cifssmb.c 170.6 KB
Newer Older
L
Linus Torvalds 已提交
1 2 3
/*
 *   fs/cifs/cifssmb.c
 *
S
Steve French 已提交
4
 *   Copyright (C) International Business Machines  Corp., 2002,2008
L
Linus Torvalds 已提交
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26
 *   Author(s): Steve French (sfrench@us.ibm.com)
 *
 *   Contains the routines for constructing the SMB PDUs themselves
 *
 *   This library is free software; you can redistribute it and/or modify
 *   it under the terms of the GNU Lesser General Public License as published
 *   by the Free Software Foundation; either version 2.1 of the License, or
 *   (at your option) any later version.
 *
 *   This library is distributed in the hope that it will be useful,
 *   but WITHOUT ANY WARRANTY; without even the implied warranty of
 *   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See
 *   the GNU Lesser General Public License for more details.
 *
 *   You should have received a copy of the GNU Lesser General Public License
 *   along with this library; if not, write to the Free Software
 *   Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
 */

 /* SMB/CIFS PDU handling routines here - except for leftovers in connect.c   */
 /* These are mostly routines that operate on a pathname, or on a tree id     */
 /* (mounted volume), but there are eight handle based routines which must be */
27 28
 /* treated slightly differently for reconnection purposes since we never     */
 /* want to reuse a stale file handle and only the caller knows the file info */
L
Linus Torvalds 已提交
29 30 31 32 33 34 35 36

#include <linux/fs.h>
#include <linux/kernel.h>
#include <linux/vfs.h>
#include <linux/posix_acl_xattr.h>
#include <asm/uaccess.h>
#include "cifspdu.h"
#include "cifsglob.h"
37
#include "cifsacl.h"
L
Linus Torvalds 已提交
38 39 40 41 42 43 44 45 46
#include "cifsproto.h"
#include "cifs_unicode.h"
#include "cifs_debug.h"

#ifdef CONFIG_CIFS_POSIX
static struct {
	int index;
	char *name;
} protocols[] = {
47 48
#ifdef CONFIG_CIFS_WEAK_PW_HASH
	{LANMAN_PROT, "\2LM1.2X002"},
49
	{LANMAN2_PROT, "\2LANMAN2.1"},
50
#endif /* weak password hashing for legacy clients */
51
	{CIFS_PROT, "\2NT LM 0.12"},
52
	{POSIX_PROT, "\2POSIX 2"},
L
Linus Torvalds 已提交
53 54 55 56 57 58 59
	{BAD_PROT, "\2"}
};
#else
static struct {
	int index;
	char *name;
} protocols[] = {
60 61
#ifdef CONFIG_CIFS_WEAK_PW_HASH
	{LANMAN_PROT, "\2LM1.2X002"},
62
	{LANMAN2_PROT, "\2LANMAN2.1"},
63
#endif /* weak password hashing for legacy clients */
S
Steve French 已提交
64
	{CIFS_PROT, "\2NT LM 0.12"},
L
Linus Torvalds 已提交
65 66 67 68
	{BAD_PROT, "\2"}
};
#endif

69 70 71
/* define the number of elements in the cifs dialect array */
#ifdef CONFIG_CIFS_POSIX
#ifdef CONFIG_CIFS_WEAK_PW_HASH
72
#define CIFS_NUM_PROT 4
73 74 75 76 77
#else
#define CIFS_NUM_PROT 2
#endif /* CIFS_WEAK_PW_HASH */
#else /* not posix */
#ifdef CONFIG_CIFS_WEAK_PW_HASH
78
#define CIFS_NUM_PROT 3
79 80 81 82 83
#else
#define CIFS_NUM_PROT 1
#endif /* CONFIG_CIFS_WEAK_PW_HASH */
#endif /* CIFS_POSIX */

84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109
/* Allocates buffer into dst and copies smb string from src to it.
 * caller is responsible for freeing dst if function returned 0.
 * returns:
 * 	on success - 0
 *	on failure - errno
 */
static int
cifs_strncpy_to_host(char **dst, const char *src, const int maxlen,
		 const bool is_unicode, const struct nls_table *nls_codepage)
{
	int plen;

	if (is_unicode) {
		plen = UniStrnlen((wchar_t *)src, maxlen);
		*dst = kmalloc(plen + 2, GFP_KERNEL);
		if (!*dst)
			goto cifs_strncpy_to_host_ErrExit;
		cifs_strfromUCS_le(*dst, (__le16 *)src, plen, nls_codepage);
	} else {
		plen = strnlen(src, maxlen);
		*dst = kmalloc(plen + 2, GFP_KERNEL);
		if (!*dst)
			goto cifs_strncpy_to_host_ErrExit;
		strncpy(*dst, src, plen);
	}
	(*dst)[plen] = 0;
110
	(*dst)[plen+1] = 0; /* harmless for ASCII case, needed for Unicode */
111 112 113 114 115 116 117
	return 0;

cifs_strncpy_to_host_ErrExit:
	cERROR(1, ("Failed to allocate buffer for string\n"));
	return -ENOMEM;
}

L
Linus Torvalds 已提交
118 119 120

/* Mark as invalid, all open files on tree connections since they
   were closed when session to server was lost */
S
Steve French 已提交
121
static void mark_open_files_invalid(struct cifsTconInfo *pTcon)
L
Linus Torvalds 已提交
122 123
{
	struct cifsFileInfo *open_file = NULL;
S
Steve French 已提交
124 125
	struct list_head *tmp;
	struct list_head *tmp1;
L
Linus Torvalds 已提交
126 127 128 129

/* list all files open on tree connection and mark them invalid */
	write_lock(&GlobalSMBSeslock);
	list_for_each_safe(tmp, tmp1, &pTcon->openFileList) {
S
Steve French 已提交
130
		open_file = list_entry(tmp, struct cifsFileInfo, tlist);
131
		open_file->invalidHandle = true;
L
Linus Torvalds 已提交
132 133
	}
	write_unlock(&GlobalSMBSeslock);
134 135
	/* BB Add call to invalidate_inodes(sb) for all superblocks mounted
	   to this tcon */
L
Linus Torvalds 已提交
136 137
}

S
Steve French 已提交
138 139 140
/* Allocate and return pointer to an SMB request buffer, and set basic
   SMB information in the SMB header.  If the return code is zero, this
   function must have filled in request_buf pointer */
L
Linus Torvalds 已提交
141 142
static int
small_smb_init(int smb_command, int wct, struct cifsTconInfo *tcon,
S
Steve French 已提交
143
		void **request_buf)
L
Linus Torvalds 已提交
144 145 146 147 148 149
{
	int rc = 0;

	/* SMBs NegProt, SessSetup, uLogoff do not have tcon yet so
	   check for tcp and smb session status done differently
	   for those three - in the calling routine */
S
Steve French 已提交
150 151
	if (tcon) {
		if (tcon->tidStatus == CifsExiting) {
152 153 154
			/* only tree disconnect, open, and write,
			(and ulogoff which does not have tcon)
			are allowed as we start force umount */
S
Steve French 已提交
155
			if ((smb_command != SMB_COM_WRITE_ANDX) &&
156
			   (smb_command != SMB_COM_OPEN_ANDX) &&
157
			   (smb_command != SMB_COM_TREE_DISCONNECT)) {
S
Steve French 已提交
158
				cFYI(1, ("can not send cmd %d while umounting",
159 160 161 162
					smb_command));
				return -ENODEV;
			}
		}
S
Steve French 已提交
163
		if ((tcon->ses) && (tcon->ses->status != CifsExiting) &&
164
				  (tcon->ses->server)) {
L
Linus Torvalds 已提交
165
			struct nls_table *nls_codepage;
166
				/* Give Demultiplex thread up to 10 seconds to
167 168
				   reconnect, should be greater than cifs socket
				   timeout which is 7 seconds */
169
			while (tcon->ses->server->tcpStatus ==
170
							 CifsNeedReconnect) {
L
Linus Torvalds 已提交
171
				wait_event_interruptible_timeout(tcon->ses->server->response_q,
172
					(tcon->ses->server->tcpStatus ==
173 174 175
							CifsGood), 10 * HZ);
				if (tcon->ses->server->tcpStatus ==
							CifsNeedReconnect) {
L
Linus Torvalds 已提交
176
					/* on "soft" mounts we wait once */
177
					if (!tcon->retry ||
L
Linus Torvalds 已提交
178
					   (tcon->ses->status == CifsExiting)) {
179 180
						cFYI(1, ("gave up waiting on "
						      "reconnect in smb_init"));
L
Linus Torvalds 已提交
181
						return -EHOSTDOWN;
182 183 184
					} /* else "hard" mount - keep retrying
					     until process is killed or server
					     comes back on-line */
L
Linus Torvalds 已提交
185 186 187
				} else /* TCP session is reestablished now */
					break;
			}
188

L
Linus Torvalds 已提交
189 190 191 192
			nls_codepage = load_nls_default();
		/* need to prevent multiple threads trying to
		simultaneously reconnect the same SMB session */
			down(&tcon->ses->sesSem);
S
Steve French 已提交
193
			if (tcon->ses->need_reconnect)
194
				rc = cifs_setup_session(0, tcon->ses,
195
							nls_codepage);
S
Steve French 已提交
196
			if (!rc && (tcon->need_reconnect)) {
L
Linus Torvalds 已提交
197
				mark_open_files_invalid(tcon);
198
				rc = CIFSTCon(0, tcon->ses, tcon->treeName,
199
					      tcon, nls_codepage);
L
Linus Torvalds 已提交
200
				up(&tcon->ses->sesSem);
201 202 203
				/* BB FIXME add code to check if wsize needs
				   update due to negotiated smb buffer size
				   shrinking */
204
				if (rc == 0) {
L
Linus Torvalds 已提交
205
					atomic_inc(&tconInfoReconnectCount);
206 207 208 209 210 211 212 213
					/* tell server Unix caps we support */
					if (tcon->ses->capabilities & CAP_UNIX)
						reset_cifs_unix_caps(
						0 /* no xid */,
						tcon,
						NULL /* we do not know sb */,
						NULL /* no vol info */);
				}
L
Linus Torvalds 已提交
214 215

				cFYI(1, ("reconnect tcon rc = %d", rc));
216 217
				/* Removed call to reopen open files here.
				   It is safer (and faster) to reopen files
218
				   one at a time as needed in read and write */
L
Linus Torvalds 已提交
219

220
				/* Check if handle based operation so we
221 222
				   know whether we can continue or not without
				   returning to caller to reset file handle */
223
				switch (smb_command) {
L
Linus Torvalds 已提交
224 225 226 227 228 229 230 231 232 233 234 235 236 237 238 239 240 241
					case SMB_COM_READ_ANDX:
					case SMB_COM_WRITE_ANDX:
					case SMB_COM_CLOSE:
					case SMB_COM_FIND_CLOSE2:
					case SMB_COM_LOCKING_ANDX: {
						unload_nls(nls_codepage);
						return -EAGAIN;
					}
				}
			} else {
				up(&tcon->ses->sesSem);
			}
			unload_nls(nls_codepage);

		} else {
			return -EIO;
		}
	}
S
Steve French 已提交
242
	if (rc)
L
Linus Torvalds 已提交
243 244 245 246 247 248 249 250
		return rc;

	*request_buf = cifs_small_buf_get();
	if (*request_buf == NULL) {
		/* BB should we add a retry in here if not a writepage? */
		return -ENOMEM;
	}

251
	header_assemble((struct smb_hdr *) *request_buf, smb_command,
252
			tcon, wct);
L
Linus Torvalds 已提交
253

S
Steve French 已提交
254 255
	if (tcon != NULL)
		cifs_stats_inc(&tcon->num_smbs_sent);
256

L
Linus Torvalds 已提交
257
	return rc;
258 259
}

260
int
261
small_smb_init_no_tc(const int smb_command, const int wct,
262
		     struct cifsSesInfo *ses, void **request_buf)
263 264
{
	int rc;
265
	struct smb_hdr *buffer;
266

267
	rc = small_smb_init(smb_command, wct, NULL, request_buf);
S
Steve French 已提交
268
	if (rc)
269 270
		return rc;

271
	buffer = (struct smb_hdr *)*request_buf;
272 273 274
	buffer->Mid = GetNextMid(ses->server);
	if (ses->capabilities & CAP_UNICODE)
		buffer->Flags2 |= SMBFLG2_UNICODE;
275
	if (ses->capabilities & CAP_STATUS32)
276 277 278 279
		buffer->Flags2 |= SMBFLG2_ERR_STATUS;

	/* uid, tid can stay at zero as set in header assemble */

280
	/* BB add support for turning on the signing when
281 282 283 284
	this function is used after 1st of session setup requests */

	return rc;
}
L
Linus Torvalds 已提交
285 286 287 288 289 290 291 292 293 294 295 296

/* If the return code is zero, this function must fill in request_buf pointer */
static int
smb_init(int smb_command, int wct, struct cifsTconInfo *tcon,
	 void **request_buf /* returned */ ,
	 void **response_buf /* returned */ )
{
	int rc = 0;

	/* SMBs NegProt, SessSetup, uLogoff do not have tcon yet so
	   check for tcp and smb session status done differently
	   for those three - in the calling routine */
S
Steve French 已提交
297
	if (tcon) {
298
		if (tcon->tidStatus == CifsExiting) {
299 300 301
			/* only tree disconnect, open, and write,
			  (and ulogoff which does not have tcon)
			  are allowed as we start force umount */
S
Steve French 已提交
302
			if ((smb_command != SMB_COM_WRITE_ANDX) &&
303 304
			   (smb_command != SMB_COM_OPEN_ANDX) &&
			   (smb_command != SMB_COM_TREE_DISCONNECT)) {
S
Steve French 已提交
305
				cFYI(1, ("can not send cmd %d while umounting",
306 307 308 309 310
					smb_command));
				return -ENODEV;
			}
		}

S
Steve French 已提交
311
		if ((tcon->ses) && (tcon->ses->status != CifsExiting) &&
312
				  (tcon->ses->server)) {
L
Linus Torvalds 已提交
313
			struct nls_table *nls_codepage;
314 315 316
				/* Give Demultiplex thread up to 10 seconds to
				   reconnect, should be greater than cifs socket
				   timeout which is 7 seconds */
317 318
			while (tcon->ses->server->tcpStatus ==
							CifsNeedReconnect) {
L
Linus Torvalds 已提交
319
				wait_event_interruptible_timeout(tcon->ses->server->response_q,
320 321
					(tcon->ses->server->tcpStatus ==
							CifsGood), 10 * HZ);
S
Steve French 已提交
322
				if (tcon->ses->server->tcpStatus ==
323
						CifsNeedReconnect) {
L
Linus Torvalds 已提交
324
					/* on "soft" mounts we wait once */
325
					if (!tcon->retry ||
L
Linus Torvalds 已提交
326
					   (tcon->ses->status == CifsExiting)) {
327 328
						cFYI(1, ("gave up waiting on "
						      "reconnect in smb_init"));
L
Linus Torvalds 已提交
329
						return -EHOSTDOWN;
330 331 332
					} /* else "hard" mount - keep retrying
					     until process is killed or server
					     comes on-line */
L
Linus Torvalds 已提交
333 334 335 336 337 338 339
				} else /* TCP session is reestablished now */
					break;
			}
			nls_codepage = load_nls_default();
		/* need to prevent multiple threads trying to
		simultaneously reconnect the same SMB session */
			down(&tcon->ses->sesSem);
S
Steve French 已提交
340
			if (tcon->ses->need_reconnect)
341
				rc = cifs_setup_session(0, tcon->ses,
342
							nls_codepage);
S
Steve French 已提交
343
			if (!rc && (tcon->need_reconnect)) {
L
Linus Torvalds 已提交
344
				mark_open_files_invalid(tcon);
345 346
				rc = CIFSTCon(0, tcon->ses, tcon->treeName,
					      tcon, nls_codepage);
L
Linus Torvalds 已提交
347
				up(&tcon->ses->sesSem);
348 349 350
				/* BB FIXME add code to check if wsize needs
				update due to negotiated smb buffer size
				shrinking */
351
				if (rc == 0) {
L
Linus Torvalds 已提交
352
					atomic_inc(&tconInfoReconnectCount);
353 354 355 356 357 358 359 360
					/* tell server Unix caps we support */
					if (tcon->ses->capabilities & CAP_UNIX)
						reset_cifs_unix_caps(
						0 /* no xid */,
						tcon,
						NULL /* do not know sb */,
						NULL /* no vol info */);
				}
L
Linus Torvalds 已提交
361 362

				cFYI(1, ("reconnect tcon rc = %d", rc));
363 364
				/* Removed call to reopen open files here.
				   It is safer (and faster) to reopen files
365
				   one at a time as needed in read and write */
L
Linus Torvalds 已提交
366

367
				/* Check if handle based operation so we
368 369
				   know whether we can continue or not without
				   returning to caller to reset file handle */
370
				switch (smb_command) {
L
Linus Torvalds 已提交
371 372 373 374 375 376 377 378 379 380 381 382 383 384 385 386 387 388
					case SMB_COM_READ_ANDX:
					case SMB_COM_WRITE_ANDX:
					case SMB_COM_CLOSE:
					case SMB_COM_FIND_CLOSE2:
					case SMB_COM_LOCKING_ANDX: {
						unload_nls(nls_codepage);
						return -EAGAIN;
					}
				}
			} else {
				up(&tcon->ses->sesSem);
			}
			unload_nls(nls_codepage);

		} else {
			return -EIO;
		}
	}
S
Steve French 已提交
389
	if (rc)
L
Linus Torvalds 已提交
390 391 392 393 394 395 396 397 398 399 400
		return rc;

	*request_buf = cifs_buf_get();
	if (*request_buf == NULL) {
		/* BB should we add a retry in here if not a writepage? */
		return -ENOMEM;
	}
    /* Although the original thought was we needed the response buf for  */
    /* potential retries of smb operations it turns out we can determine */
    /* from the mid flags when the request buffer can be resent without  */
    /* having to use a second distinct buffer for the response */
S
Steve French 已提交
401
	if (response_buf)
402
		*response_buf = *request_buf;
L
Linus Torvalds 已提交
403 404

	header_assemble((struct smb_hdr *) *request_buf, smb_command, tcon,
S
Steve French 已提交
405
			wct);
L
Linus Torvalds 已提交
406

S
Steve French 已提交
407 408
	if (tcon != NULL)
		cifs_stats_inc(&tcon->num_smbs_sent);
409

L
Linus Torvalds 已提交
410 411 412
	return rc;
}

413
static int validate_t2(struct smb_t2_rsp *pSMB)
L
Linus Torvalds 已提交
414 415 416
{
	int rc = -EINVAL;
	int total_size;
417
	char *pBCC;
L
Linus Torvalds 已提交
418 419 420

	/* check for plausible wct, bcc and t2 data and parm sizes */
	/* check for parm and data offset going beyond end of smb */
S
Steve French 已提交
421 422
	if (pSMB->hdr.WordCount >= 10) {
		if ((le16_to_cpu(pSMB->t2_rsp.ParameterOffset) <= 1024) &&
L
Linus Torvalds 已提交
423 424 425 426
		   (le16_to_cpu(pSMB->t2_rsp.DataOffset) <= 1024)) {
			/* check that bcc is at least as big as parms + data */
			/* check that bcc is less than negotiated smb buffer */
			total_size = le16_to_cpu(pSMB->t2_rsp.ParameterCount);
S
Steve French 已提交
427
			if (total_size < 512) {
428
				total_size +=
429
					le16_to_cpu(pSMB->t2_rsp.DataCount);
L
Linus Torvalds 已提交
430
				/* BCC le converted in SendReceive */
431
				pBCC = (pSMB->hdr.WordCount * 2) +
432
					sizeof(struct smb_hdr) +
L
Linus Torvalds 已提交
433
					(char *)pSMB;
S
Steve French 已提交
434
				if ((total_size <= (*(u16 *)pBCC)) &&
435
				   (total_size <
L
Linus Torvalds 已提交
436 437 438 439 440 441
					CIFSMaxBufSize+MAX_CIFS_HDR_SIZE)) {
					return 0;
				}
			}
		}
	}
442
	cifs_dump_mem("Invalid transact2 SMB: ", (char *)pSMB,
L
Linus Torvalds 已提交
443 444 445 446 447 448 449 450 451 452
		sizeof(struct smb_t2_rsp) + 16);
	return rc;
}
int
CIFSSMBNegotiate(unsigned int xid, struct cifsSesInfo *ses)
{
	NEGOTIATE_REQ *pSMB;
	NEGOTIATE_RSP *pSMBr;
	int rc = 0;
	int bytes_returned;
453
	int i;
454
	struct TCP_Server_Info *server;
L
Linus Torvalds 已提交
455
	u16 count;
456
	unsigned int secFlags;
A
Al Viro 已提交
457
	u16 dialect;
L
Linus Torvalds 已提交
458

S
Steve French 已提交
459
	if (ses->server)
L
Linus Torvalds 已提交
460 461 462 463 464 465 466 467 468
		server = ses->server;
	else {
		rc = -EIO;
		return rc;
	}
	rc = smb_init(SMB_COM_NEGOTIATE, 0, NULL /* no tcon yet */ ,
		      (void **) &pSMB, (void **) &pSMBr);
	if (rc)
		return rc;
469 470

	/* if any of auth flags (ie not sign or seal) are overriden use them */
S
Steve French 已提交
471
	if (ses->overrideSecFlg & (~(CIFSSEC_MUST_SIGN | CIFSSEC_MUST_SEAL)))
472
		secFlags = ses->overrideSecFlg;  /* BB FIXME fix sign flags? */
473 474 475
	else /* if override flags set only sign/seal OR them with global auth */
		secFlags = extended_security | ses->overrideSecFlg;

476
	cFYI(1, ("secFlags 0x%x", secFlags));
477

478
	pSMB->hdr.Mid = GetNextMid(server);
479
	pSMB->hdr.Flags2 |= (SMBFLG2_UNICODE | SMBFLG2_ERR_STATUS);
480

481
	if ((secFlags & CIFSSEC_MUST_KRB5) == CIFSSEC_MUST_KRB5)
482
		pSMB->hdr.Flags2 |= SMBFLG2_EXT_SEC;
483 484 485 486
	else if ((secFlags & CIFSSEC_AUTH_MASK) == CIFSSEC_MAY_KRB5) {
		cFYI(1, ("Kerberos only mechanism, enable extended security"));
		pSMB->hdr.Flags2 |= SMBFLG2_EXT_SEC;
	}
487

488
	count = 0;
489
	for (i = 0; i < CIFS_NUM_PROT; i++) {
490 491 492 493
		strncpy(pSMB->DialectsArray+count, protocols[i].name, 16);
		count += strlen(protocols[i].name) + 1;
		/* null at end of source and target buffers anyway */
	}
L
Linus Torvalds 已提交
494 495 496 497 498
	pSMB->hdr.smb_buf_length += count;
	pSMB->ByteCount = cpu_to_le16(count);

	rc = SendReceive(xid, ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
499
	if (rc != 0)
500 501
		goto neg_err_exit;

A
Al Viro 已提交
502
	dialect = le16_to_cpu(pSMBr->DialectIndex);
S
Steve French 已提交
503
	cFYI(1, ("Dialect: %d", dialect));
504
	/* Check wct = 1 error case */
S
Steve French 已提交
505
	if ((pSMBr->hdr.WordCount < 13) || (dialect == BAD_PROT)) {
506
		/* core returns wct = 1, but we do not ask for core - otherwise
507
		small wct just comes when dialect index is -1 indicating we
508 509 510
		could not negotiate a common dialect */
		rc = -EOPNOTSUPP;
		goto neg_err_exit;
511
#ifdef CONFIG_CIFS_WEAK_PW_HASH
S
Steve French 已提交
512
	} else if ((pSMBr->hdr.WordCount == 13)
A
Al Viro 已提交
513 514
			&& ((dialect == LANMAN_PROT)
				|| (dialect == LANMAN2_PROT))) {
515
		__s16 tmp;
516
		struct lanman_neg_rsp *rsp = (struct lanman_neg_rsp *)pSMBr;
517

S
Steve French 已提交
518
		if ((secFlags & CIFSSEC_MAY_LANMAN) ||
519
			(secFlags & CIFSSEC_MAY_PLNTXT))
520 521 522 523
			server->secType = LANMAN;
		else {
			cERROR(1, ("mount failed weak security disabled"
				   " in /proc/fs/cifs/SecurityFlags"));
524 525
			rc = -EOPNOTSUPP;
			goto neg_err_exit;
526
		}
527 528 529
		server->secMode = (__u8)le16_to_cpu(rsp->SecurityMode);
		server->maxReq = le16_to_cpu(rsp->MaxMpxCount);
		server->maxBuf = min((__u32)le16_to_cpu(rsp->MaxBufSize),
530
				(__u32)CIFSMaxBufSize + MAX_CIFS_HDR_SIZE);
531 532 533
		GETU32(server->sessid) = le32_to_cpu(rsp->SessionKey);
		/* even though we do not use raw we might as well set this
		accurately, in case we ever find a need for it */
S
Steve French 已提交
534
		if ((le16_to_cpu(rsp->RawMode) & RAW_ENABLE) == RAW_ENABLE) {
535 536 537 538 539 540
			server->maxRw = 0xFF00;
			server->capabilities = CAP_MPX_MODE | CAP_RAW_MODE;
		} else {
			server->maxRw = 0;/* we do not need to use raw anyway */
			server->capabilities = CAP_MPX_MODE;
		}
541
		tmp = (__s16)le16_to_cpu(rsp->ServerTimeZone);
542
		if (tmp == -1) {
543 544
			/* OS/2 often does not set timezone therefore
			 * we must use server time to calc time zone.
545 546 547 548
			 * Could deviate slightly from the right zone.
			 * Smallest defined timezone difference is 15 minutes
			 * (i.e. Nepal).  Rounding up/down is done to match
			 * this requirement.
549
			 */
550
			int val, seconds, remain, result;
551 552 553 554
			struct timespec ts, utc;
			utc = CURRENT_TIME;
			ts = cnvrtDosUnixTm(le16_to_cpu(rsp->SrvTime.Date),
						le16_to_cpu(rsp->SrvTime.Time));
555 556
			cFYI(1, ("SrvTime %d sec since 1970 (utc: %d) diff: %d",
				(int)ts.tv_sec, (int)utc.tv_sec,
557
				(int)(utc.tv_sec - ts.tv_sec)));
558
			val = (int)(utc.tv_sec - ts.tv_sec);
559
			seconds = abs(val);
S
Steve French 已提交
560
			result = (seconds / MIN_TZ_ADJ) * MIN_TZ_ADJ;
561
			remain = seconds % MIN_TZ_ADJ;
S
Steve French 已提交
562
			if (remain >= (MIN_TZ_ADJ / 2))
563
				result += MIN_TZ_ADJ;
S
Steve French 已提交
564
			if (val < 0)
S
Steve French 已提交
565
				result = -result;
566
			server->timeAdj = result;
567
		} else {
568 569
			server->timeAdj = (int)tmp;
			server->timeAdj *= 60; /* also in seconds */
570
		}
S
Steve French 已提交
571
		cFYI(1, ("server->timeAdj: %d seconds", server->timeAdj));
572

573

574
		/* BB get server time for time conversions and add
575
		code to use it and timezone since this is not UTC */
576

577
		if (rsp->EncryptionKeyLength ==
578
				cpu_to_le16(CIFS_CRYPTO_KEY_SIZE)) {
579 580 581 582 583 584
			memcpy(server->cryptKey, rsp->EncryptionKey,
				CIFS_CRYPTO_KEY_SIZE);
		} else if (server->secMode & SECMODE_PW_ENCRYPT) {
			rc = -EIO; /* need cryptkey unless plain text */
			goto neg_err_exit;
		}
585

S
Steve French 已提交
586
		cFYI(1, ("LANMAN negotiated"));
587 588 589
		/* we will not end up setting signing flags - as no signing
		was in LANMAN and server did not return the flags on */
		goto signing_check;
590
#else /* weak security disabled */
S
Steve French 已提交
591
	} else if (pSMBr->hdr.WordCount == 13) {
592
		cERROR(1, ("mount failed, cifs module not built "
593
			  "with CIFS_WEAK_PW_HASH support"));
594 595
			rc = -EOPNOTSUPP;
#endif /* WEAK_PW_HASH */
596
		goto neg_err_exit;
S
Steve French 已提交
597
	} else if (pSMBr->hdr.WordCount != 17) {
598 599 600 601 602 603
		/* unknown wct */
		rc = -EOPNOTSUPP;
		goto neg_err_exit;
	}
	/* else wct == 17 NTLM */
	server->secMode = pSMBr->SecurityMode;
S
Steve French 已提交
604 605
	if ((server->secMode & SECMODE_USER) == 0)
		cFYI(1, ("share mode security"));
606

S
Steve French 已提交
607
	if ((server->secMode & SECMODE_PW_ENCRYPT) == 0)
608
#ifdef CONFIG_CIFS_WEAK_PW_HASH
609
		if ((secFlags & CIFSSEC_MAY_PLNTXT) == 0)
610
#endif /* CIFS_WEAK_PW_HASH */
611
			cERROR(1, ("Server requests plain text password"
612
				  " but client support disabled"));
613

S
Steve French 已提交
614
	if ((secFlags & CIFSSEC_MUST_NTLMV2) == CIFSSEC_MUST_NTLMV2)
615
		server->secType = NTLMv2;
S
Steve French 已提交
616
	else if (secFlags & CIFSSEC_MAY_NTLM)
617
		server->secType = NTLM;
S
Steve French 已提交
618
	else if (secFlags & CIFSSEC_MAY_NTLMV2)
619
		server->secType = NTLMv2;
620 621 622 623 624 625 626 627 628 629 630 631 632 633
	else if (secFlags & CIFSSEC_MAY_KRB5)
		server->secType = Kerberos;
	else if (secFlags & CIFSSEC_MAY_LANMAN)
		server->secType = LANMAN;
/* #ifdef CONFIG_CIFS_EXPERIMENTAL
	else if (secFlags & CIFSSEC_MAY_PLNTXT)
		server->secType = ??
#endif */
	else {
		rc = -EOPNOTSUPP;
		cERROR(1, ("Invalid security type"));
		goto neg_err_exit;
	}
	/* else ... any others ...? */
634 635 636 637 638 639

	/* one byte, so no need to convert this or EncryptionKeyLen from
	   little endian */
	server->maxReq = le16_to_cpu(pSMBr->MaxMpxCount);
	/* probably no need to store and check maxvcs */
	server->maxBuf = min(le32_to_cpu(pSMBr->MaxBufferSize),
L
Linus Torvalds 已提交
640
			(__u32) CIFSMaxBufSize + MAX_CIFS_HDR_SIZE);
641
	server->maxRw = le32_to_cpu(pSMBr->MaxRawSize);
642
	cFYI(DBG2, ("Max buf = %d", ses->server->maxBuf));
643 644
	GETU32(ses->server->sessid) = le32_to_cpu(pSMBr->SessionKey);
	server->capabilities = le32_to_cpu(pSMBr->Capabilities);
645 646
	server->timeAdj = (int)(__s16)le16_to_cpu(pSMBr->ServerTimeZone);
	server->timeAdj *= 60;
647 648 649 650 651 652 653 654 655 656
	if (pSMBr->EncryptionKeyLength == CIFS_CRYPTO_KEY_SIZE) {
		memcpy(server->cryptKey, pSMBr->u.EncryptionKey,
		       CIFS_CRYPTO_KEY_SIZE);
	} else if ((pSMBr->hdr.Flags2 & SMBFLG2_EXT_SEC)
			&& (pSMBr->EncryptionKeyLength == 0)) {
		/* decode security blob */
	} else if (server->secMode & SECMODE_PW_ENCRYPT) {
		rc = -EIO; /* no crypt key only if plain text pwd */
		goto neg_err_exit;
	}
L
Linus Torvalds 已提交
657

