cifssmb.c 165.3 KB
Newer Older
L
Linus Torvalds 已提交
1 2 3
/*
 *   fs/cifs/cifssmb.c
 *
4
 *   Copyright (C) International Business Machines  Corp., 2002,2009
L
Linus Torvalds 已提交
5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26
 *   Author(s): Steve French (sfrench@us.ibm.com)
 *
 *   Contains the routines for constructing the SMB PDUs themselves
 *
 *   This library is free software; you can redistribute it and/or modify
 *   it under the terms of the GNU Lesser General Public License as published
 *   by the Free Software Foundation; either version 2.1 of the License, or
 *   (at your option) any later version.
 *
 *   This library is distributed in the hope that it will be useful,
 *   but WITHOUT ANY WARRANTY; without even the implied warranty of
 *   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See
 *   the GNU Lesser General Public License for more details.
 *
 *   You should have received a copy of the GNU Lesser General Public License
 *   along with this library; if not, write to the Free Software
 *   Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
 */

 /* SMB/CIFS PDU handling routines here - except for leftovers in connect.c   */
 /* These are mostly routines that operate on a pathname, or on a tree id     */
 /* (mounted volume), but there are eight handle based routines which must be */
27 28
 /* treated slightly differently for reconnection purposes since we never     */
 /* want to reuse a stale file handle and only the caller knows the file info */
L
Linus Torvalds 已提交
29 30 31 32 33 34 35 36

#include <linux/fs.h>
#include <linux/kernel.h>
#include <linux/vfs.h>
#include <linux/posix_acl_xattr.h>
#include <asm/uaccess.h>
#include "cifspdu.h"
#include "cifsglob.h"
37
#include "cifsacl.h"
L
Linus Torvalds 已提交
38 39 40 41 42 43 44 45 46
#include "cifsproto.h"
#include "cifs_unicode.h"
#include "cifs_debug.h"

#ifdef CONFIG_CIFS_POSIX
static struct {
	int index;
	char *name;
} protocols[] = {
47 48
#ifdef CONFIG_CIFS_WEAK_PW_HASH
	{LANMAN_PROT, "\2LM1.2X002"},
49
	{LANMAN2_PROT, "\2LANMAN2.1"},
50
#endif /* weak password hashing for legacy clients */
51
	{CIFS_PROT, "\2NT LM 0.12"},
52
	{POSIX_PROT, "\2POSIX 2"},
L
Linus Torvalds 已提交
53 54 55 56 57 58 59
	{BAD_PROT, "\2"}
};
#else
static struct {
	int index;
	char *name;
} protocols[] = {
60 61
#ifdef CONFIG_CIFS_WEAK_PW_HASH
	{LANMAN_PROT, "\2LM1.2X002"},
62
	{LANMAN2_PROT, "\2LANMAN2.1"},
63
#endif /* weak password hashing for legacy clients */
S
Steve French 已提交
64
	{CIFS_PROT, "\2NT LM 0.12"},
L
Linus Torvalds 已提交
65 66 67 68
	{BAD_PROT, "\2"}
};
#endif

69 70 71
/* define the number of elements in the cifs dialect array */
#ifdef CONFIG_CIFS_POSIX
#ifdef CONFIG_CIFS_WEAK_PW_HASH
72
#define CIFS_NUM_PROT 4
73 74 75 76 77
#else
#define CIFS_NUM_PROT 2
#endif /* CIFS_WEAK_PW_HASH */
#else /* not posix */
#ifdef CONFIG_CIFS_WEAK_PW_HASH
78
#define CIFS_NUM_PROT 3
79 80 81 82 83
#else
#define CIFS_NUM_PROT 1
#endif /* CONFIG_CIFS_WEAK_PW_HASH */
#endif /* CIFS_POSIX */

L
Linus Torvalds 已提交
84 85
/* Mark as invalid, all open files on tree connections since they
   were closed when session to server was lost */
S
Steve French 已提交
86
static void mark_open_files_invalid(struct cifsTconInfo *pTcon)
L
Linus Torvalds 已提交
87 88
{
	struct cifsFileInfo *open_file = NULL;
S
Steve French 已提交
89 90
	struct list_head *tmp;
	struct list_head *tmp1;
L
Linus Torvalds 已提交
91 92 93 94

/* list all files open on tree connection and mark them invalid */
	write_lock(&GlobalSMBSeslock);
	list_for_each_safe(tmp, tmp1, &pTcon->openFileList) {
S
Steve French 已提交
95
		open_file = list_entry(tmp, struct cifsFileInfo, tlist);
96
		open_file->invalidHandle = true;
97
		open_file->oplock_break_cancelled = true;
L
Linus Torvalds 已提交
98 99
	}
	write_unlock(&GlobalSMBSeslock);
100 101
	/* BB Add call to invalidate_inodes(sb) for all superblocks mounted
	   to this tcon */
L
Linus Torvalds 已提交
102 103
}

104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225
/* reconnect the socket, tcon, and smb session if needed */
static int
cifs_reconnect_tcon(struct cifsTconInfo *tcon, int smb_command)
{
	int rc = 0;
	struct cifsSesInfo *ses;
	struct TCP_Server_Info *server;
	struct nls_table *nls_codepage;

	/*
	 * SMBs NegProt, SessSetup, uLogoff do not have tcon yet so check for
	 * tcp and smb session status done differently for those three - in the
	 * calling routine
	 */
	if (!tcon)
		return 0;

	ses = tcon->ses;
	server = ses->server;

	/*
	 * only tree disconnect, open, and write, (and ulogoff which does not
	 * have tcon) are allowed as we start force umount
	 */
	if (tcon->tidStatus == CifsExiting) {
		if (smb_command != SMB_COM_WRITE_ANDX &&
		    smb_command != SMB_COM_OPEN_ANDX &&
		    smb_command != SMB_COM_TREE_DISCONNECT) {
			cFYI(1, ("can not send cmd %d while umounting",
				smb_command));
			return -ENODEV;
		}
	}

	if (ses->status == CifsExiting)
		return -EIO;

	/*
	 * Give demultiplex thread up to 10 seconds to reconnect, should be
	 * greater than cifs socket timeout which is 7 seconds
	 */
	while (server->tcpStatus == CifsNeedReconnect) {
		wait_event_interruptible_timeout(server->response_q,
			(server->tcpStatus == CifsGood), 10 * HZ);

		/* is TCP session is reestablished now ?*/
		if (server->tcpStatus != CifsNeedReconnect)
			break;

		/*
		 * on "soft" mounts we wait once. Hard mounts keep
		 * retrying until process is killed or server comes
		 * back on-line
		 */
		if (!tcon->retry || ses->status == CifsExiting) {
			cFYI(1, ("gave up waiting on reconnect in smb_init"));
			return -EHOSTDOWN;
		}
	}

	if (!ses->need_reconnect && !tcon->need_reconnect)
		return 0;

	nls_codepage = load_nls_default();

	/*
	 * need to prevent multiple threads trying to simultaneously
	 * reconnect the same SMB session
	 */
	down(&ses->sesSem);
	if (ses->need_reconnect)
		rc = cifs_setup_session(0, ses, nls_codepage);

	/* do we need to reconnect tcon? */
	if (rc || !tcon->need_reconnect) {
		up(&ses->sesSem);
		goto out;
	}

	mark_open_files_invalid(tcon);
	rc = CIFSTCon(0, ses, tcon->treeName, tcon, nls_codepage);
	up(&ses->sesSem);
	cFYI(1, ("reconnect tcon rc = %d", rc));

	if (rc)
		goto out;

	/*
	 * FIXME: check if wsize needs updated due to negotiated smb buffer
	 * 	  size shrinking
	 */
	atomic_inc(&tconInfoReconnectCount);

	/* tell server Unix caps we support */
	if (ses->capabilities & CAP_UNIX)
		reset_cifs_unix_caps(0, tcon, NULL, NULL);

	/*
	 * Removed call to reopen open files here. It is safer (and faster) to
	 * reopen files one at a time as needed in read and write.
	 *
	 * FIXME: what about file locks? don't we need to reclaim them ASAP?
	 */

out:
	/*
	 * Check if handle based operation so we know whether we can continue
	 * or not without returning to caller to reset file handle
	 */
	switch (smb_command) {
	case SMB_COM_READ_ANDX:
	case SMB_COM_WRITE_ANDX:
	case SMB_COM_CLOSE:
	case SMB_COM_FIND_CLOSE2:
	case SMB_COM_LOCKING_ANDX:
		rc = -EAGAIN;
	}

	unload_nls(nls_codepage);
	return rc;
}

S
Steve French 已提交
226 227 228
/* Allocate and return pointer to an SMB request buffer, and set basic
   SMB information in the SMB header.  If the return code is zero, this
   function must have filled in request_buf pointer */
L
Linus Torvalds 已提交
229 230
static int
small_smb_init(int smb_command, int wct, struct cifsTconInfo *tcon,
S
Steve French 已提交
231
		void **request_buf)
L
Linus Torvalds 已提交
232 233 234
{
	int rc = 0;

235
	rc = cifs_reconnect_tcon(tcon, smb_command);
S
Steve French 已提交
236
	if (rc)
L
Linus Torvalds 已提交
237 238 239 240 241 242 243 244
		return rc;

	*request_buf = cifs_small_buf_get();
	if (*request_buf == NULL) {
		/* BB should we add a retry in here if not a writepage? */
		return -ENOMEM;
	}

245
	header_assemble((struct smb_hdr *) *request_buf, smb_command,
246
			tcon, wct);
L
Linus Torvalds 已提交
247

S
Steve French 已提交
248 249
	if (tcon != NULL)
		cifs_stats_inc(&tcon->num_smbs_sent);
250

L
Linus Torvalds 已提交
251
	return rc;
252 253
}

254
int
255
small_smb_init_no_tc(const int smb_command, const int wct,
256
		     struct cifsSesInfo *ses, void **request_buf)
257 258
{
	int rc;
259
	struct smb_hdr *buffer;
260

261
	rc = small_smb_init(smb_command, wct, NULL, request_buf);
S
Steve French 已提交
262
	if (rc)
263 264
		return rc;

265
	buffer = (struct smb_hdr *)*request_buf;
266 267 268
	buffer->Mid = GetNextMid(ses->server);
	if (ses->capabilities & CAP_UNICODE)
		buffer->Flags2 |= SMBFLG2_UNICODE;
269
	if (ses->capabilities & CAP_STATUS32)
270 271 272 273
		buffer->Flags2 |= SMBFLG2_ERR_STATUS;

	/* uid, tid can stay at zero as set in header assemble */

274
	/* BB add support for turning on the signing when
275 276 277 278
	this function is used after 1st of session setup requests */

	return rc;
}
L
Linus Torvalds 已提交
279 280 281 282 283 284 285 286 287

/* If the return code is zero, this function must fill in request_buf pointer */
static int
smb_init(int smb_command, int wct, struct cifsTconInfo *tcon,
	 void **request_buf /* returned */ ,
	 void **response_buf /* returned */ )
{
	int rc = 0;

288
	rc = cifs_reconnect_tcon(tcon, smb_command);
S
Steve French 已提交
289
	if (rc)
L
Linus Torvalds 已提交
290 291 292 293 294 295 296 297 298 299 300
		return rc;

	*request_buf = cifs_buf_get();
	if (*request_buf == NULL) {
		/* BB should we add a retry in here if not a writepage? */
		return -ENOMEM;
	}
    /* Although the original thought was we needed the response buf for  */
    /* potential retries of smb operations it turns out we can determine */
    /* from the mid flags when the request buffer can be resent without  */
    /* having to use a second distinct buffer for the response */
S
Steve French 已提交
301
	if (response_buf)
302
		*response_buf = *request_buf;
L
Linus Torvalds 已提交
303 304

	header_assemble((struct smb_hdr *) *request_buf, smb_command, tcon,
S
Steve French 已提交
305
			wct);
L
Linus Torvalds 已提交
306

S
Steve French 已提交
307 308
	if (tcon != NULL)
		cifs_stats_inc(&tcon->num_smbs_sent);
309

L
Linus Torvalds 已提交
310 311 312
	return rc;
}

313
static int validate_t2(struct smb_t2_rsp *pSMB)
L
Linus Torvalds 已提交
314 315 316
{
	int rc = -EINVAL;
	int total_size;
317
	char *pBCC;
L
Linus Torvalds 已提交
318 319 320

	/* check for plausible wct, bcc and t2 data and parm sizes */
	/* check for parm and data offset going beyond end of smb */
S
Steve French 已提交
321 322
	if (pSMB->hdr.WordCount >= 10) {
		if ((le16_to_cpu(pSMB->t2_rsp.ParameterOffset) <= 1024) &&
L
Linus Torvalds 已提交
323 324 325 326
		   (le16_to_cpu(pSMB->t2_rsp.DataOffset) <= 1024)) {
			/* check that bcc is at least as big as parms + data */
			/* check that bcc is less than negotiated smb buffer */
			total_size = le16_to_cpu(pSMB->t2_rsp.ParameterCount);
S
Steve French 已提交
327
			if (total_size < 512) {
328
				total_size +=
329
					le16_to_cpu(pSMB->t2_rsp.DataCount);
L
Linus Torvalds 已提交
330
				/* BCC le converted in SendReceive */
331
				pBCC = (pSMB->hdr.WordCount * 2) +
332
					sizeof(struct smb_hdr) +
L
Linus Torvalds 已提交
333
					(char *)pSMB;
S
Steve French 已提交
334
				if ((total_size <= (*(u16 *)pBCC)) &&
335
				   (total_size <
L
Linus Torvalds 已提交
336 337 338 339 340 341
					CIFSMaxBufSize+MAX_CIFS_HDR_SIZE)) {
					return 0;
				}
			}
		}
	}
342
	cifs_dump_mem("Invalid transact2 SMB: ", (char *)pSMB,
L
Linus Torvalds 已提交
343 344 345 346 347 348 349 350 351 352
		sizeof(struct smb_t2_rsp) + 16);
	return rc;
}
int
CIFSSMBNegotiate(unsigned int xid, struct cifsSesInfo *ses)
{
	NEGOTIATE_REQ *pSMB;
	NEGOTIATE_RSP *pSMBr;
	int rc = 0;
	int bytes_returned;
353
	int i;
354
	struct TCP_Server_Info *server;
L
Linus Torvalds 已提交
355
	u16 count;
356
	unsigned int secFlags;
A
Al Viro 已提交
357
	u16 dialect;
L
Linus Torvalds 已提交
358

