			if (rc >= 0)
1792
				connected = true;
L
Linus Torvalds 已提交
1793 1794 1795
		}
	}
	if (!connected) {
1796 1797 1798
		server->addr.sockAddr.sin_port = htons(RFC1001_PORT);
		rc = socket->ops->connect(socket, (struct sockaddr *)
					      &server->addr.sockAddr,
C
Cyrill Gorcunov 已提交
1799
					      sizeof(struct sockaddr_in), 0);
1800
		if (rc >= 0)
1801
			connected = true;
L
Linus Torvalds 已提交
1802 1803 1804 1805 1806
	}

	/* give up here - unless we want to retry on different
		protocol families some day */
	if (!connected) {
S
Steve French 已提交
1807
		if (orig_port)
1808
			server->addr.sockAddr.sin_port = orig_port;
1809
		cFYI(1, ("Error %d connecting to server via ipv4", rc));
1810 1811
		sock_release(socket);
		server->ssocket = NULL;
L
Linus Torvalds 已提交
1812 1813
		return rc;
	}
1814 1815 1816 1817 1818 1819 1820 1821


	/*
	 * Eventually check for other socket options to change from
	 *  the default. sock_setsockopt not used because it expects
	 *  user space buffer
	 */
	socket->sk->sk_rcvtimeo = 7 * HZ;
1822
	socket->sk->sk_sndtimeo = 5 * HZ;
1823

1824
	/* make the bufsizes depend on wsize/rsize and max requests */
1825 1826 1827 1828 1829
	if (server->noautotune) {
		if (socket->sk->sk_sndbuf < (200 * 1024))
			socket->sk->sk_sndbuf = 200 * 1024;
		if (socket->sk->sk_rcvbuf < (140 * 1024))
			socket->sk->sk_rcvbuf = 140 * 1024;
1830
	}
L
Linus Torvalds 已提交
1831

1832 1833 1834 1835
	 cFYI(1, ("sndbuf %d rcvbuf %d rcvtimeo 0x%lx",
		 socket->sk->sk_sndbuf,
		 socket->sk->sk_rcvbuf, socket->sk->sk_rcvtimeo));

L
Linus Torvalds 已提交
1836
	/* send RFC1001 sessinit */
1837
	if (server->addr.sockAddr.sin_port == htons(RFC1001_PORT)) {
L
Linus Torvalds 已提交
1838
		/* some servers require RFC1001 sessinit before sending
1839
		negprot - BB check reconnection in case where second
L
Linus Torvalds 已提交
1840
		sessinit is sent but no second negprot */
1841 1842 1843 1844
		struct rfc1002_session_packet *ses_init_buf;
		struct smb_hdr *smb_buf;
		ses_init_buf = kzalloc(sizeof(struct rfc1002_session_packet),
				       GFP_KERNEL);
S
Steve French 已提交
1845
		if (ses_init_buf) {
L
Linus Torvalds 已提交
1846
			ses_init_buf->trailer.session_req.called_len = 32;
1847 1848
			if (server->server_RFC1001_name &&
			    server->server_RFC1001_name[0] != 0)
1849 1850
				rfc1002mangle(ses_init_buf->trailer.
						session_req.called_name,
1851
					      server->server_RFC1001_name,
1852
					      RFC1001_NAME_LEN_WITH_NULL);
1853
			else
1854 1855 1856 1857
				rfc1002mangle(ses_init_buf->trailer.
						session_req.called_name,
					      DEFAULT_CIFS_CALLED_NAME,
					      RFC1001_NAME_LEN_WITH_NULL);
1858

L
Linus Torvalds 已提交
1859
			ses_init_buf->trailer.session_req.calling_len = 32;
1860

L
Linus Torvalds 已提交
1861 1862
			/* calling name ends in null (byte 16) from old smb
			convention. */
1863 1864
			if (server->workstation_RFC1001_name &&
			    server->workstation_RFC1001_name[0] != 0)
1865 1866
				rfc1002mangle(ses_init_buf->trailer.
						session_req.calling_name,
1867
					      server->workstation_RFC1001_name,
1868
					      RFC1001_NAME_LEN_WITH_NULL);
1869
			else
1870 1871 1872 1873
				rfc1002mangle(ses_init_buf->trailer.
						session_req.calling_name,
					      "LINUX_CIFS_CLNT",
					      RFC1001_NAME_LEN_WITH_NULL);
1874

L
Linus Torvalds 已提交
1875 1876 1877 1878 1879
			ses_init_buf->trailer.session_req.scope1 = 0;
			ses_init_buf->trailer.session_req.scope2 = 0;
			smb_buf = (struct smb_hdr *)ses_init_buf;
			/* sizeof RFC1002_SESSION_REQUEST with no scope */
			smb_buf->smb_buf_length = 0x81000044;
1880
			rc = smb_send(server, smb_buf, 0x44);
L
Linus Torvalds 已提交
1881
			kfree(ses_init_buf);
1882
			msleep(1); /* RFC1001 layer in at least one server
1883 1884 1885
				      requires very short break before negprot
				      presumably because not expecting negprot
				      to follow so fast.  This is a simple
1886
				      solution that works without
1887 1888 1889
				      complicating the code and causes no
				      significant slowing down on mount
				      for everyone else */
L
Linus Torvalds 已提交
1890
		}
1891
		/* else the negprot may still work without this
L
Linus Torvalds 已提交
1892
		even though malloc failed */
1893

L
Linus Torvalds 已提交
1894
	}
1895

L
Linus Torvalds 已提交
1896 1897 1898 1899
	return rc;
}

static int
1900
ipv6_connect(struct TCP_Server_Info *server)
L
Linus Torvalds 已提交
1901 1902
{
	int rc = 0;
1903
	bool connected = false;
L
Linus Torvalds 已提交
1904
	__be16 orig_port = 0;
1905
	struct socket *socket = server->ssocket;
L
Linus Torvalds 已提交
1906

1907
	if (socket == NULL) {
1908
		rc = sock_create_kern(PF_INET6, SOCK_STREAM,
1909
				      IPPROTO_TCP, &socket);
L
Linus Torvalds 已提交
1910
		if (rc < 0) {
1911
			cERROR(1, ("Error %d creating ipv6 socket", rc));
1912
			socket = NULL;
L
Linus Torvalds 已提交
1913 1914 1915
			return rc;
		}