658 659
	/* BB might be helpful to save off the domain of server here */

660
	if ((pSMBr->hdr.Flags2 & SMBFLG2_EXT_SEC) &&
661 662
		(server->capabilities & CAP_EXTENDED_SECURITY)) {
		count = pSMBr->ByteCount;
663
		if (count < 16) {
664
			rc = -EIO;
665 666
			goto neg_err_exit;
		}
667 668 669
		read_lock(&cifs_tcp_ses_lock);
		if (server->srv_count > 1) {
			read_unlock(&cifs_tcp_ses_lock);
670 671 672 673
			if (memcmp(server->server_GUID,
				   pSMBr->u.extended_response.
				   GUID, 16) != 0) {
				cFYI(1, ("server UID changed"));
674
				memcpy(server->server_GUID,
675 676 677
					pSMBr->u.extended_response.GUID,
					16);
			}
678 679
		} else {
			read_unlock(&cifs_tcp_ses_lock);
680 681
			memcpy(server->server_GUID,
			       pSMBr->u.extended_response.GUID, 16);
682
		}
683 684 685

		if (count == 16) {
			server->secType = RawNTLMSSP;
686 687 688 689 690
		} else {
			rc = decode_negTokenInit(pSMBr->u.extended_response.
						 SecurityBlob,
						 count - 16,
						 &server->secType);
691
			if (rc == 1)
692
				rc = 0;
693
			else
694
				rc = -EINVAL;
L
Linus Torvalds 已提交
695
		}
696 697 698
	} else
		server->capabilities &= ~CAP_EXTENDED_SECURITY;

699
#ifdef CONFIG_CIFS_WEAK_PW_HASH
700
signing_check:
701
#endif
702 703 704 705
	if ((secFlags & CIFSSEC_MAY_SIGN) == 0) {
		/* MUST_SIGN already includes the MAY_SIGN FLAG
		   so if this is zero it means that signing is disabled */
		cFYI(1, ("Signing disabled"));
706
		if (server->secMode & SECMODE_SIGN_REQUIRED) {
707
			cERROR(1, ("Server requires "
J
[CIFS]  
Jeff Layton 已提交
708 709
				   "packet signing to be enabled in "
				   "/proc/fs/cifs/SecurityFlags."));
710 711
			rc = -EOPNOTSUPP;
		}
712
		server->secMode &=
713
			~(SECMODE_SIGN_ENABLED | SECMODE_SIGN_REQUIRED);
714 715
	} else if ((secFlags & CIFSSEC_MUST_SIGN) == CIFSSEC_MUST_SIGN) {
		/* signing required */
716
		cFYI(1, ("Must sign - secFlags 0x%x", secFlags));
717 718 719 720
		if ((server->secMode &
			(SECMODE_SIGN_ENABLED | SECMODE_SIGN_REQUIRED)) == 0) {
			cERROR(1,
				("signing required but server lacks support"));
721
			rc = -EOPNOTSUPP;
722 723 724 725
		} else
			server->secMode |= SECMODE_SIGN_REQUIRED;
	} else {
		/* signing optional ie CIFSSEC_MAY_SIGN */
S
Steve French 已提交
726
		if ((server->secMode & SECMODE_SIGN_REQUIRED) == 0)
727
			server->secMode &=
728
				~(SECMODE_SIGN_ENABLED | SECMODE_SIGN_REQUIRED);
L
Linus Torvalds 已提交
729
	}
730 731

neg_err_exit:
732
	cifs_buf_release(pSMB);
733

S
Steve French 已提交
734
	cFYI(1, ("negprot rc %d", rc));
L
Linus Torvalds 已提交
735 736 737 738 739 740 741 742 743 744 745
	return rc;
}

int
CIFSSMBTDis(const int xid, struct cifsTconInfo *tcon)
{
	struct smb_hdr *smb_buffer;
	int rc = 0;

	cFYI(1, ("In tree disconnect"));

746 747 748
	/* BB: do we need to check this? These should never be NULL. */
	if ((tcon->ses == NULL) || (tcon->ses->server == NULL))
		return -EIO;
L
Linus Torvalds 已提交
749

750 751 752 753 754 755 756
	/*
	 * No need to return error on this operation if tid invalidated and
	 * closed on server already e.g. due to tcp session crashing. Also,
	 * the tcon is no longer on the list, so no need to take lock before
	 * checking this.
	 */
	if (tcon->need_reconnect)
757
		return 0;
L
Linus Torvalds 已提交
758

759
	rc = small_smb_init(SMB_COM_TREE_DISCONNECT, 0, tcon,
760
			    (void **)&smb_buffer);
761
	if (rc)
L
Linus Torvalds 已提交
762
		return rc;
763 764

	rc = SendReceiveNoRsp(xid, tcon->ses, smb_buffer, 0);
L
Linus Torvalds 已提交
765
	if (rc)
S
Steve French 已提交
766
		cFYI(1, ("Tree disconnect failed %d", rc));
L
Linus Torvalds 已提交
767

768
	/* No need to return error on this operation if tid invalidated and
769
	   closed on server already e.g. due to tcp session crashing */
L
Linus Torvalds 已提交
770 771 772 773 774 775 776 777 778 779 780 781 782
	if (rc == -EAGAIN)
		rc = 0;

	return rc;
}

int
CIFSSMBLogoff(const int xid, struct cifsSesInfo *ses)
{
	LOGOFF_ANDX_REQ *pSMB;
	int rc = 0;

	cFYI(1, ("In SMBLogoff for session disconnect"));
S
Steve French 已提交
783

784 785 786 787 788 789
	/*
	 * BB: do we need to check validity of ses and server? They should
	 * always be valid since we have an active reference. If not, that
	 * should probably be a BUG()
	 */
	if (!ses || !ses->server)
S
Steve French 已提交
790 791
		return -EIO;

792
	down(&ses->sesSem);
S
Steve French 已提交
793 794 795
	if (ses->need_reconnect)
		goto session_already_dead; /* no need to send SMBlogoff if uid
					      already closed due to reconnect */
L
Linus Torvalds 已提交
796 797 798 799 800 801
	rc = small_smb_init(SMB_COM_LOGOFF_ANDX, 2, NULL, (void **)&pSMB);
	if (rc) {
		up(&ses->sesSem);
		return rc;
	}

S
Steve French 已提交
802
	pSMB->hdr.Mid = GetNextMid(ses->server);
803

S
Steve French 已提交
804
	if (ses->server->secMode &
L
Linus Torvalds 已提交
805 806 807 808 809 810
		   (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
			pSMB->hdr.Flags2 |= SMBFLG2_SECURITY_SIGNATURE;

	pSMB->hdr.Uid = ses->Suid;

	pSMB->AndXCommand = 0xFF;
811
	rc = SendReceiveNoRsp(xid, ses, (struct smb_hdr *) pSMB, 0);
S
Steve French 已提交
812
session_already_dead:
813
	up(&ses->sesSem);
L
Linus Torvalds 已提交
814 815

	/* if session dead then we do not need to do ulogoff,
816
		since server closed smb session, no sense reporting
L
Linus Torvalds 已提交
817 818 819 820 821 822
		error */
	if (rc == -EAGAIN)
		rc = 0;
	return rc;
}

823 824 825 826 827 828 829 830 831 832 833 834 835 836 837 838 839 840 841 842 843 844 845 846 847 848 849 850 851 852 853 854 855 856 857 858 859 860 861 862 863 864 865 866 867 868 869 870 871 872 873 874 875 876 877 878 879 880 881 882 883 884 885
int
CIFSPOSIXDelFile(const int xid, struct cifsTconInfo *tcon, const char *fileName,
		 __u16 type, const struct nls_table *nls_codepage, int remap)
{
	TRANSACTION2_SPI_REQ *pSMB = NULL;
	TRANSACTION2_SPI_RSP *pSMBr = NULL;
	struct unlink_psx_rq *pRqD;
	int name_len;
	int rc = 0;
	int bytes_returned = 0;
	__u16 params, param_offset, offset, byte_count;

	cFYI(1, ("In POSIX delete"));
PsxDelete:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
		    cifsConvertToUCS((__le16 *) pSMB->FileName, fileName,
				     PATH_MAX, nls_codepage, remap);
		name_len++;	/* trailing null */
		name_len *= 2;
	} else { /* BB add path length overrun check */
		name_len = strnlen(fileName, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->FileName, fileName, name_len);
	}

	params = 6 + name_len;
	pSMB->MaxParameterCount = cpu_to_le16(2);
	pSMB->MaxDataCount = 0; /* BB double check this with jra */
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	param_offset = offsetof(struct smb_com_transaction2_spi_req,
				InformationLevel) - 4;
	offset = param_offset + params;

	/* Setup pointer to Request Data (inode type) */
	pRqD = (struct unlink_psx_rq *)(((char *)&pSMB->hdr.Protocol) + offset);
	pRqD->type = cpu_to_le16(type);
	pSMB->ParameterOffset = cpu_to_le16(param_offset);
	pSMB->DataOffset = cpu_to_le16(offset);
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_SET_PATH_INFORMATION);
	byte_count = 3 /* pad */  + params + sizeof(struct unlink_psx_rq);

	pSMB->DataCount = cpu_to_le16(sizeof(struct unlink_psx_rq));
	pSMB->TotalDataCount = cpu_to_le16(sizeof(struct unlink_psx_rq));
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	pSMB->InformationLevel = cpu_to_le16(SMB_POSIX_UNLINK);
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);
	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
S
Steve French 已提交
886
	if (rc)
887 888 889 890 891 892 893 894 895 896 897
		cFYI(1, ("Posix delete returned %d", rc));
	cifs_buf_release(pSMB);

	cifs_stats_inc(&tcon->num_deletes);

	if (rc == -EAGAIN)
		goto PsxDelete;

	return rc;
}

L
Linus Torvalds 已提交
898
int
899 900
CIFSSMBDelFile(const int xid, struct cifsTconInfo *tcon, const char *fileName,
	       const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
901 902 903 904 905 906 907 908 909 910 911 912 913 914 915
{
	DELETE_FILE_REQ *pSMB = NULL;
	DELETE_FILE_RSP *pSMBr = NULL;
	int rc = 0;
	int bytes_returned;
	int name_len;

DelFileRetry:
	rc = smb_init(SMB_COM_DELETE, 1, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
916
		    cifsConvertToUCS((__le16 *) pSMB->fileName, fileName,
917
				     PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
918 919
		name_len++;	/* trailing null */
		name_len *= 2;
920
	} else {		/* BB improve check for buffer overruns BB */
L
Linus Torvalds 已提交
921 922 923 924 925 926 927 928 929 930 931
		name_len = strnlen(fileName, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->fileName, fileName, name_len);
	}
	pSMB->SearchAttributes =
	    cpu_to_le16(ATTR_READONLY | ATTR_HIDDEN | ATTR_SYSTEM);
	pSMB->BufferFormat = 0x04;
	pSMB->hdr.smb_buf_length += name_len + 1;
	pSMB->ByteCount = cpu_to_le16(name_len + 1);
	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
932
	cifs_stats_inc(&tcon->num_deletes);
S
Steve French 已提交
933
	if (rc)
L
Linus Torvalds 已提交
934 935 936 937 938 939 940 941 942 943
		cFYI(1, ("Error in RMFile = %d", rc));

	cifs_buf_release(pSMB);
	if (rc == -EAGAIN)
		goto DelFileRetry;

	return rc;
}

int
944
CIFSSMBRmDir(const int xid, struct cifsTconInfo *tcon, const char *dirName,
945
	     const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
946 947 948 949 950 951 952 953 954 955 956 957 958 959 960
{
	DELETE_DIRECTORY_REQ *pSMB = NULL;
	DELETE_DIRECTORY_RSP *pSMBr = NULL;
	int rc = 0;
	int bytes_returned;
	int name_len;

	cFYI(1, ("In CIFSSMBRmDir"));
RmDirRetry:
	rc = smb_init(SMB_COM_DELETE_DIRECTORY, 0, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
961 962
		name_len = cifsConvertToUCS((__le16 *) pSMB->DirName, dirName,
					 PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
963 964
		name_len++;	/* trailing null */
		name_len *= 2;
965
	} else {		/* BB improve check for buffer overruns BB */
L
Linus Torvalds 已提交
966 967 968 969 970 971 972 973 974 975
		name_len = strnlen(dirName, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->DirName, dirName, name_len);
	}

	pSMB->BufferFormat = 0x04;
	pSMB->hdr.smb_buf_length += name_len + 1;
	pSMB->ByteCount = cpu_to_le16(name_len + 1);
	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
976
	cifs_stats_inc(&tcon->num_rmdirs);
S
Steve French 已提交
977
	if (rc)
L
Linus Torvalds 已提交
978 979 980 981 982 983 984 985 986 987
		cFYI(1, ("Error in RMDir = %d", rc));

	cifs_buf_release(pSMB);
	if (rc == -EAGAIN)
		goto RmDirRetry;
	return rc;
}

int
CIFSSMBMkDir(const int xid, struct cifsTconInfo *tcon,
988
	     const char *name, const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
989 990 991 992 993 994 995 996 997 998 999 1000 1001 1002 1003
{
	int rc = 0;
	CREATE_DIRECTORY_REQ *pSMB = NULL;
	CREATE_DIRECTORY_RSP *pSMBr = NULL;
	int bytes_returned;
	int name_len;

	cFYI(1, ("In CIFSSMBMkDir"));
MkDirRetry:
	rc = smb_init(SMB_COM_CREATE_DIRECTORY, 0, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
1004
		name_len = cifsConvertToUCS((__le16 *) pSMB->DirName, name,
1005
					    PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
1006 1007
		name_len++;	/* trailing null */
		name_len *= 2;
1008
	} else {		/* BB improve check for buffer overruns BB */
L
Linus Torvalds 已提交
1009 1010 1011 1012 1013 1014 1015 1016 1017 1018
		name_len = strnlen(name, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->DirName, name, name_len);
	}

	pSMB->BufferFormat = 0x04;
	pSMB->hdr.smb_buf_length += name_len + 1;
	pSMB->ByteCount = cpu_to_le16(name_len + 1);
	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
1019
	cifs_stats_inc(&tcon->num_mkdirs);
S
Steve French 已提交
1020
	if (rc)
L
Linus Torvalds 已提交
1021
		cFYI(1, ("Error in Mkdir = %d", rc));
1022

L
Linus Torvalds 已提交
1023 1024 1025 1026 1027 1028
	cifs_buf_release(pSMB);
	if (rc == -EAGAIN)
		goto MkDirRetry;
	return rc;
}

1029 1030
int
CIFSPOSIXCreate(const int xid, struct cifsTconInfo *tcon, __u32 posix_flags,
S
Steve French 已提交
1031
		__u64 mode, __u16 *netfid, FILE_UNIX_BASIC_INFO *pRetData,
1032
		__u32 *pOplock, const char *name,
1033 1034 1035 1036 1037 1038 1039 1040
		const struct nls_table *nls_codepage, int remap)
{
	TRANSACTION2_SPI_REQ *pSMB = NULL;
	TRANSACTION2_SPI_RSP *pSMBr = NULL;
	int name_len;
	int rc = 0;
	int bytes_returned = 0;
	__u16 params, param_offset, offset, byte_count, count;
S
Steve French 已提交
1041 1042
	OPEN_PSX_REQ *pdata;
	OPEN_PSX_RSP *psx_rsp;
1043 1044 1045 1046 1047 1048 1049 1050 1051 1052 1053 1054 1055 1056 1057 1058 1059 1060 1061 1062 1063 1064 1065 1066 1067 1068 1069 1070 1071 1072

	cFYI(1, ("In POSIX Create"));
PsxCreat:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
		    cifsConvertToUCS((__le16 *) pSMB->FileName, name,
				     PATH_MAX, nls_codepage, remap);
		name_len++;	/* trailing null */
		name_len *= 2;
	} else {	/* BB improve the check for buffer overruns BB */
		name_len = strnlen(name, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->FileName, name, name_len);
	}

	params = 6 + name_len;
	count = sizeof(OPEN_PSX_REQ);
	pSMB->MaxParameterCount = cpu_to_le16(2);
	pSMB->MaxDataCount = cpu_to_le16(1000);	/* large enough */
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	param_offset = offsetof(struct smb_com_transaction2_spi_req,
1073
				InformationLevel) - 4;
1074 1075
	offset = param_offset + params;
	pdata = (OPEN_PSX_REQ *)(((char *)&pSMB->hdr.Protocol) + offset);
1076
	pdata->Level = cpu_to_le16(SMB_QUERY_FILE_UNIX_BASIC);
1077
	pdata->Permissions = cpu_to_le64(mode);
1078
	pdata->PosixOpenFlags = cpu_to_le32(posix_flags);
1079 1080 1081 1082 1083 1084 1085 1086 1087 1088 1089 1090 1091 1092
	pdata->OpenFlags =  cpu_to_le32(*pOplock);
	pSMB->ParameterOffset = cpu_to_le16(param_offset);
	pSMB->DataOffset = cpu_to_le16(offset);
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_SET_PATH_INFORMATION);
	byte_count = 3 /* pad */  + params + count;

	pSMB->DataCount = cpu_to_le16(count);
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalDataCount = pSMB->DataCount;
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	pSMB->InformationLevel = cpu_to_le16(SMB_POSIX_OPEN);
	pSMB->Reserved4 = 0;
1093
	pSMB->hdr.smb_buf_length += byte_count;
1094 1095 1096 1097 1098 1099 1100 1101
	pSMB->ByteCount = cpu_to_le16(byte_count);
	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
		cFYI(1, ("Posix create returned %d", rc));
		goto psx_create_err;
	}

S
Steve French 已提交
1102
	cFYI(1, ("copying inode info"));
1103 1104 1105 1106 1107 1108 1109 1110
	rc = validate_t2((struct smb_t2_rsp *)pSMBr);

	if (rc || (pSMBr->ByteCount < sizeof(OPEN_PSX_RSP))) {
		rc = -EIO;	/* bad smb */
		goto psx_create_err;
	}

	/* copy return information to pRetData */
1111
	psx_rsp = (OPEN_PSX_RSP *)((char *) &pSMBr->hdr.Protocol
1112
			+ le16_to_cpu(pSMBr->t2.DataOffset));
1113

1114
	*pOplock = le16_to_cpu(psx_rsp->OplockFlags);
S
Steve French 已提交
1115
	if (netfid)
1116 1117 1118
		*netfid = psx_rsp->Fid;   /* cifs fid stays in le */
	/* Let caller know file was created so we can set the mode. */
	/* Do we care about the CreateAction in any other cases? */
S
Steve French 已提交
1119
	if (cpu_to_le32(FILE_CREATE) == psx_rsp->CreateAction)
1120 1121
		*pOplock |= CIFS_CREATE_ACTION;
	/* check to make sure response data is there */
1122 1123
	if (psx_rsp->ReturnedLevel != cpu_to_le16(SMB_QUERY_FILE_UNIX_BASIC)) {
		pRetData->Type = cpu_to_le32(-1); /* unknown */
1124
		cFYI(DBG2, ("unknown type"));
1125
	} else {
S
Steve French 已提交
1126
		if (pSMBr->ByteCount < sizeof(OPEN_PSX_RSP)
1127
					+ sizeof(FILE_UNIX_BASIC_INFO)) {
1128
			cERROR(1, ("Open response data too small"));
1129
			pRetData->Type = cpu_to_le32(-1);
1130 1131
			goto psx_create_err;
		}
1132
		memcpy((char *) pRetData,
1133
			(char *)psx_rsp + sizeof(OPEN_PSX_RSP),
1134
			sizeof(FILE_UNIX_BASIC_INFO));
1135 1136 1137 1138 1139 1140 1141 1142 1143 1144
	}

psx_create_err:
	cifs_buf_release(pSMB);

	cifs_stats_inc(&tcon->num_mkdirs);

	if (rc == -EAGAIN)
		goto PsxCreat;

1145
	return rc;
1146 1147
}

1148 1149 1150 1151 1152 1153 1154 1155 1156 1157 1158 1159 1160 1161 1162 1163 1164 1165 1166 1167 1168 1169 1170 1171
static __u16 convert_disposition(int disposition)
{
	__u16 ofun = 0;

	switch (disposition) {
		case FILE_SUPERSEDE:
			ofun = SMBOPEN_OCREATE | SMBOPEN_OTRUNC;
			break;
		case FILE_OPEN:
			ofun = SMBOPEN_OAPPEND;
			break;
		case FILE_CREATE:
			ofun = SMBOPEN_OCREATE;
			break;
		case FILE_OPEN_IF:
			ofun = SMBOPEN_OCREATE | SMBOPEN_OAPPEND;
			break;
		case FILE_OVERWRITE:
			ofun = SMBOPEN_OTRUNC;
			break;
		case FILE_OVERWRITE_IF:
			ofun = SMBOPEN_OCREATE | SMBOPEN_OTRUNC;
			break;
		default:
S
Steve French 已提交
1172
			cFYI(1, ("unknown disposition %d", disposition));
1173 1174 1175 1176 1177
			ofun =  SMBOPEN_OAPPEND; /* regular open */
	}
	return ofun;
}

1178 1179 1180 1181 1182 1183 1184 1185 1186 1187 1188 1189 1190 1191
static int
access_flags_to_smbopen_mode(const int access_flags)
{
	int masked_flags = access_flags & (GENERIC_READ | GENERIC_WRITE);

	if (masked_flags == GENERIC_READ)
		return SMBOPEN_READ;
	else if (masked_flags == GENERIC_WRITE)
		return SMBOPEN_WRITE;

	/* just go for read/write */
	return SMBOPEN_READWRITE;
}

1192 1193 1194
int
SMBLegacyOpen(const int xid, struct cifsTconInfo *tcon,
	    const char *fileName, const int openDisposition,
S
Steve French 已提交
1195 1196
	    const int access_flags, const int create_options, __u16 *netfid,
	    int *pOplock, FILE_ALL_INFO *pfile_info,
1197 1198 1199 1200 1201 1202 1203 1204 1205 1206 1207 1208 1209 1210 1211 1212 1213 1214 1215 1216 1217 1218 1219 1220 1221 1222 1223 1224 1225 1226 1227 1228
	    const struct nls_table *nls_codepage, int remap)
{
	int rc = -EACCES;
	OPENX_REQ *pSMB = NULL;
	OPENX_RSP *pSMBr = NULL;
	int bytes_returned;
	int name_len;
	__u16 count;

OldOpenRetry:
	rc = smb_init(SMB_COM_OPEN_ANDX, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	pSMB->AndXCommand = 0xFF;       /* none */

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		count = 1;      /* account for one byte pad to word boundary */
		name_len =
		   cifsConvertToUCS((__le16 *) (pSMB->fileName + 1),
				    fileName, PATH_MAX, nls_codepage, remap);
		name_len++;     /* trailing null */
		name_len *= 2;
	} else {                /* BB improve check for buffer overruns BB */
		count = 0;      /* no pad */
		name_len = strnlen(fileName, PATH_MAX);
		name_len++;     /* trailing null */
		strncpy(pSMB->fileName, fileName, name_len);
	}
	if (*pOplock & REQ_OPLOCK)
		pSMB->OpenFlags = cpu_to_le16(REQ_OPLOCK);
1229
	else if (*pOplock & REQ_BATCHOPLOCK)
1230
		pSMB->OpenFlags = cpu_to_le16(REQ_BATCHOPLOCK);
1231

1232
	pSMB->OpenFlags |= cpu_to_le16(REQ_MORE_INFO);
1233
	pSMB->Mode = cpu_to_le16(access_flags_to_smbopen_mode(access_flags));
1234 1235 1236 1237 1238
	pSMB->Mode |= cpu_to_le16(0x40); /* deny none */
	/* set file as system file if special file such
	   as fifo and server expecting SFU style and
	   no Unix extensions */

S
Steve French 已提交
1239 1240
	if (create_options & CREATE_OPTION_SPECIAL)
		pSMB->FileAttributes = cpu_to_le16(ATTR_SYSTEM);
S
Steve French 已提交
1241 1242
	else /* BB FIXME BB */
		pSMB->FileAttributes = cpu_to_le16(0/*ATTR_NORMAL*/);
1243

1244 1245
	if (create_options & CREATE_OPTION_READONLY)
		pSMB->FileAttributes |= cpu_to_le16(ATTR_READONLY);
1246 1247

	/* BB FIXME BB */
1248 1249
/*	pSMB->CreateOptions = cpu_to_le32(create_options &
						 CREATE_OPTIONS_MASK); */
1250
	/* BB FIXME END BB */
1251 1252

	pSMB->Sattr = cpu_to_le16(ATTR_HIDDEN | ATTR_SYSTEM | ATTR_DIRECTORY);
1253
	pSMB->OpenFunction = cpu_to_le16(convert_disposition(openDisposition));
1254 1255 1256 1257 1258 1259
	count += name_len;
	pSMB->hdr.smb_buf_length += count;

	pSMB->ByteCount = cpu_to_le16(count);
	/* long_op set to 1 to allow for oplock break timeouts */
	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
1260
			(struct smb_hdr *)pSMBr, &bytes_returned, CIFS_LONG_OP);
1261 1262 1263 1264 1265 1266
	cifs_stats_inc(&tcon->num_opens);
	if (rc) {
		cFYI(1, ("Error in Open = %d", rc));
	} else {
	/* BB verify if wct == 15 */

1267
/*		*pOplock = pSMBr->OplockLevel; */ /* BB take from action field*/
1268 1269 1270 1271 1272

		*netfid = pSMBr->Fid;   /* cifs fid stays in le */
		/* Let caller know file was created so we can set the mode. */
		/* Do we care about the CreateAction in any other cases? */
	/* BB FIXME BB */
S
Steve French 已提交
1273
/*		if (cpu_to_le32(FILE_CREATE) == pSMBr->CreateAction)
1274 1275 1276
			*pOplock |= CIFS_CREATE_ACTION; */
	/* BB FIXME END */

S
Steve French 已提交
1277
		if (pfile_info) {
1278 1279 1280 1281
			pfile_info->CreationTime = 0; /* BB convert CreateTime*/
			pfile_info->LastAccessTime = 0; /* BB fixme */
			pfile_info->LastWriteTime = 0; /* BB fixme */
			pfile_info->ChangeTime = 0;  /* BB fixme */
1282
			pfile_info->Attributes =
1283
				cpu_to_le32(le16_to_cpu(pSMBr->FileAttributes));
1284
			/* the file_info buf is endian converted by caller */
1285 1286 1287
			pfile_info->AllocationSize =
				cpu_to_le64(le32_to_cpu(pSMBr->EndOfFile));
			pfile_info->EndOfFile = pfile_info->AllocationSize;
1288
			pfile_info->NumberOfLinks = cpu_to_le32(1);
1289
			pfile_info->DeletePending = 0;
1290 1291 1292 1293 1294 1295 1296 1297 1298
		}
	}

	cifs_buf_release(pSMB);
	if (rc == -EAGAIN)
		goto OldOpenRetry;
	return rc;
}

L
Linus Torvalds 已提交
1299 1300 1301
int
CIFSSMBOpen(const int xid, struct cifsTconInfo *tcon,
	    const char *fileName, const int openDisposition,
S
Steve French 已提交
1302 1303
	    const int access_flags, const int create_options, __u16 *netfid,
	    int *pOplock, FILE_ALL_INFO *pfile_info,
1304
	    const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
1305 1306 1307 1308 1309 1310 1311 1312 1313 1314 1315 1316 1317 1318 1319 1320 1321 1322 1323
{
	int rc = -EACCES;
	OPEN_REQ *pSMB = NULL;
	OPEN_RSP *pSMBr = NULL;
	int bytes_returned;
	int name_len;
	__u16 count;

openRetry:
	rc = smb_init(SMB_COM_NT_CREATE_ANDX, 24, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	pSMB->AndXCommand = 0xFF;	/* none */

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		count = 1;	/* account for one byte pad to word boundary */
		name_len =
1324
		    cifsConvertToUCS((__le16 *) (pSMB->fileName + 1),
1325
				     fileName, PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
1326 1327 1328
		name_len++;	/* trailing null */
		name_len *= 2;
		pSMB->NameLength = cpu_to_le16(name_len);
1329
	} else {		/* BB improve check for buffer overruns BB */
L
Linus Torvalds 已提交
1330 1331 1332 1333 1334 1335 1336 1337
		count = 0;	/* no pad */
		name_len = strnlen(fileName, PATH_MAX);
		name_len++;	/* trailing null */
		pSMB->NameLength = cpu_to_le16(name_len);
		strncpy(pSMB->fileName, fileName, name_len);
	}
	if (*pOplock & REQ_OPLOCK)
		pSMB->OpenFlags = cpu_to_le32(REQ_OPLOCK);
1338
	else if (*pOplock & REQ_BATCHOPLOCK)
L
Linus Torvalds 已提交
1339 1340 1341
		pSMB->OpenFlags = cpu_to_le32(REQ_BATCHOPLOCK);
	pSMB->DesiredAccess = cpu_to_le32(access_flags);
	pSMB->AllocationSize = 0;
1342 1343 1344
	/* set file as system file if special file such
	   as fifo and server expecting SFU style and
	   no Unix extensions */
S
Steve French 已提交
1345
	if (create_options & CREATE_OPTION_SPECIAL)
1346 1347 1348
		pSMB->FileAttributes = cpu_to_le32(ATTR_SYSTEM);
	else
		pSMB->FileAttributes = cpu_to_le32(ATTR_NORMAL);
1349

L
Linus Torvalds 已提交
1350 1351 1352 1353 1354 1355
	/* XP does not handle ATTR_POSIX_SEMANTICS */
	/* but it helps speed up case sensitive checks for other
	servers such as Samba */
	if (tcon->ses->capabilities & CAP_UNIX)
		pSMB->FileAttributes |= cpu_to_le32(ATTR_POSIX_SEMANTICS);

1356 1357 1358
	if (create_options & CREATE_OPTION_READONLY)
		pSMB->FileAttributes |= cpu_to_le32(ATTR_READONLY);

L
Linus Torvalds 已提交
1359 1360
	pSMB->ShareAccess = cpu_to_le32(FILE_SHARE_ALL);
	pSMB->CreateDisposition = cpu_to_le32(openDisposition);
1361
	pSMB->CreateOptions = cpu_to_le32(create_options & CREATE_OPTIONS_MASK);
1362 1363
	/* BB Expirement with various impersonation levels and verify */
	pSMB->ImpersonationLevel = cpu_to_le32(SECURITY_IMPERSONATION);
L
Linus Torvalds 已提交
1364 1365 1366 1367 1368 1369 1370 1371 1372
	pSMB->SecurityFlags =
	    SECURITY_CONTEXT_TRACKING | SECURITY_EFFECTIVE_ONLY;

	count += name_len;
	pSMB->hdr.smb_buf_length += count;

	pSMB->ByteCount = cpu_to_le16(count);
	/* long_op set to 1 to allow for oplock break timeouts */
	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
1373
			(struct smb_hdr *)pSMBr, &bytes_returned, CIFS_LONG_OP);
1374
	cifs_stats_inc(&tcon->num_opens);
L
Linus Torvalds 已提交
1375 1376 1377
	if (rc) {
		cFYI(1, ("Error in Open = %d", rc));
	} else {
1378
		*pOplock = pSMBr->OplockLevel; /* 1 byte no need to le_to_cpu */
L
Linus Torvalds 已提交
1379 1380 1381
		*netfid = pSMBr->Fid;	/* cifs fid stays in le */
		/* Let caller know file was created so we can set the mode. */
		/* Do we care about the CreateAction in any other cases? */
S
Steve French 已提交
1382
		if (cpu_to_le32(FILE_CREATE) == pSMBr->CreateAction)
1383
			*pOplock |= CIFS_CREATE_ACTION;
S
Steve French 已提交
1384
		if (pfile_info) {
1385
		    memcpy((char *)pfile_info, (char *)&pSMBr->CreationTime,
L
Linus Torvalds 已提交
1386 1387 1388 1389 1390
			36 /* CreationTime to Attributes */);
		    /* the file_info buf is endian converted by caller */
		    pfile_info->AllocationSize = pSMBr->AllocationSize;
		    pfile_info->EndOfFile = pSMBr->EndOfFile;
		    pfile_info->NumberOfLinks = cpu_to_le32(1);
1391
		    pfile_info->DeletePending = 0;
L
Linus Torvalds 已提交
1392 1393
		}
	}
1394

L
Linus Torvalds 已提交
1395 1396 1397 1398 1399 1400 1401
	cifs_buf_release(pSMB);
	if (rc == -EAGAIN)
		goto openRetry;
	return rc;
}

int
1402 1403 1404
CIFSSMBRead(const int xid, struct cifsTconInfo *tcon, const int netfid,
	    const unsigned int count, const __u64 lseek, unsigned int *nbytes,
	    char **buf, int *pbuf_type)
L
Linus Torvalds 已提交
1405 1406 1407 1408 1409
{
	int rc = -EACCES;
	READ_REQ *pSMB = NULL;
	READ_RSP *pSMBr = NULL;
	char *pReadData = NULL;
1410
	int wct;
1411 1412
	int resp_buf_type = 0;
	struct kvec iov[1];
L
Linus Torvalds 已提交
1413