S
Steve French 已提交
359
	if (ses->server)
L
Linus Torvalds 已提交
360 361 362 363 364 365 366 367 368
		server = ses->server;
	else {
		rc = -EIO;
		return rc;
	}
	rc = smb_init(SMB_COM_NEGOTIATE, 0, NULL /* no tcon yet */ ,
		      (void **) &pSMB, (void **) &pSMBr);
	if (rc)
		return rc;
369 370

	/* if any of auth flags (ie not sign or seal) are overriden use them */
S
Steve French 已提交
371
	if (ses->overrideSecFlg & (~(CIFSSEC_MUST_SIGN | CIFSSEC_MUST_SEAL)))
372
		secFlags = ses->overrideSecFlg;  /* BB FIXME fix sign flags? */
373 374 375
	else /* if override flags set only sign/seal OR them with global auth */
		secFlags = extended_security | ses->overrideSecFlg;

376
	cFYI(1, ("secFlags 0x%x", secFlags));
377

378
	pSMB->hdr.Mid = GetNextMid(server);
379
	pSMB->hdr.Flags2 |= (SMBFLG2_UNICODE | SMBFLG2_ERR_STATUS);
380

381
	if ((secFlags & CIFSSEC_MUST_KRB5) == CIFSSEC_MUST_KRB5)
382
		pSMB->hdr.Flags2 |= SMBFLG2_EXT_SEC;
383 384 385 386
	else if ((secFlags & CIFSSEC_AUTH_MASK) == CIFSSEC_MAY_KRB5) {
		cFYI(1, ("Kerberos only mechanism, enable extended security"));
		pSMB->hdr.Flags2 |= SMBFLG2_EXT_SEC;
	}
387 388 389 390 391 392 393 394
#ifdef CONFIG_CIFS_EXPERIMENTAL
	else if ((secFlags & CIFSSEC_MUST_NTLMSSP) == CIFSSEC_MUST_NTLMSSP)
		pSMB->hdr.Flags2 |= SMBFLG2_EXT_SEC;
	else if ((secFlags & CIFSSEC_AUTH_MASK) == CIFSSEC_MAY_NTLMSSP) {
		cFYI(1, ("NTLMSSP only mechanism, enable extended security"));
		pSMB->hdr.Flags2 |= SMBFLG2_EXT_SEC;
	}
#endif
395

396
	count = 0;
397
	for (i = 0; i < CIFS_NUM_PROT; i++) {
398 399 400 401
		strncpy(pSMB->DialectsArray+count, protocols[i].name, 16);
		count += strlen(protocols[i].name) + 1;
		/* null at end of source and target buffers anyway */
	}
L
Linus Torvalds 已提交
402 403 404 405 406
	pSMB->hdr.smb_buf_length += count;
	pSMB->ByteCount = cpu_to_le16(count);

	rc = SendReceive(xid, ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
407
	if (rc != 0)
408 409
		goto neg_err_exit;

A
Al Viro 已提交
410
	dialect = le16_to_cpu(pSMBr->DialectIndex);
S
Steve French 已提交
411
	cFYI(1, ("Dialect: %d", dialect));
412
	/* Check wct = 1 error case */
S
Steve French 已提交
413
	if ((pSMBr->hdr.WordCount < 13) || (dialect == BAD_PROT)) {
414
		/* core returns wct = 1, but we do not ask for core - otherwise
415
		small wct just comes when dialect index is -1 indicating we
416 417 418
		could not negotiate a common dialect */
		rc = -EOPNOTSUPP;
		goto neg_err_exit;
419
#ifdef CONFIG_CIFS_WEAK_PW_HASH
S
Steve French 已提交
420
	} else if ((pSMBr->hdr.WordCount == 13)
A
Al Viro 已提交
421 422
			&& ((dialect == LANMAN_PROT)
				|| (dialect == LANMAN2_PROT))) {
423
		__s16 tmp;
424
		struct lanman_neg_rsp *rsp = (struct lanman_neg_rsp *)pSMBr;
425

S
Steve French 已提交
426
		if ((secFlags & CIFSSEC_MAY_LANMAN) ||
427
			(secFlags & CIFSSEC_MAY_PLNTXT))
428 429 430 431
			server->secType = LANMAN;
		else {
			cERROR(1, ("mount failed weak security disabled"
				   " in /proc/fs/cifs/SecurityFlags"));
432 433
			rc = -EOPNOTSUPP;
			goto neg_err_exit;
434
		}
435 436 437
		server->secMode = (__u8)le16_to_cpu(rsp->SecurityMode);
		server->maxReq = le16_to_cpu(rsp->MaxMpxCount);
		server->maxBuf = min((__u32)le16_to_cpu(rsp->MaxBufSize),
438
				(__u32)CIFSMaxBufSize + MAX_CIFS_HDR_SIZE);
439
		server->max_vcs = le16_to_cpu(rsp->MaxNumberVcs);
440 441 442
		GETU32(server->sessid) = le32_to_cpu(rsp->SessionKey);
		/* even though we do not use raw we might as well set this
		accurately, in case we ever find a need for it */
S
Steve French 已提交
443
		if ((le16_to_cpu(rsp->RawMode) & RAW_ENABLE) == RAW_ENABLE) {
444
			server->max_rw = 0xFF00;
445 446
			server->capabilities = CAP_MPX_MODE | CAP_RAW_MODE;
		} else {
447
			server->max_rw = 0;/* do not need to use raw anyway */
448 449
			server->capabilities = CAP_MPX_MODE;
		}
450
		tmp = (__s16)le16_to_cpu(rsp->ServerTimeZone);
451
		if (tmp == -1) {
452 453
			/* OS/2 often does not set timezone therefore
			 * we must use server time to calc time zone.
454 455 456 457
			 * Could deviate slightly from the right zone.
			 * Smallest defined timezone difference is 15 minutes
			 * (i.e. Nepal).  Rounding up/down is done to match
			 * this requirement.
458
			 */
459
			int val, seconds, remain, result;
460 461
			struct timespec ts, utc;
			utc = CURRENT_TIME;
462 463
			ts = cnvrtDosUnixTm(rsp->SrvTime.Date,
					    rsp->SrvTime.Time, 0);
464 465
			cFYI(1, ("SrvTime %d sec since 1970 (utc: %d) diff: %d",
				(int)ts.tv_sec, (int)utc.tv_sec,
466
				(int)(utc.tv_sec - ts.tv_sec)));
467
			val = (int)(utc.tv_sec - ts.tv_sec);
468
			seconds = abs(val);
S
Steve French 已提交
469
			result = (seconds / MIN_TZ_ADJ) * MIN_TZ_ADJ;
470
			remain = seconds % MIN_TZ_ADJ;
S
Steve French 已提交
471
			if (remain >= (MIN_TZ_ADJ / 2))
472
				result += MIN_TZ_ADJ;
S
Steve French 已提交
473
			if (val < 0)
S
Steve French 已提交
474
				result = -result;
475
			server->timeAdj = result;
476
		} else {
477 478
			server->timeAdj = (int)tmp;
			server->timeAdj *= 60; /* also in seconds */
479
		}
S
Steve French 已提交
480
		cFYI(1, ("server->timeAdj: %d seconds", server->timeAdj));
481

482

483
		/* BB get server time for time conversions and add
484
		code to use it and timezone since this is not UTC */
485

486
		if (rsp->EncryptionKeyLength ==
487
				cpu_to_le16(CIFS_CRYPTO_KEY_SIZE)) {
488 489 490 491 492 493
			memcpy(server->cryptKey, rsp->EncryptionKey,
				CIFS_CRYPTO_KEY_SIZE);
		} else if (server->secMode & SECMODE_PW_ENCRYPT) {
			rc = -EIO; /* need cryptkey unless plain text */
			goto neg_err_exit;
		}
494

S
Steve French 已提交
495
		cFYI(1, ("LANMAN negotiated"));
496 497 498
		/* we will not end up setting signing flags - as no signing
		was in LANMAN and server did not return the flags on */
		goto signing_check;
499
#else /* weak security disabled */
S
Steve French 已提交
500
	} else if (pSMBr->hdr.WordCount == 13) {
501
		cERROR(1, ("mount failed, cifs module not built "
502
			  "with CIFS_WEAK_PW_HASH support"));
503 504
			rc = -EOPNOTSUPP;
#endif /* WEAK_PW_HASH */
505
		goto neg_err_exit;
S
Steve French 已提交
506
	} else if (pSMBr->hdr.WordCount != 17) {
507 508 509 510 511 512
		/* unknown wct */
		rc = -EOPNOTSUPP;
		goto neg_err_exit;
	}
	/* else wct == 17 NTLM */
	server->secMode = pSMBr->SecurityMode;
S
Steve French 已提交
513 514
	if ((server->secMode & SECMODE_USER) == 0)
		cFYI(1, ("share mode security"));
515

S
Steve French 已提交
516
	if ((server->secMode & SECMODE_PW_ENCRYPT) == 0)
517
#ifdef CONFIG_CIFS_WEAK_PW_HASH
518
		if ((secFlags & CIFSSEC_MAY_PLNTXT) == 0)
519
#endif /* CIFS_WEAK_PW_HASH */
520
			cERROR(1, ("Server requests plain text password"
521
				  " but client support disabled"));
522

S
Steve French 已提交
523
	if ((secFlags & CIFSSEC_MUST_NTLMV2) == CIFSSEC_MUST_NTLMV2)
524
		server->secType = NTLMv2;
S
Steve French 已提交
525
	else if (secFlags & CIFSSEC_MAY_NTLM)
526
		server->secType = NTLM;
S
Steve French 已提交
527
	else if (secFlags & CIFSSEC_MAY_NTLMV2)
528
		server->secType = NTLMv2;
529 530
	else if (secFlags & CIFSSEC_MAY_KRB5)
		server->secType = Kerberos;
531
	else if (secFlags & CIFSSEC_MAY_NTLMSSP)
532
		server->secType = RawNTLMSSP;
533 534 535 536 537 538 539 540 541 542 543 544
	else if (secFlags & CIFSSEC_MAY_LANMAN)
		server->secType = LANMAN;
/* #ifdef CONFIG_CIFS_EXPERIMENTAL
	else if (secFlags & CIFSSEC_MAY_PLNTXT)
		server->secType = ??
#endif */
	else {
		rc = -EOPNOTSUPP;
		cERROR(1, ("Invalid security type"));
		goto neg_err_exit;
	}
	/* else ... any others ...? */
545 546 547 548 549 550

	/* one byte, so no need to convert this or EncryptionKeyLen from
	   little endian */
	server->maxReq = le16_to_cpu(pSMBr->MaxMpxCount);
	/* probably no need to store and check maxvcs */
	server->maxBuf = min(le32_to_cpu(pSMBr->MaxBufferSize),
L
Linus Torvalds 已提交
551
			(__u32) CIFSMaxBufSize + MAX_CIFS_HDR_SIZE);
552
	server->max_rw = le32_to_cpu(pSMBr->MaxRawSize);
553
	cFYI(DBG2, ("Max buf = %d", ses->server->maxBuf));
554 555
	GETU32(ses->server->sessid) = le32_to_cpu(pSMBr->SessionKey);
	server->capabilities = le32_to_cpu(pSMBr->Capabilities);
556 557
	server->timeAdj = (int)(__s16)le16_to_cpu(pSMBr->ServerTimeZone);
	server->timeAdj *= 60;
558 559 560 561 562 563 564 565 566 567
	if (pSMBr->EncryptionKeyLength == CIFS_CRYPTO_KEY_SIZE) {
		memcpy(server->cryptKey, pSMBr->u.EncryptionKey,
		       CIFS_CRYPTO_KEY_SIZE);
	} else if ((pSMBr->hdr.Flags2 & SMBFLG2_EXT_SEC)
			&& (pSMBr->EncryptionKeyLength == 0)) {
		/* decode security blob */
	} else if (server->secMode & SECMODE_PW_ENCRYPT) {
		rc = -EIO; /* no crypt key only if plain text pwd */
		goto neg_err_exit;
	}
L
Linus Torvalds 已提交
568

569 570
	/* BB might be helpful to save off the domain of server here */

571
	if ((pSMBr->hdr.Flags2 & SMBFLG2_EXT_SEC) &&
572 573
		(server->capabilities & CAP_EXTENDED_SECURITY)) {
		count = pSMBr->ByteCount;
574
		if (count < 16) {
575
			rc = -EIO;
576 577
			goto neg_err_exit;
		}
578 579 580
		read_lock(&cifs_tcp_ses_lock);
		if (server->srv_count > 1) {
			read_unlock(&cifs_tcp_ses_lock);
581 582 583 584
			if (memcmp(server->server_GUID,
				   pSMBr->u.extended_response.
				   GUID, 16) != 0) {
				cFYI(1, ("server UID changed"));
585
				memcpy(server->server_GUID,
586 587 588
					pSMBr->u.extended_response.GUID,
					16);
			}
589 590
		} else {
			read_unlock(&cifs_tcp_ses_lock);
591 592
			memcpy(server->server_GUID,
			       pSMBr->u.extended_response.GUID, 16);
593
		}
594 595 596

		if (count == 16) {
			server->secType = RawNTLMSSP;
597 598 599 600 601
		} else {
			rc = decode_negTokenInit(pSMBr->u.extended_response.
						 SecurityBlob,
						 count - 16,
						 &server->secType);
602
			if (rc == 1)
603
				rc = 0;
604
			else
605
				rc = -EINVAL;
L
Linus Torvalds 已提交
606
		}
607 608 609
	} else
		server->capabilities &= ~CAP_EXTENDED_SECURITY;