1916 1917 1918 1919 1920 1921
		/* BB other socket options to set KEEPALIVE, NODELAY? */
		cFYI(1, ("ipv6 Socket created"));
		server->ssocket = socket;
		socket->sk->sk_allocation = GFP_NOFS;
		cifs_reclassify_socket6(socket);
	}
L
Linus Torvalds 已提交
1922

1923 1924 1925 1926
	/* user overrode default port */
	if (server->addr.sockAddr6.sin6_port) {
		rc = socket->ops->connect(socket,
				(struct sockaddr *) &server->addr.sockAddr6,
C
Cyrill Gorcunov 已提交
1927
				sizeof(struct sockaddr_in6), 0);
L
Linus Torvalds 已提交
1928
		if (rc >= 0)
1929
			connected = true;
1930
	}
L
Linus Torvalds 已提交
1931

S
Steve French 已提交
1932
	if (!connected) {
1933
		/* save original port so we can retry user specified port
L
Linus Torvalds 已提交
1934 1935
			later if fall back ports fail this time  */

1936
		orig_port = server->addr.sockAddr6.sin6_port;
L
Linus Torvalds 已提交
1937
		/* do not retry on the same port we just failed on */
1938 1939 1940 1941
		if (server->addr.sockAddr6.sin6_port != htons(CIFS_PORT)) {
			server->addr.sockAddr6.sin6_port = htons(CIFS_PORT);
			rc = socket->ops->connect(socket, (struct sockaddr *)
					&server->addr.sockAddr6,
C
Cyrill Gorcunov 已提交
1942
					sizeof(struct sockaddr_in6), 0);
L
Linus Torvalds 已提交
1943
			if (rc >= 0)
1944
				connected = true;
L
Linus Torvalds 已提交
1945 1946 1947
		}
	}
	if (!connected) {
1948 1949 1950 1951
		server->addr.sockAddr6.sin6_port = htons(RFC1001_PORT);
		rc = socket->ops->connect(socket, (struct sockaddr *)
				&server->addr.sockAddr6,
				sizeof(struct sockaddr_in6), 0);
1952
		if (rc >= 0)
1953
			connected = true;
L
Linus Torvalds 已提交
1954 1955 1956 1957 1958
	}

	/* give up here - unless we want to retry on different
		protocol families some day */
	if (!connected) {
S
Steve French 已提交
1959
		if (orig_port)
1960
			server->addr.sockAddr6.sin6_port = orig_port;
1961
		cFYI(1, ("Error %d connecting to server via ipv6", rc));
1962 1963
		sock_release(socket);
		server->ssocket = NULL;
L
Linus Torvalds 已提交
1964 1965
		return rc;
	}
1966

1967 1968 1969 1970 1971 1972
	/*
	 * Eventually check for other socket options to change from
	 * the default. sock_setsockopt not used because it expects
	 * user space buffer
	 */
	socket->sk->sk_rcvtimeo = 7 * HZ;
1973
	socket->sk->sk_sndtimeo = 5 * HZ;
1974
	server->ssocket = socket;
1975

L
Linus Torvalds 已提交
1976 1977 1978
	return rc;
}

1979 1980
void reset_cifs_unix_caps(int xid, struct cifsTconInfo *tcon,
			  struct super_block *sb, struct smb_vol *vol_info)
1981 1982 1983 1984 1985 1986 1987 1988 1989 1990 1991
{
	/* if we are reconnecting then should we check to see if
	 * any requested capabilities changed locally e.g. via
	 * remount but we can not do much about it here
	 * if they have (even if we could detect it by the following)
	 * Perhaps we could add a backpointer to array of sb from tcon
	 * or if we change to make all sb to same share the same
	 * sb as NFS - then we only have one backpointer to sb.
	 * What if we wanted to mount the server share twice once with
	 * and once without posixacls or posix paths? */
	__u64 saved_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
1992

1993 1994 1995 1996 1997 1998 1999 2000 2001 2002 2003 2004
	if (vol_info && vol_info->no_linux_ext) {
		tcon->fsUnixInfo.Capability = 0;
		tcon->unix_ext = 0; /* Unix Extensions disabled */
		cFYI(1, ("Linux protocol extensions disabled"));
		return;
	} else if (vol_info)
		tcon->unix_ext = 1; /* Unix Extensions supported */

	if (tcon->unix_ext == 0) {
		cFYI(1, ("Unix extensions disabled so not set on reconnect"));
		return;
	}
2005

S
Steve French 已提交
2006
	if (!CIFSSMBQFSUnixInfo(xid, tcon)) {
2007
		__u64 cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2008

2009 2010
		/* check for reconnect case in which we do not
		   want to change the mount behavior if we can avoid it */
S
Steve French 已提交
2011
		if (vol_info == NULL) {
2012
			/* turn off POSIX ACL and PATHNAMES if not set
2013 2014 2015
			   originally at mount time */
			if ((saved_cap & CIFS_UNIX_POSIX_ACL_CAP) == 0)
				cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2016 2017 2018
			if ((saved_cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
				if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
					cERROR(1, ("POSIXPATH support change"));
2019
				cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2020 2021 2022 2023 2024
			} else if ((cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
				cERROR(1, ("possible reconnect error"));
				cERROR(1,
					("server disabled POSIX path support"));
			}
2025
		}
2026

2027
		cap &= CIFS_UNIX_CAP_MASK;
2028
		if (vol_info && vol_info->no_psx_acl)
2029
			cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2030
		else if (CIFS_UNIX_POSIX_ACL_CAP & cap) {
S
Steve French 已提交
2031 2032
			cFYI(1, ("negotiated posix acl support"));
			if (sb)
2033 2034 2035
				sb->s_flags |= MS_POSIXACL;
		}

2036
		if (vol_info && vol_info->posix_paths == 0)
2037
			cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2038
		else if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) {
S
Steve French 已提交
2039
			cFYI(1, ("negotiate posix pathnames"));
2040
			if (sb)
2041
				CIFS_SB(sb)->mnt_cifs_flags |=
2042 2043
					CIFS_MOUNT_POSIX_PATHS;
		}
2044