S
Steve French 已提交
1414 1415
	cFYI(1, ("Reading %d bytes on fid %d", count, netfid));
	if (tcon->ses->capabilities & CAP_LARGE_FILES)
1416 1417 1418
		wct = 12;
	else
		wct = 10; /* old style read */
L
Linus Torvalds 已提交
1419 1420

	*nbytes = 0;
1421
	rc = small_smb_init(SMB_COM_READ_ANDX, wct, tcon, (void **) &pSMB);
L
Linus Torvalds 已提交
1422 1423 1424 1425 1426 1427 1428
	if (rc)
		return rc;

	/* tcon and ses pointer are checked in smb_init */
	if (tcon->ses->server == NULL)
		return -ECONNABORTED;

1429
	pSMB->AndXCommand = 0xFF;       /* none */
L
Linus Torvalds 已提交
1430 1431
	pSMB->Fid = netfid;
	pSMB->OffsetLow = cpu_to_le32(lseek & 0xFFFFFFFF);
S
Steve French 已提交
1432
	if (wct == 12)
1433
		pSMB->OffsetHigh = cpu_to_le32(lseek >> 32);
S
Steve French 已提交
1434
	else if ((lseek >> 32) > 0) /* can not handle this big offset for old */
1435
		return -EIO;
1436

L
Linus Torvalds 已提交
1437 1438 1439
	pSMB->Remaining = 0;
	pSMB->MaxCount = cpu_to_le16(count & 0xFFFF);
	pSMB->MaxCountHigh = cpu_to_le32(count >> 16);
S
Steve French 已提交
1440
	if (wct == 12)
1441 1442 1443
		pSMB->ByteCount = 0;  /* no need to do le conversion since 0 */
	else {
		/* old style read */
1444
		struct smb_com_readx_req *pSMBW =
1445
			(struct smb_com_readx_req *)pSMB;
1446
		pSMBW->ByteCount = 0;
1447
	}
1448 1449 1450

	iov[0].iov_base = (char *)pSMB;
	iov[0].iov_len = pSMB->hdr.smb_buf_length + 4;
1451
	rc = SendReceive2(xid, tcon->ses, iov, 1 /* num iovecs */,
1452
			 &resp_buf_type, CIFS_STD_OP | CIFS_LOG_ERROR);
1453
	cifs_stats_inc(&tcon->num_reads);
1454
	pSMBr = (READ_RSP *)iov[0].iov_base;
L
Linus Torvalds 已提交
1455 1456 1457 1458 1459 1460 1461 1462 1463
	if (rc) {
		cERROR(1, ("Send error in read = %d", rc));
	} else {
		int data_length = le16_to_cpu(pSMBr->DataLengthHigh);
		data_length = data_length << 16;
		data_length += le16_to_cpu(pSMBr->DataLength);
		*nbytes = data_length;

		/*check that DataLength would not go beyond end of SMB */
1464
		if ((data_length > CIFSMaxBufSize)
L
Linus Torvalds 已提交
1465
				|| (data_length > count)) {
1466 1467
			cFYI(1, ("bad length %d for count %d",
				 data_length, count));
L
Linus Torvalds 已提交
1468 1469 1470
			rc = -EIO;
			*nbytes = 0;
		} else {
1471
			pReadData = (char *) (&pSMBr->hdr.Protocol) +
1472 1473
					le16_to_cpu(pSMBr->DataOffset);
/*			if (rc = copy_to_user(buf, pReadData, data_length)) {
1474 1475
				cERROR(1,("Faulting on read rc = %d",rc));
				rc = -EFAULT;
1476
			}*/ /* can not use copy_to_user when using page cache*/
S
Steve French 已提交
1477
			if (*buf)
1478
				memcpy(*buf, pReadData, data_length);
L
Linus Torvalds 已提交
1479 1480 1481
		}
	}

1482
/*	cifs_small_buf_release(pSMB); */ /* Freed earlier now in SendReceive2 */
S
Steve French 已提交
1483 1484
	if (*buf) {
		if (resp_buf_type == CIFS_SMALL_BUFFER)
1485
			cifs_small_buf_release(iov[0].iov_base);
S
Steve French 已提交
1486
		else if (resp_buf_type == CIFS_LARGE_BUFFER)
1487
			cifs_buf_release(iov[0].iov_base);
S
Steve French 已提交
1488
	} else if (resp_buf_type != CIFS_NO_BUFFER) {
1489 1490
		/* return buffer to caller to free */
		*buf = iov[0].iov_base;
S
Steve French 已提交
1491
		if (resp_buf_type == CIFS_SMALL_BUFFER)
1492
			*pbuf_type = CIFS_SMALL_BUFFER;
S
Steve French 已提交
1493
		else if (resp_buf_type == CIFS_LARGE_BUFFER)
1494
			*pbuf_type = CIFS_LARGE_BUFFER;
1495
	} /* else no valid buffer on return - leave as null */
1496 1497

	/* Note: On -EAGAIN error only caller can retry on handle based calls
L
Linus Torvalds 已提交
1498 1499 1500 1501
		since file handle passed in no longer valid */
	return rc;
}

1502

L
Linus Torvalds 已提交
1503 1504 1505 1506
int
CIFSSMBWrite(const int xid, struct cifsTconInfo *tcon,
	     const int netfid, const unsigned int count,
	     const __u64 offset, unsigned int *nbytes, const char *buf,
1507
	     const char __user *ubuf, const int long_op)
L
Linus Torvalds 已提交
1508 1509 1510 1511
{
	int rc = -EACCES;
	WRITE_REQ *pSMB = NULL;
	WRITE_RSP *pSMBr = NULL;
1512
	int bytes_returned, wct;
L
Linus Torvalds 已提交
1513 1514 1515
	__u32 bytes_sent;
	__u16 byte_count;

S
Steve French 已提交
1516
	/* cFYI(1, ("write at %lld %d bytes", offset, count));*/
S
Steve French 已提交
1517
	if (tcon->ses == NULL)
1518 1519
		return -ECONNABORTED;

S
Steve French 已提交
1520
	if (tcon->ses->capabilities & CAP_LARGE_FILES)
1521 1522 1523 1524 1525
		wct = 14;
	else
		wct = 12;

	rc = smb_init(SMB_COM_WRITE_ANDX, wct, tcon, (void **) &pSMB,
L
Linus Torvalds 已提交
1526 1527 1528 1529 1530 1531 1532 1533 1534 1535
		      (void **) &pSMBr);
	if (rc)
		return rc;
	/* tcon and ses pointer are checked in smb_init */
	if (tcon->ses->server == NULL)
		return -ECONNABORTED;

	pSMB->AndXCommand = 0xFF;	/* none */
	pSMB->Fid = netfid;
	pSMB->OffsetLow = cpu_to_le32(offset & 0xFFFFFFFF);
S
Steve French 已提交
1536
	if (wct == 14)
1537
		pSMB->OffsetHigh = cpu_to_le32(offset >> 32);
S
Steve French 已提交
1538
	else if ((offset >> 32) > 0) /* can not handle big offset for old srv */
1539
		return -EIO;
1540

L
Linus Torvalds 已提交
1541 1542 1543 1544
	pSMB->Reserved = 0xFFFFFFFF;
	pSMB->WriteMode = 0;
	pSMB->Remaining = 0;

1545
	/* Can increase buffer size if buffer is big enough in some cases ie we
L
Linus Torvalds 已提交
1546 1547 1548
	can send more if LARGE_WRITE_X capability returned by the server and if
	our buffer is big enough or if we convert to iovecs on socket writes
	and eliminate the copy to the CIFS buffer */
S
Steve French 已提交
1549
	if (tcon->ses->capabilities & CAP_LARGE_WRITE_X) {
L
Linus Torvalds 已提交
1550 1551 1552 1553 1554 1555 1556 1557 1558
		bytes_sent = min_t(const unsigned int, CIFSMaxBufSize, count);
	} else {
		bytes_sent = (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE)
			 & ~0xFF;
	}

	if (bytes_sent > count)
		bytes_sent = count;
	pSMB->DataOffset =
1559
		cpu_to_le16(offsetof(struct smb_com_write_req, Data) - 4);
S
Steve French 已提交
1560
	if (buf)
1561
	    memcpy(pSMB->Data, buf, bytes_sent);
S
Steve French 已提交
1562 1563
	else if (ubuf) {
		if (copy_from_user(pSMB->Data, ubuf, bytes_sent)) {
L
Linus Torvalds 已提交
1564 1565 1566
			cifs_buf_release(pSMB);
			return -EFAULT;
		}
1567
	} else if (count != 0) {
L
Linus Torvalds 已提交
1568 1569 1570
		/* No buffer */
		cifs_buf_release(pSMB);
		return -EINVAL;
1571
	} /* else setting file size with write of zero bytes */
S
Steve French 已提交
1572
	if (wct == 14)
1573
		byte_count = bytes_sent + 1; /* pad */
S
Steve French 已提交
1574
	else /* wct == 12 */
1575
		byte_count = bytes_sent + 5; /* bigger pad, smaller smb hdr */
S
Steve French 已提交
1576

L
Linus Torvalds 已提交
1577 1578
	pSMB->DataLengthLow = cpu_to_le16(bytes_sent & 0xFFFF);
	pSMB->DataLengthHigh = cpu_to_le16(bytes_sent >> 16);
1579
	pSMB->hdr.smb_buf_length += byte_count;
1580

S
Steve French 已提交
1581
	if (wct == 14)
1582
		pSMB->ByteCount = cpu_to_le16(byte_count);
1583 1584 1585
	else { /* old style write has byte count 4 bytes earlier
		  so 4 bytes pad  */
		struct smb_com_writex_req *pSMBW =
1586 1587 1588
			(struct smb_com_writex_req *)pSMB;
		pSMBW->ByteCount = cpu_to_le16(byte_count);
	}
L
Linus Torvalds 已提交
1589 1590 1591

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, long_op);
1592
	cifs_stats_inc(&tcon->num_writes);
L
Linus Torvalds 已提交
1593 1594 1595 1596 1597 1598 1599 1600 1601 1602 1603
	if (rc) {
		cFYI(1, ("Send error in write = %d", rc));
		*nbytes = 0;
	} else {
		*nbytes = le16_to_cpu(pSMBr->CountHigh);
		*nbytes = (*nbytes) << 16;
		*nbytes += le16_to_cpu(pSMBr->Count);
	}

	cifs_buf_release(pSMB);

1604
	/* Note: On -EAGAIN error only caller can retry on handle based calls
L
Linus Torvalds 已提交
1605 1606 1607 1608 1609
		since file handle passed in no longer valid */

	return rc;
}

1610 1611
int
CIFSSMBWrite2(const int xid, struct cifsTconInfo *tcon,
L
Linus Torvalds 已提交
1612
	     const int netfid, const unsigned int count,
1613 1614
	     const __u64 offset, unsigned int *nbytes, struct kvec *iov,
	     int n_vec, const int long_op)
L
Linus Torvalds 已提交
1615 1616 1617
{
	int rc = -EACCES;
	WRITE_REQ *pSMB = NULL;
1618
	int wct;
1619
	int smb_hdr_len;
1620
	int resp_buf_type = 0;
L
Linus Torvalds 已提交
1621

S
Steve French 已提交
1622
	cFYI(1, ("write2 at %lld %d bytes", (long long)offset, count));
1623

S
Steve French 已提交
1624
	if (tcon->ses->capabilities & CAP_LARGE_FILES)
1625 1626 1627 1628
		wct = 14;
	else
		wct = 12;
	rc = small_smb_init(SMB_COM_WRITE_ANDX, wct, tcon, (void **) &pSMB);
L
Linus Torvalds 已提交
1629 1630 1631 1632 1633 1634
	if (rc)
		return rc;
	/* tcon and ses pointer are checked in smb_init */
	if (tcon->ses->server == NULL)
		return -ECONNABORTED;

1635
	pSMB->AndXCommand = 0xFF;	/* none */
L
Linus Torvalds 已提交
1636 1637
	pSMB->Fid = netfid;
	pSMB->OffsetLow = cpu_to_le32(offset & 0xFFFFFFFF);
S
Steve French 已提交
1638
	if (wct == 14)
1639
		pSMB->OffsetHigh = cpu_to_le32(offset >> 32);
S
Steve French 已提交
1640
	else if ((offset >> 32) > 0) /* can not handle big offset for old srv */
1641
		return -EIO;
L
Linus Torvalds 已提交
1642 1643 1644
	pSMB->Reserved = 0xFFFFFFFF;
	pSMB->WriteMode = 0;
	pSMB->Remaining = 0;
1645

L
Linus Torvalds 已提交
1646
	pSMB->DataOffset =
1647
	    cpu_to_le16(offsetof(struct smb_com_write_req, Data) - 4);
L
Linus Torvalds 已提交
1648

1649 1650
	pSMB->DataLengthLow = cpu_to_le16(count & 0xFFFF);
	pSMB->DataLengthHigh = cpu_to_le16(count >> 16);
1651
	smb_hdr_len = pSMB->hdr.smb_buf_length + 1; /* hdr + 1 byte pad */
S
Steve French 已提交
1652
	if (wct == 14)
1653 1654
		pSMB->hdr.smb_buf_length += count+1;
	else /* wct == 12 */
S
Steve French 已提交
1655 1656
		pSMB->hdr.smb_buf_length += count+5; /* smb data starts later */
	if (wct == 14)
1657 1658
		pSMB->ByteCount = cpu_to_le16(count + 1);
	else /* wct == 12 */ /* bigger pad, smaller smb hdr, keep offset ok */ {
1659
		struct smb_com_writex_req *pSMBW =
1660 1661 1662
				(struct smb_com_writex_req *)pSMB;
		pSMBW->ByteCount = cpu_to_le16(count + 5);
	}
1663
	iov[0].iov_base = pSMB;
S
Steve French 已提交
1664
	if (wct == 14)
1665 1666 1667
		iov[0].iov_len = smb_hdr_len + 4;
	else /* wct == 12 pad bigger by four bytes */
		iov[0].iov_len = smb_hdr_len + 8;
1668

L
Linus Torvalds 已提交
1669

1670
	rc = SendReceive2(xid, tcon->ses, iov, n_vec + 1, &resp_buf_type,
1671
			  long_op);
1672
	cifs_stats_inc(&tcon->num_writes);
L
Linus Torvalds 已提交
1673
	if (rc) {
1674
		cFYI(1, ("Send error Write2 = %d", rc));
L
Linus Torvalds 已提交
1675
		*nbytes = 0;
S
Steve French 已提交
1676
	} else if (resp_buf_type == 0) {
1677 1678 1679
		/* presumably this can not happen, but best to be safe */
		rc = -EIO;
		*nbytes = 0;
1680
	} else {
S
Steve French 已提交
1681
		WRITE_RSP *pSMBr = (WRITE_RSP *)iov[0].iov_base;
1682 1683 1684
		*nbytes = le16_to_cpu(pSMBr->CountHigh);
		*nbytes = (*nbytes) << 16;
		*nbytes += le16_to_cpu(pSMBr->Count);
1685
	}
L
Linus Torvalds 已提交
1686

1687
/*	cifs_small_buf_release(pSMB); */ /* Freed earlier now in SendReceive2 */
S
Steve French 已提交
1688
	if (resp_buf_type == CIFS_SMALL_BUFFER)
1689
		cifs_small_buf_release(iov[0].iov_base);
S
Steve French 已提交
1690
	else if (resp_buf_type == CIFS_LARGE_BUFFER)
1691
		cifs_buf_release(iov[0].iov_base);
L
Linus Torvalds 已提交
1692

1693
	/* Note: On -EAGAIN error only caller can retry on handle based calls
L
Linus Torvalds 已提交
1694 1695 1696 1697
		since file handle passed in no longer valid */

	return rc;
}
1698 1699


L
Linus Torvalds 已提交
1700 1701 1702 1703
int
CIFSSMBLock(const int xid, struct cifsTconInfo *tcon,
	    const __u16 smb_file_id, const __u64 len,
	    const __u64 offset, const __u32 numUnlock,
1704
	    const __u32 numLock, const __u8 lockType, const bool waitFlag)
L
Linus Torvalds 已提交
1705 1706 1707
{
	int rc = 0;
	LOCK_REQ *pSMB = NULL;
S
Steve French 已提交
1708
/*	LOCK_RSP *pSMBr = NULL; */ /* No response data other than rc to parse */
L
Linus Torvalds 已提交
1709 1710 1711 1712
	int bytes_returned;
	int timeout = 0;
	__u16 count;

1713
	cFYI(1, ("CIFSSMBLock timeout %d numLock %d", (int)waitFlag, numLock));
1714 1715
	rc = small_smb_init(SMB_COM_LOCKING_ANDX, 8, tcon, (void **) &pSMB);

L
Linus Torvalds 已提交
1716 1717 1718
	if (rc)
		return rc;

S
Steve French 已提交
1719
	if (lockType == LOCKING_ANDX_OPLOCK_RELEASE) {
1720
		timeout = CIFS_ASYNC_OP; /* no response expected */
L
Linus Torvalds 已提交
1721
		pSMB->Timeout = 0;
1722
	} else if (waitFlag) {
1723
		timeout = CIFS_BLOCKING_OP; /* blocking operation, no timeout */
L
Linus Torvalds 已提交
1724 1725 1726 1727 1728 1729 1730 1731 1732 1733 1734
		pSMB->Timeout = cpu_to_le32(-1);/* blocking - do not time out */
	} else {
		pSMB->Timeout = 0;
	}

	pSMB->NumberOfLocks = cpu_to_le16(numLock);
	pSMB->NumberOfUnlocks = cpu_to_le16(numUnlock);
	pSMB->LockType = lockType;
	pSMB->AndXCommand = 0xFF;	/* none */
	pSMB->Fid = smb_file_id; /* netfid stays le */

S
Steve French 已提交
1735
	if ((numLock != 0) || (numUnlock != 0)) {
L
Linus Torvalds 已提交
1736 1737 1738 1739 1740 1741 1742 1743 1744 1745 1746 1747 1748 1749
		pSMB->Locks[0].Pid = cpu_to_le16(current->tgid);
		/* BB where to store pid high? */
		pSMB->Locks[0].LengthLow = cpu_to_le32((u32)len);
		pSMB->Locks[0].LengthHigh = cpu_to_le32((u32)(len>>32));
		pSMB->Locks[0].OffsetLow = cpu_to_le32((u32)offset);
		pSMB->Locks[0].OffsetHigh = cpu_to_le32((u32)(offset>>32));
		count = sizeof(LOCKING_ANDX_RANGE);
	} else {
		/* oplock break */
		count = 0;
	}
	pSMB->hdr.smb_buf_length += count;
	pSMB->ByteCount = cpu_to_le16(count);

J
[CIFS]  
Jeremy Allison 已提交
1750 1751
	if (waitFlag) {
		rc = SendReceiveBlockingLock(xid, tcon, (struct smb_hdr *) pSMB,
S
Steve French 已提交
1752
			(struct smb_hdr *) pSMB, &bytes_returned);
1753
		cifs_small_buf_release(pSMB);
J
[CIFS]  
Jeremy Allison 已提交
1754
	} else {
1755 1756 1757
		rc = SendReceiveNoRsp(xid, tcon->ses, (struct smb_hdr *)pSMB,
				      timeout);
		/* SMB buffer freed by function above */
J
[CIFS]  
Jeremy Allison 已提交
1758
	}
1759
	cifs_stats_inc(&tcon->num_locks);
S
Steve French 已提交
1760
	if (rc)
L
Linus Torvalds 已提交
1761 1762
		cFYI(1, ("Send error in Lock = %d", rc));

1763
	/* Note: On -EAGAIN error only caller can retry on handle based calls
L
Linus Torvalds 已提交
1764 1765 1766 1767
	since file handle passed in no longer valid */
	return rc;
}

1768 1769 1770
int
CIFSSMBPosixLock(const int xid, struct cifsTconInfo *tcon,
		const __u16 smb_file_id, const int get_flag, const __u64 len,
1771
		struct file_lock *pLockData, const __u16 lock_type,
1772
		const bool waitFlag)
1773 1774 1775 1776 1777
{
	struct smb_com_transaction2_sfi_req *pSMB  = NULL;
	struct smb_com_transaction2_sfi_rsp *pSMBr = NULL;
	struct cifs_posix_lock *parm_data;
	int rc = 0;
1778
	int timeout = 0;
1779
	int bytes_returned = 0;
1780
	int resp_buf_type = 0;
1781
	__u16 params, param_offset, offset, byte_count, count;
1782
	struct kvec iov[1];
1783 1784

	cFYI(1, ("Posix Lock"));
1785

S
Steve French 已提交
1786
	if (pLockData == NULL)
1787
		return -EINVAL;
1788

1789 1790 1791 1792 1793 1794 1795
	rc = small_smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB);

	if (rc)
		return rc;

	pSMBr = (struct smb_com_transaction2_sfi_rsp *)pSMB;

1796
	params = 6;
1797 1798 1799 1800 1801 1802 1803 1804 1805
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Reserved2 = 0;
	param_offset = offsetof(struct smb_com_transaction2_sfi_req, Fid) - 4;
	offset = param_offset + params;

	count = sizeof(struct cifs_posix_lock);
	pSMB->MaxParameterCount = cpu_to_le16(2);
S
Steve French 已提交
1806
	pSMB->MaxDataCount = cpu_to_le16(1000); /* BB find max SMB from sess */
1807 1808
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
S
Steve French 已提交
1809
	if (get_flag)
1810 1811 1812 1813 1814 1815 1816 1817 1818
		pSMB->SubCommand = cpu_to_le16(TRANS2_QUERY_FILE_INFORMATION);
	else
		pSMB->SubCommand = cpu_to_le16(TRANS2_SET_FILE_INFORMATION);
	byte_count = 3 /* pad */  + params + count;
	pSMB->DataCount = cpu_to_le16(count);
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalDataCount = pSMB->DataCount;
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	pSMB->ParameterOffset = cpu_to_le16(param_offset);
1819
	parm_data = (struct cifs_posix_lock *)
1820 1821 1822
			(((char *) &pSMB->hdr.Protocol) + offset);

	parm_data->lock_type = cpu_to_le16(lock_type);
S
Steve French 已提交
1823
	if (waitFlag) {
1824
		timeout = CIFS_BLOCKING_OP; /* blocking operation, no timeout */
1825
		parm_data->lock_flags = cpu_to_le16(1);
1826 1827 1828 1829
		pSMB->Timeout = cpu_to_le32(-1);
	} else
		pSMB->Timeout = 0;

1830
	parm_data->pid = cpu_to_le32(current->tgid);
1831
	parm_data->start = cpu_to_le64(pLockData->fl_start);
1832
	parm_data->length = cpu_to_le64(len);  /* normalize negative numbers */
1833 1834

	pSMB->DataOffset = cpu_to_le16(offset);
1835
	pSMB->Fid = smb_file_id;
1836 1837 1838 1839
	pSMB->InformationLevel = cpu_to_le16(SMB_SET_POSIX_LOCK);
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);
J
[CIFS]  
Jeremy Allison 已提交
1840 1841 1842 1843
	if (waitFlag) {
		rc = SendReceiveBlockingLock(xid, tcon, (struct smb_hdr *) pSMB,
			(struct smb_hdr *) pSMBr, &bytes_returned);
	} else {
1844 1845 1846 1847 1848 1849 1850
		iov[0].iov_base = (char *)pSMB;
		iov[0].iov_len = pSMB->hdr.smb_buf_length + 4;
		rc = SendReceive2(xid, tcon->ses, iov, 1 /* num iovecs */,
				&resp_buf_type, timeout);
		pSMB = NULL; /* request buf already freed by SendReceive2. Do
				not try to free it twice below on exit */
		pSMBr = (struct smb_com_transaction2_sfi_rsp *)iov[0].iov_base;
J
[CIFS]  
Jeremy Allison 已提交
1851 1852
	}

1853 1854
	if (rc) {
		cFYI(1, ("Send error in Posix Lock = %d", rc));
1855 1856 1857 1858 1859 1860 1861 1862 1863 1864
	} else if (get_flag) {
		/* lock structure can be returned on get */
		__u16 data_offset;
		__u16 data_count;
		rc = validate_t2((struct smb_t2_rsp *)pSMBr);

		if (rc || (pSMBr->ByteCount < sizeof(struct cifs_posix_lock))) {
			rc = -EIO;      /* bad smb */
			goto plk_err_exit;
		}
S
Steve French 已提交
1865
		if (pLockData == NULL) {
1866 1867 1868 1869 1870
			rc = -EINVAL;
			goto plk_err_exit;
		}
		data_offset = le16_to_cpu(pSMBr->t2.DataOffset);
		data_count  = le16_to_cpu(pSMBr->t2.DataCount);
S
Steve French 已提交
1871
		if (data_count < sizeof(struct cifs_posix_lock)) {
1872 1873 1874 1875 1876
			rc = -EIO;
			goto plk_err_exit;
		}
		parm_data = (struct cifs_posix_lock *)
			((char *)&pSMBr->hdr.Protocol + data_offset);
S
Steve French 已提交
1877
		if (parm_data->lock_type == cpu_to_le16(CIFS_UNLCK))
1878
			pLockData->fl_type = F_UNLCK;
1879
	}
1880

1881
plk_err_exit:
1882 1883 1884
	if (pSMB)
		cifs_small_buf_release(pSMB);

1885 1886 1887 1888 1889
	if (resp_buf_type == CIFS_SMALL_BUFFER)
		cifs_small_buf_release(iov[0].iov_base);
	else if (resp_buf_type == CIFS_LARGE_BUFFER)
		cifs_buf_release(iov[0].iov_base);

1890 1891 1892 1893 1894 1895 1896
	/* Note: On -EAGAIN error only caller can retry on handle based calls
	   since file handle passed in no longer valid */

	return rc;
}


L
Linus Torvalds 已提交
1897 1898 1899 1900 1901 1902 1903 1904 1905
int
CIFSSMBClose(const int xid, struct cifsTconInfo *tcon, int smb_file_id)
{
	int rc = 0;
	CLOSE_REQ *pSMB = NULL;
	cFYI(1, ("In CIFSSMBClose"));

/* do not retry on dead session on close */
	rc = small_smb_init(SMB_COM_CLOSE, 3, tcon, (void **) &pSMB);
S
Steve French 已提交
1906
	if (rc == -EAGAIN)
L
Linus Torvalds 已提交
1907 1908 1909 1910 1911
		return 0;
	if (rc)
		return rc;

	pSMB->FileID = (__u16) smb_file_id;
1912
	pSMB->LastWriteTime = 0xFFFFFFFF;
L
Linus Torvalds 已提交
1913
	pSMB->ByteCount = 0;
1914
	rc = SendReceiveNoRsp(xid, tcon->ses, (struct smb_hdr *) pSMB, 0);
1915
	cifs_stats_inc(&tcon->num_closes);
L
Linus Torvalds 已提交
1916
	if (rc) {
S
Steve French 已提交
1917
		if (rc != -EINTR) {
L
Linus Torvalds 已提交
1918 1919 1920 1921 1922 1923
			/* EINTR is expected when user ctl-c to kill app */
			cERROR(1, ("Send error in Close = %d", rc));
		}
	}

	/* Since session is dead, file will be closed on server already */
S
Steve French 已提交
1924
	if (rc == -EAGAIN)
L
Linus Torvalds 已提交
1925 1926 1927 1928 1929 1930 1931 1932
		rc = 0;

	return rc;
}

int
CIFSSMBRename(const int xid, struct cifsTconInfo *tcon,
	      const char *fromName, const char *toName,
1933
	      const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
1934 1935 1936 1937 1938 1939 1940 1941 1942 1943 1944 1945 1946 1947 1948 1949 1950 1951 1952 1953 1954 1955
{
	int rc = 0;
	RENAME_REQ *pSMB = NULL;
	RENAME_RSP *pSMBr = NULL;
	int bytes_returned;
	int name_len, name_len2;
	__u16 count;

	cFYI(1, ("In CIFSSMBRename"));
renameRetry:
	rc = smb_init(SMB_COM_RENAME, 1, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	pSMB->BufferFormat = 0x04;
	pSMB->SearchAttributes =
	    cpu_to_le16(ATTR_READONLY | ATTR_HIDDEN | ATTR_SYSTEM |
			ATTR_DIRECTORY);

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
1956
		    cifsConvertToUCS((__le16 *) pSMB->OldFileName, fromName,
1957
				     PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
1958 1959 1960 1961 1962 1963
		name_len++;	/* trailing null */
		name_len *= 2;
		pSMB->OldFileName[name_len] = 0x04;	/* pad */
	/* protocol requires ASCII signature byte on Unicode string */
		pSMB->OldFileName[name_len + 1] = 0x00;
		name_len2 =
1964
		    cifsConvertToUCS((__le16 *)&pSMB->OldFileName[name_len + 2],
1965
				     toName, PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
1966 1967
		name_len2 += 1 /* trailing null */  + 1 /* Signature word */ ;
		name_len2 *= 2;	/* convert to bytes */
1968
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
1969 1970 1971 1972 1973 1974 1975 1976 1977 1978 1979 1980 1981 1982 1983 1984 1985
		name_len = strnlen(fromName, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->OldFileName, fromName, name_len);
		name_len2 = strnlen(toName, PATH_MAX);
		name_len2++;	/* trailing null */
		pSMB->OldFileName[name_len] = 0x04;  /* 2nd buffer format */
		strncpy(&pSMB->OldFileName[name_len + 1], toName, name_len2);
		name_len2++;	/* trailing null */
		name_len2++;	/* signature byte */
	}

	count = 1 /* 1st signature byte */  + name_len + name_len2;
	pSMB->hdr.smb_buf_length += count;
	pSMB->ByteCount = cpu_to_le16(count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
1986
	cifs_stats_inc(&tcon->num_renames);
S
Steve French 已提交
1987
	if (rc)
L
Linus Torvalds 已提交
1988 1989 1990 1991 1992 1993 1994 1995 1996 1997
		cFYI(1, ("Send error in rename = %d", rc));

	cifs_buf_release(pSMB);

	if (rc == -EAGAIN)
		goto renameRetry;

	return rc;
}

1998
int CIFSSMBRenameOpenFile(const int xid, struct cifsTconInfo *pTcon,
1999
		int netfid, const char *target_name,
2000
		const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
2001 2002 2003
{
	struct smb_com_transaction2_sfi_req *pSMB  = NULL;
	struct smb_com_transaction2_sfi_rsp *pSMBr = NULL;
2004
	struct set_file_rename *rename_info;
L
Linus Torvalds 已提交
2005 2006 2007 2008 2009 2010 2011 2012 2013 2014 2015 2016 2017 2018 2019 2020 2021 2022 2023 2024 2025 2026 2027 2028 2029
	char *data_offset;
	char dummy_string[30];
	int rc = 0;
	int bytes_returned = 0;
	int len_of_str;
	__u16 params, param_offset, offset, count, byte_count;

	cFYI(1, ("Rename to File by handle"));
	rc = smb_init(SMB_COM_TRANSACTION2, 15, pTcon, (void **) &pSMB,
			(void **) &pSMBr);
	if (rc)
		return rc;

	params = 6;
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	param_offset = offsetof(struct smb_com_transaction2_sfi_req, Fid) - 4;
	offset = param_offset + params;

	data_offset = (char *) (&pSMB->hdr.Protocol) + offset;
	rename_info = (struct set_file_rename *) data_offset;
	pSMB->MaxParameterCount = cpu_to_le16(2);
S
Steve French 已提交
2030
	pSMB->MaxDataCount = cpu_to_le16(1000); /* BB find max SMB from sess */
L
Linus Torvalds 已提交
2031 2032 2033 2034 2035 2036 2037 2038 2039 2040 2041 2042
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_SET_FILE_INFORMATION);
	byte_count = 3 /* pad */  + params;
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	pSMB->ParameterOffset = cpu_to_le16(param_offset);
	pSMB->DataOffset = cpu_to_le16(offset);
	/* construct random name ".cifs_tmp<inodenum><mid>" */
	rename_info->overwrite = cpu_to_le32(1);
	rename_info->root_fid  = 0;
	/* unicode only call */
S
Steve French 已提交
2043
	if (target_name == NULL) {
2044 2045
		sprintf(dummy_string, "cifs%x", pSMB->hdr.Mid);
		len_of_str = cifsConvertToUCS((__le16 *)rename_info->target_name,
2046
					dummy_string, 24, nls_codepage, remap);
L
Linus Torvalds 已提交
2047
	} else {
2048
		len_of_str = cifsConvertToUCS((__le16 *)rename_info->target_name,
2049 2050
					target_name, PATH_MAX, nls_codepage,
					remap);
L
Linus Torvalds 已提交
2051 2052
	}
	rename_info->target_name_len = cpu_to_le32(2 * len_of_str);
2053
	count = 12 /* sizeof(struct set_file_rename) */ + (2 * len_of_str);
L
Linus Torvalds 已提交
2054 2055 2056 2057 2058 2059 2060 2061 2062 2063
	byte_count += count;
	pSMB->DataCount = cpu_to_le16(count);
	pSMB->TotalDataCount = pSMB->DataCount;
	pSMB->Fid = netfid;
	pSMB->InformationLevel =
		cpu_to_le16(SMB_SET_FILE_RENAME_INFORMATION);
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);
	rc = SendReceive(xid, pTcon->ses, (struct smb_hdr *) pSMB,
2064
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
2065
	cifs_stats_inc(&pTcon->num_t2renames);
S
Steve French 已提交
2066
	if (rc)
S
Steve French 已提交
2067
		cFYI(1, ("Send error in Rename (by file handle) = %d", rc));
2068