610
#ifdef CONFIG_CIFS_WEAK_PW_HASH
611
signing_check:
612
#endif
613 614 615 616
	if ((secFlags & CIFSSEC_MAY_SIGN) == 0) {
		/* MUST_SIGN already includes the MAY_SIGN FLAG
		   so if this is zero it means that signing is disabled */
		cFYI(1, ("Signing disabled"));
617
		if (server->secMode & SECMODE_SIGN_REQUIRED) {
618
			cERROR(1, ("Server requires "
J
[CIFS]  
Jeff Layton 已提交
619 620
				   "packet signing to be enabled in "
				   "/proc/fs/cifs/SecurityFlags."));
621 622
			rc = -EOPNOTSUPP;
		}
623
		server->secMode &=
624
			~(SECMODE_SIGN_ENABLED | SECMODE_SIGN_REQUIRED);
625 626
	} else if ((secFlags & CIFSSEC_MUST_SIGN) == CIFSSEC_MUST_SIGN) {
		/* signing required */
627
		cFYI(1, ("Must sign - secFlags 0x%x", secFlags));
628 629 630 631
		if ((server->secMode &
			(SECMODE_SIGN_ENABLED | SECMODE_SIGN_REQUIRED)) == 0) {
			cERROR(1,
				("signing required but server lacks support"));
632
			rc = -EOPNOTSUPP;
633 634 635 636
		} else
			server->secMode |= SECMODE_SIGN_REQUIRED;
	} else {
		/* signing optional ie CIFSSEC_MAY_SIGN */
S
Steve French 已提交
637
		if ((server->secMode & SECMODE_SIGN_REQUIRED) == 0)
638
			server->secMode &=
639
				~(SECMODE_SIGN_ENABLED | SECMODE_SIGN_REQUIRED);
L
Linus Torvalds 已提交
640
	}
641 642

neg_err_exit:
643
	cifs_buf_release(pSMB);
644

S
Steve French 已提交
645
	cFYI(1, ("negprot rc %d", rc));
L
Linus Torvalds 已提交
646 647 648 649 650 651 652 653 654 655 656
	return rc;
}

int
CIFSSMBTDis(const int xid, struct cifsTconInfo *tcon)
{
	struct smb_hdr *smb_buffer;
	int rc = 0;

	cFYI(1, ("In tree disconnect"));

657 658 659
	/* BB: do we need to check this? These should never be NULL. */
	if ((tcon->ses == NULL) || (tcon->ses->server == NULL))
		return -EIO;
L
Linus Torvalds 已提交
660

661 662 663 664 665 666
	/*
	 * No need to return error on this operation if tid invalidated and
	 * closed on server already e.g. due to tcp session crashing. Also,
	 * the tcon is no longer on the list, so no need to take lock before
	 * checking this.
	 */
667
	if ((tcon->need_reconnect) || (tcon->ses->need_reconnect))
668
		return 0;
L
Linus Torvalds 已提交
669

670
	rc = small_smb_init(SMB_COM_TREE_DISCONNECT, 0, tcon,
671
			    (void **)&smb_buffer);
672
	if (rc)
L
Linus Torvalds 已提交
673
		return rc;
674 675

	rc = SendReceiveNoRsp(xid, tcon->ses, smb_buffer, 0);
L
Linus Torvalds 已提交
676
	if (rc)
S
Steve French 已提交
677
		cFYI(1, ("Tree disconnect failed %d", rc));
L
Linus Torvalds 已提交
678

679
	/* No need to return error on this operation if tid invalidated and
680
	   closed on server already e.g. due to tcp session crashing */
L
Linus Torvalds 已提交
681 682 683 684 685 686 687 688 689 690 691 692 693
	if (rc == -EAGAIN)
		rc = 0;

	return rc;
}

int
CIFSSMBLogoff(const int xid, struct cifsSesInfo *ses)
{
	LOGOFF_ANDX_REQ *pSMB;
	int rc = 0;

	cFYI(1, ("In SMBLogoff for session disconnect"));
S
Steve French 已提交
694

695 696 697 698 699 700
	/*
	 * BB: do we need to check validity of ses and server? They should
	 * always be valid since we have an active reference. If not, that
	 * should probably be a BUG()
	 */
	if (!ses || !ses->server)
S
Steve French 已提交
701 702
		return -EIO;

703
	down(&ses->sesSem);
S
Steve French 已提交
704 705 706
	if (ses->need_reconnect)
		goto session_already_dead; /* no need to send SMBlogoff if uid
					      already closed due to reconnect */
L
Linus Torvalds 已提交
707 708 709 710 711 712
	rc = small_smb_init(SMB_COM_LOGOFF_ANDX, 2, NULL, (void **)&pSMB);
	if (rc) {
		up(&ses->sesSem);
		return rc;
	}

S
Steve French 已提交
713
	pSMB->hdr.Mid = GetNextMid(ses->server);
714

S
Steve French 已提交
715
	if (ses->server->secMode &
L
Linus Torvalds 已提交
716 717 718 719 720 721
		   (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
			pSMB->hdr.Flags2 |= SMBFLG2_SECURITY_SIGNATURE;

	pSMB->hdr.Uid = ses->Suid;

	pSMB->AndXCommand = 0xFF;
722
	rc = SendReceiveNoRsp(xid, ses, (struct smb_hdr *) pSMB, 0);
S
Steve French 已提交
723
session_already_dead:
724
	up(&ses->sesSem);
L
Linus Torvalds 已提交
725 726

	/* if session dead then we do not need to do ulogoff,
727
		since server closed smb session, no sense reporting
L
Linus Torvalds 已提交
728 729 730 731 732 733
		error */
	if (rc == -EAGAIN)
		rc = 0;
	return rc;
}

734 735 736 737 738 739 740 741 742 743 744 745 746 747 748 749 750 751 752 753 754 755 756 757 758 759 760 761 762 763 764 765 766 767 768 769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787 788 789 790 791 792 793 794 795 796
int
CIFSPOSIXDelFile(const int xid, struct cifsTconInfo *tcon, const char *fileName,
		 __u16 type, const struct nls_table *nls_codepage, int remap)
{
	TRANSACTION2_SPI_REQ *pSMB = NULL;
	TRANSACTION2_SPI_RSP *pSMBr = NULL;
	struct unlink_psx_rq *pRqD;
	int name_len;
	int rc = 0;
	int bytes_returned = 0;
	__u16 params, param_offset, offset, byte_count;

	cFYI(1, ("In POSIX delete"));
PsxDelete:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
		    cifsConvertToUCS((__le16 *) pSMB->FileName, fileName,
				     PATH_MAX, nls_codepage, remap);
		name_len++;	/* trailing null */
		name_len *= 2;
	} else { /* BB add path length overrun check */
		name_len = strnlen(fileName, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->FileName, fileName, name_len);
	}

	params = 6 + name_len;
	pSMB->MaxParameterCount = cpu_to_le16(2);
	pSMB->MaxDataCount = 0; /* BB double check this with jra */
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	param_offset = offsetof(struct smb_com_transaction2_spi_req,
				InformationLevel) - 4;
	offset = param_offset + params;

	/* Setup pointer to Request Data (inode type) */
	pRqD = (struct unlink_psx_rq *)(((char *)&pSMB->hdr.Protocol) + offset);
	pRqD->type = cpu_to_le16(type);
	pSMB->ParameterOffset = cpu_to_le16(param_offset);
	pSMB->DataOffset = cpu_to_le16(offset);
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_SET_PATH_INFORMATION);
	byte_count = 3 /* pad */  + params + sizeof(struct unlink_psx_rq);

	pSMB->DataCount = cpu_to_le16(sizeof(struct unlink_psx_rq));
	pSMB->TotalDataCount = cpu_to_le16(sizeof(struct unlink_psx_rq));
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	pSMB->InformationLevel = cpu_to_le16(SMB_POSIX_UNLINK);
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);
	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
S
Steve French 已提交
797
	if (rc)
798 799 800 801 802 803 804 805 806 807 808
		cFYI(1, ("Posix delete returned %d", rc));
	cifs_buf_release(pSMB);

	cifs_stats_inc(&tcon->num_deletes);

	if (rc == -EAGAIN)
		goto PsxDelete;

	return rc;
}

L
Linus Torvalds 已提交
809
int
810 811
CIFSSMBDelFile(const int xid, struct cifsTconInfo *tcon, const char *fileName,
	       const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
812 813 814 815 816 817 818 819 820 821 822 823 824 825 826
{
	DELETE_FILE_REQ *pSMB = NULL;
	DELETE_FILE_RSP *pSMBr = NULL;
	int rc = 0;
	int bytes_returned;
	int name_len;

DelFileRetry:
	rc = smb_init(SMB_COM_DELETE, 1, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
827
		    cifsConvertToUCS((__le16 *) pSMB->fileName, fileName,
828
				     PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
829 830
		name_len++;	/* trailing null */
		name_len *= 2;
831
	} else {		/* BB improve check for buffer overruns BB */
L
Linus Torvalds 已提交
832 833 834 835 836 837 838 839 840 841 842
		name_len = strnlen(fileName, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->fileName, fileName, name_len);
	}
	pSMB->SearchAttributes =
	    cpu_to_le16(ATTR_READONLY | ATTR_HIDDEN | ATTR_SYSTEM);
	pSMB->BufferFormat = 0x04;
	pSMB->hdr.smb_buf_length += name_len + 1;
	pSMB->ByteCount = cpu_to_le16(name_len + 1);
	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
843
	cifs_stats_inc(&tcon->num_deletes);
S
Steve French 已提交
844
	if (rc)
L
Linus Torvalds 已提交
845 846 847 848 849 850 851 852 853 854
		cFYI(1, ("Error in RMFile = %d", rc));

	cifs_buf_release(pSMB);
	if (rc == -EAGAIN)
		goto DelFileRetry;

	return rc;
}

int
855
CIFSSMBRmDir(const int xid, struct cifsTconInfo *tcon, const char *dirName,
856
	     const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
857 858 859 860 861 862 863 864 865 866 867 868 869 870 871
{
	DELETE_DIRECTORY_REQ *pSMB = NULL;
	DELETE_DIRECTORY_RSP *pSMBr = NULL;
	int rc = 0;
	int bytes_returned;
	int name_len;

	cFYI(1, ("In CIFSSMBRmDir"));
RmDirRetry:
	rc = smb_init(SMB_COM_DELETE_DIRECTORY, 0, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
872 873
		name_len = cifsConvertToUCS((__le16 *) pSMB->DirName, dirName,
					 PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
874 875
		name_len++;	/* trailing null */
		name_len *= 2;
876
	} else {		/* BB improve check for buffer overruns BB */
L
Linus Torvalds 已提交
877 878 879 880 881 882 883 884 885 886
		name_len = strnlen(dirName, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->DirName, dirName, name_len);
	}

	pSMB->BufferFormat = 0x04;
	pSMB->hdr.smb_buf_length += name_len + 1;
	pSMB->ByteCount = cpu_to_le16(name_len + 1);
	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
887
	cifs_stats_inc(&tcon->num_rmdirs);
S
Steve French 已提交
888
	if (rc)
L
Linus Torvalds 已提交
889 890 891 892 893 894 895 896 897 898
		cFYI(1, ("Error in RMDir = %d", rc));

	cifs_buf_release(pSMB);
	if (rc == -EAGAIN)
		goto RmDirRetry;
	return rc;
}

int
CIFSSMBMkDir(const int xid, struct cifsTconInfo *tcon,
899
	     const char *name, const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
900 901 902 903 904 905 906 907 908 909 910 911 912 913 914
{
	int rc = 0;
	CREATE_DIRECTORY_REQ *pSMB = NULL;
	CREATE_DIRECTORY_RSP *pSMBr = NULL;
	int bytes_returned;
	int name_len;

	cFYI(1, ("In CIFSSMBMkDir"));
MkDirRetry:
	rc = smb_init(SMB_COM_CREATE_DIRECTORY, 0, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
915
		name_len = cifsConvertToUCS((__le16 *) pSMB->DirName, name,
916
					    PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
917 918
		name_len++;	/* trailing null */
		name_len *= 2;
919
	} else {		/* BB improve check for buffer overruns BB */
L
Linus Torvalds 已提交
920 921 922 923 924 925 926 927 928 929
		name_len = strnlen(name, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->DirName, name, name_len);
	}

	pSMB->BufferFormat = 0x04;
	pSMB->hdr.smb_buf_length += name_len + 1;
	pSMB->ByteCount = cpu_to_le16(name_len + 1);
	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
930
	cifs_stats_inc(&tcon->num_mkdirs);
S
Steve French 已提交
931
	if (rc)
L
Linus Torvalds 已提交
932
		cFYI(1, ("Error in Mkdir = %d", rc));
933

L
Linus Torvalds 已提交
934 935 936 937 938 939
	cifs_buf_release(pSMB);
	if (rc == -EAGAIN)
		goto MkDirRetry;
	return rc;
}

940 941
int
CIFSPOSIXCreate(const int xid, struct cifsTconInfo *tcon, __u32 posix_flags,
S
Steve French 已提交
942
		__u64 mode, __u16 *netfid, FILE_UNIX_BASIC_INFO *pRetData,
943
		__u32 *pOplock, const char *name,
944 945 946 947 948 949 950 951
		const struct nls_table *nls_codepage, int remap)
{
	TRANSACTION2_SPI_REQ *pSMB = NULL;
	TRANSACTION2_SPI_RSP *pSMBr = NULL;
	int name_len;
	int rc = 0;
	int bytes_returned = 0;
	__u16 params, param_offset, offset, byte_count, count;
S
Steve French 已提交
952 953
	OPEN_PSX_REQ *pdata;
	OPEN_PSX_RSP *psx_rsp;
954 955 956 957 958 959 960 961 962 963 964 965 966 967 968 969 970 971 972 973 974 975 976 977 978 979 980 981 982 983

	cFYI(1, ("In POSIX Create"));
PsxCreat:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
		    cifsConvertToUCS((__le16 *) pSMB->FileName, name,
				     PATH_MAX, nls_codepage, remap);
		name_len++;	/* trailing null */
		name_len *= 2;
	} else {	/* BB improve the check for buffer overruns BB */
		name_len = strnlen(name, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->FileName, name, name_len);
	}

	params = 6 + name_len;
	count = sizeof(OPEN_PSX_REQ);
	pSMB->MaxParameterCount = cpu_to_le16(2);
	pSMB->MaxDataCount = cpu_to_le16(1000);	/* large enough */
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	param_offset = offsetof(struct smb_com_transaction2_spi_req,
984
				InformationLevel) - 4;
985 986
	offset = param_offset + params;
	pdata = (OPEN_PSX_REQ *)(((char *)&pSMB->hdr.Protocol) + offset);
987
	pdata->Level = cpu_to_le16(SMB_QUERY_FILE_UNIX_BASIC);
988
	pdata->Permissions = cpu_to_le64(mode);
989
	pdata->PosixOpenFlags = cpu_to_le32(posix_flags);
990 991 992 993 994 995 996 997 998 999 1000 1001 1002 1003
	pdata->OpenFlags =  cpu_to_le32(*pOplock);
	pSMB->ParameterOffset = cpu_to_le16(param_offset);
	pSMB->DataOffset = cpu_to_le16(offset);
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_SET_PATH_INFORMATION);
	byte_count = 3 /* pad */  + params + count;

	pSMB->DataCount = cpu_to_le16(count);
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalDataCount = pSMB->DataCount;
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	pSMB->InformationLevel = cpu_to_le16(SMB_POSIX_OPEN);
	pSMB->Reserved4 = 0;
1004
	pSMB->hdr.smb_buf_length += byte_count;
1005 1006 1007 1008 1009 1010 1011 1012
	pSMB->ByteCount = cpu_to_le16(byte_count);
	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
		cFYI(1, ("Posix create returned %d", rc));
		goto psx_create_err;
	}