2045 2046
		/* We might be setting the path sep back to a different
		form if we are reconnecting and the server switched its
2047
		posix path capability for this share */
2048
		if (sb && (CIFS_SB(sb)->prepathlen > 0))
2049
			CIFS_SB(sb)->prepath[0] = CIFS_DIR_SEP(CIFS_SB(sb));
2050 2051 2052 2053

		if (sb && (CIFS_SB(sb)->rsize > 127 * 1024)) {
			if ((cap & CIFS_UNIX_LARGE_READ_CAP) == 0) {
				CIFS_SB(sb)->rsize = 127 * 1024;
2054 2055
				cFYI(DBG2,
					("larger reads not supported by srv"));
2056 2057
			}
		}
2058 2059 2060


		cFYI(1, ("Negotiate caps 0x%x", (int)cap));
2061
#ifdef CONFIG_CIFS_DEBUG2
2062
		if (cap & CIFS_UNIX_FCNTL_CAP)
S
Steve French 已提交
2063
			cFYI(1, ("FCNTL cap"));
2064
		if (cap & CIFS_UNIX_EXTATTR_CAP)
S
Steve French 已提交
2065
			cFYI(1, ("EXTATTR cap"));
2066
		if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
S
Steve French 已提交
2067
			cFYI(1, ("POSIX path cap"));
2068
		if (cap & CIFS_UNIX_XATTR_CAP)
S
Steve French 已提交
2069
			cFYI(1, ("XATTR cap"));
2070
		if (cap & CIFS_UNIX_POSIX_ACL_CAP)
S
Steve French 已提交
2071
			cFYI(1, ("POSIX ACL cap"));
2072
		if (cap & CIFS_UNIX_LARGE_READ_CAP)
S
Steve French 已提交
2073
			cFYI(1, ("very large read cap"));
2074
		if (cap & CIFS_UNIX_LARGE_WRITE_CAP)
S
Steve French 已提交
2075
			cFYI(1, ("very large write cap"));
2076 2077
#endif /* CIFS_DEBUG2 */
		if (CIFSSMBSetFSUnixInfo(xid, tcon, cap)) {
2078
			if (vol_info == NULL) {
2079
				cFYI(1, ("resetting capabilities failed"));
2080
			} else
2081 2082 2083 2084 2085
				cERROR(1, ("Negotiating Unix capabilities "
					   "with the server failed.  Consider "
					   "mounting with the Unix Extensions\n"
					   "disabled, if problems are found, "
					   "by specifying the nounix mount "
2086
					   "option."));
2087

2088 2089 2090 2091
		}
	}
}

2092 2093 2094 2095
static void
convert_delimiter(char *path, char delim)
{
	int i;
2096
	char old_delim;
2097 2098 2099 2100

	if (path == NULL)
		return;

2101
	if (delim == '/')
2102 2103 2104 2105
		old_delim = '\\';
	else
		old_delim = '/';

2106
	for (i = 0; path[i] != '\0'; i++) {
2107
		if (path[i] == old_delim)
2108 2109 2110 2111
			path[i] = delim;
	}
}

S
Steve French 已提交
2112 2113
static void setup_cifs_sb(struct smb_vol *pvolume_info,
			  struct cifs_sb_info *cifs_sb)
2114
{
S
Steve French 已提交
2115 2116 2117 2118 2119 2120 2121 2122 2123 2124 2125 2126 2127 2128 2129 2130 2131 2132 2133 2134 2135 2136 2137 2138 2139 2140 2141 2142 2143 2144 2145 2146 2147 2148 2149 2150 2151 2152 2153 2154 2155 2156 2157 2158 2159 2160 2161 2162 2163 2164 2165 2166 2167 2168 2169 2170 2171 2172 2173 2174 2175 2176 2177 2178 2179
	if (pvolume_info->rsize > CIFSMaxBufSize) {
		cERROR(1, ("rsize %d too large, using MaxBufSize",
			pvolume_info->rsize));
		cifs_sb->rsize = CIFSMaxBufSize;
	} else if ((pvolume_info->rsize) &&
			(pvolume_info->rsize <= CIFSMaxBufSize))
		cifs_sb->rsize = pvolume_info->rsize;
	else /* default */
		cifs_sb->rsize = CIFSMaxBufSize;

	if (pvolume_info->wsize > PAGEVEC_SIZE * PAGE_CACHE_SIZE) {
		cERROR(1, ("wsize %d too large, using 4096 instead",
			  pvolume_info->wsize));
		cifs_sb->wsize = 4096;
	} else if (pvolume_info->wsize)
		cifs_sb->wsize = pvolume_info->wsize;
	else
		cifs_sb->wsize = min_t(const int,
					PAGEVEC_SIZE * PAGE_CACHE_SIZE,
					127*1024);
		/* old default of CIFSMaxBufSize was too small now
		   that SMB Write2 can send multiple pages in kvec.
		   RFC1001 does not describe what happens when frame
		   bigger than 128K is sent so use that as max in
		   conjunction with 52K kvec constraint on arch with 4K
		   page size  */

	if (cifs_sb->rsize < 2048) {
		cifs_sb->rsize = 2048;
		/* Windows ME may prefer this */
		cFYI(1, ("readsize set to minimum: 2048"));
	}
	/* calculate prepath */
	cifs_sb->prepath = pvolume_info->prepath;
	if (cifs_sb->prepath) {
		cifs_sb->prepathlen = strlen(cifs_sb->prepath);
		/* we can not convert the / to \ in the path
		separators in the prefixpath yet because we do not
		know (until reset_cifs_unix_caps is called later)
		whether POSIX PATH CAP is available. We normalize
		the / to \ after reset_cifs_unix_caps is called */
		pvolume_info->prepath = NULL;
	} else
		cifs_sb->prepathlen = 0;
	cifs_sb->mnt_uid = pvolume_info->linux_uid;
	cifs_sb->mnt_gid = pvolume_info->linux_gid;
	cifs_sb->mnt_file_mode = pvolume_info->file_mode;
	cifs_sb->mnt_dir_mode = pvolume_info->dir_mode;
	cFYI(1, ("file mode: 0x%x  dir mode: 0x%x",
		cifs_sb->mnt_file_mode, cifs_sb->mnt_dir_mode));

	if (pvolume_info->noperm)
		cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_PERM;
	if (pvolume_info->setuids)
		cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SET_UID;
	if (pvolume_info->server_ino)
		cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SERVER_INUM;
	if (pvolume_info->remap)
		cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MAP_SPECIAL_CHR;
	if (pvolume_info->no_xattr)
		cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_XATTR;
	if (pvolume_info->sfu_emul)
		cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_UNX_EMUL;
	if (pvolume_info->nobrl)
		cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_BRL;
2180
	if (pvolume_info->nostrictsync)
S
Steve French 已提交
2181
		cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOSSYNC;
2182 2183
	if (pvolume_info->mand_lock)
		cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOPOSIXBRL;
S
Steve French 已提交
2184 2185 2186 2187 2188 2189 2190 2191 2192 2193 2194 2195 2196 2197 2198 2199
	if (pvolume_info->cifs_acl)
		cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_ACL;
	if (pvolume_info->override_uid)
		cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_UID;
	if (pvolume_info->override_gid)
		cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_GID;
	if (pvolume_info->dynperm)
		cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DYNPERM;
	if (pvolume_info->direct_io) {
		cFYI(1, ("mounting share using direct i/o"));
		cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DIRECT_IO;
	}

	if ((pvolume_info->cifs_acl) && (pvolume_info->dynperm))
		cERROR(1, ("mount option dynperm ignored if cifsacl "
			   "mount option supported"));
2200 2201
}