L
Linus Torvalds 已提交
2069 2070 2071 2072 2073 2074 2075 2076 2077
	cifs_buf_release(pSMB);

	/* Note: On -EAGAIN error only caller can retry on handle based calls
		since file handle passed in no longer valid */

	return rc;
}

int
2078 2079 2080
CIFSSMBCopy(const int xid, struct cifsTconInfo *tcon, const char *fromName,
	    const __u16 target_tid, const char *toName, const int flags,
	    const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
2081 2082 2083 2084 2085 2086 2087 2088 2089 2090 2091 2092 2093 2094 2095 2096 2097 2098 2099 2100 2101
{
	int rc = 0;
	COPY_REQ *pSMB = NULL;
	COPY_RSP *pSMBr = NULL;
	int bytes_returned;
	int name_len, name_len2;
	__u16 count;

	cFYI(1, ("In CIFSSMBCopy"));
copyRetry:
	rc = smb_init(SMB_COM_COPY, 1, tcon, (void **) &pSMB,
			(void **) &pSMBr);
	if (rc)
		return rc;

	pSMB->BufferFormat = 0x04;
	pSMB->Tid2 = target_tid;

	pSMB->Flags = cpu_to_le16(flags & COPY_TREE);

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
2102
		name_len = cifsConvertToUCS((__le16 *) pSMB->OldFileName,
2103 2104
					    fromName, PATH_MAX, nls_codepage,
					    remap);
L
Linus Torvalds 已提交
2105 2106 2107 2108 2109
		name_len++;     /* trailing null */
		name_len *= 2;
		pSMB->OldFileName[name_len] = 0x04;     /* pad */
		/* protocol requires ASCII signature byte on Unicode string */
		pSMB->OldFileName[name_len + 1] = 0x00;
2110 2111
		name_len2 =
		    cifsConvertToUCS((__le16 *)&pSMB->OldFileName[name_len + 2],
2112
				toName, PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
2113 2114
		name_len2 += 1 /* trailing null */  + 1 /* Signature word */ ;
		name_len2 *= 2; /* convert to bytes */
2115
	} else { 	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
2116 2117 2118 2119 2120 2121 2122 2123 2124 2125 2126 2127 2128 2129 2130 2131 2132 2133 2134 2135 2136
		name_len = strnlen(fromName, PATH_MAX);
		name_len++;     /* trailing null */
		strncpy(pSMB->OldFileName, fromName, name_len);
		name_len2 = strnlen(toName, PATH_MAX);
		name_len2++;    /* trailing null */
		pSMB->OldFileName[name_len] = 0x04;  /* 2nd buffer format */
		strncpy(&pSMB->OldFileName[name_len + 1], toName, name_len2);
		name_len2++;    /* trailing null */
		name_len2++;    /* signature byte */
	}

	count = 1 /* 1st signature byte */  + name_len + name_len2;
	pSMB->hdr.smb_buf_length += count;
	pSMB->ByteCount = cpu_to_le16(count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
		(struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
		cFYI(1, ("Send error in copy = %d with %d files copied",
			rc, le16_to_cpu(pSMBr->CopyCount)));
	}
2137
	cifs_buf_release(pSMB);
L
Linus Torvalds 已提交
2138 2139 2140 2141 2142 2143 2144 2145 2146 2147 2148 2149 2150 2151 2152 2153 2154 2155 2156 2157 2158 2159 2160 2161 2162 2163 2164 2165 2166 2167

	if (rc == -EAGAIN)
		goto copyRetry;

	return rc;
}

int
CIFSUnixCreateSymLink(const int xid, struct cifsTconInfo *tcon,
		      const char *fromName, const char *toName,
		      const struct nls_table *nls_codepage)
{
	TRANSACTION2_SPI_REQ *pSMB = NULL;
	TRANSACTION2_SPI_RSP *pSMBr = NULL;
	char *data_offset;
	int name_len;
	int name_len_target;
	int rc = 0;
	int bytes_returned = 0;
	__u16 params, param_offset, offset, byte_count;

	cFYI(1, ("In Symlink Unix style"));
createSymLinkRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
2168
		    cifs_strtoUCS((__le16 *) pSMB->FileName, fromName, PATH_MAX
L
Linus Torvalds 已提交
2169 2170 2171 2172 2173
				  /* find define for this maxpathcomponent */
				  , nls_codepage);
		name_len++;	/* trailing null */
		name_len *= 2;

2174
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
2175 2176 2177 2178 2179 2180 2181 2182 2183 2184 2185
		name_len = strnlen(fromName, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->FileName, fromName, name_len);
	}
	params = 6 + name_len;
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	param_offset = offsetof(struct smb_com_transaction2_spi_req,
2186
				InformationLevel) - 4;
L
Linus Torvalds 已提交
2187 2188 2189 2190 2191
	offset = param_offset + params;

	data_offset = (char *) (&pSMB->hdr.Protocol) + offset;
	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len_target =
2192
		    cifs_strtoUCS((__le16 *) data_offset, toName, PATH_MAX
L
Linus Torvalds 已提交
2193 2194 2195 2196
				  /* find define for this maxpathcomponent */
				  , nls_codepage);
		name_len_target++;	/* trailing null */
		name_len_target *= 2;
2197
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
2198 2199 2200 2201 2202 2203 2204 2205 2206 2207 2208 2209 2210 2211 2212 2213 2214 2215 2216 2217 2218 2219 2220 2221
		name_len_target = strnlen(toName, PATH_MAX);
		name_len_target++;	/* trailing null */
		strncpy(data_offset, toName, name_len_target);
	}

	pSMB->MaxParameterCount = cpu_to_le16(2);
	/* BB find exact max on data count below from sess */
	pSMB->MaxDataCount = cpu_to_le16(1000);
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_SET_PATH_INFORMATION);
	byte_count = 3 /* pad */  + params + name_len_target;
	pSMB->DataCount = cpu_to_le16(name_len_target);
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalDataCount = pSMB->DataCount;
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	pSMB->ParameterOffset = cpu_to_le16(param_offset);
	pSMB->DataOffset = cpu_to_le16(offset);
	pSMB->InformationLevel = cpu_to_le16(SMB_SET_FILE_UNIX_LINK);
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);
	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
2222
	cifs_stats_inc(&tcon->num_symlinks);
S
Steve French 已提交
2223
	if (rc)
2224
		cFYI(1, ("Send error in SetPathInfo create symlink = %d", rc));
L
Linus Torvalds 已提交
2225

2226
	cifs_buf_release(pSMB);
L
Linus Torvalds 已提交
2227 2228 2229 2230 2231 2232 2233 2234 2235 2236

	if (rc == -EAGAIN)
		goto createSymLinkRetry;

	return rc;
}

int
CIFSUnixCreateHardLink(const int xid, struct cifsTconInfo *tcon,
		       const char *fromName, const char *toName,
2237
		       const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
2238 2239 2240 2241 2242 2243 2244 2245 2246 2247 2248 2249 2250 2251 2252 2253 2254 2255
{
	TRANSACTION2_SPI_REQ *pSMB = NULL;
	TRANSACTION2_SPI_RSP *pSMBr = NULL;
	char *data_offset;
	int name_len;
	int name_len_target;
	int rc = 0;
	int bytes_returned = 0;
	__u16 params, param_offset, offset, byte_count;

	cFYI(1, ("In Create Hard link Unix style"));
createHardLinkRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
2256
		name_len = cifsConvertToUCS((__le16 *) pSMB->FileName, toName,
2257
					    PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
2258 2259 2260
		name_len++;	/* trailing null */
		name_len *= 2;

2261
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
2262 2263 2264 2265 2266 2267 2268 2269 2270 2271 2272
		name_len = strnlen(toName, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->FileName, toName, name_len);
	}
	params = 6 + name_len;
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	param_offset = offsetof(struct smb_com_transaction2_spi_req,
2273
				InformationLevel) - 4;
L
Linus Torvalds 已提交
2274 2275 2276 2277 2278
	offset = param_offset + params;

	data_offset = (char *) (&pSMB->hdr.Protocol) + offset;
	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len_target =
2279
		    cifsConvertToUCS((__le16 *) data_offset, fromName, PATH_MAX,
2280
				     nls_codepage, remap);
L
Linus Torvalds 已提交
2281 2282
		name_len_target++;	/* trailing null */
		name_len_target *= 2;
2283
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
2284 2285 2286 2287 2288 2289 2290 2291 2292 2293 2294 2295 2296 2297 2298 2299 2300 2301 2302 2303 2304 2305 2306 2307
		name_len_target = strnlen(fromName, PATH_MAX);
		name_len_target++;	/* trailing null */
		strncpy(data_offset, fromName, name_len_target);
	}

	pSMB->MaxParameterCount = cpu_to_le16(2);
	/* BB find exact max on data count below from sess*/
	pSMB->MaxDataCount = cpu_to_le16(1000);
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_SET_PATH_INFORMATION);
	byte_count = 3 /* pad */  + params + name_len_target;
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	pSMB->DataCount = cpu_to_le16(name_len_target);
	pSMB->TotalDataCount = pSMB->DataCount;
	pSMB->ParameterOffset = cpu_to_le16(param_offset);
	pSMB->DataOffset = cpu_to_le16(offset);
	pSMB->InformationLevel = cpu_to_le16(SMB_SET_FILE_UNIX_HLINK);
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);
	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
2308
	cifs_stats_inc(&tcon->num_hardlinks);
S
Steve French 已提交
2309
	if (rc)
L
Linus Torvalds 已提交
2310 2311 2312 2313 2314 2315 2316 2317 2318 2319 2320 2321
		cFYI(1, ("Send error in SetPathInfo (hard link) = %d", rc));

	cifs_buf_release(pSMB);
	if (rc == -EAGAIN)
		goto createHardLinkRetry;

	return rc;
}

int
CIFSCreateHardLink(const int xid, struct cifsTconInfo *tcon,
		   const char *fromName, const char *toName,
2322
		   const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
2323 2324 2325 2326 2327 2328 2329 2330 2331 2332 2333 2334 2335 2336 2337 2338 2339 2340 2341 2342 2343 2344 2345 2346 2347 2348
{
	int rc = 0;
	NT_RENAME_REQ *pSMB = NULL;
	RENAME_RSP *pSMBr = NULL;
	int bytes_returned;
	int name_len, name_len2;
	__u16 count;

	cFYI(1, ("In CIFSCreateHardLink"));
winCreateHardLinkRetry:

	rc = smb_init(SMB_COM_NT_RENAME, 4, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	pSMB->SearchAttributes =
	    cpu_to_le16(ATTR_READONLY | ATTR_HIDDEN | ATTR_SYSTEM |
			ATTR_DIRECTORY);
	pSMB->Flags = cpu_to_le16(CREATE_HARD_LINK);
	pSMB->ClusterCount = 0;

	pSMB->BufferFormat = 0x04;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
2349
		    cifsConvertToUCS((__le16 *) pSMB->OldFileName, fromName,
2350
				     PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
2351 2352 2353
		name_len++;	/* trailing null */
		name_len *= 2;
		pSMB->OldFileName[name_len] = 0;	/* pad */
2354
		pSMB->OldFileName[name_len + 1] = 0x04;
L
Linus Torvalds 已提交
2355
		name_len2 =
2356
		    cifsConvertToUCS((__le16 *)&pSMB->OldFileName[name_len + 2],
2357
				     toName, PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
2358 2359
		name_len2 += 1 /* trailing null */  + 1 /* Signature word */ ;
		name_len2 *= 2;	/* convert to bytes */
2360
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
2361 2362 2363 2364 2365 2366 2367 2368 2369 2370 2371 2372 2373 2374 2375 2376 2377
		name_len = strnlen(fromName, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->OldFileName, fromName, name_len);
		name_len2 = strnlen(toName, PATH_MAX);
		name_len2++;	/* trailing null */
		pSMB->OldFileName[name_len] = 0x04;	/* 2nd buffer format */
		strncpy(&pSMB->OldFileName[name_len + 1], toName, name_len2);
		name_len2++;	/* trailing null */
		name_len2++;	/* signature byte */
	}

	count = 1 /* string type byte */  + name_len + name_len2;
	pSMB->hdr.smb_buf_length += count;
	pSMB->ByteCount = cpu_to_le16(count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
2378
	cifs_stats_inc(&tcon->num_hardlinks);
S
Steve French 已提交
2379
	if (rc)
L
Linus Torvalds 已提交
2380
		cFYI(1, ("Send error in hard link (NT rename) = %d", rc));
S
Steve French 已提交
2381

L
Linus Torvalds 已提交
2382 2383 2384 2385 2386 2387 2388 2389 2390 2391 2392 2393 2394 2395 2396 2397 2398 2399 2400 2401 2402 2403 2404 2405 2406 2407 2408 2409 2410 2411 2412
	cifs_buf_release(pSMB);
	if (rc == -EAGAIN)
		goto winCreateHardLinkRetry;

	return rc;
}

int
CIFSSMBUnixQuerySymLink(const int xid, struct cifsTconInfo *tcon,
			const unsigned char *searchName,
			char *symlinkinfo, const int buflen,
			const struct nls_table *nls_codepage)
{
/* SMB_QUERY_FILE_UNIX_LINK */
	TRANSACTION2_QPI_REQ *pSMB = NULL;
	TRANSACTION2_QPI_RSP *pSMBr = NULL;
	int rc = 0;
	int bytes_returned;
	int name_len;
	__u16 params, byte_count;

	cFYI(1, ("In QPathSymLinkInfo (Unix) for path %s", searchName));

querySymLinkRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
2413 2414
		    cifs_strtoUCS((__le16 *) pSMB->FileName, searchName,
				  PATH_MAX, nls_codepage);
L
Linus Torvalds 已提交
2415 2416
		name_len++;	/* trailing null */
		name_len *= 2;
2417
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
2418 2419 2420 2421 2422 2423 2424 2425 2426 2427 2428 2429 2430 2431 2432 2433
		name_len = strnlen(searchName, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->FileName, searchName, name_len);
	}

	params = 2 /* level */  + 4 /* rsrvd */  + name_len /* incl null */ ;
	pSMB->TotalDataCount = 0;
	pSMB->MaxParameterCount = cpu_to_le16(2);
	/* BB find exact max data count below from sess structure BB */
	pSMB->MaxDataCount = cpu_to_le16(4000);
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	pSMB->ParameterOffset = cpu_to_le16(offsetof(
2434
	struct smb_com_transaction2_qpi_req, InformationLevel) - 4);
L
Linus Torvalds 已提交
2435 2436 2437 2438 2439 2440 2441 2442 2443 2444 2445 2446 2447 2448 2449 2450 2451 2452 2453 2454 2455 2456 2457 2458 2459 2460 2461 2462 2463 2464
	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_QUERY_PATH_INFORMATION);
	byte_count = params + 1 /* pad */ ;
	pSMB->TotalParameterCount = cpu_to_le16(params);
	pSMB->ParameterCount = pSMB->TotalParameterCount;
	pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_FILE_UNIX_LINK);
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
		cFYI(1, ("Send error in QuerySymLinkInfo = %d", rc));
	} else {
		/* decode response */

		rc = validate_t2((struct smb_t2_rsp *)pSMBr);
		if (rc || (pSMBr->ByteCount < 2))
		/* BB also check enough total bytes returned */
			rc = -EIO;	/* bad smb */
		else {
			__u16 data_offset = le16_to_cpu(pSMBr->t2.DataOffset);
			__u16 count = le16_to_cpu(pSMBr->t2.DataCount);

			if (pSMBr->hdr.Flags2 & SMBFLG2_UNICODE) {
				name_len = UniStrnlen((wchar_t *) ((char *)
2465 2466
					&pSMBr->hdr.Protocol + data_offset),
					min_t(const int, buflen, count) / 2);
2467
			/* BB FIXME investigate remapping reserved chars here */
L
Linus Torvalds 已提交
2468
				cifs_strfromUCS_le(symlinkinfo,
2469 2470
					(__le16 *) ((char *)&pSMBr->hdr.Protocol
							+ data_offset),
L
Linus Torvalds 已提交
2471 2472 2473
					name_len, nls_codepage);
			} else {
				strncpy(symlinkinfo,
2474
					(char *) &pSMBr->hdr.Protocol +
L
Linus Torvalds 已提交
2475 2476 2477 2478 2479 2480 2481 2482 2483 2484 2485 2486 2487
						data_offset,
					min_t(const int, buflen, count));
			}
			symlinkinfo[buflen] = 0;
	/* just in case so calling code does not go off the end of buffer */
		}
	}
	cifs_buf_release(pSMB);
	if (rc == -EAGAIN)
		goto querySymLinkRetry;
	return rc;
}

2488
#ifdef CONFIG_CIFS_EXPERIMENTAL
2489 2490 2491 2492 2493 2494 2495
/* Initialize NT TRANSACT SMB into small smb request buffer.
   This assumes that all NT TRANSACTS that we init here have
   total parm and data under about 400 bytes (to fit in small cifs
   buffer size), which is the case so far, it easily fits. NB:
	Setup words themselves and ByteCount
	MaxSetupCount (size of returned setup area) and
	MaxParameterCount (returned parms size) must be set by caller */
2496
static int
S
Steve French 已提交
2497
smb_init_nttransact(const __u16 sub_command, const int setup_count,
2498
		   const int parm_len, struct cifsTconInfo *tcon,
2499
		   void **ret_buf)
2500 2501 2502
{
	int rc;
	__u32 temp_offset;
2503
	struct smb_com_ntransact_req *pSMB;
2504 2505 2506 2507 2508 2509 2510 2511 2512 2513 2514 2515 2516 2517 2518 2519 2520 2521 2522 2523 2524 2525 2526

	rc = small_smb_init(SMB_COM_NT_TRANSACT, 19 + setup_count, tcon,
				(void **)&pSMB);
	if (rc)
		return rc;
	*ret_buf = (void *)pSMB;
	pSMB->Reserved = 0;
	pSMB->TotalParameterCount = cpu_to_le32(parm_len);
	pSMB->TotalDataCount  = 0;
	pSMB->MaxDataCount = cpu_to_le32((tcon->ses->server->maxBuf -
					  MAX_CIFS_HDR_SIZE) & 0xFFFFFF00);
	pSMB->ParameterCount = pSMB->TotalParameterCount;
	pSMB->DataCount  = pSMB->TotalDataCount;
	temp_offset = offsetof(struct smb_com_ntransact_req, Parms) +
			(setup_count * 2) - 4 /* for rfc1001 length itself */;
	pSMB->ParameterOffset = cpu_to_le32(temp_offset);
	pSMB->DataOffset = cpu_to_le32(temp_offset + parm_len);
	pSMB->SetupCount = setup_count; /* no need to le convert byte fields */
	pSMB->SubCommand = cpu_to_le16(sub_command);
	return 0;
}

static int
2527
validate_ntransact(char *buf, char **ppparm, char **ppdata,
S
Steve French 已提交
2528
		   __u32 *pparmlen, __u32 *pdatalen)
2529
{
2530
	char *end_of_smb;
2531
	__u32 data_count, data_offset, parm_count, parm_offset;
2532
	struct smb_com_ntransact_rsp *pSMBr;
2533

S
Steve French 已提交
2534 2535 2536
	*pdatalen = 0;
	*pparmlen = 0;

S
Steve French 已提交
2537
	if (buf == NULL)
2538 2539 2540 2541 2542
		return -EINVAL;

	pSMBr = (struct smb_com_ntransact_rsp *)buf;

	/* ByteCount was converted from little endian in SendReceive */
2543
	end_of_smb = 2 /* sizeof byte count */ + pSMBr->ByteCount +
2544 2545 2546 2547
			(char *)&pSMBr->ByteCount;

	data_offset = le32_to_cpu(pSMBr->DataOffset);
	data_count = le32_to_cpu(pSMBr->DataCount);
2548
	parm_offset = le32_to_cpu(pSMBr->ParameterOffset);
2549 2550 2551 2552 2553 2554
	parm_count = le32_to_cpu(pSMBr->ParameterCount);

	*ppparm = (char *)&pSMBr->hdr.Protocol + parm_offset;
	*ppdata = (char *)&pSMBr->hdr.Protocol + data_offset;

	/* should we also check that parm and data areas do not overlap? */
S
Steve French 已提交
2555 2556
	if (*ppparm > end_of_smb) {
		cFYI(1, ("parms start after end of smb"));
2557
		return -EINVAL;
S
Steve French 已提交
2558 2559
	} else if (parm_count + *ppparm > end_of_smb) {
		cFYI(1, ("parm end after end of smb"));
2560
		return -EINVAL;
S
Steve French 已提交
2561 2562
	} else if (*ppdata > end_of_smb) {
		cFYI(1, ("data starts after end of smb"));
2563
		return -EINVAL;
S
Steve French 已提交
2564
	} else if (data_count + *ppdata > end_of_smb) {
2565
		cFYI(1, ("data %p + count %d (%p) ends after end of smb %p start %p",
2566 2567
			*ppdata, data_count, (data_count + *ppdata),
			end_of_smb, pSMBr));
2568
		return -EINVAL;
S
Steve French 已提交
2569 2570
	} else if (parm_count + data_count > pSMBr->ByteCount) {
		cFYI(1, ("parm count and data count larger than SMB"));
2571 2572
		return -EINVAL;
	}
S
Steve French 已提交
2573 2574
	*pdatalen = data_count;
	*pparmlen = parm_count;
2575 2576
	return 0;
}
2577
#endif /* CIFS_EXPERIMENTAL */
2578

L
Linus Torvalds 已提交
2579 2580 2581
int
CIFSSMBQueryReparseLinkInfo(const int xid, struct cifsTconInfo *tcon,
			const unsigned char *searchName,
2582
			char *symlinkinfo, const int buflen, __u16 fid,
L
Linus Torvalds 已提交
2583 2584 2585 2586 2587
			const struct nls_table *nls_codepage)
{
	int rc = 0;
	int bytes_returned;
	int name_len;
2588 2589
	struct smb_com_transaction_ioctl_req *pSMB;
	struct smb_com_transaction_ioctl_rsp *pSMBr;
L
Linus Torvalds 已提交
2590 2591 2592 2593 2594 2595 2596 2597 2598 2599 2600

	cFYI(1, ("In Windows reparse style QueryLink for path %s", searchName));
	rc = smb_init(SMB_COM_NT_TRANSACT, 23, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	pSMB->TotalParameterCount = 0 ;
	pSMB->TotalDataCount = 0;
	pSMB->MaxParameterCount = cpu_to_le32(2);
	/* BB find exact data count max from sess structure BB */
2601 2602
	pSMB->MaxDataCount = cpu_to_le32((tcon->ses->server->maxBuf -
					  MAX_CIFS_HDR_SIZE) & 0xFFFFFF00);
L
Linus Torvalds 已提交
2603 2604 2605 2606 2607 2608 2609 2610 2611 2612 2613 2614 2615 2616 2617 2618 2619 2620 2621 2622 2623 2624 2625 2626 2627
	pSMB->MaxSetupCount = 4;
	pSMB->Reserved = 0;
	pSMB->ParameterOffset = 0;
	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->SetupCount = 4;
	pSMB->SubCommand = cpu_to_le16(NT_TRANSACT_IOCTL);
	pSMB->ParameterCount = pSMB->TotalParameterCount;
	pSMB->FunctionCode = cpu_to_le32(FSCTL_GET_REPARSE_POINT);
	pSMB->IsFsctl = 1; /* FSCTL */
	pSMB->IsRootFlag = 0;
	pSMB->Fid = fid; /* file handle always le */
	pSMB->ByteCount = 0;

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
		cFYI(1, ("Send error in QueryReparseLinkInfo = %d", rc));
	} else {		/* decode response */
		__u32 data_offset = le32_to_cpu(pSMBr->DataOffset);
		__u32 data_count = le32_to_cpu(pSMBr->DataCount);
		if ((pSMBr->ByteCount < 2) || (data_offset > 512))
		/* BB also check enough total bytes returned */
			rc = -EIO;	/* bad smb */
		else {
S
Steve French 已提交
2628
			if (data_count && (data_count < 2048)) {
2629
				char *end_of_smb = 2 /* sizeof byte count */ +
2630 2631
						pSMBr->ByteCount +
						(char *)&pSMBr->ByteCount;
L
Linus Torvalds 已提交
2632

2633 2634 2635 2636
				struct reparse_data *reparse_buf =
						(struct reparse_data *)
						((char *)&pSMBr->hdr.Protocol
								 + data_offset);
S
Steve French 已提交
2637
				if ((char *)reparse_buf >= end_of_smb) {
L
Linus Torvalds 已提交
2638 2639 2640
					rc = -EIO;
					goto qreparse_out;
				}
S
Steve French 已提交
2641
				if ((reparse_buf->LinkNamesBuf +
L
Linus Torvalds 已提交
2642 2643 2644
					reparse_buf->TargetNameOffset +
					reparse_buf->TargetNameLen) >
						end_of_smb) {
2645
					cFYI(1, ("reparse buf beyond SMB"));
L
Linus Torvalds 已提交
2646 2647 2648
					rc = -EIO;
					goto qreparse_out;
				}
2649

L
Linus Torvalds 已提交
2650 2651
				if (pSMBr->hdr.Flags2 & SMBFLG2_UNICODE) {
					name_len = UniStrnlen((wchar_t *)
2652 2653 2654 2655
						(reparse_buf->LinkNamesBuf +
						reparse_buf->TargetNameOffset),
						min(buflen/2,
						reparse_buf->TargetNameLen / 2));
L
Linus Torvalds 已提交
2656
					cifs_strfromUCS_le(symlinkinfo,
2657
						(__le16 *) (reparse_buf->LinkNamesBuf +
L
Linus Torvalds 已提交
2658 2659 2660
						reparse_buf->TargetNameOffset),
						name_len, nls_codepage);
				} else { /* ASCII names */
2661 2662 2663 2664 2665
					strncpy(symlinkinfo,
						reparse_buf->LinkNamesBuf +
						reparse_buf->TargetNameOffset,
						min_t(const int, buflen,
						   reparse_buf->TargetNameLen));
L
Linus Torvalds 已提交
2666 2667 2668
				}
			} else {
				rc = -EIO;
2669 2670
				cFYI(1, ("Invalid return data count on "
					 "get reparse info ioctl"));
L
Linus Torvalds 已提交
2671 2672 2673
			}
			symlinkinfo[buflen] = 0; /* just in case so the caller
					does not go off the end of the buffer */
2674
			cFYI(1, ("readlink result - %s", symlinkinfo));
L
Linus Torvalds 已提交
2675 2676 2677
		}
	}
qreparse_out:
2678
	cifs_buf_release(pSMB);
L
Linus Torvalds 已提交
2679 2680 2681 2682 2683 2684 2685 2686 2687 2688

	/* Note: On -EAGAIN error only caller can retry on handle based calls
		since file handle passed in no longer valid */

	return rc;
}

#ifdef CONFIG_CIFS_POSIX

/*Convert an Access Control Entry from wire format to local POSIX xattr format*/
2689 2690
static void cifs_convert_ace(posix_acl_xattr_entry *ace,
			     struct cifs_posix_ace *cifs_ace)
L
Linus Torvalds 已提交
2691 2692
{
	/* u8 cifs fields do not need le conversion */
2693 2694 2695
	ace->e_perm = cpu_to_le16(cifs_ace->cifs_e_perm);
	ace->e_tag  = cpu_to_le16(cifs_ace->cifs_e_tag);
	ace->e_id   = cpu_to_le32(le64_to_cpu(cifs_ace->cifs_uid));
L
Linus Torvalds 已提交
2696 2697 2698 2699 2700 2701
	/* cFYI(1,("perm %d tag %d id %d",ace->e_perm,ace->e_tag,ace->e_id)); */

	return;
}

/* Convert ACL from CIFS POSIX wire format to local Linux POSIX ACL xattr */
2702 2703
static int cifs_copy_posix_acl(char *trgt, char *src, const int buflen,
			       const int acl_type, const int size_of_data_area)
L
Linus Torvalds 已提交
2704 2705 2706 2707
{
	int size =  0;
	int i;
	__u16 count;
2708 2709 2710
	struct cifs_posix_ace *pACE;
	struct cifs_posix_acl *cifs_acl = (struct cifs_posix_acl *)src;
	posix_acl_xattr_header *local_acl = (posix_acl_xattr_header *)trgt;
L
Linus Torvalds 已提交
2711 2712 2713 2714

	if (le16_to_cpu(cifs_acl->version) != CIFS_ACL_VERSION)
		return -EOPNOTSUPP;

S
Steve French 已提交
2715
	if (acl_type & ACL_TYPE_ACCESS) {
L
Linus Torvalds 已提交
2716 2717 2718 2719 2720
		count = le16_to_cpu(cifs_acl->access_entry_count);
		pACE = &cifs_acl->ace_array[0];
		size = sizeof(struct cifs_posix_acl);
		size += sizeof(struct cifs_posix_ace) * count;
		/* check if we would go beyond end of SMB */
S
Steve French 已提交
2721
		if (size_of_data_area < size) {
2722 2723
			cFYI(1, ("bad CIFS POSIX ACL size %d vs. %d",
				size_of_data_area, size));
L
Linus Torvalds 已提交
2724 2725
			return -EINVAL;
		}
S
Steve French 已提交
2726
	} else if (acl_type & ACL_TYPE_DEFAULT) {
L
Linus Torvalds 已提交
2727 2728 2729 2730 2731 2732 2733 2734
		count = le16_to_cpu(cifs_acl->access_entry_count);
		size = sizeof(struct cifs_posix_acl);
		size += sizeof(struct cifs_posix_ace) * count;
/* skip past access ACEs to get to default ACEs */
		pACE = &cifs_acl->ace_array[count];
		count = le16_to_cpu(cifs_acl->default_entry_count);
		size += sizeof(struct cifs_posix_ace) * count;
		/* check if we would go beyond end of SMB */
S
Steve French 已提交
2735
		if (size_of_data_area < size)
L
Linus Torvalds 已提交
2736 2737 2738 2739 2740 2741 2742
			return -EINVAL;
	} else {
		/* illegal type */
		return -EINVAL;
	}

	size = posix_acl_xattr_size(count);
S
Steve French 已提交
2743
	if ((buflen == 0) || (local_acl == NULL)) {
2744
		/* used to query ACL EA size */
S
Steve French 已提交
2745
	} else if (size > buflen) {
L
Linus Torvalds 已提交
2746 2747
		return -ERANGE;
	} else /* buffer big enough */ {
2748
		local_acl->a_version = cpu_to_le32(POSIX_ACL_XATTR_VERSION);
2749 2750 2751
		for (i = 0; i < count ; i++) {
			cifs_convert_ace(&local_acl->a_entries[i], pACE);
			pACE++;
L
Linus Torvalds 已提交
2752 2753 2754 2755 2756
		}
	}
	return size;
}

2757 2758
static __u16 convert_ace_to_cifs_ace(struct cifs_posix_ace *cifs_ace,
				     const posix_acl_xattr_entry *local_ace)
L
Linus Torvalds 已提交
2759 2760 2761
{
	__u16 rc = 0; /* 0 = ACL converted ok */