S
Steve French 已提交
1013
	cFYI(1, ("copying inode info"));
1014 1015 1016 1017 1018 1019 1020 1021
	rc = validate_t2((struct smb_t2_rsp *)pSMBr);

	if (rc || (pSMBr->ByteCount < sizeof(OPEN_PSX_RSP))) {
		rc = -EIO;	/* bad smb */
		goto psx_create_err;
	}

	/* copy return information to pRetData */
1022
	psx_rsp = (OPEN_PSX_RSP *)((char *) &pSMBr->hdr.Protocol
1023
			+ le16_to_cpu(pSMBr->t2.DataOffset));
1024

1025
	*pOplock = le16_to_cpu(psx_rsp->OplockFlags);
S
Steve French 已提交
1026
	if (netfid)
1027 1028 1029
		*netfid = psx_rsp->Fid;   /* cifs fid stays in le */
	/* Let caller know file was created so we can set the mode. */
	/* Do we care about the CreateAction in any other cases? */
S
Steve French 已提交
1030
	if (cpu_to_le32(FILE_CREATE) == psx_rsp->CreateAction)
1031 1032
		*pOplock |= CIFS_CREATE_ACTION;
	/* check to make sure response data is there */
1033 1034
	if (psx_rsp->ReturnedLevel != cpu_to_le16(SMB_QUERY_FILE_UNIX_BASIC)) {
		pRetData->Type = cpu_to_le32(-1); /* unknown */
1035
		cFYI(DBG2, ("unknown type"));
1036
	} else {
S
Steve French 已提交
1037
		if (pSMBr->ByteCount < sizeof(OPEN_PSX_RSP)
1038
					+ sizeof(FILE_UNIX_BASIC_INFO)) {
1039
			cERROR(1, ("Open response data too small"));
1040
			pRetData->Type = cpu_to_le32(-1);
1041 1042
			goto psx_create_err;
		}
1043
		memcpy((char *) pRetData,
1044
			(char *)psx_rsp + sizeof(OPEN_PSX_RSP),
1045
			sizeof(FILE_UNIX_BASIC_INFO));
1046 1047 1048 1049 1050
	}

psx_create_err:
	cifs_buf_release(pSMB);

1051 1052 1053 1054
	if (posix_flags & SMB_O_DIRECTORY)
		cifs_stats_inc(&tcon->num_posixmkdirs);
	else
		cifs_stats_inc(&tcon->num_posixopens);
1055 1056 1057 1058

	if (rc == -EAGAIN)
		goto PsxCreat;

1059
	return rc;
1060 1061
}

1062 1063 1064 1065 1066 1067 1068 1069 1070 1071 1072 1073 1074 1075 1076 1077 1078 1079 1080 1081 1082 1083 1084 1085
static __u16 convert_disposition(int disposition)
{
	__u16 ofun = 0;

	switch (disposition) {
		case FILE_SUPERSEDE:
			ofun = SMBOPEN_OCREATE | SMBOPEN_OTRUNC;
			break;
		case FILE_OPEN:
			ofun = SMBOPEN_OAPPEND;
			break;
		case FILE_CREATE:
			ofun = SMBOPEN_OCREATE;
			break;
		case FILE_OPEN_IF:
			ofun = SMBOPEN_OCREATE | SMBOPEN_OAPPEND;
			break;
		case FILE_OVERWRITE:
			ofun = SMBOPEN_OTRUNC;
			break;
		case FILE_OVERWRITE_IF:
			ofun = SMBOPEN_OCREATE | SMBOPEN_OTRUNC;
			break;
		default:
S
Steve French 已提交
1086
			cFYI(1, ("unknown disposition %d", disposition));
1087 1088 1089 1090 1091
			ofun =  SMBOPEN_OAPPEND; /* regular open */
	}
	return ofun;
}

1092 1093 1094 1095 1096 1097 1098 1099 1100 1101 1102 1103 1104 1105
static int
access_flags_to_smbopen_mode(const int access_flags)
{
	int masked_flags = access_flags & (GENERIC_READ | GENERIC_WRITE);

	if (masked_flags == GENERIC_READ)
		return SMBOPEN_READ;
	else if (masked_flags == GENERIC_WRITE)
		return SMBOPEN_WRITE;

	/* just go for read/write */
	return SMBOPEN_READWRITE;
}

1106 1107 1108
int
SMBLegacyOpen(const int xid, struct cifsTconInfo *tcon,
	    const char *fileName, const int openDisposition,
S
Steve French 已提交
1109 1110
	    const int access_flags, const int create_options, __u16 *netfid,
	    int *pOplock, FILE_ALL_INFO *pfile_info,
1111 1112 1113 1114 1115 1116 1117 1118 1119 1120 1121 1122 1123 1124 1125 1126 1127 1128 1129 1130 1131 1132 1133 1134 1135 1136 1137 1138 1139 1140 1141 1142
	    const struct nls_table *nls_codepage, int remap)
{
	int rc = -EACCES;
	OPENX_REQ *pSMB = NULL;
	OPENX_RSP *pSMBr = NULL;
	int bytes_returned;
	int name_len;
	__u16 count;

OldOpenRetry:
	rc = smb_init(SMB_COM_OPEN_ANDX, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	pSMB->AndXCommand = 0xFF;       /* none */

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		count = 1;      /* account for one byte pad to word boundary */
		name_len =
		   cifsConvertToUCS((__le16 *) (pSMB->fileName + 1),
				    fileName, PATH_MAX, nls_codepage, remap);
		name_len++;     /* trailing null */
		name_len *= 2;
	} else {                /* BB improve check for buffer overruns BB */
		count = 0;      /* no pad */
		name_len = strnlen(fileName, PATH_MAX);
		name_len++;     /* trailing null */
		strncpy(pSMB->fileName, fileName, name_len);
	}
	if (*pOplock & REQ_OPLOCK)
		pSMB->OpenFlags = cpu_to_le16(REQ_OPLOCK);
1143
	else if (*pOplock & REQ_BATCHOPLOCK)
1144
		pSMB->OpenFlags = cpu_to_le16(REQ_BATCHOPLOCK);
1145

1146
	pSMB->OpenFlags |= cpu_to_le16(REQ_MORE_INFO);
1147
	pSMB->Mode = cpu_to_le16(access_flags_to_smbopen_mode(access_flags));
1148 1149 1150 1151 1152
	pSMB->Mode |= cpu_to_le16(0x40); /* deny none */
	/* set file as system file if special file such
	   as fifo and server expecting SFU style and
	   no Unix extensions */

S
Steve French 已提交
1153 1154
	if (create_options & CREATE_OPTION_SPECIAL)
		pSMB->FileAttributes = cpu_to_le16(ATTR_SYSTEM);
S
Steve French 已提交
1155 1156
	else /* BB FIXME BB */
		pSMB->FileAttributes = cpu_to_le16(0/*ATTR_NORMAL*/);
1157

1158 1159
	if (create_options & CREATE_OPTION_READONLY)
		pSMB->FileAttributes |= cpu_to_le16(ATTR_READONLY);
1160 1161

	/* BB FIXME BB */
1162 1163
/*	pSMB->CreateOptions = cpu_to_le32(create_options &
						 CREATE_OPTIONS_MASK); */
1164
	/* BB FIXME END BB */
1165 1166

	pSMB->Sattr = cpu_to_le16(ATTR_HIDDEN | ATTR_SYSTEM | ATTR_DIRECTORY);
1167
	pSMB->OpenFunction = cpu_to_le16(convert_disposition(openDisposition));
1168 1169 1170 1171 1172 1173
	count += name_len;
	pSMB->hdr.smb_buf_length += count;

	pSMB->ByteCount = cpu_to_le16(count);
	/* long_op set to 1 to allow for oplock break timeouts */
	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
1174
			(struct smb_hdr *)pSMBr, &bytes_returned, CIFS_LONG_OP);
1175 1176 1177 1178 1179 1180
	cifs_stats_inc(&tcon->num_opens);
	if (rc) {
		cFYI(1, ("Error in Open = %d", rc));
	} else {
	/* BB verify if wct == 15 */

1181
/*		*pOplock = pSMBr->OplockLevel; */ /* BB take from action field*/
1182 1183 1184 1185 1186

		*netfid = pSMBr->Fid;   /* cifs fid stays in le */
		/* Let caller know file was created so we can set the mode. */
		/* Do we care about the CreateAction in any other cases? */
	/* BB FIXME BB */
S
Steve French 已提交
1187
/*		if (cpu_to_le32(FILE_CREATE) == pSMBr->CreateAction)
1188 1189 1190
			*pOplock |= CIFS_CREATE_ACTION; */
	/* BB FIXME END */

S
Steve French 已提交
1191
		if (pfile_info) {
1192 1193 1194 1195
			pfile_info->CreationTime = 0; /* BB convert CreateTime*/
			pfile_info->LastAccessTime = 0; /* BB fixme */
			pfile_info->LastWriteTime = 0; /* BB fixme */
			pfile_info->ChangeTime = 0;  /* BB fixme */
1196
			pfile_info->Attributes =
1197
				cpu_to_le32(le16_to_cpu(pSMBr->FileAttributes));
1198
			/* the file_info buf is endian converted by caller */
1199 1200 1201
			pfile_info->AllocationSize =
				cpu_to_le64(le32_to_cpu(pSMBr->EndOfFile));
			pfile_info->EndOfFile = pfile_info->AllocationSize;
1202
			pfile_info->NumberOfLinks = cpu_to_le32(1);
1203
			pfile_info->DeletePending = 0;
1204 1205 1206 1207 1208 1209 1210 1211 1212
		}
	}

	cifs_buf_release(pSMB);
	if (rc == -EAGAIN)
		goto OldOpenRetry;
	return rc;
}

L
Linus Torvalds 已提交
1213 1214 1215
int
CIFSSMBOpen(const int xid, struct cifsTconInfo *tcon,
	    const char *fileName, const int openDisposition,
S
Steve French 已提交
1216 1217
	    const int access_flags, const int create_options, __u16 *netfid,
	    int *pOplock, FILE_ALL_INFO *pfile_info,
1218
	    const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
1219 1220 1221 1222 1223 1224 1225 1226 1227 1228 1229 1230 1231 1232 1233 1234 1235 1236 1237
{
	int rc = -EACCES;
	OPEN_REQ *pSMB = NULL;
	OPEN_RSP *pSMBr = NULL;
	int bytes_returned;
	int name_len;
	__u16 count;

openRetry:
	rc = smb_init(SMB_COM_NT_CREATE_ANDX, 24, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	pSMB->AndXCommand = 0xFF;	/* none */

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		count = 1;	/* account for one byte pad to word boundary */
		name_len =
1238
		    cifsConvertToUCS((__le16 *) (pSMB->fileName + 1),
1239
				     fileName, PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
1240 1241 1242
		name_len++;	/* trailing null */
		name_len *= 2;
		pSMB->NameLength = cpu_to_le16(name_len);
1243
	} else {		/* BB improve check for buffer overruns BB */
L
Linus Torvalds 已提交
1244 1245 1246 1247 1248 1249 1250 1251
		count = 0;	/* no pad */
		name_len = strnlen(fileName, PATH_MAX);
		name_len++;	/* trailing null */
		pSMB->NameLength = cpu_to_le16(name_len);
		strncpy(pSMB->fileName, fileName, name_len);
	}
	if (*pOplock & REQ_OPLOCK)
		pSMB->OpenFlags = cpu_to_le32(REQ_OPLOCK);
1252
	else if (*pOplock & REQ_BATCHOPLOCK)
L
Linus Torvalds 已提交
1253 1254 1255
		pSMB->OpenFlags = cpu_to_le32(REQ_BATCHOPLOCK);
	pSMB->DesiredAccess = cpu_to_le32(access_flags);
	pSMB->AllocationSize = 0;
1256 1257 1258
	/* set file as system file if special file such
	   as fifo and server expecting SFU style and
	   no Unix extensions */
S
Steve French 已提交
1259
	if (create_options & CREATE_OPTION_SPECIAL)
1260 1261 1262
		pSMB->FileAttributes = cpu_to_le32(ATTR_SYSTEM);
	else
		pSMB->FileAttributes = cpu_to_le32(ATTR_NORMAL);
1263

L
Linus Torvalds 已提交
1264 1265 1266 1267 1268 1269
	/* XP does not handle ATTR_POSIX_SEMANTICS */
	/* but it helps speed up case sensitive checks for other
	servers such as Samba */
	if (tcon->ses->capabilities & CAP_UNIX)
		pSMB->FileAttributes |= cpu_to_le32(ATTR_POSIX_SEMANTICS);

1270 1271 1272
	if (create_options & CREATE_OPTION_READONLY)
		pSMB->FileAttributes |= cpu_to_le32(ATTR_READONLY);