2202 2203 2204 2205 2206 2207 2208 2209 2210 2211 2212 2213 2214 2215 2216 2217 2218 2219 2220 2221 2222 2223 2224 2225 2226 2227 2228
static int
is_path_accessible(int xid, struct cifsTconInfo *tcon,
		   struct cifs_sb_info *cifs_sb, const char *full_path)
{
	int rc;
	__u64 inode_num;
	FILE_ALL_INFO *pfile_info;

	rc = CIFSGetSrvInodeNumber(xid, tcon, full_path, &inode_num,
				   cifs_sb->local_nls,
				   cifs_sb->mnt_cifs_flags &
						CIFS_MOUNT_MAP_SPECIAL_CHR);
	if (rc != -EOPNOTSUPP)
		return rc;

	pfile_info = kmalloc(sizeof(FILE_ALL_INFO), GFP_KERNEL);
	if (pfile_info == NULL)
		return -ENOMEM;

	rc = CIFSSMBQPathInfo(xid, tcon, full_path, pfile_info,
			      0 /* not legacy */, cifs_sb->local_nls,
			      cifs_sb->mnt_cifs_flags &
				CIFS_MOUNT_MAP_SPECIAL_CHR);
	kfree(pfile_info);
	return rc;
}

I
Igor Mammedov 已提交
2229 2230 2231 2232 2233 2234 2235 2236 2237 2238 2239 2240 2241 2242 2243 2244 2245
static void
cleanup_volume_info(struct smb_vol **pvolume_info)
{
	struct smb_vol *volume_info;

	if (!pvolume_info && !*pvolume_info)
		return;

	volume_info = *pvolume_info;
	kzfree(volume_info->password);
	kfree(volume_info->UNC);
	kfree(volume_info->prepath);
	kfree(volume_info);
	*pvolume_info = NULL;
	return;
}

S
Steve French 已提交
2246
#ifdef CONFIG_CIFS_DFS_UPCALL
I
Igor Mammedov 已提交
2247 2248 2249 2250 2251 2252 2253 2254 2255 2256 2257 2258 2259 2260 2261 2262 2263 2264 2265 2266 2267 2268 2269 2270 2271 2272 2273 2274 2275
/* build_path_to_root returns full path to root when
 * we do not have an exiting connection (tcon) */
static char *
build_unc_path_to_root(const struct smb_vol *volume_info,
		const struct cifs_sb_info *cifs_sb)
{
	char *full_path;

	int unc_len = strnlen(volume_info->UNC, MAX_TREE_SIZE + 1);
	full_path = kmalloc(unc_len + cifs_sb->prepathlen + 1, GFP_KERNEL);
	if (full_path == NULL)
		return ERR_PTR(-ENOMEM);

	strncpy(full_path, volume_info->UNC, unc_len);
	if (cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) {
		int i;
		for (i = 0; i < unc_len; i++) {
			if (full_path[i] == '\\')
				full_path[i] = '/';
		}
	}

	if (cifs_sb->prepathlen)
		strncpy(full_path + unc_len, cifs_sb->prepath,
				cifs_sb->prepathlen);

	full_path[unc_len + cifs_sb->prepathlen] = 0; /* add trailing null */
	return full_path;
}
S
Steve French 已提交
2276
#endif
I
Igor Mammedov 已提交
2277

L
Linus Torvalds 已提交
2278 2279
int
cifs_mount(struct super_block *sb, struct cifs_sb_info *cifs_sb,
I
Igor Mammedov 已提交
2280
		char *mount_data_global, const char *devname)
L
Linus Torvalds 已提交
2281 2282 2283
{
	int rc = 0;
	int xid;
2284
	struct smb_vol *volume_info;
L
Linus Torvalds 已提交
2285 2286 2287
	struct cifsSesInfo *pSesInfo = NULL;
	struct cifsTconInfo *tcon = NULL;
	struct TCP_Server_Info *srvTcp = NULL;
2288
	char   *full_path;
S
Steve French 已提交
2289 2290
	char *mount_data = mount_data_global;
#ifdef CONFIG_CIFS_DFS_UPCALL
I
Igor Mammedov 已提交
2291 2292
	struct dfs_info3_param *referrals = NULL;
	unsigned int num_referrals = 0;
2293
	int referral_walks_count = 0;
I
Igor Mammedov 已提交
2294
try_mount_again:
S
Steve French 已提交
2295
#endif
I
Igor Mammedov 已提交
2296
	full_path = NULL;
L
Linus Torvalds 已提交
2297 2298 2299

	xid = GetXid();

2300 2301 2302 2303 2304
	volume_info = kzalloc(sizeof(struct smb_vol), GFP_KERNEL);
	if (!volume_info) {
		rc = -ENOMEM;
		goto out;
	}
2305

2306
	if (cifs_parse_mount_options(mount_data, devname, volume_info)) {
2307 2308
		rc = -EINVAL;
		goto out;
L
Linus Torvalds 已提交
2309 2310
	}

2311
	if (volume_info->nullauth) {
S
Steve French 已提交
2312
		cFYI(1, ("null user"));
2313 2314
		volume_info->username = "";
	} else if (volume_info->username) {
L
Linus Torvalds 已提交
2315
		/* BB fixme parse for domain name here */
2316
		cFYI(1, ("Username: %s", volume_info->username));
L
Linus Torvalds 已提交
2317
	} else {
2318
		cifserror("No username specified");
2319 2320
	/* In userspace mount helper we can get user name from alternate
	   locations such as env variables and files on disk */
2321 2322
		rc = -EINVAL;
		goto out;
L
Linus Torvalds 已提交
2323 2324 2325 2326
	}