2762 2763
	cifs_ace->cifs_e_perm = le16_to_cpu(local_ace->e_perm);
	cifs_ace->cifs_e_tag =  le16_to_cpu(local_ace->e_tag);
L
Linus Torvalds 已提交
2764
	/* BB is there a better way to handle the large uid? */
S
Steve French 已提交
2765
	if (local_ace->e_id == cpu_to_le32(-1)) {
L
Linus Torvalds 已提交
2766 2767
	/* Probably no need to le convert -1 on any arch but can not hurt */
		cifs_ace->cifs_uid = cpu_to_le64(-1);
2768
	} else
2769
		cifs_ace->cifs_uid = cpu_to_le64(le32_to_cpu(local_ace->e_id));
2770
	/*cFYI(1,("perm %d tag %d id %d",ace->e_perm,ace->e_tag,ace->e_id));*/
L
Linus Torvalds 已提交
2771 2772 2773 2774
	return rc;
}

/* Convert ACL from local Linux POSIX xattr to CIFS POSIX ACL wire format */
2775 2776
static __u16 ACL_to_cifs_posix(char *parm_data, const char *pACL,
			       const int buflen, const int acl_type)
L
Linus Torvalds 已提交
2777 2778
{
	__u16 rc = 0;
2779 2780
	struct cifs_posix_acl *cifs_acl = (struct cifs_posix_acl *)parm_data;
	posix_acl_xattr_header *local_acl = (posix_acl_xattr_header *)pACL;
L
Linus Torvalds 已提交
2781 2782 2783
	int count;
	int i;

S
Steve French 已提交
2784
	if ((buflen == 0) || (pACL == NULL) || (cifs_acl == NULL))
L
Linus Torvalds 已提交
2785 2786 2787
		return 0;

	count = posix_acl_xattr_count((size_t)buflen);
2788
	cFYI(1, ("setting acl with %d entries from buf of length %d and "
2789
		"version of %d",
2790
		count, buflen, le32_to_cpu(local_acl->a_version)));
S
Steve French 已提交
2791
	if (le32_to_cpu(local_acl->a_version) != 2) {
2792
		cFYI(1, ("unknown POSIX ACL version %d",
2793
		     le32_to_cpu(local_acl->a_version)));
L
Linus Torvalds 已提交
2794 2795 2796
		return 0;
	}
	cifs_acl->version = cpu_to_le16(1);
S
Steve French 已提交
2797
	if (acl_type == ACL_TYPE_ACCESS)
2798
		cifs_acl->access_entry_count = cpu_to_le16(count);
S
Steve French 已提交
2799
	else if (acl_type == ACL_TYPE_DEFAULT)
2800
		cifs_acl->default_entry_count = cpu_to_le16(count);
L
Linus Torvalds 已提交
2801
	else {
2802
		cFYI(1, ("unknown ACL type %d", acl_type));
L
Linus Torvalds 已提交
2803 2804
		return 0;
	}
2805
	for (i = 0; i < count; i++) {
L
Linus Torvalds 已提交
2806 2807
		rc = convert_ace_to_cifs_ace(&cifs_acl->ace_array[i],
					&local_acl->a_entries[i]);
S
Steve French 已提交
2808
		if (rc != 0) {
L
Linus Torvalds 已提交
2809 2810 2811 2812
			/* ACE not converted */
			break;
		}
	}
S
Steve French 已提交
2813
	if (rc == 0) {
L
Linus Torvalds 已提交
2814 2815 2816 2817 2818 2819 2820 2821 2822
		rc = (__u16)(count * sizeof(struct cifs_posix_ace));
		rc += sizeof(struct cifs_posix_acl);
		/* BB add check to make sure ACL does not overflow SMB */
	}
	return rc;
}

int
CIFSSMBGetPosixACL(const int xid, struct cifsTconInfo *tcon,
2823 2824 2825
		   const unsigned char *searchName,
		   char *acl_inf, const int buflen, const int acl_type,
		   const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
2826 2827 2828 2829 2830 2831 2832 2833
{
/* SMB_QUERY_POSIX_ACL */
	TRANSACTION2_QPI_REQ *pSMB = NULL;
	TRANSACTION2_QPI_RSP *pSMBr = NULL;
	int rc = 0;
	int bytes_returned;
	int name_len;
	__u16 params, byte_count;
2834

L
Linus Torvalds 已提交
2835 2836 2837 2838 2839 2840 2841
	cFYI(1, ("In GetPosixACL (Unix) for path %s", searchName));

queryAclRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		(void **) &pSMBr);
	if (rc)
		return rc;
2842

L
Linus Torvalds 已提交
2843 2844
	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
2845
			cifsConvertToUCS((__le16 *) pSMB->FileName, searchName,
2846
					 PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
2847 2848 2849 2850
		name_len++;     /* trailing null */
		name_len *= 2;
		pSMB->FileName[name_len] = 0;
		pSMB->FileName[name_len+1] = 0;
2851
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
2852 2853 2854 2855 2856 2857 2858 2859
		name_len = strnlen(searchName, PATH_MAX);
		name_len++;     /* trailing null */
		strncpy(pSMB->FileName, searchName, name_len);
	}

	params = 2 /* level */  + 4 /* rsrvd */  + name_len /* incl null */ ;
	pSMB->TotalDataCount = 0;
	pSMB->MaxParameterCount = cpu_to_le16(2);
2860
	/* BB find exact max data count below from sess structure BB */
L
Linus Torvalds 已提交
2861 2862 2863 2864 2865 2866 2867
	pSMB->MaxDataCount = cpu_to_le16(4000);
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	pSMB->ParameterOffset = cpu_to_le16(
2868 2869
		offsetof(struct smb_com_transaction2_qpi_req,
			 InformationLevel) - 4);
L
Linus Torvalds 已提交
2870 2871 2872 2873 2874 2875 2876 2877 2878 2879 2880 2881 2882 2883 2884
	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_QUERY_PATH_INFORMATION);
	byte_count = params + 1 /* pad */ ;
	pSMB->TotalParameterCount = cpu_to_le16(params);
	pSMB->ParameterCount = pSMB->TotalParameterCount;
	pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_POSIX_ACL);
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
		(struct smb_hdr *) pSMBr, &bytes_returned, 0);
2885
	cifs_stats_inc(&tcon->num_acl_get);
L
Linus Torvalds 已提交
2886 2887 2888 2889
	if (rc) {
		cFYI(1, ("Send error in Query POSIX ACL = %d", rc));
	} else {
		/* decode response */
2890

L
Linus Torvalds 已提交
2891 2892 2893 2894 2895 2896 2897 2898 2899
		rc = validate_t2((struct smb_t2_rsp *)pSMBr);
		if (rc || (pSMBr->ByteCount < 2))
		/* BB also check enough total bytes returned */
			rc = -EIO;      /* bad smb */
		else {
			__u16 data_offset = le16_to_cpu(pSMBr->t2.DataOffset);
			__u16 count = le16_to_cpu(pSMBr->t2.DataCount);
			rc = cifs_copy_posix_acl(acl_inf,
				(char *)&pSMBr->hdr.Protocol+data_offset,
2900
				buflen, acl_type, count);
L
Linus Torvalds 已提交
2901 2902 2903 2904 2905 2906 2907 2908 2909 2910
		}
	}
	cifs_buf_release(pSMB);
	if (rc == -EAGAIN)
		goto queryAclRetry;
	return rc;
}

int
CIFSSMBSetPosixACL(const int xid, struct cifsTconInfo *tcon,
2911 2912 2913 2914
		   const unsigned char *fileName,
		   const char *local_acl, const int buflen,
		   const int acl_type,
		   const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
2915 2916 2917 2918 2919 2920 2921 2922 2923 2924 2925 2926
{
	struct smb_com_transaction2_spi_req *pSMB = NULL;
	struct smb_com_transaction2_spi_rsp *pSMBr = NULL;
	char *parm_data;
	int name_len;
	int rc = 0;
	int bytes_returned = 0;
	__u16 params, byte_count, data_count, param_offset, offset;

	cFYI(1, ("In SetPosixACL (Unix) for path %s", fileName));
setAclRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
2927
		      (void **) &pSMBr);
L
Linus Torvalds 已提交
2928 2929 2930 2931
	if (rc)
		return rc;
	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
2932
			cifsConvertToUCS((__le16 *) pSMB->FileName, fileName,
2933
				      PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
2934 2935
		name_len++;     /* trailing null */
		name_len *= 2;
2936
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
2937 2938 2939 2940 2941 2942
		name_len = strnlen(fileName, PATH_MAX);
		name_len++;     /* trailing null */
		strncpy(pSMB->FileName, fileName, name_len);
	}
	params = 6 + name_len;
	pSMB->MaxParameterCount = cpu_to_le16(2);
2943 2944
	/* BB find max SMB size from sess */
	pSMB->MaxDataCount = cpu_to_le16(1000);
L
Linus Torvalds 已提交
2945 2946 2947 2948 2949 2950
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	param_offset = offsetof(struct smb_com_transaction2_spi_req,
2951
				InformationLevel) - 4;
L
Linus Torvalds 已提交
2952 2953 2954 2955 2956
	offset = param_offset + params;
	parm_data = ((char *) &pSMB->hdr.Protocol) + offset;
	pSMB->ParameterOffset = cpu_to_le16(param_offset);

	/* convert to on the wire format for POSIX ACL */
2957
	data_count = ACL_to_cifs_posix(parm_data, local_acl, buflen, acl_type);
L
Linus Torvalds 已提交
2958

S
Steve French 已提交
2959
	if (data_count == 0) {
L
Linus Torvalds 已提交
2960 2961 2962 2963 2964 2965 2966 2967 2968 2969 2970 2971 2972 2973 2974 2975 2976
		rc = -EOPNOTSUPP;
		goto setACLerrorExit;
	}
	pSMB->DataOffset = cpu_to_le16(offset);
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_SET_PATH_INFORMATION);
	pSMB->InformationLevel = cpu_to_le16(SMB_SET_POSIX_ACL);
	byte_count = 3 /* pad */  + params + data_count;
	pSMB->DataCount = cpu_to_le16(data_count);
	pSMB->TotalDataCount = pSMB->DataCount;
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);
	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
2977
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
S
Steve French 已提交
2978
	if (rc)
L
Linus Torvalds 已提交
2979 2980 2981 2982 2983 2984 2985 2986 2987
		cFYI(1, ("Set POSIX ACL returned %d", rc));

setACLerrorExit:
	cifs_buf_release(pSMB);
	if (rc == -EAGAIN)
		goto setAclRetry;
	return rc;
}

2988 2989 2990
/* BB fix tabs in this function FIXME BB */
int
CIFSGetExtAttr(const int xid, struct cifsTconInfo *tcon,
S
Steve French 已提交
2991
	       const int netfid, __u64 *pExtAttrBits, __u64 *pMask)
2992
{
2993 2994 2995 2996 2997
	int rc = 0;
	struct smb_t2_qfi_req *pSMB = NULL;
	struct smb_t2_qfi_rsp *pSMBr = NULL;
	int bytes_returned;
	__u16 params, byte_count;
2998

S
Steve French 已提交
2999 3000 3001
	cFYI(1, ("In GetExtAttr"));
	if (tcon == NULL)
		return -ENODEV;
3002 3003

GetExtAttrRetry:
S
Steve French 已提交
3004 3005 3006 3007
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
			(void **) &pSMBr);
	if (rc)
		return rc;
3008

S
Steve French 已提交
3009
	params = 2 /* level */ + 2 /* fid */;
S
Steve French 已提交
3010 3011 3012 3013 3014 3015 3016 3017 3018 3019 3020 3021 3022 3023 3024 3025 3026 3027 3028 3029 3030
	pSMB->t2.TotalDataCount = 0;
	pSMB->t2.MaxParameterCount = cpu_to_le16(4);
	/* BB find exact max data count below from sess structure BB */
	pSMB->t2.MaxDataCount = cpu_to_le16(4000);
	pSMB->t2.MaxSetupCount = 0;
	pSMB->t2.Reserved = 0;
	pSMB->t2.Flags = 0;
	pSMB->t2.Timeout = 0;
	pSMB->t2.Reserved2 = 0;
	pSMB->t2.ParameterOffset = cpu_to_le16(offsetof(struct smb_t2_qfi_req,
					       Fid) - 4);
	pSMB->t2.DataCount = 0;
	pSMB->t2.DataOffset = 0;
	pSMB->t2.SetupCount = 1;
	pSMB->t2.Reserved3 = 0;
	pSMB->t2.SubCommand = cpu_to_le16(TRANS2_QUERY_FILE_INFORMATION);
	byte_count = params + 1 /* pad */ ;
	pSMB->t2.TotalParameterCount = cpu_to_le16(params);
	pSMB->t2.ParameterCount = pSMB->t2.TotalParameterCount;
	pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_ATTR_FLAGS);
	pSMB->Pad = 0;
3031
	pSMB->Fid = netfid;
S
Steve French 已提交
3032 3033 3034 3035 3036 3037 3038 3039 3040 3041 3042 3043 3044 3045 3046 3047 3048 3049 3050 3051 3052 3053 3054 3055 3056 3057 3058 3059
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->t2.ByteCount = cpu_to_le16(byte_count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
		cFYI(1, ("error %d in GetExtAttr", rc));
	} else {
		/* decode response */
		rc = validate_t2((struct smb_t2_rsp *)pSMBr);
		if (rc || (pSMBr->ByteCount < 2))
		/* BB also check enough total bytes returned */
			/* If rc should we check for EOPNOSUPP and
			   disable the srvino flag? or in caller? */
			rc = -EIO;      /* bad smb */
		else {
			__u16 data_offset = le16_to_cpu(pSMBr->t2.DataOffset);
			__u16 count = le16_to_cpu(pSMBr->t2.DataCount);
			struct file_chattr_info *pfinfo;
			/* BB Do we need a cast or hash here ? */
			if (count != 16) {
				cFYI(1, ("Illegal size ret in GetExtAttr"));
				rc = -EIO;
				goto GetExtAttrOut;
			}
			pfinfo = (struct file_chattr_info *)
				 (data_offset + (char *) &pSMBr->hdr.Protocol);
			*pExtAttrBits = le64_to_cpu(pfinfo->mode);
3060
			*pMask = le64_to_cpu(pfinfo->mask);
S
Steve French 已提交
3061 3062
		}
	}
3063
GetExtAttrOut:
S
Steve French 已提交
3064 3065 3066 3067
	cifs_buf_release(pSMB);
	if (rc == -EAGAIN)
		goto GetExtAttrRetry;
	return rc;
3068 3069 3070
}

#endif /* CONFIG_POSIX */
L
Linus Torvalds 已提交
3071

S
Steve French 已提交
3072
#ifdef CONFIG_CIFS_EXPERIMENTAL
3073 3074 3075
/* Get Security Descriptor (by handle) from remote server for a file or dir */
int
CIFSSMBGetCIFSACL(const int xid, struct cifsTconInfo *tcon, __u16 fid,
S
Steve French 已提交
3076
		  struct cifs_ntsd **acl_inf, __u32 *pbuflen)
3077 3078 3079
{
	int rc = 0;
	int buf_type = 0;
S
Steve French 已提交
3080
	QUERY_SEC_DESC_REQ *pSMB;
3081 3082 3083 3084
	struct kvec iov[1];

	cFYI(1, ("GetCifsACL"));

S
Steve French 已提交
3085 3086 3087
	*pbuflen = 0;
	*acl_inf = NULL;

S
Steve French 已提交
3088
	rc = smb_init_nttransact(NT_TRANSACT_QUERY_SECURITY_DESC, 0,
3089 3090 3091 3092 3093 3094 3095 3096 3097 3098 3099 3100 3101 3102 3103
			8 /* parm len */, tcon, (void **) &pSMB);
	if (rc)
		return rc;

	pSMB->MaxParameterCount = cpu_to_le32(4);
	/* BB TEST with big acls that might need to be e.g. larger than 16K */
	pSMB->MaxSetupCount = 0;
	pSMB->Fid = fid; /* file handle always le */
	pSMB->AclFlags = cpu_to_le32(CIFS_ACL_OWNER | CIFS_ACL_GROUP |
				     CIFS_ACL_DACL);
	pSMB->ByteCount = cpu_to_le16(11); /* 3 bytes pad + 8 bytes parm */
	pSMB->hdr.smb_buf_length += 11;
	iov[0].iov_base = (char *)pSMB;
	iov[0].iov_len = pSMB->hdr.smb_buf_length + 4;

3104
	rc = SendReceive2(xid, tcon->ses, iov, 1 /* num iovec */, &buf_type,
3105
			 CIFS_STD_OP);
3106 3107 3108 3109
	cifs_stats_inc(&tcon->num_acl_get);
	if (rc) {
		cFYI(1, ("Send error in QuerySecDesc = %d", rc));
	} else {                /* decode response */
S
Steve French 已提交
3110
		__le32 *parm;
S
Steve French 已提交
3111 3112
		__u32 parm_len;
		__u32 acl_len;
3113
		struct smb_com_ntransact_rsp *pSMBr;
S
Steve French 已提交
3114
		char *pdata;
3115 3116

/* validate_nttransact */
3117
		rc = validate_ntransact(iov[0].iov_base, (char **)&parm,
S
Steve French 已提交
3118
					&pdata, &parm_len, pbuflen);
S
Steve French 已提交
3119
		if (rc)
3120 3121 3122
			goto qsec_out;
		pSMBr = (struct smb_com_ntransact_rsp *)iov[0].iov_base;

S
Steve French 已提交
3123
		cFYI(1, ("smb %p parm %p data %p", pSMBr, parm, *acl_inf));
3124 3125 3126

		if (le32_to_cpu(pSMBr->ParameterCount) != 4) {
			rc = -EIO;      /* bad smb */
S
Steve French 已提交
3127
			*pbuflen = 0;
3128 3129 3130 3131 3132
			goto qsec_out;
		}

/* BB check that data area is minimum length and as big as acl_len */

3133
		acl_len = le32_to_cpu(*parm);
S
Steve French 已提交
3134 3135 3136 3137 3138 3139
		if (acl_len != *pbuflen) {
			cERROR(1, ("acl length %d does not match %d",
				   acl_len, *pbuflen));
			if (*pbuflen > acl_len)
				*pbuflen = acl_len;
		}
3140

S
Steve French 已提交
3141 3142 3143 3144 3145 3146 3147 3148 3149 3150 3151 3152 3153 3154 3155
		/* check if buffer is big enough for the acl
		   header followed by the smallest SID */
		if ((*pbuflen < sizeof(struct cifs_ntsd) + 8) ||
		    (*pbuflen >= 64 * 1024)) {
			cERROR(1, ("bad acl length %d", *pbuflen));
			rc = -EINVAL;
			*pbuflen = 0;
		} else {
			*acl_inf = kmalloc(*pbuflen, GFP_KERNEL);
			if (*acl_inf == NULL) {
				*pbuflen = 0;
				rc = -ENOMEM;
			}
			memcpy(*acl_inf, pdata, *pbuflen);
		}
3156 3157
	}
qsec_out:
S
Steve French 已提交
3158
	if (buf_type == CIFS_SMALL_BUFFER)
3159
		cifs_small_buf_release(iov[0].iov_base);
S
Steve French 已提交
3160
	else if (buf_type == CIFS_LARGE_BUFFER)
3161
		cifs_buf_release(iov[0].iov_base);
3162
/*	cifs_small_buf_release(pSMB); */ /* Freed earlier now in SendReceive2 */
3163 3164
	return rc;
}
3165 3166 3167 3168 3169 3170 3171 3172 3173 3174 3175 3176 3177 3178 3179 3180 3181 3182 3183 3184 3185 3186 3187 3188 3189 3190 3191 3192 3193 3194 3195 3196 3197 3198 3199 3200 3201 3202 3203 3204 3205 3206 3207 3208 3209 3210 3211 3212 3213 3214 3215 3216 3217 3218 3219 3220 3221 3222 3223 3224 3225 3226 3227 3228 3229

int
CIFSSMBSetCIFSACL(const int xid, struct cifsTconInfo *tcon, __u16 fid,
			struct cifs_ntsd *pntsd, __u32 acllen)
{
	__u16 byte_count, param_count, data_count, param_offset, data_offset;
	int rc = 0;
	int bytes_returned = 0;
	SET_SEC_DESC_REQ *pSMB = NULL;
	NTRANSACT_RSP *pSMBr = NULL;

setCifsAclRetry:
	rc = smb_init(SMB_COM_NT_TRANSACT, 19, tcon, (void **) &pSMB,
			(void **) &pSMBr);
	if (rc)
			return (rc);

	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;

	param_count = 8;
	param_offset = offsetof(struct smb_com_transaction_ssec_req, Fid) - 4;
	data_count = acllen;
	data_offset = param_offset + param_count;
	byte_count = 3 /* pad */  + param_count;

	pSMB->DataCount = cpu_to_le32(data_count);
	pSMB->TotalDataCount = pSMB->DataCount;
	pSMB->MaxParameterCount = cpu_to_le32(4);
	pSMB->MaxDataCount = cpu_to_le32(16384);
	pSMB->ParameterCount = cpu_to_le32(param_count);
	pSMB->ParameterOffset = cpu_to_le32(param_offset);
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	pSMB->DataOffset = cpu_to_le32(data_offset);
	pSMB->SetupCount = 0;
	pSMB->SubCommand = cpu_to_le16(NT_TRANSACT_SET_SECURITY_DESC);
	pSMB->ByteCount = cpu_to_le16(byte_count+data_count);

	pSMB->Fid = fid; /* file handle always le */
	pSMB->Reserved2 = 0;
	pSMB->AclFlags = cpu_to_le32(CIFS_ACL_DACL);

	if (pntsd && acllen) {
		memcpy((char *) &pSMBr->hdr.Protocol + data_offset,
			(char *) pntsd,
			acllen);
		pSMB->hdr.smb_buf_length += (byte_count + data_count);

	} else
		pSMB->hdr.smb_buf_length += byte_count;

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
		(struct smb_hdr *) pSMBr, &bytes_returned, 0);

	cFYI(1, ("SetCIFSACL bytes_returned: %d, rc: %d", bytes_returned, rc));
	if (rc)
		cFYI(1, ("Set CIFS ACL returned %d", rc));
	cifs_buf_release(pSMB);

	if (rc == -EAGAIN)
		goto setCifsAclRetry;

	return (rc);
}

S
Steve French 已提交
3230
#endif /* CONFIG_CIFS_EXPERIMENTAL */
3231

3232 3233 3234
/* Legacy Query Path Information call for lookup to old servers such
   as Win9x/WinME */
int SMBQueryInformation(const int xid, struct cifsTconInfo *tcon,
3235 3236 3237
			const unsigned char *searchName,
			FILE_ALL_INFO *pFinfo,
			const struct nls_table *nls_codepage, int remap)
3238
{
S
Steve French 已提交
3239 3240
	QUERY_INFORMATION_REQ *pSMB;
	QUERY_INFORMATION_RSP *pSMBr;
3241 3242 3243 3244
	int rc = 0;
	int bytes_returned;
	int name_len;

3245
	cFYI(1, ("In SMBQPath path %s", searchName));
3246 3247
QInfRetry:
	rc = smb_init(SMB_COM_QUERY_INFORMATION, 0, tcon, (void **) &pSMB,
3248
		      (void **) &pSMBr);
3249 3250 3251 3252 3253
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
3254 3255
			cifsConvertToUCS((__le16 *) pSMB->FileName, searchName,
					PATH_MAX, nls_codepage, remap);
3256 3257
		name_len++;     /* trailing null */
		name_len *= 2;
3258
	} else {
3259 3260 3261 3262 3263
		name_len = strnlen(searchName, PATH_MAX);
		name_len++;     /* trailing null */
		strncpy(pSMB->FileName, searchName, name_len);
	}
	pSMB->BufferFormat = 0x04;
3264
	name_len++; /* account for buffer type byte */
3265 3266 3267 3268
	pSMB->hdr.smb_buf_length += (__u16) name_len;
	pSMB->ByteCount = cpu_to_le16(name_len);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
3269
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
3270 3271
	if (rc) {
		cFYI(1, ("Send error in QueryInfo = %d", rc));
S
Steve French 已提交
3272
	} else if (pFinfo) {
3273 3274
		struct timespec ts;
		__u32 time = le32_to_cpu(pSMBr->last_write_time);
S
Steve French 已提交
3275 3276

		/* decode response */
3277
		/* BB FIXME - add time zone adjustment BB */
3278
		memset(pFinfo, 0, sizeof(FILE_ALL_INFO));
3279 3280 3281
		ts.tv_nsec = 0;
		ts.tv_sec = time;
		/* decode time fields */
A
Al Viro 已提交
3282
		pFinfo->ChangeTime = cpu_to_le64(cifs_UnixTimeToNT(ts));
3283 3284
		pFinfo->LastWriteTime = pFinfo->ChangeTime;
		pFinfo->LastAccessTime = 0;
3285 3286 3287 3288 3289
		pFinfo->AllocationSize =
			cpu_to_le64(le32_to_cpu(pSMBr->size));
		pFinfo->EndOfFile = pFinfo->AllocationSize;
		pFinfo->Attributes =
			cpu_to_le32(le16_to_cpu(pSMBr->attr));
3290 3291 3292 3293 3294 3295 3296 3297 3298 3299 3300 3301 3302 3303
	} else
		rc = -EIO; /* bad buffer passed in */

	cifs_buf_release(pSMB);

	if (rc == -EAGAIN)
		goto QInfRetry;

	return rc;
}




L
Linus Torvalds 已提交
3304 3305 3306
int
CIFSSMBQPathInfo(const int xid, struct cifsTconInfo *tcon,
		 const unsigned char *searchName,
S
Steve French 已提交
3307
		 FILE_ALL_INFO *pFindData,
3308
		 int legacy /* old style infolevel */,
3309
		 const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
3310 3311 3312 3313 3314 3315 3316 3317 3318 3319 3320 3321 3322 3323 3324 3325 3326 3327
{
/* level 263 SMB_QUERY_FILE_ALL_INFO */
	TRANSACTION2_QPI_REQ *pSMB = NULL;
	TRANSACTION2_QPI_RSP *pSMBr = NULL;
	int rc = 0;
	int bytes_returned;
	int name_len;
	__u16 params, byte_count;

/* cFYI(1, ("In QPathInfo path %s", searchName)); */
QPathInfoRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
3328
		    cifsConvertToUCS((__le16 *) pSMB->FileName, searchName,
3329
				     PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
3330 3331
		name_len++;	/* trailing null */
		name_len *= 2;
3332
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
3333 3334 3335 3336 3337
		name_len = strnlen(searchName, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->FileName, searchName, name_len);
	}

3338
	params = 2 /* level */ + 4 /* reserved */ + name_len /* includes NUL */;
L
Linus Torvalds 已提交
3339 3340
	pSMB->TotalDataCount = 0;
	pSMB->MaxParameterCount = cpu_to_le16(2);
3341 3342
	/* BB find exact max SMB PDU from sess structure BB */
	pSMB->MaxDataCount = cpu_to_le16(4000);
L
Linus Torvalds 已提交
3343 3344 3345 3346 3347 3348
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	pSMB->ParameterOffset = cpu_to_le16(offsetof(
3349
	struct smb_com_transaction2_qpi_req, InformationLevel) - 4);
L
Linus Torvalds 已提交
3350 3351 3352 3353 3354 3355 3356 3357
	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_QUERY_PATH_INFORMATION);
	byte_count = params + 1 /* pad */ ;
	pSMB->TotalParameterCount = cpu_to_le16(params);
	pSMB->ParameterCount = pSMB->TotalParameterCount;
S
Steve French 已提交
3358
	if (legacy)
3359 3360 3361
		pSMB->InformationLevel = cpu_to_le16(SMB_INFO_STANDARD);
	else
		pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_FILE_ALL_INFO);
L
Linus Torvalds 已提交
3362 3363 3364 3365 3366 3367 3368 3369 3370 3371 3372
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
		cFYI(1, ("Send error in QPathInfo = %d", rc));
	} else {		/* decode response */
		rc = validate_t2((struct smb_t2_rsp *)pSMBr);

3373 3374
		if (rc) /* BB add auto retry on EOPNOTSUPP? */
			rc = -EIO;
3375
		else if (!legacy && (pSMBr->ByteCount < 40))
L
Linus Torvalds 已提交
3376
			rc = -EIO;	/* bad smb */
S
Steve French 已提交
3377
		else if (legacy && (pSMBr->ByteCount < 24))
3378 3379 3380
			rc = -EIO;  /* 24 or 26 expected but we do not read
					last field */
		else if (pFindData) {
3381
			int size;
L
Linus Torvalds 已提交
3382
			__u16 data_offset = le16_to_cpu(pSMBr->t2.DataOffset);
S
Steve French 已提交
3383 3384 3385 3386 3387 3388

			/* On legacy responses we do not read the last field,
			EAsize, fortunately since it varies by subdialect and
			also note it differs on Set vs. Get, ie two bytes or 4
			bytes depending but we don't care here */
			if (legacy)
3389 3390 3391
				size = sizeof(FILE_INFO_STANDARD);
			else
				size = sizeof(FILE_ALL_INFO);
L
Linus Torvalds 已提交
3392 3393
			memcpy((char *) pFindData,
			       (char *) &pSMBr->hdr.Protocol +
3394
			       data_offset, size);
L
Linus Torvalds 已提交
3395 3396 3397 3398 3399 3400 3401 3402 3403 3404 3405 3406 3407
		} else
		    rc = -ENOMEM;
	}
	cifs_buf_release(pSMB);
	if (rc == -EAGAIN)
		goto QPathInfoRetry;

	return rc;
}

int
CIFSSMBUnixQPathInfo(const int xid, struct cifsTconInfo *tcon,
		     const unsigned char *searchName,
3408
		     FILE_UNIX_BASIC_INFO *pFindData,
3409
		     const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
3410 3411 3412 3413 3414 3415 3416 3417 3418 3419 3420 3421 3422 3423 3424 3425 3426 3427
{
/* SMB_QUERY_FILE_UNIX_BASIC */
	TRANSACTION2_QPI_REQ *pSMB = NULL;
	TRANSACTION2_QPI_RSP *pSMBr = NULL;
	int rc = 0;
	int bytes_returned = 0;
	int name_len;
	__u16 params, byte_count;

	cFYI(1, ("In QPathInfo (Unix) the path %s", searchName));
UnixQPathInfoRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
3428
		    cifsConvertToUCS((__le16 *) pSMB->FileName, searchName,
3429
				  PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
3430 3431
		name_len++;	/* trailing null */
		name_len *= 2;
3432
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
3433 3434 3435 3436 3437
		name_len = strnlen(searchName, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->FileName, searchName, name_len);
	}

3438
	params = 2 /* level */ + 4 /* reserved */ + name_len /* includes NUL */;
L
Linus Torvalds 已提交
3439 3440 3441
	pSMB->TotalDataCount = 0;
	pSMB->MaxParameterCount = cpu_to_le16(2);
	/* BB find exact max SMB PDU from sess structure BB */
3442
	pSMB->MaxDataCount = cpu_to_le16(4000);
L
Linus Torvalds 已提交
3443 3444 3445 3446 3447 3448
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	pSMB->ParameterOffset = cpu_to_le16(offsetof(
3449
	struct smb_com_transaction2_qpi_req, InformationLevel) - 4);
L
Linus Torvalds 已提交
3450 3451 3452 3453 3454 3455 3456 3457 3458 3459 3460 3461 3462 3463 3464 3465 3466 3467 3468 3469 3470
	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_QUERY_PATH_INFORMATION);
	byte_count = params + 1 /* pad */ ;
	pSMB->TotalParameterCount = cpu_to_le16(params);
	pSMB->ParameterCount = pSMB->TotalParameterCount;
	pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_FILE_UNIX_BASIC);
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
		cFYI(1, ("Send error in QPathInfo = %d", rc));
	} else {		/* decode response */
		rc = validate_t2((struct smb_t2_rsp *)pSMBr);

		if (rc || (pSMBr->ByteCount < sizeof(FILE_UNIX_BASIC_INFO))) {
3471 3472 3473
			cERROR(1, ("Malformed FILE_UNIX_BASIC_INFO response.\n"
				   "Unix Extensions can be disabled on mount "
				   "by specifying the nosfu mount option."));
L
Linus Torvalds 已提交
3474 3475 3476 3477 3478 3479
			rc = -EIO;	/* bad smb */
		} else {
			__u16 data_offset = le16_to_cpu(pSMBr->t2.DataOffset);
			memcpy((char *) pFindData,
			       (char *) &pSMBr->hdr.Protocol +
			       data_offset,
S
Steve French 已提交
3480
			       sizeof(FILE_UNIX_BASIC_INFO));
L
Linus Torvalds 已提交
3481 3482 3483 3484 3485 3486 3487 3488 3489 3490 3491 3492
		}
	}
	cifs_buf_release(pSMB);
	if (rc == -EAGAIN)
		goto UnixQPathInfoRetry;

	return rc;
}

/* xid, tcon, searchName and codepage are input parms, rest are returned */
int
CIFSFindFirst(const int xid, struct cifsTconInfo *tcon,
3493
	      const char *searchName,
L
Linus Torvalds 已提交
3494
	      const struct nls_table *nls_codepage,
3495 3496
	      __u16 *pnetfid,
	      struct cifs_search_info *psrch_inf, int remap, const char dirsep)
L
Linus Torvalds 已提交
3497 3498 3499 3500
{
/* level 257 SMB_ */
	TRANSACTION2_FFIRST_REQ *pSMB = NULL;
	TRANSACTION2_FFIRST_RSP *pSMBr = NULL;
S
Steve French 已提交
3501
	T2_FFIRST_RSP_PARMS *parms;
L
Linus Torvalds 已提交
3502 3503 3504 3505 3506
	int rc = 0;
	int bytes_returned = 0;
	int name_len;
	__u16 params, byte_count;