L
Linus Torvalds 已提交
1273 1274
	pSMB->ShareAccess = cpu_to_le32(FILE_SHARE_ALL);
	pSMB->CreateDisposition = cpu_to_le32(openDisposition);
1275
	pSMB->CreateOptions = cpu_to_le32(create_options & CREATE_OPTIONS_MASK);
1276 1277
	/* BB Expirement with various impersonation levels and verify */
	pSMB->ImpersonationLevel = cpu_to_le32(SECURITY_IMPERSONATION);
L
Linus Torvalds 已提交
1278 1279 1280 1281 1282 1283 1284 1285 1286
	pSMB->SecurityFlags =
	    SECURITY_CONTEXT_TRACKING | SECURITY_EFFECTIVE_ONLY;

	count += name_len;
	pSMB->hdr.smb_buf_length += count;

	pSMB->ByteCount = cpu_to_le16(count);
	/* long_op set to 1 to allow for oplock break timeouts */
	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
1287
			(struct smb_hdr *)pSMBr, &bytes_returned, CIFS_LONG_OP);
1288
	cifs_stats_inc(&tcon->num_opens);
L
Linus Torvalds 已提交
1289 1290 1291
	if (rc) {
		cFYI(1, ("Error in Open = %d", rc));
	} else {
1292
		*pOplock = pSMBr->OplockLevel; /* 1 byte no need to le_to_cpu */
L
Linus Torvalds 已提交
1293 1294 1295
		*netfid = pSMBr->Fid;	/* cifs fid stays in le */
		/* Let caller know file was created so we can set the mode. */
		/* Do we care about the CreateAction in any other cases? */
S
Steve French 已提交
1296
		if (cpu_to_le32(FILE_CREATE) == pSMBr->CreateAction)
1297
			*pOplock |= CIFS_CREATE_ACTION;
S
Steve French 已提交
1298
		if (pfile_info) {
1299 1300 1301 1302 1303 1304 1305
			memcpy((char *)pfile_info, (char *)&pSMBr->CreationTime,
				36 /* CreationTime to Attributes */);
			/* the file_info buf is endian converted by caller */
			pfile_info->AllocationSize = pSMBr->AllocationSize;
			pfile_info->EndOfFile = pSMBr->EndOfFile;
			pfile_info->NumberOfLinks = cpu_to_le32(1);
			pfile_info->DeletePending = 0;
L
Linus Torvalds 已提交
1306 1307
		}
	}
1308

L
Linus Torvalds 已提交
1309 1310 1311 1312 1313 1314 1315
	cifs_buf_release(pSMB);
	if (rc == -EAGAIN)
		goto openRetry;
	return rc;
}

int
1316 1317 1318
CIFSSMBRead(const int xid, struct cifsTconInfo *tcon, const int netfid,
	    const unsigned int count, const __u64 lseek, unsigned int *nbytes,
	    char **buf, int *pbuf_type)
L
Linus Torvalds 已提交
1319 1320 1321 1322 1323
{
	int rc = -EACCES;
	READ_REQ *pSMB = NULL;
	READ_RSP *pSMBr = NULL;
	char *pReadData = NULL;
1324
	int wct;
1325 1326
	int resp_buf_type = 0;
	struct kvec iov[1];
L
Linus Torvalds 已提交
1327

S
Steve French 已提交
1328 1329
	cFYI(1, ("Reading %d bytes on fid %d", count, netfid));
	if (tcon->ses->capabilities & CAP_LARGE_FILES)
1330
		wct = 12;
1331
	else {
1332
		wct = 10; /* old style read */
1333 1334 1335 1336 1337
		if ((lseek >> 32) > 0)  {
			/* can not handle this big offset for old */
			return -EIO;
		}
	}
L
Linus Torvalds 已提交
1338 1339

	*nbytes = 0;
1340
	rc = small_smb_init(SMB_COM_READ_ANDX, wct, tcon, (void **) &pSMB);
L
Linus Torvalds 已提交
1341 1342 1343 1344 1345 1346 1347
	if (rc)
		return rc;

	/* tcon and ses pointer are checked in smb_init */
	if (tcon->ses->server == NULL)
		return -ECONNABORTED;

1348
	pSMB->AndXCommand = 0xFF;       /* none */
L
Linus Torvalds 已提交
1349 1350
	pSMB->Fid = netfid;
	pSMB->OffsetLow = cpu_to_le32(lseek & 0xFFFFFFFF);
S
Steve French 已提交
1351
	if (wct == 12)
1352 1353
		pSMB->OffsetHigh = cpu_to_le32(lseek >> 32);

L
Linus Torvalds 已提交
1354 1355 1356
	pSMB->Remaining = 0;
	pSMB->MaxCount = cpu_to_le16(count & 0xFFFF);
	pSMB->MaxCountHigh = cpu_to_le32(count >> 16);
S
Steve French 已提交
1357
	if (wct == 12)
1358 1359 1360
		pSMB->ByteCount = 0;  /* no need to do le conversion since 0 */
	else {
		/* old style read */
1361
		struct smb_com_readx_req *pSMBW =
1362
			(struct smb_com_readx_req *)pSMB;
1363
		pSMBW->ByteCount = 0;
1364
	}
1365 1366 1367

	iov[0].iov_base = (char *)pSMB;
	iov[0].iov_len = pSMB->hdr.smb_buf_length + 4;
1368
	rc = SendReceive2(xid, tcon->ses, iov, 1 /* num iovecs */,
1369
			 &resp_buf_type, CIFS_STD_OP | CIFS_LOG_ERROR);
1370
	cifs_stats_inc(&tcon->num_reads);
1371
	pSMBr = (READ_RSP *)iov[0].iov_base;
L
Linus Torvalds 已提交
1372 1373 1374 1375 1376 1377 1378 1379 1380
	if (rc) {
		cERROR(1, ("Send error in read = %d", rc));
	} else {
		int data_length = le16_to_cpu(pSMBr->DataLengthHigh);
		data_length = data_length << 16;
		data_length += le16_to_cpu(pSMBr->DataLength);
		*nbytes = data_length;

		/*check that DataLength would not go beyond end of SMB */
1381
		if ((data_length > CIFSMaxBufSize)
L
Linus Torvalds 已提交
1382
				|| (data_length > count)) {
1383 1384
			cFYI(1, ("bad length %d for count %d",
				 data_length, count));
L
Linus Torvalds 已提交
1385 1386 1387
			rc = -EIO;
			*nbytes = 0;
		} else {
1388
			pReadData = (char *) (&pSMBr->hdr.Protocol) +
1389 1390
					le16_to_cpu(pSMBr->DataOffset);
/*			if (rc = copy_to_user(buf, pReadData, data_length)) {
1391 1392
				cERROR(1,("Faulting on read rc = %d",rc));
				rc = -EFAULT;
1393
			}*/ /* can not use copy_to_user when using page cache*/
S
Steve French 已提交
1394
			if (*buf)
1395
				memcpy(*buf, pReadData, data_length);
L
Linus Torvalds 已提交
1396 1397 1398
		}
	}

1399
/*	cifs_small_buf_release(pSMB); */ /* Freed earlier now in SendReceive2 */
S
Steve French 已提交
1400 1401
	if (*buf) {
		if (resp_buf_type == CIFS_SMALL_BUFFER)
1402
			cifs_small_buf_release(iov[0].iov_base);
S
Steve French 已提交
1403
		else if (resp_buf_type == CIFS_LARGE_BUFFER)
1404
			cifs_buf_release(iov[0].iov_base);
S
Steve French 已提交
1405
	} else if (resp_buf_type != CIFS_NO_BUFFER) {
1406 1407
		/* return buffer to caller to free */
		*buf = iov[0].iov_base;
S
Steve French 已提交
1408
		if (resp_buf_type == CIFS_SMALL_BUFFER)
1409
			*pbuf_type = CIFS_SMALL_BUFFER;
S
Steve French 已提交
1410
		else if (resp_buf_type == CIFS_LARGE_BUFFER)
1411
			*pbuf_type = CIFS_LARGE_BUFFER;
1412
	} /* else no valid buffer on return - leave as null */
1413 1414

	/* Note: On -EAGAIN error only caller can retry on handle based calls
L
Linus Torvalds 已提交
1415 1416 1417 1418
		since file handle passed in no longer valid */
	return rc;
}

1419

L
Linus Torvalds 已提交
1420 1421 1422 1423
int
CIFSSMBWrite(const int xid, struct cifsTconInfo *tcon,
	     const int netfid, const unsigned int count,
	     const __u64 offset, unsigned int *nbytes, const char *buf,
1424
	     const char __user *ubuf, const int long_op)
L
Linus Torvalds 已提交
1425 1426 1427 1428
{
	int rc = -EACCES;
	WRITE_REQ *pSMB = NULL;
	WRITE_RSP *pSMBr = NULL;
1429
	int bytes_returned, wct;
L
Linus Torvalds 已提交
1430 1431 1432
	__u32 bytes_sent;
	__u16 byte_count;

S
Steve French 已提交
1433
	/* cFYI(1, ("write at %lld %d bytes", offset, count));*/
S
Steve French 已提交
1434
	if (tcon->ses == NULL)
1435 1436
		return -ECONNABORTED;

S
Steve French 已提交
1437
	if (tcon->ses->capabilities & CAP_LARGE_FILES)
1438
		wct = 14;
1439
	else {
1440
		wct = 12;
1441 1442 1443 1444 1445
		if ((offset >> 32) > 0) {
			/* can not handle big offset for old srv */
			return -EIO;
		}
	}
1446 1447

	rc = smb_init(SMB_COM_WRITE_ANDX, wct, tcon, (void **) &pSMB,
L
Linus Torvalds 已提交
1448 1449 1450 1451 1452 1453 1454 1455 1456 1457
		      (void **) &pSMBr);
	if (rc)
		return rc;
	/* tcon and ses pointer are checked in smb_init */
	if (tcon->ses->server == NULL)
		return -ECONNABORTED;

	pSMB->AndXCommand = 0xFF;	/* none */
	pSMB->Fid = netfid;
	pSMB->OffsetLow = cpu_to_le32(offset & 0xFFFFFFFF);
S
Steve French 已提交
1458
	if (wct == 14)
1459
		pSMB->OffsetHigh = cpu_to_le32(offset >> 32);
1460

L
Linus Torvalds 已提交
1461 1462 1463 1464
	pSMB->Reserved = 0xFFFFFFFF;
	pSMB->WriteMode = 0;
	pSMB->Remaining = 0;

1465
	/* Can increase buffer size if buffer is big enough in some cases ie we
L
Linus Torvalds 已提交
1466 1467 1468
	can send more if LARGE_WRITE_X capability returned by the server and if
	our buffer is big enough or if we convert to iovecs on socket writes
	and eliminate the copy to the CIFS buffer */
S
Steve French 已提交
1469
	if (tcon->ses->capabilities & CAP_LARGE_WRITE_X) {
L
Linus Torvalds 已提交
1470 1471 1472 1473 1474 1475 1476 1477 1478
		bytes_sent = min_t(const unsigned int, CIFSMaxBufSize, count);
	} else {
		bytes_sent = (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE)
			 & ~0xFF;
	}

	if (bytes_sent > count)
		bytes_sent = count;
	pSMB->DataOffset =
1479
		cpu_to_le16(offsetof(struct smb_com_write_req, Data) - 4);
S
Steve French 已提交
1480
	if (buf)
1481
		memcpy(pSMB->Data, buf, bytes_sent);
S
Steve French 已提交
1482 1483
	else if (ubuf) {
		if (copy_from_user(pSMB->Data, ubuf, bytes_sent)) {
L
Linus Torvalds 已提交
1484 1485 1486
			cifs_buf_release(pSMB);
			return -EFAULT;
		}
1487
	} else if (count != 0) {
L
Linus Torvalds 已提交
1488 1489 1490
		/* No buffer */
		cifs_buf_release(pSMB);
		return -EINVAL;
1491
	} /* else setting file size with write of zero bytes */
S
Steve French 已提交
1492
	if (wct == 14)
1493
		byte_count = bytes_sent + 1; /* pad */
S
Steve French 已提交
1494
	else /* wct == 12 */
1495
		byte_count = bytes_sent + 5; /* bigger pad, smaller smb hdr */
S
Steve French 已提交
1496

L
Linus Torvalds 已提交
1497 1498
	pSMB->DataLengthLow = cpu_to_le16(bytes_sent & 0xFFFF);
	pSMB->DataLengthHigh = cpu_to_le16(bytes_sent >> 16);
1499
	pSMB->hdr.smb_buf_length += byte_count;
1500

S
Steve French 已提交
1501
	if (wct == 14)
1502
		pSMB->ByteCount = cpu_to_le16(byte_count);
1503 1504 1505
	else { /* old style write has byte count 4 bytes earlier
		  so 4 bytes pad  */
		struct smb_com_writex_req *pSMBW =
1506 1507 1508
			(struct smb_com_writex_req *)pSMB;
		pSMBW->ByteCount = cpu_to_le16(byte_count);
	}
L
Linus Torvalds 已提交
1509 1510 1511

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, long_op);
1512
	cifs_stats_inc(&tcon->num_writes);
L
Linus Torvalds 已提交
1513 1514 1515 1516 1517 1518 1519 1520 1521 1522 1523
	if (rc) {
		cFYI(1, ("Send error in write = %d", rc));
		*nbytes = 0;
	} else {
		*nbytes = le16_to_cpu(pSMBr->CountHigh);
		*nbytes = (*nbytes) << 16;
		*nbytes += le16_to_cpu(pSMBr->Count);
	}

	cifs_buf_release(pSMB);

1524
	/* Note: On -EAGAIN error only caller can retry on handle based calls
L
Linus Torvalds 已提交
1525 1526 1527 1528 1529
		since file handle passed in no longer valid */

	return rc;
}

1530 1531
int
CIFSSMBWrite2(const int xid, struct cifsTconInfo *tcon,
L
Linus Torvalds 已提交
1532
	     const int netfid, const unsigned int count,
1533 1534
	     const __u64 offset, unsigned int *nbytes, struct kvec *iov,
	     int n_vec, const int long_op)
L
Linus Torvalds 已提交
1535 1536 1537
{
	int rc = -EACCES;
	WRITE_REQ *pSMB = NULL;
1538
	int wct;
1539
	int smb_hdr_len;
1540
	int resp_buf_type = 0;
L
Linus Torvalds 已提交
1541