	/* this is needed for ASCII cp to Unicode converts */
2327
	if (volume_info->iocharset == NULL) {
L
Linus Torvalds 已提交
2328 2329 2330
		cifs_sb->local_nls = load_nls_default();
	/* load_nls_default can not return null */
	} else {
2331
		cifs_sb->local_nls = load_nls(volume_info->iocharset);
S
Steve French 已提交
2332
		if (cifs_sb->local_nls == NULL) {
2333
			cERROR(1, ("CIFS mount error: iocharset %s not found",
2334
				 volume_info->iocharset));
2335 2336
			rc = -ELIBACC;
			goto out;
L
Linus Torvalds 已提交
2337 2338 2339
		}
	}

2340
	/* get a reference to a tcp session */
2341
	srvTcp = cifs_get_tcp_session(volume_info);
2342 2343 2344
	if (IS_ERR(srvTcp)) {
		rc = PTR_ERR(srvTcp);
		goto out;
L
Linus Torvalds 已提交
2345 2346
	}

2347
	pSesInfo = cifs_find_smb_ses(srvTcp, volume_info->username);
2348
	if (pSesInfo) {
2349 2350
		cFYI(1, ("Existing smb sess found (status=%d)",
			pSesInfo->status));
2351 2352 2353 2354 2355 2356
		/*
		 * The existing SMB session already has a reference to srvTcp,
		 * so we can put back the extra one we got before
		 */
		cifs_put_tcp_session(srvTcp);

2357
		down(&pSesInfo->sesSem);
S
Steve French 已提交
2358
		if (pSesInfo->need_reconnect) {
2359 2360 2361 2362
			cFYI(1, ("Session needs reconnect"));
			rc = cifs_setup_session(xid, pSesInfo,
						cifs_sb->local_nls);
		}
2363
		up(&pSesInfo->sesSem);
L
Linus Torvalds 已提交
2364
	} else if (!rc) {
2365
		cFYI(1, ("Existing smb sess not found"));
L
Linus Torvalds 已提交
2366
		pSesInfo = sesInfoAlloc();
2367
		if (pSesInfo == NULL) {
L
Linus Torvalds 已提交
2368
			rc = -ENOMEM;
2369
			goto mount_fail_check;
L
Linus Torvalds 已提交
2370 2371
		}

2372 2373
		/* new SMB session uses our srvTcp ref */
		pSesInfo->server = srvTcp;
2374
		if (srvTcp->addr.sockAddr6.sin6_family == AF_INET6)
2375 2376
			sprintf(pSesInfo->serverName, "%pI6",
				&srvTcp->addr.sockAddr6.sin6_addr);
2377
		else
2378 2379
			sprintf(pSesInfo->serverName, "%pI4",
				&srvTcp->addr.sockAddr.sin_addr.s_addr);
2380 2381 2382 2383 2384

		write_lock(&cifs_tcp_ses_lock);
		list_add(&pSesInfo->smb_ses_list, &srvTcp->smb_ses_list);
		write_unlock(&cifs_tcp_ses_lock);

2385 2386
		/* volume_info->password freed at unmount */
		if (volume_info->password) {
J
Jeff Layton 已提交
2387 2388 2389 2390 2391 2392
			pSesInfo->password = kstrdup(volume_info->password,
						     GFP_KERNEL);
			if (!pSesInfo->password) {
				rc = -ENOMEM;
				goto mount_fail_check;
			}
2393
		}
2394 2395
		if (volume_info->username)
			strncpy(pSesInfo->userName, volume_info->username,
2396
				MAX_USERNAME_SIZE);
2397 2398
		if (volume_info->domainname) {
			int len = strlen(volume_info->domainname);
2399 2400 2401
			pSesInfo->domainName = kmalloc(len + 1, GFP_KERNEL);
			if (pSesInfo->domainName)
				strcpy(pSesInfo->domainName,
2402
					volume_info->domainname);
2403
		}
2404 2405
		pSesInfo->linux_uid = volume_info->linux_uid;
		pSesInfo->overrideSecFlg = volume_info->secFlg;
2406
		down(&pSesInfo->sesSem);
L
Linus Torvalds 已提交
2407

2408 2409 2410 2411
		/* BB FIXME need to pass vol->secFlgs BB */
		rc = cifs_setup_session(xid, pSesInfo,
					cifs_sb->local_nls);
		up(&pSesInfo->sesSem);
L
Linus Torvalds 已提交
2412
	}
2413

L
Linus Torvalds 已提交
2414 2415
	/* search for existing tcon to this server share */
	if (!rc) {
2416
		setup_cifs_sb(volume_info, cifs_sb);
L
Linus Torvalds 已提交
2417

2418
		tcon = cifs_find_tcon(pSesInfo, volume_info->UNC);
L
Linus Torvalds 已提交
2419
		if (tcon) {
2420
			cFYI(1, ("Found match on UNC path"));
2421 2422
			/* existing tcon already has a reference */
			cifs_put_smb_ses(pSesInfo);
2423
			if (tcon->seal != volume_info->seal)
2424 2425
				cERROR(1, ("transport encryption setting "
					   "conflicts with existing tid"));
L
Linus Torvalds 已提交
2426 2427
		} else {
			tcon = tconInfoAlloc();
S
Steve French 已提交
2428
			if (tcon == NULL) {
L
Linus Torvalds 已提交
2429
				rc = -ENOMEM;
S
Steve French 已提交
2430 2431
				goto mount_fail_check;
			}
J
Jeff Layton 已提交
2432

2433
			tcon->ses = pSesInfo;
J
Jeff Layton 已提交
2434 2435 2436 2437 2438 2439 2440 2441
			if (volume_info->password) {
				tcon->password = kstrdup(volume_info->password,
							 GFP_KERNEL);
				if (!tcon->password) {
					rc = -ENOMEM;
					goto mount_fail_check;
				}
			}
S
Steve French 已提交
2442