3507
	cFYI(1, ("In FindFirst for %s", searchName));
L
Linus Torvalds 已提交
3508 3509 3510 3511 3512 3513 3514 3515 3516

findFirstRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
3517
		    cifsConvertToUCS((__le16 *) pSMB->FileName, searchName,
3518 3519 3520 3521
				 PATH_MAX, nls_codepage, remap);
		/* We can not add the asterik earlier in case
		it got remapped to 0xF03A as if it were part of the
		directory name instead of a wildcard */
L
Linus Torvalds 已提交
3522
		name_len *= 2;
3523
		pSMB->FileName[name_len] = dirsep;
3524 3525 3526 3527
		pSMB->FileName[name_len+1] = 0;
		pSMB->FileName[name_len+2] = '*';
		pSMB->FileName[name_len+3] = 0;
		name_len += 4; /* now the trailing null */
L
Linus Torvalds 已提交
3528 3529
		pSMB->FileName[name_len] = 0; /* null terminate just in case */
		pSMB->FileName[name_len+1] = 0;
3530
		name_len += 2;
L
Linus Torvalds 已提交
3531 3532 3533
	} else {	/* BB add check for overrun of SMB buf BB */
		name_len = strnlen(searchName, PATH_MAX);
/* BB fix here and in unicode clause above ie
S
Steve French 已提交
3534
		if (name_len > buffersize-header)
L
Linus Torvalds 已提交
3535 3536
			free buffer exit; BB */
		strncpy(pSMB->FileName, searchName, name_len);
3537
		pSMB->FileName[name_len] = dirsep;
3538 3539 3540
		pSMB->FileName[name_len+1] = '*';
		pSMB->FileName[name_len+2] = 0;
		name_len += 3;
L
Linus Torvalds 已提交
3541 3542 3543 3544 3545 3546 3547 3548 3549 3550 3551 3552 3553 3554 3555 3556
	}

	params = 12 + name_len /* includes null */ ;
	pSMB->TotalDataCount = 0;	/* no EAs */
	pSMB->MaxParameterCount = cpu_to_le16(10);
	pSMB->MaxDataCount = cpu_to_le16((tcon->ses->server->maxBuf -
					  MAX_CIFS_HDR_SIZE) & 0xFFFFFF00);
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	byte_count = params + 1 /* pad */ ;
	pSMB->TotalParameterCount = cpu_to_le16(params);
	pSMB->ParameterCount = pSMB->TotalParameterCount;
	pSMB->ParameterOffset = cpu_to_le16(
3557 3558
	      offsetof(struct smb_com_transaction2_ffirst_req, SearchAttributes)
		- 4);
L
Linus Torvalds 已提交
3559 3560 3561 3562 3563 3564 3565 3566
	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->SetupCount = 1;	/* one byte, no need to make endian neutral */
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_FIND_FIRST);
	pSMB->SearchAttributes =
	    cpu_to_le16(ATTR_READONLY | ATTR_HIDDEN | ATTR_SYSTEM |
			ATTR_DIRECTORY);
3567 3568
	pSMB->SearchCount = cpu_to_le16(CIFSMaxBufSize/sizeof(FILE_UNIX_INFO));
	pSMB->SearchFlags = cpu_to_le16(CIFS_SEARCH_CLOSE_AT_END |
L
Linus Torvalds 已提交
3569 3570 3571 3572 3573 3574 3575 3576 3577 3578
		CIFS_SEARCH_RETURN_RESUME);
	pSMB->InformationLevel = cpu_to_le16(psrch_inf->info_level);

	/* BB what should we set StorageType to? Does it matter? BB */
	pSMB->SearchStorageType = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
3579
	cifs_stats_inc(&tcon->num_ffirst);
L
Linus Torvalds 已提交
3580

3581 3582
	if (rc) {/* BB add logic to retry regular search if Unix search
			rejected unexpectedly by server */
L
Linus Torvalds 已提交
3583 3584
		/* BB Add code to handle unsupported level rc */
		cFYI(1, ("Error in FindFirst = %d", rc));
3585

3586
		cifs_buf_release(pSMB);
L
Linus Torvalds 已提交
3587 3588 3589 3590 3591 3592 3593 3594

		/* BB eventually could optimize out free and realloc of buf */
		/*    for this case */
		if (rc == -EAGAIN)
			goto findFirstRetry;
	} else { /* decode response */
		/* BB remember to free buffer if error BB */
		rc = validate_t2((struct smb_t2_rsp *)pSMBr);
S
Steve French 已提交
3595
		if (rc == 0) {
3596 3597
			unsigned int lnoff;

L
Linus Torvalds 已提交
3598
			if (pSMBr->hdr.Flags2 & SMBFLG2_UNICODE)
3599
				psrch_inf->unicode = true;
L
Linus Torvalds 已提交
3600
			else
3601
				psrch_inf->unicode = false;
L
Linus Torvalds 已提交
3602 3603

			psrch_inf->ntwrk_buf_start = (char *)pSMBr;
3604
			psrch_inf->smallBuf = 0;
3605 3606
			psrch_inf->srch_entries_start =
				(char *) &pSMBr->hdr.Protocol +
L
Linus Torvalds 已提交
3607 3608 3609 3610
					le16_to_cpu(pSMBr->t2.DataOffset);
			parms = (T2_FFIRST_RSP_PARMS *)((char *) &pSMBr->hdr.Protocol +
			       le16_to_cpu(pSMBr->t2.ParameterOffset));

S
Steve French 已提交
3611
			if (parms->EndofSearch)
3612
				psrch_inf->endOfSearch = true;
L
Linus Torvalds 已提交
3613
			else
3614
				psrch_inf->endOfSearch = false;
L
Linus Torvalds 已提交
3615

3616 3617
			psrch_inf->entries_in_buffer =
					le16_to_cpu(parms->SearchCount);
3618
			psrch_inf->index_of_last_entry = 2 /* skip . and .. */ +
L
Linus Torvalds 已提交
3619
				psrch_inf->entries_in_buffer;
3620 3621 3622 3623 3624 3625 3626 3627
			lnoff = le16_to_cpu(parms->LastNameOffset);
			if (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE <
			      lnoff) {
				cERROR(1, ("ignoring corrupt resume name"));
				psrch_inf->last_entry = NULL;
				return rc;
			}

3628
			psrch_inf->last_entry = psrch_inf->srch_entries_start +
3629 3630
							lnoff;

L
Linus Torvalds 已提交
3631 3632 3633 3634 3635 3636 3637 3638 3639 3640
			*pnetfid = parms->SearchHandle;
		} else {
			cifs_buf_release(pSMB);
		}
	}

	return rc;
}

int CIFSFindNext(const int xid, struct cifsTconInfo *tcon,
3641
		 __u16 searchHandle, struct cifs_search_info *psrch_inf)
L
Linus Torvalds 已提交
3642 3643 3644
{
	TRANSACTION2_FNEXT_REQ *pSMB = NULL;
	TRANSACTION2_FNEXT_RSP *pSMBr = NULL;
S
Steve French 已提交
3645
	T2_FNEXT_RSP_PARMS *parms;
L
Linus Torvalds 已提交
3646 3647 3648 3649 3650 3651 3652
	char *response_data;
	int rc = 0;
	int bytes_returned, name_len;
	__u16 params, byte_count;

	cFYI(1, ("In FindNext"));

3653
	if (psrch_inf->endOfSearch)
L
Linus Torvalds 已提交
3654 3655 3656 3657 3658 3659 3660
		return -ENOENT;

	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		(void **) &pSMBr);
	if (rc)
		return rc;

3661
	params = 14; /* includes 2 bytes of null string, converted to LE below*/
L
Linus Torvalds 已提交
3662 3663 3664 3665
	byte_count = 0;
	pSMB->TotalDataCount = 0;       /* no EAs */
	pSMB->MaxParameterCount = cpu_to_le16(8);
	pSMB->MaxDataCount =
3666 3667
		cpu_to_le16((tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE) &
				0xFFFFFF00);
L
Linus Torvalds 已提交
3668 3669 3670 3671 3672 3673 3674 3675 3676 3677 3678 3679 3680 3681
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	pSMB->ParameterOffset =  cpu_to_le16(
	      offsetof(struct smb_com_transaction2_fnext_req,SearchHandle) - 4);
	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_FIND_NEXT);
	pSMB->SearchHandle = searchHandle;      /* always kept as le */
	pSMB->SearchCount =
S
Steve French 已提交
3682
		cpu_to_le16(CIFSMaxBufSize / sizeof(FILE_UNIX_INFO));
L
Linus Torvalds 已提交
3683 3684 3685 3686 3687 3688 3689
	pSMB->InformationLevel = cpu_to_le16(psrch_inf->info_level);
	pSMB->ResumeKey = psrch_inf->resume_key;
	pSMB->SearchFlags =
	      cpu_to_le16(CIFS_SEARCH_CLOSE_AT_END | CIFS_SEARCH_RETURN_RESUME);

	name_len = psrch_inf->resume_name_len;
	params += name_len;
S
Steve French 已提交
3690
	if (name_len < PATH_MAX) {
L
Linus Torvalds 已提交
3691 3692
		memcpy(pSMB->ResumeFileName, psrch_inf->presume_name, name_len);
		byte_count += name_len;
3693 3694 3695
		/* 14 byte parm len above enough for 2 byte null terminator */
		pSMB->ResumeFileName[name_len] = 0;
		pSMB->ResumeFileName[name_len+1] = 0;
L
Linus Torvalds 已提交
3696 3697 3698 3699 3700 3701 3702 3703 3704
	} else {
		rc = -EINVAL;
		goto FNext2_err_exit;
	}
	byte_count = params + 1 /* pad */ ;
	pSMB->TotalParameterCount = cpu_to_le16(params);
	pSMB->ParameterCount = pSMB->TotalParameterCount;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);
3705

L
Linus Torvalds 已提交
3706 3707
	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			(struct smb_hdr *) pSMBr, &bytes_returned, 0);
3708
	cifs_stats_inc(&tcon->num_fnext);
L
Linus Torvalds 已提交
3709 3710
	if (rc) {
		if (rc == -EBADF) {
3711
			psrch_inf->endOfSearch = true;
J
Jeff Layton 已提交
3712
			cifs_buf_release(pSMB);
3713
			rc = 0; /* search probably was closed at end of search*/
L
Linus Torvalds 已提交
3714 3715 3716 3717
		} else
			cFYI(1, ("FindNext returned = %d", rc));
	} else {                /* decode response */
		rc = validate_t2((struct smb_t2_rsp *)pSMBr);
3718

S
Steve French 已提交
3719
		if (rc == 0) {
3720 3721
			unsigned int lnoff;

L
Linus Torvalds 已提交
3722 3723
			/* BB fixme add lock for file (srch_info) struct here */
			if (pSMBr->hdr.Flags2 & SMBFLG2_UNICODE)
3724
				psrch_inf->unicode = true;
L
Linus Torvalds 已提交
3725
			else
3726
				psrch_inf->unicode = false;
L
Linus Torvalds 已提交
3727 3728 3729 3730 3731
			response_data = (char *) &pSMBr->hdr.Protocol +
			       le16_to_cpu(pSMBr->t2.ParameterOffset);
			parms = (T2_FNEXT_RSP_PARMS *)response_data;
			response_data = (char *)&pSMBr->hdr.Protocol +
				le16_to_cpu(pSMBr->t2.DataOffset);
S
Steve French 已提交
3732
			if (psrch_inf->smallBuf)
3733 3734 3735 3736
				cifs_small_buf_release(
					psrch_inf->ntwrk_buf_start);
			else
				cifs_buf_release(psrch_inf->ntwrk_buf_start);
L
Linus Torvalds 已提交
3737 3738
			psrch_inf->srch_entries_start = response_data;
			psrch_inf->ntwrk_buf_start = (char *)pSMB;
3739
			psrch_inf->smallBuf = 0;
S
Steve French 已提交
3740
			if (parms->EndofSearch)
3741
				psrch_inf->endOfSearch = true;
L
Linus Torvalds 已提交
3742
			else
3743
				psrch_inf->endOfSearch = false;
3744 3745
			psrch_inf->entries_in_buffer =
						le16_to_cpu(parms->SearchCount);
L
Linus Torvalds 已提交
3746 3747
			psrch_inf->index_of_last_entry +=
				psrch_inf->entries_in_buffer;
3748 3749 3750 3751 3752 3753 3754 3755 3756 3757
			lnoff = le16_to_cpu(parms->LastNameOffset);
			if (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE <
			      lnoff) {
				cERROR(1, ("ignoring corrupt resume name"));
				psrch_inf->last_entry = NULL;
				return rc;
			} else
				psrch_inf->last_entry =
					psrch_inf->srch_entries_start + lnoff;

3758 3759
/*  cFYI(1,("fnxt2 entries in buf %d index_of_last %d",
	    psrch_inf->entries_in_buffer, psrch_inf->index_of_last_entry)); */
L
Linus Torvalds 已提交
3760 3761 3762 3763 3764 3765 3766 3767 3768 3769 3770 3771 3772 3773 3774 3775 3776 3777

			/* BB fixme add unlock here */
		}

	}

	/* BB On error, should we leave previous search buf (and count and
	last entry fields) intact or free the previous one? */

	/* Note: On -EAGAIN error only caller can retry on handle based calls
	since file handle passed in no longer valid */
FNext2_err_exit:
	if (rc != 0)
		cifs_buf_release(pSMB);
	return rc;
}

int
3778 3779
CIFSFindClose(const int xid, struct cifsTconInfo *tcon,
	      const __u16 searchHandle)
L
Linus Torvalds 已提交
3780 3781 3782 3783 3784 3785 3786 3787 3788
{
	int rc = 0;
	FINDCLOSE_REQ *pSMB = NULL;

	cFYI(1, ("In CIFSSMBFindClose"));
	rc = small_smb_init(SMB_COM_FIND_CLOSE2, 1, tcon, (void **)&pSMB);

	/* no sense returning error if session restarted
		as file handle has been closed */
S
Steve French 已提交
3789
	if (rc == -EAGAIN)
L
Linus Torvalds 已提交
3790 3791 3792 3793 3794 3795
		return 0;
	if (rc)
		return rc;

	pSMB->FileID = searchHandle;
	pSMB->ByteCount = 0;
3796
	rc = SendReceiveNoRsp(xid, tcon->ses, (struct smb_hdr *) pSMB, 0);
S
Steve French 已提交
3797
	if (rc)
L
Linus Torvalds 已提交
3798
		cERROR(1, ("Send error in FindClose = %d", rc));
S
Steve French 已提交
3799

3800
	cifs_stats_inc(&tcon->num_fclose);
L
Linus Torvalds 已提交
3801 3802 3803 3804 3805 3806 3807 3808 3809 3810

	/* Since session is dead, search handle closed on server already */
	if (rc == -EAGAIN)
		rc = 0;

	return rc;
}

int
CIFSGetSrvInodeNumber(const int xid, struct cifsTconInfo *tcon,
3811
		      const unsigned char *searchName,
S
Steve French 已提交
3812
		      __u64 *inode_number,
3813
		      const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
3814 3815 3816 3817 3818 3819 3820
{
	int rc = 0;
	TRANSACTION2_QPI_REQ *pSMB = NULL;
	TRANSACTION2_QPI_RSP *pSMBr = NULL;
	int name_len, bytes_returned;
	__u16 params, byte_count;

3821
	cFYI(1, ("In GetSrvInodeNum for %s", searchName));
S
Steve French 已提交
3822
	if (tcon == NULL)
3823
		return -ENODEV;
L
Linus Torvalds 已提交
3824 3825 3826

GetInodeNumberRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
3827
		      (void **) &pSMBr);
L
Linus Torvalds 已提交
3828 3829 3830 3831 3832
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
3833
			cifsConvertToUCS((__le16 *) pSMB->FileName, searchName,
3834
					 PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
3835 3836
		name_len++;     /* trailing null */
		name_len *= 2;
3837
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
3838 3839 3840 3841 3842 3843 3844 3845 3846 3847 3848 3849 3850 3851 3852 3853
		name_len = strnlen(searchName, PATH_MAX);
		name_len++;     /* trailing null */
		strncpy(pSMB->FileName, searchName, name_len);
	}

	params = 2 /* level */  + 4 /* rsrvd */  + name_len /* incl null */ ;
	pSMB->TotalDataCount = 0;
	pSMB->MaxParameterCount = cpu_to_le16(2);
	/* BB find exact max data count below from sess structure BB */
	pSMB->MaxDataCount = cpu_to_le16(4000);
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	pSMB->ParameterOffset = cpu_to_le16(offsetof(
3854
		struct smb_com_transaction2_qpi_req, InformationLevel) - 4);
L
Linus Torvalds 已提交
3855 3856 3857 3858 3859 3860 3861 3862 3863 3864 3865 3866 3867 3868 3869 3870 3871 3872 3873 3874 3875 3876 3877 3878 3879
	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_QUERY_PATH_INFORMATION);
	byte_count = params + 1 /* pad */ ;
	pSMB->TotalParameterCount = cpu_to_le16(params);
	pSMB->ParameterCount = pSMB->TotalParameterCount;
	pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_FILE_INTERNAL_INFO);
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
		(struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
		cFYI(1, ("error %d in QueryInternalInfo", rc));
	} else {
		/* decode response */
		rc = validate_t2((struct smb_t2_rsp *)pSMBr);
		if (rc || (pSMBr->ByteCount < 2))
		/* BB also check enough total bytes returned */
			/* If rc should we check for EOPNOSUPP and
			disable the srvino flag? or in caller? */
			rc = -EIO;      /* bad smb */
3880
		else {
L
Linus Torvalds 已提交
3881 3882
			__u16 data_offset = le16_to_cpu(pSMBr->t2.DataOffset);
			__u16 count = le16_to_cpu(pSMBr->t2.DataCount);
3883
			struct file_internal_info *pfinfo;
L
Linus Torvalds 已提交
3884
			/* BB Do we need a cast or hash here ? */
S
Steve French 已提交
3885
			if (count < 8) {
L
Linus Torvalds 已提交
3886 3887 3888 3889 3890 3891 3892 3893 3894 3895 3896 3897 3898 3899 3900 3901
				cFYI(1, ("Illegal size ret in QryIntrnlInf"));
				rc = -EIO;
				goto GetInodeNumOut;
			}
			pfinfo = (struct file_internal_info *)
				(data_offset + (char *) &pSMBr->hdr.Protocol);
			*inode_number = pfinfo->UniqueId;
		}
	}
GetInodeNumOut:
	cifs_buf_release(pSMB);
	if (rc == -EAGAIN)
		goto GetInodeNumberRetry;
	return rc;
}

3902 3903 3904 3905 3906 3907 3908 3909 3910 3911 3912 3913 3914 3915 3916 3917 3918 3919 3920 3921 3922
/* computes length of UCS string converted to host codepage
 * @src:	UCS string
 * @maxlen:	length of the input string in UCS characters
 * 		(not in bytes)
 *
 * return:	size of input string in host codepage
 */
static int hostlen_fromUCS(const __le16 *src, const int maxlen,
		const struct nls_table *nls_codepage) {
	int i;
	int hostlen = 0;
	char to[4];
	int charlen;
	for (i = 0; (i < maxlen) && src[i]; ++i) {
		charlen = nls_codepage->uni2char(le16_to_cpu(src[i]),
				to, NLS_MAX_CHARSET_SIZE);
		hostlen += charlen > 0 ? charlen : 1;
	}
	return hostlen;
}

3923 3924 3925 3926 3927 3928 3929
/* parses DFS refferal V3 structure
 * caller is responsible for freeing target_nodes
 * returns:
 * 	on success - 0
 *	on failure - errno
 */
static int
3930
parse_DFS_referrals(TRANSACTION2_GET_DFS_REFER_RSP *pSMBr,
3931 3932
		unsigned int *num_of_nodes,
		struct dfs_info3_param **target_nodes,
3933 3934
		const struct nls_table *nls_codepage, int remap,
		const char *searchName)
3935 3936 3937 3938 3939 3940
{
	int i, rc = 0;
	char *data_end;
	bool is_unicode;
	struct dfs_referral_level_3 *ref;

3941 3942 3943 3944
	if (pSMBr->hdr.Flags2 & SMBFLG2_UNICODE)
		is_unicode = true;
	else
		is_unicode = false;
3945 3946 3947 3948 3949 3950
	*num_of_nodes = le16_to_cpu(pSMBr->NumberOfReferrals);

	if (*num_of_nodes < 1) {
		cERROR(1, ("num_referrals: must be at least > 0,"
			"but we get num_referrals = %d\n", *num_of_nodes));
		rc = -EINVAL;
3951
		goto parse_DFS_referrals_exit;
3952 3953 3954
	}

	ref = (struct dfs_referral_level_3 *) &(pSMBr->referrals);
A
Al Viro 已提交
3955
	if (ref->VersionNumber != cpu_to_le16(3)) {
3956
		cERROR(1, ("Referrals of V%d version are not supported,"
A
Al Viro 已提交
3957
			"should be V3", le16_to_cpu(ref->VersionNumber)));
3958
		rc = -EINVAL;
3959
		goto parse_DFS_referrals_exit;
3960 3961 3962 3963 3964 3965 3966 3967 3968 3969 3970 3971 3972 3973 3974
	}

	/* get the upper boundary of the resp buffer */
	data_end = (char *)(&(pSMBr->PathConsumed)) +
				le16_to_cpu(pSMBr->t2.DataCount);

	cFYI(1, ("num_referrals: %d dfs flags: 0x%x ... \n",
			*num_of_nodes,
			le16_to_cpu(pSMBr->DFSFlags)));

	*target_nodes = kzalloc(sizeof(struct dfs_info3_param) *
			*num_of_nodes, GFP_KERNEL);
	if (*target_nodes == NULL) {
		cERROR(1, ("Failed to allocate buffer for target_nodes\n"));
		rc = -ENOMEM;
3975
		goto parse_DFS_referrals_exit;
3976 3977 3978 3979 3980 3981 3982 3983 3984
	}

	/* collect neccessary data from referrals */
	for (i = 0; i < *num_of_nodes; i++) {
		char *temp;
		int max_len;
		struct dfs_info3_param *node = (*target_nodes)+i;

		node->flags = le16_to_cpu(pSMBr->DFSFlags);
3985 3986 3987 3988 3989 3990 3991 3992 3993 3994 3995
		if (is_unicode) {
			__le16 *tmp = kmalloc(strlen(searchName)*2, GFP_KERNEL);
			cifsConvertToUCS((__le16 *) tmp, searchName,
					PATH_MAX, nls_codepage, remap);
			node->path_consumed = hostlen_fromUCS(tmp,
					le16_to_cpu(pSMBr->PathConsumed)/2,
					nls_codepage);
			kfree(tmp);
		} else
			node->path_consumed = le16_to_cpu(pSMBr->PathConsumed);

3996 3997 3998 3999 4000 4001 4002 4003 4004
		node->server_type = le16_to_cpu(ref->ServerType);
		node->ref_flag = le16_to_cpu(ref->ReferralEntryFlags);

		/* copy DfsPath */
		temp = (char *)ref + le16_to_cpu(ref->DfsPathOffset);
		max_len = data_end - temp;
		rc = cifs_strncpy_to_host(&(node->path_name), temp,
					max_len, is_unicode, nls_codepage);
		if (rc)
4005
			goto parse_DFS_referrals_exit;
4006 4007 4008 4009 4010 4011 4012

		/* copy link target UNC */
		temp = (char *)ref + le16_to_cpu(ref->NetworkAddressOffset);
		max_len = data_end - temp;
		rc = cifs_strncpy_to_host(&(node->node_name), temp,
					max_len, is_unicode, nls_codepage);
		if (rc)
4013
			goto parse_DFS_referrals_exit;
4014

A
Al Viro 已提交
4015
		ref += le16_to_cpu(ref->Size);
4016 4017
	}

4018
parse_DFS_referrals_exit:
4019 4020 4021 4022 4023 4024 4025 4026
	if (rc) {
		free_dfs_info_array(*target_nodes, *num_of_nodes);
		*target_nodes = NULL;
		*num_of_nodes = 0;
	}
	return rc;
}

L
Linus Torvalds 已提交
4027 4028 4029
int
CIFSGetDFSRefer(const int xid, struct cifsSesInfo *ses,
		const unsigned char *searchName,
S
Steve French 已提交
4030 4031
		struct dfs_info3_param **target_nodes,
		unsigned int *num_of_nodes,
4032
		const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
4033 4034 4035 4036 4037 4038 4039 4040
{
/* TRANS2_GET_DFS_REFERRAL */
	TRANSACTION2_GET_DFS_REFER_REQ *pSMB = NULL;
	TRANSACTION2_GET_DFS_REFER_RSP *pSMBr = NULL;
	int rc = 0;
	int bytes_returned;
	int name_len;
	__u16 params, byte_count;
S
Steve French 已提交
4041 4042
	*num_of_nodes = 0;
	*target_nodes = NULL;
L
Linus Torvalds 已提交
4043 4044 4045 4046 4047 4048 4049 4050 4051

	cFYI(1, ("In GetDFSRefer the path %s", searchName));
	if (ses == NULL)
		return -ENODEV;
getDFSRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, NULL, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;
4052 4053

	/* server pointer checked in called function,
4054 4055
	but should never be null here anyway */
	pSMB->hdr.Mid = GetNextMid(ses->server);
L
Linus Torvalds 已提交
4056 4057
	pSMB->hdr.Tid = ses->ipc_tid;
	pSMB->hdr.Uid = ses->Suid;
4058
	if (ses->capabilities & CAP_STATUS32)
L
Linus Torvalds 已提交
4059
		pSMB->hdr.Flags2 |= SMBFLG2_ERR_STATUS;
4060
	if (ses->capabilities & CAP_DFS)
L
Linus Torvalds 已提交
4061 4062 4063 4064 4065
		pSMB->hdr.Flags2 |= SMBFLG2_DFS;

	if (ses->capabilities & CAP_UNICODE) {
		pSMB->hdr.Flags2 |= SMBFLG2_UNICODE;
		name_len =
4066
		    cifsConvertToUCS((__le16 *) pSMB->RequestFileName,
4067
				     searchName, PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
4068 4069
		name_len++;	/* trailing null */
		name_len *= 2;
4070
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
4071 4072 4073 4074 4075
		name_len = strnlen(searchName, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->RequestFileName, searchName, name_len);
	}

S
Steve French 已提交
4076 4077
	if (ses->server) {
		if (ses->server->secMode &
S
Steve French 已提交
4078 4079 4080 4081
		   (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
			pSMB->hdr.Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
	}

4082
	pSMB->hdr.Uid = ses->Suid;
S
Steve French 已提交
4083

L
Linus Torvalds 已提交
4084 4085 4086 4087 4088
	params = 2 /* level */  + name_len /*includes null */ ;
	pSMB->TotalDataCount = 0;
	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->MaxParameterCount = 0;
4089 4090
	/* BB find exact max SMB PDU from sess structure BB */
	pSMB->MaxDataCount = cpu_to_le16(4000);
L
Linus Torvalds 已提交
4091 4092 4093 4094 4095 4096
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	pSMB->ParameterOffset = cpu_to_le16(offsetof(
4097
	  struct smb_com_transaction2_get_dfs_refer_req, MaxReferralLevel) - 4);
L
Linus Torvalds 已提交
4098 4099 4100 4101 4102 4103 4104 4105 4106 4107 4108 4109 4110 4111
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_GET_DFS_REFERRAL);
	byte_count = params + 3 /* pad */ ;
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	pSMB->MaxReferralLevel = cpu_to_le16(3);
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);

	rc = SendReceive(xid, ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
		cFYI(1, ("Send error in GetDFSRefer = %d", rc));
S
Steve French 已提交
4112 4113 4114
		goto GetDFSRefExit;
	}
	rc = validate_t2((struct smb_t2_rsp *)pSMBr);
L
Linus Torvalds 已提交
4115

S
Steve French 已提交
4116
	/* BB Also check if enough total bytes returned? */
4117
	if (rc || (pSMBr->ByteCount < 17)) {
S
Steve French 已提交
4118
		rc = -EIO;      /* bad smb */
4119 4120
		goto GetDFSRefExit;
	}
S
Steve French 已提交
4121

4122 4123 4124
	cFYI(1, ("Decoding GetDFSRefer response BCC: %d  Offset %d",
				pSMBr->ByteCount,
				le16_to_cpu(pSMBr->t2.DataOffset)));
L
Linus Torvalds 已提交
4125

4126
	/* parse returned result into more usable form */
4127
	rc = parse_DFS_referrals(pSMBr, num_of_nodes,
4128 4129
				 target_nodes, nls_codepage, remap,
				 searchName);
S
Steve French 已提交
4130

L
Linus Torvalds 已提交
4131
GetDFSRefExit:
4132
	cifs_buf_release(pSMB);
L
Linus Torvalds 已提交
4133 4134 4135 4136 4137 4138 4139

	if (rc == -EAGAIN)
		goto getDFSRetry;

	return rc;
}

4140 4141 4142 4143 4144 4145 4146 4147 4148 4149 4150 4151 4152 4153 4154 4155 4156 4157 4158 4159 4160 4161 4162 4163 4164 4165 4166 4167 4168 4169 4170 4171 4172 4173 4174 4175 4176 4177 4178 4179 4180 4181 4182 4183 4184 4185 4186 4187 4188 4189 4190 4191 4192
/* Query File System Info such as free space to old servers such as Win 9x */
int
SMBOldQFSInfo(const int xid, struct cifsTconInfo *tcon, struct kstatfs *FSData)
{
/* level 0x01 SMB_QUERY_FILE_SYSTEM_INFO */
	TRANSACTION2_QFSI_REQ *pSMB = NULL;
	TRANSACTION2_QFSI_RSP *pSMBr = NULL;
	FILE_SYSTEM_ALLOC_INFO *response_data;
	int rc = 0;
	int bytes_returned = 0;
	__u16 params, byte_count;

	cFYI(1, ("OldQFSInfo"));
oldQFSInfoRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		(void **) &pSMBr);
	if (rc)
		return rc;

	params = 2;     /* level */
	pSMB->TotalDataCount = 0;
	pSMB->MaxParameterCount = cpu_to_le16(2);
	pSMB->MaxDataCount = cpu_to_le16(1000);
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	byte_count = params + 1 /* pad */ ;
	pSMB->TotalParameterCount = cpu_to_le16(params);
	pSMB->ParameterCount = pSMB->TotalParameterCount;
	pSMB->ParameterOffset = cpu_to_le16(offsetof(
	struct smb_com_transaction2_qfsi_req, InformationLevel) - 4);
	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_QUERY_FS_INFORMATION);
	pSMB->InformationLevel = cpu_to_le16(SMB_INFO_ALLOCATION);
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
		(struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
		cFYI(1, ("Send error in QFSInfo = %d", rc));
	} else {                /* decode response */
		rc = validate_t2((struct smb_t2_rsp *)pSMBr);

		if (rc || (pSMBr->ByteCount < 18))
			rc = -EIO;      /* bad smb */
		else {
			__u16 data_offset = le16_to_cpu(pSMBr->t2.DataOffset);
4193
			cFYI(1, ("qfsinf resp BCC: %d  Offset %d",
4194 4195
				 pSMBr->ByteCount, data_offset));