1542 1543
	*nbytes = 0;

S
Steve French 已提交
1544
	cFYI(1, ("write2 at %lld %d bytes", (long long)offset, count));
1545

1546
	if (tcon->ses->capabilities & CAP_LARGE_FILES) {
1547
		wct = 14;
1548
	} else {
1549
		wct = 12;
1550 1551 1552 1553 1554
		if ((offset >> 32) > 0) {
			/* can not handle big offset for old srv */
			return -EIO;
		}
	}
1555
	rc = small_smb_init(SMB_COM_WRITE_ANDX, wct, tcon, (void **) &pSMB);
L
Linus Torvalds 已提交
1556 1557 1558 1559 1560 1561
	if (rc)
		return rc;
	/* tcon and ses pointer are checked in smb_init */
	if (tcon->ses->server == NULL)
		return -ECONNABORTED;

1562
	pSMB->AndXCommand = 0xFF;	/* none */
L
Linus Torvalds 已提交
1563 1564
	pSMB->Fid = netfid;
	pSMB->OffsetLow = cpu_to_le32(offset & 0xFFFFFFFF);
S
Steve French 已提交
1565
	if (wct == 14)
1566
		pSMB->OffsetHigh = cpu_to_le32(offset >> 32);
L
Linus Torvalds 已提交
1567 1568 1569
	pSMB->Reserved = 0xFFFFFFFF;
	pSMB->WriteMode = 0;
	pSMB->Remaining = 0;
1570

L
Linus Torvalds 已提交
1571
	pSMB->DataOffset =
1572
	    cpu_to_le16(offsetof(struct smb_com_write_req, Data) - 4);
L
Linus Torvalds 已提交
1573

1574 1575
	pSMB->DataLengthLow = cpu_to_le16(count & 0xFFFF);
	pSMB->DataLengthHigh = cpu_to_le16(count >> 16);
1576
	smb_hdr_len = pSMB->hdr.smb_buf_length + 1; /* hdr + 1 byte pad */
S
Steve French 已提交
1577
	if (wct == 14)
1578 1579
		pSMB->hdr.smb_buf_length += count+1;
	else /* wct == 12 */
S
Steve French 已提交
1580 1581
		pSMB->hdr.smb_buf_length += count+5; /* smb data starts later */
	if (wct == 14)
1582 1583
		pSMB->ByteCount = cpu_to_le16(count + 1);
	else /* wct == 12 */ /* bigger pad, smaller smb hdr, keep offset ok */ {
1584
		struct smb_com_writex_req *pSMBW =
1585 1586 1587
				(struct smb_com_writex_req *)pSMB;
		pSMBW->ByteCount = cpu_to_le16(count + 5);
	}
1588
	iov[0].iov_base = pSMB;
S
Steve French 已提交
1589
	if (wct == 14)
1590 1591 1592
		iov[0].iov_len = smb_hdr_len + 4;
	else /* wct == 12 pad bigger by four bytes */
		iov[0].iov_len = smb_hdr_len + 8;
1593

L
Linus Torvalds 已提交
1594

1595
	rc = SendReceive2(xid, tcon->ses, iov, n_vec + 1, &resp_buf_type,
1596
			  long_op);
1597
	cifs_stats_inc(&tcon->num_writes);
L
Linus Torvalds 已提交
1598
	if (rc) {
1599
		cFYI(1, ("Send error Write2 = %d", rc));
S
Steve French 已提交
1600
	} else if (resp_buf_type == 0) {
1601 1602
		/* presumably this can not happen, but best to be safe */
		rc = -EIO;
1603
	} else {
S
Steve French 已提交
1604
		WRITE_RSP *pSMBr = (WRITE_RSP *)iov[0].iov_base;
1605 1606 1607
		*nbytes = le16_to_cpu(pSMBr->CountHigh);
		*nbytes = (*nbytes) << 16;
		*nbytes += le16_to_cpu(pSMBr->Count);
1608
	}
L
Linus Torvalds 已提交
1609

1610
/*	cifs_small_buf_release(pSMB); */ /* Freed earlier now in SendReceive2 */
S
Steve French 已提交
1611
	if (resp_buf_type == CIFS_SMALL_BUFFER)
1612
		cifs_small_buf_release(iov[0].iov_base);
S
Steve French 已提交
1613
	else if (resp_buf_type == CIFS_LARGE_BUFFER)
1614
		cifs_buf_release(iov[0].iov_base);
L
Linus Torvalds 已提交
1615

1616
	/* Note: On -EAGAIN error only caller can retry on handle based calls
L
Linus Torvalds 已提交
1617 1618 1619 1620
		since file handle passed in no longer valid */

	return rc;
}
1621 1622


L
Linus Torvalds 已提交
1623 1624 1625 1626
int
CIFSSMBLock(const int xid, struct cifsTconInfo *tcon,
	    const __u16 smb_file_id, const __u64 len,
	    const __u64 offset, const __u32 numUnlock,
1627
	    const __u32 numLock, const __u8 lockType, const bool waitFlag)
L
Linus Torvalds 已提交
1628 1629 1630
{
	int rc = 0;
	LOCK_REQ *pSMB = NULL;
S
Steve French 已提交
1631
/*	LOCK_RSP *pSMBr = NULL; */ /* No response data other than rc to parse */
L
Linus Torvalds 已提交
1632 1633 1634 1635
	int bytes_returned;
	int timeout = 0;
	__u16 count;

1636
	cFYI(1, ("CIFSSMBLock timeout %d numLock %d", (int)waitFlag, numLock));
1637 1638
	rc = small_smb_init(SMB_COM_LOCKING_ANDX, 8, tcon, (void **) &pSMB);

L
Linus Torvalds 已提交
1639 1640 1641
	if (rc)
		return rc;

S
Steve French 已提交
1642
	if (lockType == LOCKING_ANDX_OPLOCK_RELEASE) {
1643
		timeout = CIFS_ASYNC_OP; /* no response expected */
L
Linus Torvalds 已提交
1644
		pSMB->Timeout = 0;
1645
	} else if (waitFlag) {
1646
		timeout = CIFS_BLOCKING_OP; /* blocking operation, no timeout */
L
Linus Torvalds 已提交
1647 1648 1649 1650 1651 1652 1653 1654 1655 1656 1657
		pSMB->Timeout = cpu_to_le32(-1);/* blocking - do not time out */
	} else {
		pSMB->Timeout = 0;
	}

	pSMB->NumberOfLocks = cpu_to_le16(numLock);
	pSMB->NumberOfUnlocks = cpu_to_le16(numUnlock);
	pSMB->LockType = lockType;
	pSMB->AndXCommand = 0xFF;	/* none */
	pSMB->Fid = smb_file_id; /* netfid stays le */

S
Steve French 已提交
1658
	if ((numLock != 0) || (numUnlock != 0)) {
L
Linus Torvalds 已提交
1659 1660 1661 1662 1663 1664 1665 1666 1667 1668 1669 1670 1671 1672
		pSMB->Locks[0].Pid = cpu_to_le16(current->tgid);
		/* BB where to store pid high? */
		pSMB->Locks[0].LengthLow = cpu_to_le32((u32)len);
		pSMB->Locks[0].LengthHigh = cpu_to_le32((u32)(len>>32));
		pSMB->Locks[0].OffsetLow = cpu_to_le32((u32)offset);
		pSMB->Locks[0].OffsetHigh = cpu_to_le32((u32)(offset>>32));
		count = sizeof(LOCKING_ANDX_RANGE);
	} else {
		/* oplock break */
		count = 0;
	}
	pSMB->hdr.smb_buf_length += count;
	pSMB->ByteCount = cpu_to_le16(count);

J
[CIFS]  
Jeremy Allison 已提交
1673 1674
	if (waitFlag) {
		rc = SendReceiveBlockingLock(xid, tcon, (struct smb_hdr *) pSMB,
S
Steve French 已提交
1675
			(struct smb_hdr *) pSMB, &bytes_returned);
1676
		cifs_small_buf_release(pSMB);
J
[CIFS]  
Jeremy Allison 已提交
1677
	} else {
1678 1679 1680
		rc = SendReceiveNoRsp(xid, tcon->ses, (struct smb_hdr *)pSMB,
				      timeout);
		/* SMB buffer freed by function above */
J
[CIFS]  
Jeremy Allison 已提交
1681
	}
1682
	cifs_stats_inc(&tcon->num_locks);
S
Steve French 已提交
1683
	if (rc)
L
Linus Torvalds 已提交
1684 1685
		cFYI(1, ("Send error in Lock = %d", rc));

1686
	/* Note: On -EAGAIN error only caller can retry on handle based calls
L
Linus Torvalds 已提交
1687 1688 1689 1690
	since file handle passed in no longer valid */
	return rc;
}

1691 1692 1693
int
CIFSSMBPosixLock(const int xid, struct cifsTconInfo *tcon,
		const __u16 smb_file_id, const int get_flag, const __u64 len,
1694
		struct file_lock *pLockData, const __u16 lock_type,
1695
		const bool waitFlag)
1696 1697 1698 1699 1700
{
	struct smb_com_transaction2_sfi_req *pSMB  = NULL;
	struct smb_com_transaction2_sfi_rsp *pSMBr = NULL;
	struct cifs_posix_lock *parm_data;
	int rc = 0;
1701
	int timeout = 0;
1702
	int bytes_returned = 0;
1703
	int resp_buf_type = 0;
1704
	__u16 params, param_offset, offset, byte_count, count;
1705
	struct kvec iov[1];
1706 1707

	cFYI(1, ("Posix Lock"));
1708

S
Steve French 已提交
1709
	if (pLockData == NULL)
1710
		return -EINVAL;
1711

1712 1713 1714 1715 1716 1717 1718
	rc = small_smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB);

	if (rc)
		return rc;

	pSMBr = (struct smb_com_transaction2_sfi_rsp *)pSMB;

1719
	params = 6;
1720 1721 1722 1723 1724 1725 1726 1727 1728
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Reserved2 = 0;
	param_offset = offsetof(struct smb_com_transaction2_sfi_req, Fid) - 4;
	offset = param_offset + params;

	count = sizeof(struct cifs_posix_lock);
	pSMB->MaxParameterCount = cpu_to_le16(2);
S
Steve French 已提交
1729
	pSMB->MaxDataCount = cpu_to_le16(1000); /* BB find max SMB from sess */
1730 1731
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
S
Steve French 已提交
1732
	if (get_flag)
1733 1734 1735 1736 1737 1738 1739 1740 1741
		pSMB->SubCommand = cpu_to_le16(TRANS2_QUERY_FILE_INFORMATION);
	else
		pSMB->SubCommand = cpu_to_le16(TRANS2_SET_FILE_INFORMATION);
	byte_count = 3 /* pad */  + params + count;
	pSMB->DataCount = cpu_to_le16(count);
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalDataCount = pSMB->DataCount;
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	pSMB->ParameterOffset = cpu_to_le16(param_offset);
1742
	parm_data = (struct cifs_posix_lock *)
1743 1744 1745
			(((char *) &pSMB->hdr.Protocol) + offset);

	parm_data->lock_type = cpu_to_le16(lock_type);
S
Steve French 已提交
1746
	if (waitFlag) {
1747
		timeout = CIFS_BLOCKING_OP; /* blocking operation, no timeout */
1748
		parm_data->lock_flags = cpu_to_le16(1);
1749 1750 1751 1752
		pSMB->Timeout = cpu_to_le32(-1);
	} else
		pSMB->Timeout = 0;

1753
	parm_data->pid = cpu_to_le32(current->tgid);
1754
	parm_data->start = cpu_to_le64(pLockData->fl_start);
1755
	parm_data->length = cpu_to_le64(len);  /* normalize negative numbers */
1756 1757

	pSMB->DataOffset = cpu_to_le16(offset);
1758
	pSMB->Fid = smb_file_id;
1759 1760 1761 1762
	pSMB->InformationLevel = cpu_to_le16(SMB_SET_POSIX_LOCK);
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);
J
[CIFS]  
Jeremy Allison 已提交
1763 1764 1765 1766
	if (waitFlag) {
		rc = SendReceiveBlockingLock(xid, tcon, (struct smb_hdr *) pSMB,
			(struct smb_hdr *) pSMBr, &bytes_returned);
	} else {
1767 1768 1769 1770 1771 1772 1773
		iov[0].iov_base = (char *)pSMB;
		iov[0].iov_len = pSMB->hdr.smb_buf_length + 4;
		rc = SendReceive2(xid, tcon->ses, iov, 1 /* num iovecs */,
				&resp_buf_type, timeout);
		pSMB = NULL; /* request buf already freed by SendReceive2. Do
				not try to free it twice below on exit */
		pSMBr = (struct smb_com_transaction2_sfi_rsp *)iov[0].iov_base;
J
[CIFS]  
Jeremy Allison 已提交
1774 1775
	}

1776 1777
	if (rc) {
		cFYI(1, ("Send error in Posix Lock = %d", rc));
1778 1779 1780 1781 1782 1783 1784 1785 1786 1787 1788 1789
	} else if (get_flag) {
		/* lock structure can be returned on get */
		__u16 data_offset;
		__u16 data_count;
		rc = validate_t2((struct smb_t2_rsp *)pSMBr);

		if (rc || (pSMBr->ByteCount < sizeof(struct cifs_posix_lock))) {
			rc = -EIO;      /* bad smb */
			goto plk_err_exit;
		}
		data_offset = le16_to_cpu(pSMBr->t2.DataOffset);
		data_count  = le16_to_cpu(pSMBr->t2.DataCount);
S
Steve French 已提交
1790
		if (data_count < sizeof(struct cifs_posix_lock)) {
1791 1792 1793 1794 1795
			rc = -EIO;
			goto plk_err_exit;
		}
		parm_data = (struct cifs_posix_lock *)
			((char *)&pSMBr->hdr.Protocol + data_offset);
S
Steve French 已提交
1796
		if (parm_data->lock_type == cpu_to_le16(CIFS_UNLCK))
1797
			pLockData->fl_type = F_UNLCK;
1798
	}
1799