2443 2444
			if ((strchr(volume_info->UNC + 3, '\\') == NULL)
			    && (strchr(volume_info->UNC + 3, '/') == NULL)) {
I
Igor Mammedov 已提交
2445
				cERROR(1, ("Missing share name"));
S
Steve French 已提交
2446 2447 2448 2449 2450 2451
				rc = -ENODEV;
				goto mount_fail_check;
			} else {
				/* BB Do we need to wrap sesSem around
				 * this TCon call and Unix SetFS as
				 * we do on SessSetup and reconnect? */
2452
				rc = CIFSTCon(xid, pSesInfo, volume_info->UNC,
S
Steve French 已提交
2453 2454
					      tcon, cifs_sb->local_nls);
				cFYI(1, ("CIFS Tcon rc = %d", rc));
2455
				if (volume_info->nodfs) {
S
Steve French 已提交
2456 2457 2458
					tcon->Flags &= ~SMB_SHARE_IS_IN_DFS;
					cFYI(1, ("DFS disabled (%d)",
						tcon->Flags));
L
Linus Torvalds 已提交
2459 2460
				}
			}
2461
			if (rc)
I
Igor Mammedov 已提交
2462
				goto remote_path_check;
2463
			tcon->seal = volume_info->seal;
2464 2465 2466
			write_lock(&cifs_tcp_ses_lock);
			list_add(&tcon->tcon_list, &pSesInfo->tcon_list);
			write_unlock(&cifs_tcp_ses_lock);
L
Linus Torvalds 已提交
2467
		}
S
Steve French 已提交
2468 2469 2470 2471 2472

		/* we can have only one retry value for a connection
		   to a share so for resources mounted more than once
		   to the same server share the last value passed in
		   for the retry flag is used */
2473 2474 2475
		tcon->retry = volume_info->retry;
		tcon->nocase = volume_info->nocase;
		tcon->local_lease = volume_info->local_lease;
L
Linus Torvalds 已提交
2476
	}
2477
	if (pSesInfo) {
L
Linus Torvalds 已提交
2478 2479 2480 2481 2482 2483
		if (pSesInfo->capabilities & CAP_LARGE_FILES) {
			sb->s_maxbytes = (u64) 1 << 63;
		} else
			sb->s_maxbytes = (u64) 1 << 31;	/* 2 GB */
	}

2484
	/* BB FIXME fix time_gran to be larger for LANMAN sessions */
L
Linus Torvalds 已提交
2485 2486
	sb->s_time_gran = 100;

I
Igor Mammedov 已提交
2487 2488 2489
	if (rc)
		goto remote_path_check;

S
Steve French 已提交
2490
	cifs_sb->tcon = tcon;
2491

S
Steve French 已提交
2492 2493 2494 2495 2496
	/* do not care if following two calls succeed - informational */
	if (!tcon->ipc) {
		CIFSSMBQFSDeviceInfo(xid, tcon);
		CIFSSMBQFSAttributeInfo(xid, tcon);
	}
2497

S
Steve French 已提交
2498 2499 2500 2501
	/* tell server which Unix caps we support */
	if (tcon->ses->capabilities & CAP_UNIX)
		/* reset of caps checks mount to see if unix extensions
		   disabled for just this mount */
2502
		reset_cifs_unix_caps(xid, tcon, sb, volume_info);
S
Steve French 已提交
2503 2504
	else
		tcon->unix_ext = 0; /* server does not support them */
2505

S
Steve French 已提交
2506 2507 2508
	/* convert forward to back slashes in prepath here if needed */
	if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
		convert_delimiter(cifs_sb->prepath, CIFS_DIR_SEP(cifs_sb));
2509

S
Steve French 已提交
2510 2511 2512
	if ((tcon->unix_ext == 0) && (cifs_sb->rsize > (1024 * 127))) {
		cifs_sb->rsize = 1024 * 127;
		cFYI(DBG2, ("no very large read support, rsize now 127K"));
L
Linus Torvalds 已提交
2513
	}
S
Steve French 已提交
2514 2515 2516 2517 2518 2519
	if (!(tcon->ses->capabilities & CAP_LARGE_WRITE_X))
		cifs_sb->wsize = min(cifs_sb->wsize,
			       (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
	if (!(tcon->ses->capabilities & CAP_LARGE_READ_X))
		cifs_sb->rsize = min(cifs_sb->rsize,
			       (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
L
Linus Torvalds 已提交
2520

I
Igor Mammedov 已提交
2521 2522 2523
remote_path_check:
	/* check if a whole path (including prepath) is not remote */
	if (!rc && cifs_sb->prepathlen && tcon) {
2524 2525 2526 2527 2528 2529 2530
		/* build_path_to_root works only when we have a valid tcon */
		full_path = cifs_build_path_to_root(cifs_sb);
		if (full_path == NULL) {
			rc = -ENOMEM;
			goto mount_fail_check;
		}
		rc = is_path_accessible(xid, tcon, cifs_sb, full_path);
I
Igor Mammedov 已提交
2531
		if (rc != -EREMOTE) {
2532 2533 2534 2535 2536 2537
			kfree(full_path);
			goto mount_fail_check;
		}
		kfree(full_path);
	}

I
Igor Mammedov 已提交
2538 2539
	/* get referral if needed */
	if (rc == -EREMOTE) {
2540
#ifdef CONFIG_CIFS_DFS_UPCALL
2541 2542 2543 2544 2545 2546 2547 2548 2549 2550
		if (referral_walks_count > MAX_NESTED_LINKS) {
			/*
			 * BB: when we implement proper loop detection,
			 *     we will remove this check. But now we need it
			 *     to prevent an indefinite loop if 'DFS tree' is
			 *     misconfigured (i.e. has loops).
			 */
			rc = -ELOOP;
			goto mount_fail_check;
		}
I
Igor Mammedov 已提交
2551 2552 2553 2554 2555 2556 2557 2558 2559 2560 2561 2562 2563 2564 2565 2566 2567 2568 2569 2570 2571 2572 2573 2574 2575 2576 2577 2578 2579 2580 2581 2582 2583
		/* convert forward to back slashes in prepath here if needed */
		if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
			convert_delimiter(cifs_sb->prepath,
					CIFS_DIR_SEP(cifs_sb));
		full_path = build_unc_path_to_root(volume_info, cifs_sb);
		if (IS_ERR(full_path)) {
			rc = PTR_ERR(full_path);
			goto mount_fail_check;
		}

		cFYI(1, ("Getting referral for: %s", full_path));
		rc = get_dfs_path(xid, pSesInfo , full_path + 1,
			cifs_sb->local_nls, &num_referrals, &referrals,
			cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
		if (!rc && num_referrals > 0) {
			char *fake_devname = NULL;

			if (mount_data != mount_data_global)
				kfree(mount_data);
			mount_data = cifs_compose_mount_options(
					cifs_sb->mountdata, full_path + 1,
					referrals, &fake_devname);
			kfree(fake_devname);
			free_dfs_info_array(referrals, num_referrals);

			if (tcon)
				cifs_put_tcon(tcon);
			else if (pSesInfo)
				cifs_put_smb_ses(pSesInfo);

			cleanup_volume_info(&volume_info);
			FreeXid(xid);
			kfree(full_path);
2584
			referral_walks_count++;
I
Igor Mammedov 已提交
2585 2586
			goto try_mount_again;
		}
2587 2588 2589
#else /* No DFS support, return error on mount */
		rc = -EOPNOTSUPP;
#endif
I
Igor Mammedov 已提交
2590 2591 2592 2593 2594 2595 2596 2597 2598 2599 2600 2601 2602 2603 2604 2605 2606 2607
	}

mount_fail_check:
	/* on error free sesinfo and tcon struct if needed */
	if (rc) {
		if (mount_data != mount_data_global)
			kfree(mount_data);
		/* If find_unc succeeded then rc == 0 so we can not end */
		/* up accidently freeing someone elses tcon struct */
		if (tcon)
			cifs_put_tcon(tcon);
		else if (pSesInfo)
			cifs_put_smb_ses(pSesInfo);
		else
			cifs_put_tcp_session(srvTcp);
		goto out;
	}