4196
			response_data = (FILE_SYSTEM_ALLOC_INFO *)
4197 4198 4199 4200 4201 4202
				(((char *) &pSMBr->hdr.Protocol) + data_offset);
			FSData->f_bsize =
				le16_to_cpu(response_data->BytesPerSector) *
				le32_to_cpu(response_data->
					SectorsPerAllocationUnit);
			FSData->f_blocks =
4203
			       le32_to_cpu(response_data->TotalAllocationUnits);
4204 4205 4206 4207 4208 4209 4210 4211 4212 4213 4214 4215 4216 4217 4218 4219 4220
			FSData->f_bfree = FSData->f_bavail =
				le32_to_cpu(response_data->FreeAllocationUnits);
			cFYI(1,
			     ("Blocks: %lld  Free: %lld Block size %ld",
			      (unsigned long long)FSData->f_blocks,
			      (unsigned long long)FSData->f_bfree,
			      FSData->f_bsize));
		}
	}
	cifs_buf_release(pSMB);

	if (rc == -EAGAIN)
		goto oldQFSInfoRetry;

	return rc;
}

L
Linus Torvalds 已提交
4221
int
4222
CIFSSMBQFSInfo(const int xid, struct cifsTconInfo *tcon, struct kstatfs *FSData)
L
Linus Torvalds 已提交
4223 4224 4225 4226 4227 4228 4229 4230 4231 4232 4233 4234 4235 4236 4237 4238 4239 4240 4241
{
/* level 0x103 SMB_QUERY_FILE_SYSTEM_INFO */
	TRANSACTION2_QFSI_REQ *pSMB = NULL;
	TRANSACTION2_QFSI_RSP *pSMBr = NULL;
	FILE_SYSTEM_INFO *response_data;
	int rc = 0;
	int bytes_returned = 0;
	__u16 params, byte_count;

	cFYI(1, ("In QFSInfo"));
QFSInfoRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	params = 2;	/* level */
	pSMB->TotalDataCount = 0;
	pSMB->MaxParameterCount = cpu_to_le16(2);
4242
	pSMB->MaxDataCount = cpu_to_le16(1000);
L
Linus Torvalds 已提交
4243 4244 4245 4246 4247 4248 4249 4250 4251
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	byte_count = params + 1 /* pad */ ;
	pSMB->TotalParameterCount = cpu_to_le16(params);
	pSMB->ParameterCount = pSMB->TotalParameterCount;
	pSMB->ParameterOffset = cpu_to_le16(offsetof(
4252
		struct smb_com_transaction2_qfsi_req, InformationLevel) - 4);
L
Linus Torvalds 已提交
4253 4254 4255 4256 4257 4258 4259 4260 4261 4262 4263 4264
	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_QUERY_FS_INFORMATION);
	pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_FS_SIZE_INFO);
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
4265
		cFYI(1, ("Send error in QFSInfo = %d", rc));
L
Linus Torvalds 已提交
4266
	} else {		/* decode response */
4267
		rc = validate_t2((struct smb_t2_rsp *)pSMBr);
L
Linus Torvalds 已提交
4268

4269
		if (rc || (pSMBr->ByteCount < 24))
L
Linus Torvalds 已提交
4270 4271 4272 4273 4274 4275 4276 4277 4278 4279 4280 4281 4282 4283 4284 4285 4286 4287 4288 4289 4290 4291 4292 4293 4294 4295 4296 4297 4298 4299 4300 4301
			rc = -EIO;	/* bad smb */
		else {
			__u16 data_offset = le16_to_cpu(pSMBr->t2.DataOffset);

			response_data =
			    (FILE_SYSTEM_INFO
			     *) (((char *) &pSMBr->hdr.Protocol) +
				 data_offset);
			FSData->f_bsize =
			    le32_to_cpu(response_data->BytesPerSector) *
			    le32_to_cpu(response_data->
					SectorsPerAllocationUnit);
			FSData->f_blocks =
			    le64_to_cpu(response_data->TotalAllocationUnits);
			FSData->f_bfree = FSData->f_bavail =
			    le64_to_cpu(response_data->FreeAllocationUnits);
			cFYI(1,
			     ("Blocks: %lld  Free: %lld Block size %ld",
			      (unsigned long long)FSData->f_blocks,
			      (unsigned long long)FSData->f_bfree,
			      FSData->f_bsize));
		}
	}
	cifs_buf_release(pSMB);

	if (rc == -EAGAIN)
		goto QFSInfoRetry;

	return rc;
}

int
4302
CIFSSMBQFSAttributeInfo(const int xid, struct cifsTconInfo *tcon)
L
Linus Torvalds 已提交
4303 4304 4305 4306 4307 4308 4309 4310 4311 4312 4313 4314 4315 4316 4317 4318 4319 4320 4321
{
/* level 0x105  SMB_QUERY_FILE_SYSTEM_INFO */
	TRANSACTION2_QFSI_REQ *pSMB = NULL;
	TRANSACTION2_QFSI_RSP *pSMBr = NULL;
	FILE_SYSTEM_ATTRIBUTE_INFO *response_data;
	int rc = 0;
	int bytes_returned = 0;
	__u16 params, byte_count;

	cFYI(1, ("In QFSAttributeInfo"));
QFSAttributeRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	params = 2;	/* level */
	pSMB->TotalDataCount = 0;
	pSMB->MaxParameterCount = cpu_to_le16(2);
4322 4323
	/* BB find exact max SMB PDU from sess structure BB */
	pSMB->MaxDataCount = cpu_to_le16(1000);
L
Linus Torvalds 已提交
4324 4325 4326 4327 4328 4329 4330 4331 4332
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	byte_count = params + 1 /* pad */ ;
	pSMB->TotalParameterCount = cpu_to_le16(params);
	pSMB->ParameterCount = pSMB->TotalParameterCount;
	pSMB->ParameterOffset = cpu_to_le16(offsetof(
4333
		struct smb_com_transaction2_qfsi_req, InformationLevel) - 4);
L
Linus Torvalds 已提交
4334 4335 4336 4337 4338 4339 4340 4341 4342 4343 4344 4345 4346 4347 4348 4349
	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_QUERY_FS_INFORMATION);
	pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_FS_ATTRIBUTE_INFO);
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
		cERROR(1, ("Send error in QFSAttributeInfo = %d", rc));
	} else {		/* decode response */
		rc = validate_t2((struct smb_t2_rsp *)pSMBr);

4350 4351
		if (rc || (pSMBr->ByteCount < 13)) {
			/* BB also check if enough bytes returned */
L
Linus Torvalds 已提交
4352 4353 4354 4355 4356 4357 4358 4359
			rc = -EIO;	/* bad smb */
		} else {
			__u16 data_offset = le16_to_cpu(pSMBr->t2.DataOffset);
			response_data =
			    (FILE_SYSTEM_ATTRIBUTE_INFO
			     *) (((char *) &pSMBr->hdr.Protocol) +
				 data_offset);
			memcpy(&tcon->fsAttrInfo, response_data,
4360
			       sizeof(FILE_SYSTEM_ATTRIBUTE_INFO));
L
Linus Torvalds 已提交
4361 4362 4363 4364 4365 4366 4367 4368 4369 4370 4371
		}
	}
	cifs_buf_release(pSMB);

	if (rc == -EAGAIN)
		goto QFSAttributeRetry;

	return rc;
}

int
4372
CIFSSMBQFSDeviceInfo(const int xid, struct cifsTconInfo *tcon)
L
Linus Torvalds 已提交
4373 4374 4375 4376 4377 4378 4379 4380 4381 4382 4383 4384 4385 4386 4387 4388 4389 4390 4391
{
/* level 0x104 SMB_QUERY_FILE_SYSTEM_INFO */
	TRANSACTION2_QFSI_REQ *pSMB = NULL;
	TRANSACTION2_QFSI_RSP *pSMBr = NULL;
	FILE_SYSTEM_DEVICE_INFO *response_data;
	int rc = 0;
	int bytes_returned = 0;
	__u16 params, byte_count;

	cFYI(1, ("In QFSDeviceInfo"));
QFSDeviceRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	params = 2;	/* level */
	pSMB->TotalDataCount = 0;
	pSMB->MaxParameterCount = cpu_to_le16(2);
4392 4393
	/* BB find exact max SMB PDU from sess structure BB */
	pSMB->MaxDataCount = cpu_to_le16(1000);
L
Linus Torvalds 已提交
4394 4395 4396 4397 4398 4399 4400 4401 4402
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	byte_count = params + 1 /* pad */ ;
	pSMB->TotalParameterCount = cpu_to_le16(params);
	pSMB->ParameterCount = pSMB->TotalParameterCount;
	pSMB->ParameterOffset = cpu_to_le16(offsetof(
4403
		struct smb_com_transaction2_qfsi_req, InformationLevel) - 4);
L
Linus Torvalds 已提交
4404 4405 4406 4407 4408 4409 4410 4411 4412 4413 4414 4415 4416 4417 4418 4419 4420

	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_QUERY_FS_INFORMATION);
	pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_FS_DEVICE_INFO);
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
		cFYI(1, ("Send error in QFSDeviceInfo = %d", rc));
	} else {		/* decode response */
		rc = validate_t2((struct smb_t2_rsp *)pSMBr);

S
Steve French 已提交
4421
		if (rc || (pSMBr->ByteCount < sizeof(FILE_SYSTEM_DEVICE_INFO)))
L
Linus Torvalds 已提交
4422 4423 4424 4425
			rc = -EIO;	/* bad smb */
		else {
			__u16 data_offset = le16_to_cpu(pSMBr->t2.DataOffset);
			response_data =
4426 4427
			    (FILE_SYSTEM_DEVICE_INFO *)
				(((char *) &pSMBr->hdr.Protocol) +
L
Linus Torvalds 已提交
4428 4429
				 data_offset);
			memcpy(&tcon->fsDevInfo, response_data,
4430
			       sizeof(FILE_SYSTEM_DEVICE_INFO));
L
Linus Torvalds 已提交
4431 4432 4433 4434 4435 4436 4437 4438 4439 4440 4441
		}
	}
	cifs_buf_release(pSMB);

	if (rc == -EAGAIN)
		goto QFSDeviceRetry;

	return rc;
}

int
4442
CIFSSMBQFSUnixInfo(const int xid, struct cifsTconInfo *tcon)
L
Linus Torvalds 已提交
4443 4444 4445 4446 4447 4448 4449 4450 4451 4452 4453 4454 4455 4456 4457 4458 4459 4460 4461 4462 4463
{
/* level 0x200  SMB_QUERY_CIFS_UNIX_INFO */
	TRANSACTION2_QFSI_REQ *pSMB = NULL;
	TRANSACTION2_QFSI_RSP *pSMBr = NULL;
	FILE_SYSTEM_UNIX_INFO *response_data;
	int rc = 0;
	int bytes_returned = 0;
	__u16 params, byte_count;

	cFYI(1, ("In QFSUnixInfo"));
QFSUnixRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	params = 2;	/* level */
	pSMB->TotalDataCount = 0;
	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->MaxParameterCount = cpu_to_le16(2);
4464 4465
	/* BB find exact max SMB PDU from sess structure BB */
	pSMB->MaxDataCount = cpu_to_le16(100);
L
Linus Torvalds 已提交
4466 4467 4468 4469 4470 4471 4472 4473
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	byte_count = params + 1 /* pad */ ;
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalParameterCount = pSMB->ParameterCount;
4474 4475
	pSMB->ParameterOffset = cpu_to_le16(offsetof(struct
			smb_com_transaction2_qfsi_req, InformationLevel) - 4);
L
Linus Torvalds 已提交
4476 4477 4478 4479 4480 4481 4482 4483 4484 4485 4486 4487 4488 4489 4490 4491 4492 4493 4494 4495 4496 4497 4498
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_QUERY_FS_INFORMATION);
	pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_CIFS_UNIX_INFO);
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
		cERROR(1, ("Send error in QFSUnixInfo = %d", rc));
	} else {		/* decode response */
		rc = validate_t2((struct smb_t2_rsp *)pSMBr);

		if (rc || (pSMBr->ByteCount < 13)) {
			rc = -EIO;	/* bad smb */
		} else {
			__u16 data_offset = le16_to_cpu(pSMBr->t2.DataOffset);
			response_data =
			    (FILE_SYSTEM_UNIX_INFO
			     *) (((char *) &pSMBr->hdr.Protocol) +
				 data_offset);
			memcpy(&tcon->fsUnixInfo, response_data,
4499
			       sizeof(FILE_SYSTEM_UNIX_INFO));
L
Linus Torvalds 已提交
4500 4501 4502 4503 4504 4505 4506 4507 4508 4509 4510
		}
	}
	cifs_buf_release(pSMB);

	if (rc == -EAGAIN)
		goto QFSUnixRetry;


	return rc;
}

4511
int
4512
CIFSSMBSetFSUnixInfo(const int xid, struct cifsTconInfo *tcon, __u64 cap)
4513 4514 4515 4516 4517 4518 4519 4520 4521 4522
{
/* level 0x200  SMB_SET_CIFS_UNIX_INFO */
	TRANSACTION2_SETFSI_REQ *pSMB = NULL;
	TRANSACTION2_SETFSI_RSP *pSMBr = NULL;
	int rc = 0;
	int bytes_returned = 0;
	__u16 params, param_offset, offset, byte_count;

	cFYI(1, ("In SETFSUnixInfo"));
SETFSUnixRetry:
4523
	/* BB switch to small buf init to save memory */
4524 4525 4526 4527 4528 4529 4530 4531 4532 4533 4534
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	params = 4;	/* 2 bytes zero followed by info level. */
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
4535 4536
	param_offset = offsetof(struct smb_com_transaction2_setfsi_req, FileNum)
				- 4;
4537 4538 4539
	offset = param_offset + params;

	pSMB->MaxParameterCount = cpu_to_le16(4);
4540 4541
	/* BB find exact max SMB PDU from sess structure BB */
	pSMB->MaxDataCount = cpu_to_le16(100);
4542 4543 4544 4545 4546 4547 4548 4549 4550 4551 4552 4553 4554 4555 4556 4557 4558 4559 4560 4561 4562 4563 4564 4565 4566 4567 4568 4569 4570 4571
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_SET_FS_INFORMATION);
	byte_count = 1 /* pad */ + params + 12;

	pSMB->DataCount = cpu_to_le16(12);
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalDataCount = pSMB->DataCount;
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	pSMB->ParameterOffset = cpu_to_le16(param_offset);
	pSMB->DataOffset = cpu_to_le16(offset);

	/* Params. */
	pSMB->FileNum = 0;
	pSMB->InformationLevel = cpu_to_le16(SMB_SET_CIFS_UNIX_INFO);

	/* Data. */
	pSMB->ClientUnixMajor = cpu_to_le16(CIFS_UNIX_MAJOR_VERSION);
	pSMB->ClientUnixMinor = cpu_to_le16(CIFS_UNIX_MINOR_VERSION);
	pSMB->ClientUnixCap = cpu_to_le64(cap);

	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
		cERROR(1, ("Send error in SETFSUnixInfo = %d", rc));
	} else {		/* decode response */
		rc = validate_t2((struct smb_t2_rsp *)pSMBr);
S
Steve French 已提交
4572
		if (rc)
4573 4574 4575 4576 4577 4578 4579 4580 4581 4582 4583
			rc = -EIO;	/* bad smb */
	}
	cifs_buf_release(pSMB);

	if (rc == -EAGAIN)
		goto SETFSUnixRetry;

	return rc;
}


L
Linus Torvalds 已提交
4584 4585 4586

int
CIFSSMBQFSPosixInfo(const int xid, struct cifsTconInfo *tcon,
4587
		   struct kstatfs *FSData)
L
Linus Torvalds 已提交
4588 4589 4590 4591 4592 4593 4594 4595 4596 4597 4598 4599 4600 4601 4602 4603 4604 4605 4606 4607 4608
{
/* level 0x201  SMB_QUERY_CIFS_POSIX_INFO */
	TRANSACTION2_QFSI_REQ *pSMB = NULL;
	TRANSACTION2_QFSI_RSP *pSMBr = NULL;
	FILE_SYSTEM_POSIX_INFO *response_data;
	int rc = 0;
	int bytes_returned = 0;
	__u16 params, byte_count;

	cFYI(1, ("In QFSPosixInfo"));
QFSPosixRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	params = 2;	/* level */
	pSMB->TotalDataCount = 0;
	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->MaxParameterCount = cpu_to_le16(2);
4609 4610
	/* BB find exact max SMB PDU from sess structure BB */
	pSMB->MaxDataCount = cpu_to_le16(100);
L
Linus Torvalds 已提交
4611 4612 4613 4614 4615 4616 4617 4618
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	byte_count = params + 1 /* pad */ ;
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalParameterCount = pSMB->ParameterCount;
4619 4620
	pSMB->ParameterOffset = cpu_to_le16(offsetof(struct
			smb_com_transaction2_qfsi_req, InformationLevel) - 4);
L
Linus Torvalds 已提交
4621 4622 4623 4624 4625 4626 4627 4628 4629 4630 4631 4632 4633 4634 4635 4636 4637 4638 4639 4640 4641 4642 4643 4644 4645 4646 4647 4648
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_QUERY_FS_INFORMATION);
	pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_POSIX_FS_INFO);
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
		cFYI(1, ("Send error in QFSUnixInfo = %d", rc));
	} else {		/* decode response */
		rc = validate_t2((struct smb_t2_rsp *)pSMBr);

		if (rc || (pSMBr->ByteCount < 13)) {
			rc = -EIO;	/* bad smb */
		} else {
			__u16 data_offset = le16_to_cpu(pSMBr->t2.DataOffset);
			response_data =
			    (FILE_SYSTEM_POSIX_INFO
			     *) (((char *) &pSMBr->hdr.Protocol) +
				 data_offset);
			FSData->f_bsize =
					le32_to_cpu(response_data->BlockSize);
			FSData->f_blocks =
					le64_to_cpu(response_data->TotalBlocks);
			FSData->f_bfree =
			    le64_to_cpu(response_data->BlocksAvail);
S
Steve French 已提交
4649
			if (response_data->UserBlocksAvail == cpu_to_le64(-1)) {
L
Linus Torvalds 已提交
4650 4651 4652
				FSData->f_bavail = FSData->f_bfree;
			} else {
				FSData->f_bavail =
4653
				    le64_to_cpu(response_data->UserBlocksAvail);
L
Linus Torvalds 已提交
4654
			}
S
Steve French 已提交
4655
			if (response_data->TotalFileNodes != cpu_to_le64(-1))
L
Linus Torvalds 已提交
4656
				FSData->f_files =
4657
				     le64_to_cpu(response_data->TotalFileNodes);
S
Steve French 已提交
4658
			if (response_data->FreeFileNodes != cpu_to_le64(-1))
L
Linus Torvalds 已提交
4659
				FSData->f_ffree =
4660
				      le64_to_cpu(response_data->FreeFileNodes);
L
Linus Torvalds 已提交
4661 4662 4663 4664 4665 4666 4667 4668 4669 4670 4671
		}
	}
	cifs_buf_release(pSMB);

	if (rc == -EAGAIN)
		goto QFSPosixRetry;

	return rc;
}


4672 4673 4674
/* We can not use write of zero bytes trick to
   set file size due to need for large file support.  Also note that
   this SetPathInfo is preferred to SetFileInfo based method in next
L
Linus Torvalds 已提交
4675 4676 4677 4678 4679
   routine which is only needed to work around a sharing violation bug
   in Samba which this routine can run into */

int
CIFSSMBSetEOF(const int xid, struct cifsTconInfo *tcon, const char *fileName,
4680
	      __u64 size, bool SetAllocation,
4681
	      const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
4682 4683 4684 4685 4686 4687 4688 4689 4690 4691 4692 4693 4694 4695 4696 4697 4698 4699
{
	struct smb_com_transaction2_spi_req *pSMB = NULL;
	struct smb_com_transaction2_spi_rsp *pSMBr = NULL;
	struct file_end_of_file_info *parm_data;
	int name_len;
	int rc = 0;
	int bytes_returned = 0;
	__u16 params, byte_count, data_count, param_offset, offset;

	cFYI(1, ("In SetEOF"));
SetEOFRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
4700
		    cifsConvertToUCS((__le16 *) pSMB->FileName, fileName,
4701
				     PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
4702 4703
		name_len++;	/* trailing null */
		name_len *= 2;
4704
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
4705 4706 4707 4708 4709
		name_len = strnlen(fileName, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->FileName, fileName, name_len);
	}
	params = 6 + name_len;
4710
	data_count = sizeof(struct file_end_of_file_info);
L
Linus Torvalds 已提交
4711
	pSMB->MaxParameterCount = cpu_to_le16(2);
4712
	pSMB->MaxDataCount = cpu_to_le16(4100);
L
Linus Torvalds 已提交
4713 4714 4715 4716 4717 4718
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	param_offset = offsetof(struct smb_com_transaction2_spi_req,
4719
				InformationLevel) - 4;
L
Linus Torvalds 已提交
4720
	offset = param_offset + params;
S
Steve French 已提交
4721
	if (SetAllocation) {
4722 4723 4724 4725 4726 4727 4728
		if (tcon->ses->capabilities & CAP_INFOLEVEL_PASSTHRU)
			pSMB->InformationLevel =
				cpu_to_le16(SMB_SET_FILE_ALLOCATION_INFO2);
		else
			pSMB->InformationLevel =
				cpu_to_le16(SMB_SET_FILE_ALLOCATION_INFO);
	} else /* Set File Size */  {
L
Linus Torvalds 已提交
4729 4730
	    if (tcon->ses->capabilities & CAP_INFOLEVEL_PASSTHRU)
		    pSMB->InformationLevel =
4731
				cpu_to_le16(SMB_SET_FILE_END_OF_FILE_INFO2);
L
Linus Torvalds 已提交
4732 4733
	    else
		    pSMB->InformationLevel =
4734
				cpu_to_le16(SMB_SET_FILE_END_OF_FILE_INFO);
L
Linus Torvalds 已提交
4735 4736 4737 4738 4739 4740 4741 4742 4743 4744 4745 4746 4747 4748 4749 4750 4751 4752 4753 4754 4755
	}

	parm_data =
	    (struct file_end_of_file_info *) (((char *) &pSMB->hdr.Protocol) +
				       offset);
	pSMB->ParameterOffset = cpu_to_le16(param_offset);
	pSMB->DataOffset = cpu_to_le16(offset);
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_SET_PATH_INFORMATION);
	byte_count = 3 /* pad */  + params + data_count;
	pSMB->DataCount = cpu_to_le16(data_count);
	pSMB->TotalDataCount = pSMB->DataCount;
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	parm_data->FileSize = cpu_to_le64(size);
	pSMB->ByteCount = cpu_to_le16(byte_count);
	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
S
Steve French 已提交
4756
	if (rc)
L
Linus Torvalds 已提交
4757 4758 4759 4760 4761 4762 4763 4764 4765 4766 4767
		cFYI(1, ("SetPathInfo (file size) returned %d", rc));

	cifs_buf_release(pSMB);

	if (rc == -EAGAIN)
		goto SetEOFRetry;

	return rc;
}

int
4768
CIFSSMBSetFileSize(const int xid, struct cifsTconInfo *tcon, __u64 size,
4769
		   __u16 fid, __u32 pid_of_opener, bool SetAllocation)
L
Linus Torvalds 已提交
4770 4771 4772 4773 4774 4775 4776 4777 4778
{
	struct smb_com_transaction2_sfi_req *pSMB  = NULL;
	char *data_offset;
	struct file_end_of_file_info *parm_data;
	int rc = 0;
	__u16 params, param_offset, offset, byte_count, count;

	cFYI(1, ("SetFileSize (via SetFileInfo) %lld",
			(long long)size));
4779 4780
	rc = small_smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB);

L
Linus Torvalds 已提交
4781 4782 4783 4784 4785
	if (rc)
		return rc;

	pSMB->hdr.Pid = cpu_to_le16((__u16)pid_of_opener);
	pSMB->hdr.PidHigh = cpu_to_le16((__u16)(pid_of_opener >> 16));
4786

L
Linus Torvalds 已提交
4787 4788 4789 4790 4791 4792 4793 4794 4795
	params = 6;
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	param_offset = offsetof(struct smb_com_transaction2_sfi_req, Fid) - 4;
	offset = param_offset + params;

4796
	data_offset = (char *) (&pSMB->hdr.Protocol) + offset;
L
Linus Torvalds 已提交
4797 4798 4799

	count = sizeof(struct file_end_of_file_info);
	pSMB->MaxParameterCount = cpu_to_le16(2);
4800 4801
	/* BB find exact max SMB PDU from sess structure BB */
	pSMB->MaxDataCount = cpu_to_le16(1000);
L
Linus Torvalds 已提交
4802 4803 4804 4805 4806 4807 4808 4809 4810 4811
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_SET_FILE_INFORMATION);
	byte_count = 3 /* pad */  + params + count;
	pSMB->DataCount = cpu_to_le16(count);
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalDataCount = pSMB->DataCount;
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	pSMB->ParameterOffset = cpu_to_le16(param_offset);
	parm_data =
4812 4813
		(struct file_end_of_file_info *) (((char *) &pSMB->hdr.Protocol)
				+ offset);
L
Linus Torvalds 已提交
4814 4815 4816
	pSMB->DataOffset = cpu_to_le16(offset);
	parm_data->FileSize = cpu_to_le64(size);
	pSMB->Fid = fid;
S
Steve French 已提交
4817
	if (SetAllocation) {
L
Linus Torvalds 已提交
4818 4819 4820 4821 4822 4823
		if (tcon->ses->capabilities & CAP_INFOLEVEL_PASSTHRU)
			pSMB->InformationLevel =
				cpu_to_le16(SMB_SET_FILE_ALLOCATION_INFO2);
		else
			pSMB->InformationLevel =
				cpu_to_le16(SMB_SET_FILE_ALLOCATION_INFO);
4824
	} else /* Set File Size */  {
L
Linus Torvalds 已提交
4825 4826
	    if (tcon->ses->capabilities & CAP_INFOLEVEL_PASSTHRU)
		    pSMB->InformationLevel =
4827
				cpu_to_le16(SMB_SET_FILE_END_OF_FILE_INFO2);
L
Linus Torvalds 已提交
4828 4829
	    else
		    pSMB->InformationLevel =
4830
				cpu_to_le16(SMB_SET_FILE_END_OF_FILE_INFO);
L
Linus Torvalds 已提交
4831 4832 4833 4834
	}
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);
4835
	rc = SendReceiveNoRsp(xid, tcon->ses, (struct smb_hdr *) pSMB, 0);
L
Linus Torvalds 已提交
4836 4837 4838 4839 4840 4841
	if (rc) {
		cFYI(1,
		     ("Send error in SetFileInfo (SetFileSize) = %d",
		      rc));
	}

4842
	/* Note: On -EAGAIN error only caller can retry on handle based calls
L
Linus Torvalds 已提交
4843 4844 4845 4846 4847
		since file handle passed in no longer valid */

	return rc;
}

4848
/* Some legacy servers such as NT4 require that the file times be set on
L
Linus Torvalds 已提交
4849 4850 4851 4852 4853 4854
   an open handle, rather than by pathname - this is awkward due to
   potential access conflicts on the open, but it is unavoidable for these
   old servers since the only other choice is to go from 100 nanosecond DCE
   time and resort to the original setpathinfo level which takes the ancient
   DOS time format with 2 second granularity */
int
4855 4856
CIFSSMBSetFileInfo(const int xid, struct cifsTconInfo *tcon,
		    const FILE_BASIC_INFO *data, __u16 fid, __u32 pid_of_opener)
L
Linus Torvalds 已提交
4857 4858 4859 4860 4861 4862 4863
{
	struct smb_com_transaction2_sfi_req *pSMB  = NULL;
	char *data_offset;
	int rc = 0;
	__u16 params, param_offset, offset, byte_count, count;

	cFYI(1, ("Set Times (via SetFileInfo)"));
4864 4865
	rc = small_smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB);

L
Linus Torvalds 已提交
4866 4867 4868
	if (rc)
		return rc;

4869 4870
	pSMB->hdr.Pid = cpu_to_le16((__u16)pid_of_opener);
	pSMB->hdr.PidHigh = cpu_to_le16((__u16)(pid_of_opener >> 16));
4871

L
Linus Torvalds 已提交
4872 4873 4874 4875 4876 4877 4878 4879 4880
	params = 6;
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	param_offset = offsetof(struct smb_com_transaction2_sfi_req, Fid) - 4;
	offset = param_offset + params;

4881
	data_offset = (char *) (&pSMB->hdr.Protocol) + offset;
L
Linus Torvalds 已提交
4882

4883
	count = sizeof(FILE_BASIC_INFO);
L
Linus Torvalds 已提交
4884
	pSMB->MaxParameterCount = cpu_to_le16(2);
4885 4886
	/* BB find max SMB PDU from sess */
	pSMB->MaxDataCount = cpu_to_le16(1000);
L
Linus Torvalds 已提交
4887 4888 4889 4890 4891 4892 4893 4894 4895 4896 4897 4898 4899 4900 4901 4902 4903 4904
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_SET_FILE_INFORMATION);
	byte_count = 3 /* pad */  + params + count;
	pSMB->DataCount = cpu_to_le16(count);
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalDataCount = pSMB->DataCount;
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	pSMB->ParameterOffset = cpu_to_le16(param_offset);
	pSMB->DataOffset = cpu_to_le16(offset);
	pSMB->Fid = fid;
	if (tcon->ses->capabilities & CAP_INFOLEVEL_PASSTHRU)
		pSMB->InformationLevel = cpu_to_le16(SMB_SET_FILE_BASIC_INFO2);
	else
		pSMB->InformationLevel = cpu_to_le16(SMB_SET_FILE_BASIC_INFO);
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);
4905
	memcpy(data_offset, data, sizeof(FILE_BASIC_INFO));
4906
	rc = SendReceiveNoRsp(xid, tcon->ses, (struct smb_hdr *) pSMB, 0);
S
Steve French 已提交
4907
	if (rc)
4908
		cFYI(1, ("Send error in Set Time (SetFileInfo) = %d", rc));
L
Linus Torvalds 已提交
4909

4910
	/* Note: On -EAGAIN error only caller can retry on handle based calls
L
Linus Torvalds 已提交
4911 4912 4913 4914 4915
		since file handle passed in no longer valid */

	return rc;
}

4916 4917 4918 4919 4920 4921 4922 4923 4924 4925 4926 4927 4928 4929 4930 4931 4932 4933 4934 4935 4936 4937 4938 4939 4940 4941 4942 4943 4944 4945 4946 4947 4948 4949 4950 4951 4952 4953 4954 4955 4956 4957 4958 4959 4960 4961 4962 4963 4964 4965 4966 4967 4968 4969 4970
int
CIFSSMBSetFileDisposition(const int xid, struct cifsTconInfo *tcon,
			  bool delete_file, __u16 fid, __u32 pid_of_opener)
{
	struct smb_com_transaction2_sfi_req *pSMB  = NULL;
	char *data_offset;
	int rc = 0;
	__u16 params, param_offset, offset, byte_count, count;

	cFYI(1, ("Set File Disposition (via SetFileInfo)"));
	rc = small_smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB);

	if (rc)
		return rc;

	pSMB->hdr.Pid = cpu_to_le16((__u16)pid_of_opener);
	pSMB->hdr.PidHigh = cpu_to_le16((__u16)(pid_of_opener >> 16));

	params = 6;
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	param_offset = offsetof(struct smb_com_transaction2_sfi_req, Fid) - 4;
	offset = param_offset + params;

	data_offset = (char *) (&pSMB->hdr.Protocol) + offset;

	count = 1;
	pSMB->MaxParameterCount = cpu_to_le16(2);
	/* BB find max SMB PDU from sess */
	pSMB->MaxDataCount = cpu_to_le16(1000);
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_SET_FILE_INFORMATION);
	byte_count = 3 /* pad */  + params + count;
	pSMB->DataCount = cpu_to_le16(count);
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalDataCount = pSMB->DataCount;
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	pSMB->ParameterOffset = cpu_to_le16(param_offset);
	pSMB->DataOffset = cpu_to_le16(offset);
	pSMB->Fid = fid;
	pSMB->InformationLevel = cpu_to_le16(SMB_SET_FILE_DISPOSITION_INFO);
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);
	*data_offset = delete_file ? 1 : 0;
	rc = SendReceiveNoRsp(xid, tcon->ses, (struct smb_hdr *) pSMB, 0);
	if (rc)
		cFYI(1, ("Send error in SetFileDisposition = %d", rc));

	return rc;
}
L
Linus Torvalds 已提交
4971 4972

int
4973 4974 4975
CIFSSMBSetPathInfo(const int xid, struct cifsTconInfo *tcon,
		   const char *fileName, const FILE_BASIC_INFO *data,
		   const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
4976 4977 4978 4979 4980 4981 4982 4983 4984 4985 4986 4987 4988 4989 4990 4991 4992 4993 4994
{
	TRANSACTION2_SPI_REQ *pSMB = NULL;
	TRANSACTION2_SPI_RSP *pSMBr = NULL;
	int name_len;
	int rc = 0;
	int bytes_returned = 0;
	char *data_offset;
	__u16 params, param_offset, offset, byte_count, count;

	cFYI(1, ("In SetTimes"));

SetTimesRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
4995
		    cifsConvertToUCS((__le16 *) pSMB->FileName, fileName,
4996
				     PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
4997 4998
		name_len++;	/* trailing null */
		name_len *= 2;
4999
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
5000 5001 5002 5003 5004 5005
		name_len = strnlen(fileName, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->FileName, fileName, name_len);
	}

	params = 6 + name_len;
5006
	count = sizeof(FILE_BASIC_INFO);
L
Linus Torvalds 已提交
5007
	pSMB->MaxParameterCount = cpu_to_le16(2);
5008 5009
	/* BB find max SMB PDU from sess structure BB */
	pSMB->MaxDataCount = cpu_to_le16(1000);
L
Linus Torvalds 已提交
5010 5011 5012 5013 5014 5015
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	param_offset = offsetof(struct smb_com_transaction2_spi_req,
5016
				InformationLevel) - 4;
L
Linus Torvalds 已提交
5017 5018 5019 5020 5021 5022 5023 5024 5025 5026 5027 5028 5029 5030 5031 5032 5033 5034 5035
	offset = param_offset + params;
	data_offset = (char *) (&pSMB->hdr.Protocol) + offset;
	pSMB->ParameterOffset = cpu_to_le16(param_offset);
	pSMB->DataOffset = cpu_to_le16(offset);
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_SET_PATH_INFORMATION);
	byte_count = 3 /* pad */  + params + count;

	pSMB->DataCount = cpu_to_le16(count);
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalDataCount = pSMB->DataCount;
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	if (tcon->ses->capabilities & CAP_INFOLEVEL_PASSTHRU)
		pSMB->InformationLevel = cpu_to_le16(SMB_SET_FILE_BASIC_INFO2);
	else
		pSMB->InformationLevel = cpu_to_le16(SMB_SET_FILE_BASIC_INFO);
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
5036
	memcpy(data_offset, data, sizeof(FILE_BASIC_INFO));
L
Linus Torvalds 已提交
5037 5038 5039
	pSMB->ByteCount = cpu_to_le16(byte_count);
	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
S
Steve French 已提交
5040
	if (rc)
L
Linus Torvalds 已提交
5041 5042 5043 5044 5045 5046 5047 5048 5049 5050 5051 5052 5053 5054 5055 5056 5057 5058 5059 5060 5061 5062 5063 5064 5065 5066 5067 5068 5069 5070 5071 5072 5073 5074 5075
		cFYI(1, ("SetPathInfo (times) returned %d", rc));

	cifs_buf_release(pSMB);

	if (rc == -EAGAIN)
		goto SetTimesRetry;

	return rc;
}

/* Can not be used to set time stamps yet (due to old DOS time format) */
/* Can be used to set attributes */
#if 0  /* Possibly not needed - since it turns out that strangely NT4 has a bug
	  handling it anyway and NT4 was what we thought it would be needed for
	  Do not delete it until we prove whether needed for Win9x though */
int
CIFSSMBSetAttrLegacy(int xid, struct cifsTconInfo *tcon, char *fileName,
		__u16 dos_attrs, const struct nls_table *nls_codepage)
{
	SETATTR_REQ *pSMB = NULL;
	SETATTR_RSP *pSMBr = NULL;
	int rc = 0;
	int bytes_returned;
	int name_len;

	cFYI(1, ("In SetAttrLegacy"));

SetAttrLgcyRetry:
	rc = smb_init(SMB_COM_SETATTR, 8, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
5076
			ConvertToUCS((__le16 *) pSMB->fileName, fileName,
L
Linus Torvalds 已提交
5077 5078 5079
				PATH_MAX, nls_codepage);
		name_len++;     /* trailing null */
		name_len *= 2;
5080
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
5081 5082 5083 5084 5085 5086 5087 5088 5089 5090
		name_len = strnlen(fileName, PATH_MAX);
		name_len++;     /* trailing null */
		strncpy(pSMB->fileName, fileName, name_len);
	}
	pSMB->attr = cpu_to_le16(dos_attrs);
	pSMB->BufferFormat = 0x04;
	pSMB->hdr.smb_buf_length += name_len + 1;
	pSMB->ByteCount = cpu_to_le16(name_len + 1);
	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
S
Steve French 已提交
5091
	if (rc)
L
Linus Torvalds 已提交
5092 5093 5094 5095 5096 5097 5098 5099 5100 5101 5102 5103
		cFYI(1, ("Error in LegacySetAttr = %d", rc));

	cifs_buf_release(pSMB);

	if (rc == -EAGAIN)
		goto SetAttrLgcyRetry;

	return rc;
}
#endif /* temporarily unneeded SetAttr legacy function */

int
5104
CIFSSMBUnixSetInfo(const int xid, struct cifsTconInfo *tcon, char *fileName,
S
Steve French 已提交
5105
		   const struct cifs_unix_set_info_args *args,
5106
		   const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
5107 5108 5109 5110 5111 5112 5113 5114
{
	TRANSACTION2_SPI_REQ *pSMB = NULL;
	TRANSACTION2_SPI_RSP *pSMBr = NULL;
	int name_len;
	int rc = 0;
	int bytes_returned = 0;
	FILE_UNIX_BASIC_INFO *data_offset;
	__u16 params, param_offset, offset, count, byte_count;
5115
	__u64 mode = args->mode;
L
Linus Torvalds 已提交
5116 5117 5118 5119 5120 5121 5122 5123 5124 5125

	cFYI(1, ("In SetUID/GID/Mode"));
setPermsRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
5126
		    cifsConvertToUCS((__le16 *) pSMB->FileName, fileName,
5127
				     PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
5128 5129
		name_len++;	/* trailing null */
		name_len *= 2;
5130
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
5131 5132 5133 5134 5135 5136
		name_len = strnlen(fileName, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->FileName, fileName, name_len);
	}

	params = 6 + name_len;
5137
	count = sizeof(FILE_UNIX_BASIC_INFO);
L
Linus Torvalds 已提交
5138
	pSMB->MaxParameterCount = cpu_to_le16(2);
5139 5140
	/* BB find max SMB PDU from sess structure BB */
	pSMB->MaxDataCount = cpu_to_le16(1000);
L
Linus Torvalds 已提交
5141 5142 5143 5144 5145 5146
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	param_offset = offsetof(struct smb_com_transaction2_spi_req,
5147
				InformationLevel) - 4;
L
Linus Torvalds 已提交
5148 5149 5150 5151 5152 5153 5154 5155 5156 5157 5158 5159 5160 5161 5162 5163 5164 5165
	offset = param_offset + params;
	data_offset =
	    (FILE_UNIX_BASIC_INFO *) ((char *) &pSMB->hdr.Protocol +
				      offset);
	memset(data_offset, 0, count);
	pSMB->DataOffset = cpu_to_le16(offset);
	pSMB->ParameterOffset = cpu_to_le16(param_offset);
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_SET_PATH_INFORMATION);
	byte_count = 3 /* pad */  + params + count;
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->DataCount = cpu_to_le16(count);
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	pSMB->TotalDataCount = pSMB->DataCount;
	pSMB->InformationLevel = cpu_to_le16(SMB_SET_FILE_UNIX_BASIC);
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
5166 5167 5168 5169
	/* Samba server ignores set of file size to zero due to bugs in some
	older clients, but we should be precise - we use SetFileSize to
	set file size and do not want to truncate file size to zero
	accidently as happened on one Samba server beta by putting
5170
	zero instead of -1 here */
5171 5172 5173 5174 5175 5176 5177
	data_offset->EndOfFile = cpu_to_le64(NO_CHANGE_64);
	data_offset->NumOfBytes = cpu_to_le64(NO_CHANGE_64);
	data_offset->LastStatusChange = cpu_to_le64(args->ctime);
	data_offset->LastAccessTime = cpu_to_le64(args->atime);
	data_offset->LastModificationTime = cpu_to_le64(args->mtime);
	data_offset->Uid = cpu_to_le64(args->uid);
	data_offset->Gid = cpu_to_le64(args->gid);
L
Linus Torvalds 已提交
5178
	/* better to leave device as zero when it is  */
5179 5180
	data_offset->DevMajor = cpu_to_le64(MAJOR(args->device));
	data_offset->DevMinor = cpu_to_le64(MINOR(args->device));
L
Linus Torvalds 已提交
5181
	data_offset->Permissions = cpu_to_le64(mode);
5182

S
Steve French 已提交
5183
	if (S_ISREG(mode))
L
Linus Torvalds 已提交
5184
		data_offset->Type = cpu_to_le32(UNIX_FILE);
S
Steve French 已提交
5185
	else if (S_ISDIR(mode))
L
Linus Torvalds 已提交
5186
		data_offset->Type = cpu_to_le32(UNIX_DIR);
S
Steve French 已提交
5187
	else if (S_ISLNK(mode))
L
Linus Torvalds 已提交
5188
		data_offset->Type = cpu_to_le32(UNIX_SYMLINK);
S
Steve French 已提交
5189
	else if (S_ISCHR(mode))
L
Linus Torvalds 已提交
5190
		data_offset->Type = cpu_to_le32(UNIX_CHARDEV);
S
Steve French 已提交
5191
	else if (S_ISBLK(mode))
L
Linus Torvalds 已提交
5192
		data_offset->Type = cpu_to_le32(UNIX_BLOCKDEV);
S
Steve French 已提交
5193
	else if (S_ISFIFO(mode))
L
Linus Torvalds 已提交
5194
		data_offset->Type = cpu_to_le32(UNIX_FIFO);
S
Steve French 已提交
5195
	else if (S_ISSOCK(mode))
L
Linus Torvalds 已提交
5196 5197 5198 5199 5200 5201
		data_offset->Type = cpu_to_le32(UNIX_SOCKET);


	pSMB->ByteCount = cpu_to_le16(byte_count);
	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
S
Steve French 已提交
5202
	if (rc)
L
Linus Torvalds 已提交
5203 5204
		cFYI(1, ("SetPathInfo (perms) returned %d", rc));

5205
	cifs_buf_release(pSMB);
L
Linus Torvalds 已提交
5206 5207 5208 5209 5210
	if (rc == -EAGAIN)
		goto setPermsRetry;
	return rc;
}

5211
int CIFSSMBNotify(const int xid, struct cifsTconInfo *tcon,
5212
		  const int notify_subdirs, const __u16 netfid,
5213
		  __u32 filter, struct file *pfile, int multishot,
5214
		  const struct nls_table *nls_codepage)
L
Linus Torvalds 已提交
5215 5216
{
	int rc = 0;
5217 5218
	struct smb_com_transaction_change_notify_req *pSMB = NULL;
	struct smb_com_ntransaction_change_notify_rsp *pSMBr = NULL;
5219
	struct dir_notify_req *dnotify_req;
L
Linus Torvalds 已提交
5220 5221
	int bytes_returned;

5222
	cFYI(1, ("In CIFSSMBNotify for file handle %d", (int)netfid));
L
Linus Torvalds 已提交
5223
	rc = smb_init(SMB_COM_NT_TRANSACT, 23, tcon, (void **) &pSMB,
5224
		      (void **) &pSMBr);
L
Linus Torvalds 已提交
5225 5226 5227 5228 5229 5230 5231 5232
	if (rc)
		return rc;

	pSMB->TotalParameterCount = 0 ;
	pSMB->TotalDataCount = 0;
	pSMB->MaxParameterCount = cpu_to_le32(2);
	/* BB find exact data count max from sess structure BB */
	pSMB->MaxDataCount = 0; /* same in little endian or be */
5233 5234 5235 5236
/* BB VERIFY verify which is correct for above BB */
	pSMB->MaxDataCount = cpu_to_le32((tcon->ses->server->maxBuf -
					     MAX_CIFS_HDR_SIZE) & 0xFFFFFF00);

L
Linus Torvalds 已提交
5237 5238 5239 5240 5241 5242 5243 5244
	pSMB->MaxSetupCount = 4;
	pSMB->Reserved = 0;
	pSMB->ParameterOffset = 0;
	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->SetupCount = 4; /* single byte does not need le conversion */
	pSMB->SubCommand = cpu_to_le16(NT_TRANSACT_NOTIFY_CHANGE);
	pSMB->ParameterCount = pSMB->TotalParameterCount;
S
Steve French 已提交
5245
	if (notify_subdirs)
L
Linus Torvalds 已提交
5246 5247 5248 5249 5250 5251 5252
		pSMB->WatchTree = 1; /* one byte - no le conversion needed */
	pSMB->Reserved2 = 0;
	pSMB->CompletionFilter = cpu_to_le32(filter);
	pSMB->Fid = netfid; /* file handle always le */
	pSMB->ByteCount = 0;

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
5253 5254
			 (struct smb_hdr *)pSMBr, &bytes_returned,
			 CIFS_ASYNC_OP);
L
Linus Torvalds 已提交
5255 5256
	if (rc) {
		cFYI(1, ("Error in Notify = %d", rc));
5257 5258
	} else {
		/* Add file to outstanding requests */
5259
		/* BB change to kmem cache alloc */
5260
		dnotify_req = kmalloc(
5261 5262
						sizeof(struct dir_notify_req),
						 GFP_KERNEL);
S
Steve French 已提交
5263
		if (dnotify_req) {
5264 5265 5266 5267 5268 5269 5270 5271 5272 5273
			dnotify_req->Pid = pSMB->hdr.Pid;
			dnotify_req->PidHigh = pSMB->hdr.PidHigh;
			dnotify_req->Mid = pSMB->hdr.Mid;
			dnotify_req->Tid = pSMB->hdr.Tid;
			dnotify_req->Uid = pSMB->hdr.Uid;
			dnotify_req->netfid = netfid;
			dnotify_req->pfile = pfile;
			dnotify_req->filter = filter;
			dnotify_req->multishot = multishot;
			spin_lock(&GlobalMid_Lock);
5274
			list_add_tail(&dnotify_req->lhead,
5275 5276
					&GlobalDnotifyReqList);
			spin_unlock(&GlobalMid_Lock);
5277
		} else
5278
			rc = -ENOMEM;
L
Linus Torvalds 已提交
5279 5280
	}
	cifs_buf_release(pSMB);
5281
	return rc;
L
Linus Torvalds 已提交
5282 5283 5284 5285 5286
}
#ifdef CONFIG_CIFS_XATTR
ssize_t
CIFSSMBQAllEAs(const int xid, struct cifsTconInfo *tcon,
		 const unsigned char *searchName,
5287
		 char *EAData, size_t buf_size,
5288
		 const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
5289 5290 5291 5292 5293 5294 5295
{
		/* BB assumes one setup word */
	TRANSACTION2_QPI_REQ *pSMB = NULL;
	TRANSACTION2_QPI_RSP *pSMBr = NULL;
	int rc = 0;
	int bytes_returned;
	int name_len;
5296 5297
	struct fea *temp_fea;
	char *temp_ptr;
L
Linus Torvalds 已提交
5298 5299 5300 5301 5302 5303 5304 5305 5306 5307 5308
	__u16 params, byte_count;

	cFYI(1, ("In Query All EAs path %s", searchName));
QAllEAsRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
5309
		    cifsConvertToUCS((__le16 *) pSMB->FileName, searchName,
5310
				     PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
5311 5312 5313 5314 5315 5316 5317 5318
		name_len++;	/* trailing null */
		name_len *= 2;
	} else {	/* BB improve the check for buffer overruns BB */
		name_len = strnlen(searchName, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->FileName, searchName, name_len);
	}

5319
	params = 2 /* level */ + 4 /* reserved */ + name_len /* includes NUL */;
L
Linus Torvalds 已提交
5320 5321
	pSMB->TotalDataCount = 0;
	pSMB->MaxParameterCount = cpu_to_le16(2);
5322 5323
	/* BB find exact max SMB PDU from sess structure BB */
	pSMB->MaxDataCount = cpu_to_le16(4000);
L
Linus Torvalds 已提交
5324 5325 5326 5327 5328 5329
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	pSMB->ParameterOffset = cpu_to_le16(offsetof(
5330
	struct smb_com_transaction2_qpi_req, InformationLevel) - 4);
L
Linus Torvalds 已提交
5331 5332 5333 5334 5335 5336 5337 5338 5339 5340 5341 5342 5343 5344 5345 5346 5347 5348 5349 5350 5351 5352 5353
	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_QUERY_PATH_INFORMATION);
	byte_count = params + 1 /* pad */ ;
	pSMB->TotalParameterCount = cpu_to_le16(params);
	pSMB->ParameterCount = pSMB->TotalParameterCount;
	pSMB->InformationLevel = cpu_to_le16(SMB_INFO_QUERY_ALL_EAS);
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
		cFYI(1, ("Send error in QueryAllEAs = %d", rc));
	} else {		/* decode response */
		rc = validate_t2((struct smb_t2_rsp *)pSMBr);

		/* BB also check enough total bytes returned */
		/* BB we need to improve the validity checking
		of these trans2 responses */
5354
		if (rc || (pSMBr->ByteCount < 4))
L
Linus Torvalds 已提交
5355 5356 5357 5358 5359 5360 5361 5362 5363 5364 5365 5366
			rc = -EIO;	/* bad smb */
	   /* else if (pFindData){
			memcpy((char *) pFindData,
			       (char *) &pSMBr->hdr.Protocol +
			       data_offset, kl);
		}*/ else {
			/* check that length of list is not more than bcc */
			/* check that each entry does not go beyond length
			   of list */
			/* check that each element of each entry does not
			   go beyond end of list */
			__u16 data_offset = le16_to_cpu(pSMBr->t2.DataOffset);
5367
			struct fealist *ea_response_data;
L
Linus Torvalds 已提交
5368 5369
			rc = 0;
			/* validate_trans2_offsets() */
S
Steve French 已提交
5370
			/* BB check if start of smb + data_offset > &bcc+ bcc */
L
Linus Torvalds 已提交
5371 5372 5373 5374
			ea_response_data = (struct fealist *)
				(((char *) &pSMBr->hdr.Protocol) +
				data_offset);
			name_len = le32_to_cpu(ea_response_data->list_len);
5375
			cFYI(1, ("ea length %d", name_len));
S
Steve French 已提交
5376
			if (name_len <= 8) {
L
Linus Torvalds 已提交
5377
			/* returned EA size zeroed at top of function */
5378
				cFYI(1, ("empty EA list returned from server"));
L
Linus Torvalds 已提交
5379 5380 5381 5382 5383
			} else {
				/* account for ea list len */
				name_len -= 4;
				temp_fea = ea_response_data->list;
				temp_ptr = (char *)temp_fea;
5384
				while (name_len > 0) {
L
Linus Torvalds 已提交
5385 5386 5387 5388 5389
					__u16 value_len;
					name_len -= 4;
					temp_ptr += 4;
					rc += temp_fea->name_len;
				/* account for prefix user. and trailing null */
S
Steve French 已提交
5390 5391
					rc = rc + 5 + 1;
					if (rc < (int)buf_size) {
5392 5393 5394 5395 5396
						memcpy(EAData, "user.", 5);
						EAData += 5;
						memcpy(EAData, temp_ptr,
						       temp_fea->name_len);
						EAData += temp_fea->name_len;
L
Linus Torvalds 已提交
5397 5398 5399
						/* null terminate name */
						*EAData = 0;
						EAData = EAData + 1;
S
Steve French 已提交
5400
					} else if (buf_size == 0) {
L
Linus Torvalds 已提交
5401 5402 5403 5404 5405 5406 5407 5408 5409 5410 5411
						/* skip copy - calc size only */
					} else {
						/* stop before overrun buffer */
						rc = -ERANGE;
						break;
					}
					name_len -= temp_fea->name_len;
					temp_ptr += temp_fea->name_len;
					/* account for trailing null */
					name_len--;
					temp_ptr++;
5412 5413
					value_len =
					      le16_to_cpu(temp_fea->value_len);
L
Linus Torvalds 已提交
5414 5415
					name_len -= value_len;
					temp_ptr += value_len;
5416 5417 5418 5419 5420
					/* BB check that temp_ptr is still
					      within the SMB BB*/

					/* no trailing null to account for
					   in value len */
L
Linus Torvalds 已提交
5421 5422 5423 5424 5425 5426
					/* go on to next EA */
					temp_fea = (struct fea *)temp_ptr;
				}
			}
		}
	}
5427
	cifs_buf_release(pSMB);
L
Linus Torvalds 已提交
5428 5429 5430 5431 5432 5433
	if (rc == -EAGAIN)
		goto QAllEAsRetry;

	return (ssize_t)rc;
}

5434 5435 5436
ssize_t CIFSSMBQueryEA(const int xid, struct cifsTconInfo *tcon,
		const unsigned char *searchName, const unsigned char *ea_name,
		unsigned char *ea_value, size_t buf_size,
5437
		const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
5438 5439 5440 5441 5442 5443
{
	TRANSACTION2_QPI_REQ *pSMB = NULL;
	TRANSACTION2_QPI_RSP *pSMBr = NULL;
	int rc = 0;
	int bytes_returned;
	int name_len;
5444 5445
	struct fea *temp_fea;
	char *temp_ptr;
L
Linus Torvalds 已提交
5446 5447 5448 5449 5450 5451 5452 5453 5454 5455 5456
	__u16 params, byte_count;

	cFYI(1, ("In Query EA path %s", searchName));
QEARetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
5457
		    cifsConvertToUCS((__le16 *) pSMB->FileName, searchName,
5458
				     PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
5459 5460 5461 5462 5463 5464 5465 5466
		name_len++;	/* trailing null */
		name_len *= 2;
	} else {	/* BB improve the check for buffer overruns BB */
		name_len = strnlen(searchName, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->FileName, searchName, name_len);
	}

5467
	params = 2 /* level */ + 4 /* reserved */ + name_len /* includes NUL */;
L
Linus Torvalds 已提交
5468 5469
	pSMB->TotalDataCount = 0;
	pSMB->MaxParameterCount = cpu_to_le16(2);
5470 5471
	/* BB find exact max SMB PDU from sess structure BB */
	pSMB->MaxDataCount = cpu_to_le16(4000);
L
Linus Torvalds 已提交
5472 5473 5474 5475 5476 5477
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	pSMB->ParameterOffset = cpu_to_le16(offsetof(
5478
		struct smb_com_transaction2_qpi_req, InformationLevel) - 4);
L
Linus Torvalds 已提交
5479 5480 5481 5482 5483 5484 5485 5486 5487 5488 5489 5490 5491 5492 5493 5494 5495 5496 5497 5498 5499 5500 5501
	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_QUERY_PATH_INFORMATION);
	byte_count = params + 1 /* pad */ ;
	pSMB->TotalParameterCount = cpu_to_le16(params);
	pSMB->ParameterCount = pSMB->TotalParameterCount;
	pSMB->InformationLevel = cpu_to_le16(SMB_INFO_QUERY_ALL_EAS);
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
		cFYI(1, ("Send error in Query EA = %d", rc));
	} else {		/* decode response */
		rc = validate_t2((struct smb_t2_rsp *)pSMBr);

		/* BB also check enough total bytes returned */
		/* BB we need to improve the validity checking
		of these trans2 responses */
5502
		if (rc || (pSMBr->ByteCount < 4))
L
Linus Torvalds 已提交
5503 5504 5505 5506 5507 5508 5509 5510 5511 5512 5513 5514
			rc = -EIO;	/* bad smb */
	   /* else if (pFindData){
			memcpy((char *) pFindData,
			       (char *) &pSMBr->hdr.Protocol +
			       data_offset, kl);
		}*/ else {
			/* check that length of list is not more than bcc */
			/* check that each entry does not go beyond length
			   of list */
			/* check that each element of each entry does not
			   go beyond end of list */
			__u16 data_offset = le16_to_cpu(pSMBr->t2.DataOffset);
5515
			struct fealist *ea_response_data;
L
Linus Torvalds 已提交
5516 5517
			rc = -ENODATA;
			/* validate_trans2_offsets() */
S
Steve French 已提交
5518
			/* BB check if start of smb + data_offset > &bcc+ bcc*/
L
Linus Torvalds 已提交
5519 5520 5521 5522
			ea_response_data = (struct fealist *)
				(((char *) &pSMBr->hdr.Protocol) +
				data_offset);
			name_len = le32_to_cpu(ea_response_data->list_len);
5523
			cFYI(1, ("ea length %d", name_len));
S
Steve French 已提交
5524
			if (name_len <= 8) {
L
Linus Torvalds 已提交
5525
			/* returned EA size zeroed at top of function */
5526
				cFYI(1, ("empty EA list returned from server"));
L
Linus Torvalds 已提交
5527 5528 5529 5530 5531 5532 5533
			} else {
				/* account for ea list len */
				name_len -= 4;
				temp_fea = ea_response_data->list;
				temp_ptr = (char *)temp_fea;
				/* loop through checking if we have a matching
				name and then return the associated value */
5534
				while (name_len > 0) {
L
Linus Torvalds 已提交
5535 5536 5537
					__u16 value_len;
					name_len -= 4;
					temp_ptr += 4;
5538 5539 5540 5541
					value_len =
					      le16_to_cpu(temp_fea->value_len);
				/* BB validate that value_len falls within SMB,
				even though maximum for name_len is 255 */
S
Steve French 已提交
5542
					if (memcmp(temp_fea->name, ea_name,
L
Linus Torvalds 已提交
5543 5544 5545 5546
						  temp_fea->name_len) == 0) {
						/* found a match */
						rc = value_len;
				/* account for prefix user. and trailing null */
S
Steve French 已提交
5547
						if (rc <= (int)buf_size) {
L
Linus Torvalds 已提交
5548 5549 5550
							memcpy(ea_value,
								temp_fea->name+temp_fea->name_len+1,
								rc);
5551 5552 5553
							/* ea values, unlike ea
							   names, are not null
							   terminated */
S
Steve French 已提交
5554
						} else if (buf_size == 0) {
L
Linus Torvalds 已提交
5555 5556
						/* skip copy - calc size only */
						} else {
5557
						/* stop before overrun buffer */
L
Linus Torvalds 已提交
5558 5559 5560 5561 5562 5563 5564 5565 5566 5567 5568
							rc = -ERANGE;
						}
						break;
					}
					name_len -= temp_fea->name_len;
					temp_ptr += temp_fea->name_len;
					/* account for trailing null */
					name_len--;
					temp_ptr++;
					name_len -= value_len;
					temp_ptr += value_len;
5569 5570
					/* No trailing null to account for in
					   value_len.  Go on to next EA */
L
Linus Torvalds 已提交
5571 5572
					temp_fea = (struct fea *)temp_ptr;
				}
5573
			}
L
Linus Torvalds 已提交
5574 5575
		}
	}
5576
	cifs_buf_release(pSMB);
L
Linus Torvalds 已提交
5577 5578 5579 5580 5581 5582 5583 5584
	if (rc == -EAGAIN)
		goto QEARetry;

	return (ssize_t)rc;
}

int
CIFSSMBSetEA(const int xid, struct cifsTconInfo *tcon, const char *fileName,
5585 5586 5587
	     const char *ea_name, const void *ea_value,
	     const __u16 ea_value_len, const struct nls_table *nls_codepage,
	     int remap)
L
Linus Torvalds 已提交
5588 5589 5590 5591 5592 5593 5594 5595 5596 5597 5598 5599 5600 5601 5602 5603 5604 5605
{
	struct smb_com_transaction2_spi_req *pSMB = NULL;
	struct smb_com_transaction2_spi_rsp *pSMBr = NULL;
	struct fealist *parm_data;
	int name_len;
	int rc = 0;
	int bytes_returned = 0;
	__u16 params, param_offset, byte_count, offset, count;

	cFYI(1, ("In SetEA"));
SetEARetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
5606
		    cifsConvertToUCS((__le16 *) pSMB->FileName, fileName,
5607
				     PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
5608 5609
		name_len++;	/* trailing null */
		name_len *= 2;
5610
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
5611 5612 5613 5614 5615 5616 5617 5618 5619 5620
		name_len = strnlen(fileName, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->FileName, fileName, name_len);
	}

	params = 6 + name_len;

	/* done calculating parms using name_len of file name,
	now use name_len to calculate length of ea name
	we are going to create in the inode xattrs */
S
Steve French 已提交
5621
	if (ea_name == NULL)
L
Linus Torvalds 已提交
5622 5623
		name_len = 0;
	else
5624
		name_len = strnlen(ea_name, 255);
L
Linus Torvalds 已提交
5625

5626
	count = sizeof(*parm_data) + ea_value_len + name_len;
L
Linus Torvalds 已提交
5627
	pSMB->MaxParameterCount = cpu_to_le16(2);
5628 5629
	/* BB find max SMB PDU from sess */
	pSMB->MaxDataCount = cpu_to_le16(1000);
L
Linus Torvalds 已提交
5630 5631 5632 5633 5634 5635
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	param_offset = offsetof(struct smb_com_transaction2_spi_req,
5636
				InformationLevel) - 4;
L
Linus Torvalds 已提交
5637 5638 5639 5640 5641 5642 5643 5644 5645 5646 5647 5648 5649 5650 5651 5652 5653
	offset = param_offset + params;
	pSMB->InformationLevel =
		cpu_to_le16(SMB_SET_FILE_EA);

	parm_data =
		(struct fealist *) (((char *) &pSMB->hdr.Protocol) +
				       offset);
	pSMB->ParameterOffset = cpu_to_le16(param_offset);
	pSMB->DataOffset = cpu_to_le16(offset);
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_SET_PATH_INFORMATION);
	byte_count = 3 /* pad */  + params + count;
	pSMB->DataCount = cpu_to_le16(count);
	parm_data->list_len = cpu_to_le32(count);
	parm_data->list[0].EA_flags = 0;
	/* we checked above that name len is less than 255 */
A
Alexey Dobriyan 已提交
5654
	parm_data->list[0].name_len = (__u8)name_len;
L
Linus Torvalds 已提交
5655
	/* EA names are always ASCII */
S
Steve French 已提交
5656
	if (ea_name)
5657
		strncpy(parm_data->list[0].name, ea_name, name_len);
L
Linus Torvalds 已提交
5658 5659 5660 5661 5662
	parm_data->list[0].name[name_len] = 0;
	parm_data->list[0].value_len = cpu_to_le16(ea_value_len);
	/* caller ensures that ea_value_len is less than 64K but
	we need to ensure that it fits within the smb */

5663 5664
	/*BB add length check to see if it would fit in
	     negotiated SMB buffer size BB */
S
Steve French 已提交
5665 5666
	/* if (ea_value_len > buffer_size - 512 (enough for header)) */
	if (ea_value_len)
5667 5668
		memcpy(parm_data->list[0].name+name_len+1,
		       ea_value, ea_value_len);
L
Linus Torvalds 已提交
5669 5670 5671 5672 5673 5674 5675 5676 5677

	pSMB->TotalDataCount = pSMB->DataCount;
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);
	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
S
Steve French 已提交
5678
	if (rc)
L
Linus Torvalds 已提交
5679 5680 5681 5682 5683 5684 5685 5686 5687 5688 5689
		cFYI(1, ("SetPathInfo (EA) returned %d", rc));

	cifs_buf_release(pSMB);

	if (rc == -EAGAIN)
		goto SetEARetry;

	return rc;
}

#endif