1800
plk_err_exit:
1801 1802 1803
	if (pSMB)
		cifs_small_buf_release(pSMB);

1804 1805 1806 1807 1808
	if (resp_buf_type == CIFS_SMALL_BUFFER)
		cifs_small_buf_release(iov[0].iov_base);
	else if (resp_buf_type == CIFS_LARGE_BUFFER)
		cifs_buf_release(iov[0].iov_base);

1809 1810 1811 1812 1813 1814 1815
	/* Note: On -EAGAIN error only caller can retry on handle based calls
	   since file handle passed in no longer valid */

	return rc;
}


L
Linus Torvalds 已提交
1816 1817 1818 1819 1820 1821 1822 1823 1824
int
CIFSSMBClose(const int xid, struct cifsTconInfo *tcon, int smb_file_id)
{
	int rc = 0;
	CLOSE_REQ *pSMB = NULL;
	cFYI(1, ("In CIFSSMBClose"));

/* do not retry on dead session on close */
	rc = small_smb_init(SMB_COM_CLOSE, 3, tcon, (void **) &pSMB);
S
Steve French 已提交
1825
	if (rc == -EAGAIN)
L
Linus Torvalds 已提交
1826 1827 1828 1829 1830
		return 0;
	if (rc)
		return rc;

	pSMB->FileID = (__u16) smb_file_id;
1831
	pSMB->LastWriteTime = 0xFFFFFFFF;
L
Linus Torvalds 已提交
1832
	pSMB->ByteCount = 0;
1833
	rc = SendReceiveNoRsp(xid, tcon->ses, (struct smb_hdr *) pSMB, 0);
1834
	cifs_stats_inc(&tcon->num_closes);
L
Linus Torvalds 已提交
1835
	if (rc) {
S
Steve French 已提交
1836
		if (rc != -EINTR) {
L
Linus Torvalds 已提交
1837 1838 1839 1840 1841 1842
			/* EINTR is expected when user ctl-c to kill app */
			cERROR(1, ("Send error in Close = %d", rc));
		}
	}

	/* Since session is dead, file will be closed on server already */
S
Steve French 已提交
1843
	if (rc == -EAGAIN)
L
Linus Torvalds 已提交
1844 1845 1846 1847 1848
		rc = 0;

	return rc;
}

1849 1850 1851 1852 1853 1854 1855 1856 1857 1858 1859 1860 1861 1862 1863 1864 1865 1866 1867 1868 1869
int
CIFSSMBFlush(const int xid, struct cifsTconInfo *tcon, int smb_file_id)
{
	int rc = 0;
	FLUSH_REQ *pSMB = NULL;
	cFYI(1, ("In CIFSSMBFlush"));

	rc = small_smb_init(SMB_COM_FLUSH, 1, tcon, (void **) &pSMB);
	if (rc)
		return rc;

	pSMB->FileID = (__u16) smb_file_id;
	pSMB->ByteCount = 0;
	rc = SendReceiveNoRsp(xid, tcon->ses, (struct smb_hdr *) pSMB, 0);
	cifs_stats_inc(&tcon->num_flushes);
	if (rc)
		cERROR(1, ("Send error in Flush = %d", rc));

	return rc;
}

L
Linus Torvalds 已提交
1870 1871 1872
int
CIFSSMBRename(const int xid, struct cifsTconInfo *tcon,
	      const char *fromName, const char *toName,
1873
	      const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
1874 1875 1876 1877 1878 1879 1880 1881 1882 1883 1884 1885 1886 1887 1888 1889 1890 1891 1892 1893 1894 1895
{
	int rc = 0;
	RENAME_REQ *pSMB = NULL;
	RENAME_RSP *pSMBr = NULL;
	int bytes_returned;
	int name_len, name_len2;
	__u16 count;

	cFYI(1, ("In CIFSSMBRename"));
renameRetry:
	rc = smb_init(SMB_COM_RENAME, 1, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	pSMB->BufferFormat = 0x04;
	pSMB->SearchAttributes =
	    cpu_to_le16(ATTR_READONLY | ATTR_HIDDEN | ATTR_SYSTEM |
			ATTR_DIRECTORY);

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
1896
		    cifsConvertToUCS((__le16 *) pSMB->OldFileName, fromName,
1897
				     PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
1898 1899 1900 1901 1902 1903
		name_len++;	/* trailing null */
		name_len *= 2;
		pSMB->OldFileName[name_len] = 0x04;	/* pad */
	/* protocol requires ASCII signature byte on Unicode string */
		pSMB->OldFileName[name_len + 1] = 0x00;
		name_len2 =
1904
		    cifsConvertToUCS((__le16 *)&pSMB->OldFileName[name_len + 2],
1905
				     toName, PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
1906 1907
		name_len2 += 1 /* trailing null */  + 1 /* Signature word */ ;
		name_len2 *= 2;	/* convert to bytes */
1908
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
1909 1910 1911 1912 1913 1914 1915 1916 1917 1918 1919 1920 1921 1922 1923 1924 1925
		name_len = strnlen(fromName, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->OldFileName, fromName, name_len);
		name_len2 = strnlen(toName, PATH_MAX);
		name_len2++;	/* trailing null */
		pSMB->OldFileName[name_len] = 0x04;  /* 2nd buffer format */
		strncpy(&pSMB->OldFileName[name_len + 1], toName, name_len2);
		name_len2++;	/* trailing null */
		name_len2++;	/* signature byte */
	}

	count = 1 /* 1st signature byte */  + name_len + name_len2;
	pSMB->hdr.smb_buf_length += count;
	pSMB->ByteCount = cpu_to_le16(count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
1926
	cifs_stats_inc(&tcon->num_renames);
S
Steve French 已提交
1927
	if (rc)
L
Linus Torvalds 已提交
1928 1929 1930 1931 1932 1933 1934 1935 1936 1937
		cFYI(1, ("Send error in rename = %d", rc));

	cifs_buf_release(pSMB);

	if (rc == -EAGAIN)
		goto renameRetry;

	return rc;
}

1938
int CIFSSMBRenameOpenFile(const int xid, struct cifsTconInfo *pTcon,
1939
		int netfid, const char *target_name,
1940
		const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
1941 1942 1943
{
	struct smb_com_transaction2_sfi_req *pSMB  = NULL;
	struct smb_com_transaction2_sfi_rsp *pSMBr = NULL;
1944
	struct set_file_rename *rename_info;
L
Linus Torvalds 已提交
1945 1946 1947 1948 1949 1950 1951 1952 1953 1954 1955 1956 1957 1958 1959 1960 1961 1962 1963 1964 1965 1966 1967 1968 1969
	char *data_offset;
	char dummy_string[30];
	int rc = 0;
	int bytes_returned = 0;
	int len_of_str;
	__u16 params, param_offset, offset, count, byte_count;

	cFYI(1, ("Rename to File by handle"));
	rc = smb_init(SMB_COM_TRANSACTION2, 15, pTcon, (void **) &pSMB,
			(void **) &pSMBr);
	if (rc)
		return rc;

	params = 6;
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	param_offset = offsetof(struct smb_com_transaction2_sfi_req, Fid) - 4;
	offset = param_offset + params;

	data_offset = (char *) (&pSMB->hdr.Protocol) + offset;
	rename_info = (struct set_file_rename *) data_offset;
	pSMB->MaxParameterCount = cpu_to_le16(2);
S
Steve French 已提交
1970
	pSMB->MaxDataCount = cpu_to_le16(1000); /* BB find max SMB from sess */
L
Linus Torvalds 已提交
1971 1972 1973 1974 1975 1976 1977 1978 1979 1980 1981 1982
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_SET_FILE_INFORMATION);
	byte_count = 3 /* pad */  + params;
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	pSMB->ParameterOffset = cpu_to_le16(param_offset);
	pSMB->DataOffset = cpu_to_le16(offset);
	/* construct random name ".cifs_tmp<inodenum><mid>" */
	rename_info->overwrite = cpu_to_le32(1);
	rename_info->root_fid  = 0;
	/* unicode only call */
S
Steve French 已提交
1983
	if (target_name == NULL) {
1984 1985
		sprintf(dummy_string, "cifs%x", pSMB->hdr.Mid);
		len_of_str = cifsConvertToUCS((__le16 *)rename_info->target_name,
1986
					dummy_string, 24, nls_codepage, remap);
L
Linus Torvalds 已提交
1987
	} else {
1988
		len_of_str = cifsConvertToUCS((__le16 *)rename_info->target_name,
1989 1990
					target_name, PATH_MAX, nls_codepage,
					remap);
L
Linus Torvalds 已提交
1991 1992
	}
	rename_info->target_name_len = cpu_to_le32(2 * len_of_str);
1993
	count = 12 /* sizeof(struct set_file_rename) */ + (2 * len_of_str);
L
Linus Torvalds 已提交
1994 1995 1996 1997 1998 1999 2000 2001 2002 2003
	byte_count += count;
	pSMB->DataCount = cpu_to_le16(count);
	pSMB->TotalDataCount = pSMB->DataCount;
	pSMB->Fid = netfid;
	pSMB->InformationLevel =
		cpu_to_le16(SMB_SET_FILE_RENAME_INFORMATION);
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);
	rc = SendReceive(xid, pTcon->ses, (struct smb_hdr *) pSMB,
2004
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
2005
	cifs_stats_inc(&pTcon->num_t2renames);
S
Steve French 已提交
2006
	if (rc)
S
Steve French 已提交
2007
		cFYI(1, ("Send error in Rename (by file handle) = %d", rc));
2008

L
Linus Torvalds 已提交
2009 2010 2011 2012 2013 2014 2015 2016 2017
	cifs_buf_release(pSMB);

	/* Note: On -EAGAIN error only caller can retry on handle based calls
		since file handle passed in no longer valid */

	return rc;
}

int
2018 2019 2020
CIFSSMBCopy(const int xid, struct cifsTconInfo *tcon, const char *fromName,
	    const __u16 target_tid, const char *toName, const int flags,
	    const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
2021 2022 2023 2024 2025 2026 2027 2028 2029 2030 2031 2032 2033 2034 2035 2036 2037 2038 2039 2040 2041
{
	int rc = 0;
	COPY_REQ *pSMB = NULL;
	COPY_RSP *pSMBr = NULL;
	int bytes_returned;
	int name_len, name_len2;
	__u16 count;

	cFYI(1, ("In CIFSSMBCopy"));
copyRetry:
	rc = smb_init(SMB_COM_COPY, 1, tcon, (void **) &pSMB,
			(void **) &pSMBr);
	if (rc)
		return rc;

	pSMB->BufferFormat = 0x04;
	pSMB->Tid2 = target_tid;

	pSMB->Flags = cpu_to_le16(flags & COPY_TREE);

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
2042
		name_len = cifsConvertToUCS((__le16 *) pSMB->OldFileName,
2043 2044
					    fromName, PATH_MAX, nls_codepage,
					    remap);
L
Linus Torvalds 已提交
2045 2046 2047 2048 2049
		name_len++;     /* trailing null */
		name_len *= 2;
		pSMB->OldFileName[name_len] = 0x04;     /* pad */
		/* protocol requires ASCII signature byte on Unicode string */
		pSMB->OldFileName[name_len + 1] = 0x00;
2050 2051
		name_len2 =
		    cifsConvertToUCS((__le16 *)&pSMB->OldFileName[name_len + 2],
2052
				toName, PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
2053 2054
		name_len2 += 1 /* trailing null */  + 1 /* Signature word */ ;
		name_len2 *= 2; /* convert to bytes */
2055
	} else { 	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
2056 2057 2058 2059 2060 2061 2062 2063 2064 2065 2066 2067 2068 2069 2070 2071 2072 2073 2074 2075 2076
		name_len = strnlen(fromName, PATH_MAX);
		name_len++;     /* trailing null */
		strncpy(pSMB->OldFileName, fromName, name_len);
		name_len2 = strnlen(toName, PATH_MAX);
		name_len2++;    /* trailing null */
		pSMB->OldFileName[name_len] = 0x04;  /* 2nd buffer format */
		strncpy(&pSMB->OldFileName[name_len + 1], toName, name_len2);
		name_len2++;    /* trailing null */
		name_len2++;    /* signature byte */
	}

	count = 1 /* 1st signature byte */  + name_len + name_len2;
	pSMB->hdr.smb_buf_length += count;
	pSMB->ByteCount = cpu_to_le16(count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
		(struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
		cFYI(1, ("Send error in copy = %d with %d files copied",
			rc, le16_to_cpu(pSMBr->CopyCount)));
	}
2077
	cifs_buf_release(pSMB);
L
Linus Torvalds 已提交
2078 2079 2080 2081 2082 2083 2084 2085 2086 2087 2088 2089 2090 2091 2092 2093 2094 2095 2096 2097 2098 2099 2100 2101 2102 2103 2104 2105 2106 2107

	if (rc == -EAGAIN)
		goto copyRetry;

	return rc;
}

int
CIFSUnixCreateSymLink(const int xid, struct cifsTconInfo *tcon,
		      const char *fromName, const char *toName,
		      const struct nls_table *nls_codepage)
{
	TRANSACTION2_SPI_REQ *pSMB = NULL;
	TRANSACTION2_SPI_RSP *pSMBr = NULL;
	char *data_offset;
	int name_len;
	int name_len_target;
	int rc = 0;
	int bytes_returned = 0;
	__u16 params, param_offset, offset, byte_count;

	cFYI(1, ("In Symlink Unix style"));
createSymLinkRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
2108
		    cifs_strtoUCS((__le16 *) pSMB->FileName, fromName, PATH_MAX
L
Linus Torvalds 已提交
2109 2110 2111 2112 2113
				  /* find define for this maxpathcomponent */
				  , nls_codepage);
		name_len++;	/* trailing null */
		name_len *= 2;