2608
	/* volume_info->password is freed above when existing session found
L
Linus Torvalds 已提交
2609 2610 2611
	(in which case it is not needed anymore) but when new sesion is created
	the password ptr is put in the new session structure (in which case the
	password will be freed at unmount time) */
2612 2613
out:
	/* zero out password before freeing */
I
Igor Mammedov 已提交
2614
	cleanup_volume_info(&volume_info);
L
Linus Torvalds 已提交
2615 2616 2617 2618 2619 2620 2621 2622 2623 2624 2625 2626 2627 2628 2629
	FreeXid(xid);
	return rc;
}

int
CIFSTCon(unsigned int xid, struct cifsSesInfo *ses,
	 const char *tree, struct cifsTconInfo *tcon,
	 const struct nls_table *nls_codepage)
{
	struct smb_hdr *smb_buffer;
	struct smb_hdr *smb_buffer_response;
	TCONX_REQ *pSMB;
	TCONX_RSP *pSMBr;
	unsigned char *bcc_ptr;
	int rc = 0;
2630
	int length, bytes_left;
L
Linus Torvalds 已提交
2631 2632 2633 2634 2635 2636 2637 2638 2639 2640 2641 2642 2643
	__u16 count;

	if (ses == NULL)
		return -EIO;

	smb_buffer = cifs_buf_get();
	if (smb_buffer == NULL) {
		return -ENOMEM;
	}
	smb_buffer_response = smb_buffer;

	header_assemble(smb_buffer, SMB_COM_TREE_CONNECT_ANDX,
			NULL /*no tid */ , 4 /*wct */ );
2644 2645

	smb_buffer->Mid = GetNextMid(ses->server);
L
Linus Torvalds 已提交
2646 2647 2648 2649 2650 2651 2652
	smb_buffer->Uid = ses->Suid;
	pSMB = (TCONX_REQ *) smb_buffer;
	pSMBr = (TCONX_RSP *) smb_buffer_response;

	pSMB->AndXCommand = 0xFF;
	pSMB->Flags = cpu_to_le16(TCON_EXTENDED_SECINFO);
	bcc_ptr = &pSMB->Password[0];
S
Steve French 已提交
2653
	if ((ses->server->secMode) & SECMODE_USER) {
2654
		pSMB->PasswordLength = cpu_to_le16(1);	/* minimum */
2655
		*bcc_ptr = 0; /* password is null byte */
2656
		bcc_ptr++;              /* skip password */
2657
		/* already aligned so no need to do it below */
2658
	} else {
2659
		pSMB->PasswordLength = cpu_to_le16(CIFS_SESS_KEY_SIZE);
2660 2661 2662
		/* BB FIXME add code to fail this if NTLMv2 or Kerberos
		   specified as required (when that support is added to
		   the vfs in the future) as only NTLM or the much
2663
		   weaker LANMAN (which we do not send by default) is accepted
2664 2665
		   by Samba (not sure whether other servers allow
		   NTLMv2 password here) */
2666
#ifdef CONFIG_CIFS_WEAK_PW_HASH
2667
		if ((extended_security & CIFSSEC_MAY_LANMAN) &&
J
Jeff Layton 已提交
2668 2669
		    (ses->server->secType == LANMAN))
			calc_lanman_hash(tcon->password, ses->server->cryptKey,
2670 2671 2672
					 ses->server->secMode &
					    SECMODE_PW_ENCRYPT ? true : false,
					 bcc_ptr);
2673 2674
		else
#endif /* CIFS_WEAK_PW_HASH */
J
Jeff Layton 已提交
2675
		SMBNTencrypt(tcon->password, ses->server->cryptKey,
2676 2677
			     bcc_ptr);

2678
		bcc_ptr += CIFS_SESS_KEY_SIZE;
S
Steve French 已提交
2679
		if (ses->capabilities & CAP_UNICODE) {
2680 2681 2682 2683
			/* must align unicode strings */
			*bcc_ptr = 0; /* null byte password */
			bcc_ptr++;
		}
2684
	}
L
Linus Torvalds 已提交
2685

2686
	if (ses->server->secMode &
2687
			(SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
L
Linus Torvalds 已提交
2688 2689 2690 2691 2692 2693 2694 2695 2696 2697 2698
		smb_buffer->Flags2 |= SMBFLG2_SECURITY_SIGNATURE;

	if (ses->capabilities & CAP_STATUS32) {
		smb_buffer->Flags2 |= SMBFLG2_ERR_STATUS;
	}
	if (ses->capabilities & CAP_DFS) {
		smb_buffer->Flags2 |= SMBFLG2_DFS;
	}
	if (ses->capabilities & CAP_UNICODE) {
		smb_buffer->Flags2 |= SMBFLG2_UNICODE;
		length =
2699 2700
		    cifs_strtoUCS((__le16 *) bcc_ptr, tree,
			6 /* max utf8 char length in bytes */ *
2701 2702
			(/* server len*/ + 256 /* share len */), nls_codepage);
		bcc_ptr += 2 * length;	/* convert num 16 bit words to bytes */
L
Linus Torvalds 已提交
2703 2704 2705 2706 2707 2708 2709 2710 2711 2712 2713 2714
		bcc_ptr += 2;	/* skip trailing null */
	} else {		/* ASCII */
		strcpy(bcc_ptr, tree);
		bcc_ptr += strlen(tree) + 1;
	}
	strcpy(bcc_ptr, "?????");
	bcc_ptr += strlen("?????");
	bcc_ptr += 1;
	count = bcc_ptr - &pSMB->Password[0];
	pSMB->hdr.smb_buf_length += count;
	pSMB->ByteCount = cpu_to_le16(count);

2715 2716
	rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response, &length,
			 CIFS_STD_OP);
L
Linus Torvalds 已提交
2717 2718 2719

	/* above now done in SendReceive */
	if ((rc == 0) && (tcon != NULL)) {
2720 2721
		bool is_unicode;

L
Linus Torvalds 已提交
2722
		tcon->tidStatus = CifsGood;
S
Steve French 已提交
2723
		tcon->need_reconnect = false;
L
Linus Torvalds 已提交
2724 2725
		tcon->tid = smb_buffer_response->Tid;
		bcc_ptr = pByteArea(smb_buffer_response);
2726 2727
		bytes_left = BCC(smb_buffer_response);
		length = strnlen(bcc_ptr, bytes_left - 2);
2728 2729 2730 2731 2732
		if (smb_buffer->Flags2 & SMBFLG2_UNICODE)
			is_unicode = true;
		else
			is_unicode = false;

2733

2734
		/* skip service field (NB: this field is always ASCII) */
2735 2736 2737 2738 2739 2740 2741 2742 2743 2744 2745 2746
		if (length == 3) {
			if ((bcc_ptr[0] == 'I') && (bcc_ptr[1] == 'P') &&
			    (bcc_ptr[2] == 'C')) {
				cFYI(1, ("IPC connection"));
				tcon->ipc = 1;
			}
		} else if (length == 2) {
			if ((bcc_ptr[0] == 'A') && (bcc_ptr[1] == ':')) {
				/* the most common case */
				cFYI(1, ("disk share connection"));
			}
		}
2747
		bcc_ptr += length + 1;
2748
		bytes_left -= (length + 1);
L
Linus Torvalds 已提交
2749
		strncpy(tcon->treeName, tree, MAX_TREE_SIZE);
2750 2751

		/* mostly informational -- no need to fail on error here */
2752
		tcon->nativeFileSystem = cifs_strndup_from_ucs(bcc_ptr,
2753
						      bytes_left, is_unicode,
2754 2755 2756 2757
						      nls_codepage);

		cFYI(1, ("nativeFileSystem=%s", tcon->nativeFileSystem));

S
Steve French 已提交
2758
		if ((smb_buffer_response->WordCount == 3) ||
S
Steve French 已提交
2759 2760
			 (smb_buffer_response->WordCount == 7))
			/* field is in same location */
2761 2762 2763
			tcon->Flags = le16_to_cpu(pSMBr->OptionalSupport);
		else
			tcon->Flags = 0;
L
Linus Torvalds 已提交
2764 2765
		cFYI(1, ("Tcon flags: 0x%x ", tcon->Flags));
	} else if ((rc == 0) && tcon == NULL) {
2766
		/* all we need to save for IPC$ connection */
L
Linus Torvalds 已提交
2767 2768 2769
		ses->ipc_tid = smb_buffer_response->Tid;
	}

2770
	cifs_buf_release(smb_buffer);
L
Linus Torvalds 已提交
2771 2772 2773 2774 2775 2776 2777
	return rc;
}

int
cifs_umount(struct super_block *sb, struct cifs_sb_info *cifs_sb)
{
	int rc = 0;
2778
	char *tmp;
L
Linus Torvalds 已提交
2779

2780 2781
	if (cifs_sb->tcon)
		cifs_put_tcon(cifs_sb->tcon);
2782

L
Linus Torvalds 已提交
2783
	cifs_sb->tcon = NULL;
2784 2785 2786 2787
	tmp = cifs_sb->prepath;
	cifs_sb->prepathlen = 0;
	cifs_sb->prepath = NULL;
	kfree(tmp);
L
Linus Torvalds 已提交
2788

2789
	return rc;
2790
}
L
Linus Torvalds 已提交
2791 2792

int cifs_setup_session(unsigned int xid, struct cifsSesInfo *pSesInfo,
2793
					   struct nls_table *nls_info)
L
Linus Torvalds 已提交
2794 2795
{
	int rc = 0;
2796
	int first_time = 0;
2797
	struct TCP_Server_Info *server = pSesInfo->server;
L
Linus Torvalds 已提交
2798 2799

	/* what if server changes its buffer size after dropping the session? */
2800
	if (server->maxBuf == 0) /* no need to send on reconnect */ {
L
Linus Torvalds 已提交
2801
		rc = CIFSSMBNegotiate(xid, pSesInfo);
2802 2803
		if (rc == -EAGAIN) {
			/* retry only once on 1st time connection */
L
Linus Torvalds 已提交
2804
			rc = CIFSSMBNegotiate(xid, pSesInfo);
2805
			if (rc == -EAGAIN)
L
Linus Torvalds 已提交
2806 2807
				rc = -EHOSTDOWN;
		}
S
Steve French 已提交
2808
		if (rc == 0) {
L
Linus Torvalds 已提交
2809
			spin_lock(&GlobalMid_Lock);
2810 2811
			if (server->tcpStatus != CifsExiting)
				server->tcpStatus = CifsGood;
L
Linus Torvalds 已提交
2812 2813 2814 2815 2816
			else
				rc = -EHOSTDOWN;
			spin_unlock(&GlobalMid_Lock);

		}
2817
		first_time = 1;
L
Linus Torvalds 已提交
2818
	}
2819 2820 2821 2822 2823

	if (rc)
		goto ss_err_exit;

	pSesInfo->flags = 0;
2824
	pSesInfo->capabilities = server->capabilities;
2825 2826
	if (linuxExtEnabled == 0)
		pSesInfo->capabilities &= (~CAP_UNIX);
2827

2828
	cFYI(1, ("Security Mode: 0x%x Capabilities: 0x%x TimeAdjust: %d",
2829 2830
		 server->secMode, server->capabilities, server->timeAdj));

2831
	rc = CIFS_SessSetup(xid, pSesInfo, first_time, nls_info);
2832 2833 2834 2835
	if (rc) {
		cERROR(1, ("Send error in SessSetup = %d", rc));
	} else {
		cFYI(1, ("CIFS Session Established successfully"));
2836 2837 2838 2839
		spin_lock(&GlobalMid_Lock);
		pSesInfo->status = CifsGood;
		pSesInfo->need_reconnect = false;
		spin_unlock(&GlobalMid_Lock);
L
Linus Torvalds 已提交
2840
	}
2841

L
Linus Torvalds 已提交
2842 2843 2844 2845
ss_err_exit:
	return rc;
}