2114
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
2115 2116 2117 2118 2119 2120 2121 2122 2123 2124 2125
		name_len = strnlen(fromName, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->FileName, fromName, name_len);
	}
	params = 6 + name_len;
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	param_offset = offsetof(struct smb_com_transaction2_spi_req,
2126
				InformationLevel) - 4;
L
Linus Torvalds 已提交
2127 2128 2129 2130 2131
	offset = param_offset + params;

	data_offset = (char *) (&pSMB->hdr.Protocol) + offset;
	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len_target =
2132
		    cifs_strtoUCS((__le16 *) data_offset, toName, PATH_MAX
L
Linus Torvalds 已提交
2133 2134 2135 2136
				  /* find define for this maxpathcomponent */
				  , nls_codepage);
		name_len_target++;	/* trailing null */
		name_len_target *= 2;
2137
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
2138 2139 2140 2141 2142 2143 2144 2145 2146 2147 2148 2149 2150 2151 2152 2153 2154 2155 2156 2157 2158 2159 2160 2161
		name_len_target = strnlen(toName, PATH_MAX);
		name_len_target++;	/* trailing null */
		strncpy(data_offset, toName, name_len_target);
	}

	pSMB->MaxParameterCount = cpu_to_le16(2);
	/* BB find exact max on data count below from sess */
	pSMB->MaxDataCount = cpu_to_le16(1000);
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_SET_PATH_INFORMATION);
	byte_count = 3 /* pad */  + params + name_len_target;
	pSMB->DataCount = cpu_to_le16(name_len_target);
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalDataCount = pSMB->DataCount;
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	pSMB->ParameterOffset = cpu_to_le16(param_offset);
	pSMB->DataOffset = cpu_to_le16(offset);
	pSMB->InformationLevel = cpu_to_le16(SMB_SET_FILE_UNIX_LINK);
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);
	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
2162
	cifs_stats_inc(&tcon->num_symlinks);
S
Steve French 已提交
2163
	if (rc)
2164
		cFYI(1, ("Send error in SetPathInfo create symlink = %d", rc));
L
Linus Torvalds 已提交
2165

2166
	cifs_buf_release(pSMB);
L
Linus Torvalds 已提交
2167 2168 2169 2170 2171 2172 2173 2174 2175 2176

	if (rc == -EAGAIN)
		goto createSymLinkRetry;

	return rc;
}

int
CIFSUnixCreateHardLink(const int xid, struct cifsTconInfo *tcon,
		       const char *fromName, const char *toName,
2177
		       const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
2178 2179 2180 2181 2182 2183 2184 2185 2186 2187 2188 2189 2190 2191 2192 2193 2194 2195
{
	TRANSACTION2_SPI_REQ *pSMB = NULL;
	TRANSACTION2_SPI_RSP *pSMBr = NULL;
	char *data_offset;
	int name_len;
	int name_len_target;
	int rc = 0;
	int bytes_returned = 0;
	__u16 params, param_offset, offset, byte_count;

	cFYI(1, ("In Create Hard link Unix style"));
createHardLinkRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
2196
		name_len = cifsConvertToUCS((__le16 *) pSMB->FileName, toName,
2197
					    PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
2198 2199 2200
		name_len++;	/* trailing null */
		name_len *= 2;

2201
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
2202 2203 2204 2205 2206 2207 2208 2209 2210 2211 2212
		name_len = strnlen(toName, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->FileName, toName, name_len);
	}
	params = 6 + name_len;
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	param_offset = offsetof(struct smb_com_transaction2_spi_req,
2213
				InformationLevel) - 4;
L
Linus Torvalds 已提交
2214 2215 2216 2217 2218
	offset = param_offset + params;

	data_offset = (char *) (&pSMB->hdr.Protocol) + offset;
	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len_target =
2219
		    cifsConvertToUCS((__le16 *) data_offset, fromName, PATH_MAX,
2220
				     nls_codepage, remap);
L
Linus Torvalds 已提交
2221 2222
		name_len_target++;	/* trailing null */
		name_len_target *= 2;
2223
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
2224 2225 2226 2227 2228 2229 2230 2231 2232 2233 2234 2235 2236 2237 2238 2239 2240 2241 2242 2243 2244 2245 2246 2247
		name_len_target = strnlen(fromName, PATH_MAX);
		name_len_target++;	/* trailing null */
		strncpy(data_offset, fromName, name_len_target);
	}

	pSMB->MaxParameterCount = cpu_to_le16(2);
	/* BB find exact max on data count below from sess*/
	pSMB->MaxDataCount = cpu_to_le16(1000);
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_SET_PATH_INFORMATION);
	byte_count = 3 /* pad */  + params + name_len_target;
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	pSMB->DataCount = cpu_to_le16(name_len_target);
	pSMB->TotalDataCount = pSMB->DataCount;
	pSMB->ParameterOffset = cpu_to_le16(param_offset);
	pSMB->DataOffset = cpu_to_le16(offset);
	pSMB->InformationLevel = cpu_to_le16(SMB_SET_FILE_UNIX_HLINK);
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);
	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
2248
	cifs_stats_inc(&tcon->num_hardlinks);
S
Steve French 已提交
2249
	if (rc)
L
Linus Torvalds 已提交
2250 2251 2252 2253 2254 2255 2256 2257 2258 2259 2260 2261
		cFYI(1, ("Send error in SetPathInfo (hard link) = %d", rc));

	cifs_buf_release(pSMB);
	if (rc == -EAGAIN)
		goto createHardLinkRetry;

	return rc;
}

int
CIFSCreateHardLink(const int xid, struct cifsTconInfo *tcon,
		   const char *fromName, const char *toName,
2262
		   const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
2263 2264 2265 2266 2267 2268 2269 2270 2271 2272 2273 2274 2275 2276 2277 2278 2279 2280 2281 2282 2283 2284 2285 2286 2287 2288
{
	int rc = 0;
	NT_RENAME_REQ *pSMB = NULL;
	RENAME_RSP *pSMBr = NULL;
	int bytes_returned;
	int name_len, name_len2;
	__u16 count;

	cFYI(1, ("In CIFSCreateHardLink"));
winCreateHardLinkRetry:

	rc = smb_init(SMB_COM_NT_RENAME, 4, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	pSMB->SearchAttributes =
	    cpu_to_le16(ATTR_READONLY | ATTR_HIDDEN | ATTR_SYSTEM |
			ATTR_DIRECTORY);
	pSMB->Flags = cpu_to_le16(CREATE_HARD_LINK);
	pSMB->ClusterCount = 0;

	pSMB->BufferFormat = 0x04;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
2289
		    cifsConvertToUCS((__le16 *) pSMB->OldFileName, fromName,
2290
				     PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
2291 2292
		name_len++;	/* trailing null */
		name_len *= 2;
2293 2294 2295 2296

		/* protocol specifies ASCII buffer format (0x04) for unicode */
		pSMB->OldFileName[name_len] = 0x04;
		pSMB->OldFileName[name_len + 1] = 0x00; /* pad */
L
Linus Torvalds 已提交
2297
		name_len2 =
2298
		    cifsConvertToUCS((__le16 *)&pSMB->OldFileName[name_len + 2],
2299
				     toName, PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
2300 2301
		name_len2 += 1 /* trailing null */  + 1 /* Signature word */ ;
		name_len2 *= 2;	/* convert to bytes */
2302
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
2303 2304 2305 2306 2307 2308 2309 2310 2311 2312 2313 2314 2315 2316 2317 2318 2319
		name_len = strnlen(fromName, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->OldFileName, fromName, name_len);
		name_len2 = strnlen(toName, PATH_MAX);
		name_len2++;	/* trailing null */
		pSMB->OldFileName[name_len] = 0x04;	/* 2nd buffer format */
		strncpy(&pSMB->OldFileName[name_len + 1], toName, name_len2);
		name_len2++;	/* trailing null */
		name_len2++;	/* signature byte */
	}

	count = 1 /* string type byte */  + name_len + name_len2;
	pSMB->hdr.smb_buf_length += count;
	pSMB->ByteCount = cpu_to_le16(count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
2320
	cifs_stats_inc(&tcon->num_hardlinks);
S
Steve French 已提交
2321
	if (rc)
L
Linus Torvalds 已提交
2322
		cFYI(1, ("Send error in hard link (NT rename) = %d", rc));
S
Steve French 已提交
2323

L
Linus Torvalds 已提交
2324 2325 2326 2327 2328 2329 2330 2331 2332
	cifs_buf_release(pSMB);
	if (rc == -EAGAIN)
		goto winCreateHardLinkRetry;

	return rc;
}

int
CIFSSMBUnixQuerySymLink(const int xid, struct cifsTconInfo *tcon,
2333
			const unsigned char *searchName, char **symlinkinfo,
L
Linus Torvalds 已提交
2334 2335 2336 2337 2338 2339 2340 2341 2342
			const struct nls_table *nls_codepage)
{
/* SMB_QUERY_FILE_UNIX_LINK */
	TRANSACTION2_QPI_REQ *pSMB = NULL;
	TRANSACTION2_QPI_RSP *pSMBr = NULL;
	int rc = 0;
	int bytes_returned;
	int name_len;
	__u16 params, byte_count;
2343
	char *data_start;
L
Linus Torvalds 已提交
2344 2345 2346 2347 2348 2349 2350 2351 2352 2353 2354

	cFYI(1, ("In QPathSymLinkInfo (Unix) for path %s", searchName));

querySymLinkRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
2355 2356
		    cifs_strtoUCS((__le16 *) pSMB->FileName, searchName,
				  PATH_MAX, nls_codepage);
L
Linus Torvalds 已提交
2357 2358
		name_len++;	/* trailing null */
		name_len *= 2;
2359
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
2360 2361 2362 2363 2364 2365 2366 2367
		name_len = strnlen(searchName, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->FileName, searchName, name_len);
	}

	params = 2 /* level */  + 4 /* rsrvd */  + name_len /* incl null */ ;
	pSMB->TotalDataCount = 0;
	pSMB->MaxParameterCount = cpu_to_le16(2);
2368
	pSMB->MaxDataCount = cpu_to_le16(CIFSMaxBufSize);
L
Linus Torvalds 已提交
2369 2370 2371 2372 2373 2374
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	pSMB->ParameterOffset = cpu_to_le16(offsetof(
2375
	struct smb_com_transaction2_qpi_req, InformationLevel) - 4);
L
Linus Torvalds 已提交
2376 2377 2378 2379 2380 2381 2382 2383 2384 2385 2386 2387 2388 2389 2390 2391 2392 2393 2394 2395 2396 2397
	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_QUERY_PATH_INFORMATION);
	byte_count = params + 1 /* pad */ ;
	pSMB->TotalParameterCount = cpu_to_le16(params);
	pSMB->ParameterCount = pSMB->TotalParameterCount;
	pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_FILE_UNIX_LINK);
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
		cFYI(1, ("Send error in QuerySymLinkInfo = %d", rc));
	} else {
		/* decode response */

		rc = validate_t2((struct smb_t2_rsp *)pSMBr);
		/* BB also check enough total bytes returned */
2398 2399
		if (rc || (pSMBr->ByteCount < 2))
			rc = -EIO;
L
Linus Torvalds 已提交
2400
		else {
2401
			bool is_unicode;
2402 2403 2404 2405
			u16 count = le16_to_cpu(pSMBr->t2.DataCount);

			data_start = ((char *) &pSMBr->hdr.Protocol) +
					   le16_to_cpu(pSMBr->t2.DataOffset);
L
Linus Torvalds 已提交
2406

2407 2408 2409 2410 2411
			if (pSMBr->hdr.Flags2 & SMBFLG2_UNICODE)
				is_unicode = true;
			else
				is_unicode = false;

2412
			/* BB FIXME investigate remapping reserved chars here */
2413
			*symlinkinfo = cifs_strndup_from_ucs(data_start, count,
2414
						    is_unicode, nls_codepage);
2415
			if (!*symlinkinfo)
2416
				rc = -ENOMEM;
L
Linus Torvalds 已提交
2417 2418 2419 2420 2421 2422 2423 2424
		}
	}
	cifs_buf_release(pSMB);
	if (rc == -EAGAIN)
		goto querySymLinkRetry;
	return rc;
}

2425
#ifdef CONFIG_CIFS_EXPERIMENTAL
2426 2427 2428 2429 2430 2431 2432
/* Initialize NT TRANSACT SMB into small smb request buffer.
   This assumes that all NT TRANSACTS that we init here have
   total parm and data under about 400 bytes (to fit in small cifs
   buffer size), which is the case so far, it easily fits. NB:
	Setup words themselves and ByteCount
	MaxSetupCount (size of returned setup area) and
	MaxParameterCount (returned parms size) must be set by caller */
2433
static int
S
Steve French 已提交
2434
smb_init_nttransact(const __u16 sub_command, const int setup_count,
2435
		   const int parm_len, struct cifsTconInfo *tcon,
2436
		   void **ret_buf)
2437 2438 2439
{
	int rc;
	__u32 temp_offset;
2440
	struct smb_com_ntransact_req *pSMB;
2441 2442 2443 2444 2445 2446 2447 2448 2449 2450 2451 2452 2453 2454 2455 2456 2457 2458 2459 2460 2461 2462 2463

	rc = small_smb_init(SMB_COM_NT_TRANSACT, 19 + setup_count, tcon,
				(void **)&pSMB);
	if (rc)
		return rc;
	*ret_buf = (void *)pSMB;
	pSMB->Reserved = 0;
	pSMB->TotalParameterCount = cpu_to_le32(parm_len);
	pSMB->TotalDataCount  = 0;
	pSMB->MaxDataCount = cpu_to_le32((tcon->ses->server->maxBuf -
					  MAX_CIFS_HDR_SIZE) & 0xFFFFFF00);
	pSMB->ParameterCount = pSMB->TotalParameterCount;
	pSMB->DataCount  = pSMB->TotalDataCount;
	temp_offset = offsetof(struct smb_com_ntransact_req, Parms) +
			(setup_count * 2) - 4 /* for rfc1001 length itself */;
	pSMB->ParameterOffset = cpu_to_le32(temp_offset);
	pSMB->DataOffset = cpu_to_le32(temp_offset + parm_len);
	pSMB->SetupCount = setup_count; /* no need to le convert byte fields */
	pSMB->SubCommand = cpu_to_le16(sub_command);
	return 0;
}

static int
2464
validate_ntransact(char *buf, char **ppparm, char **ppdata,
S
Steve French 已提交
2465
		   __u32 *pparmlen, __u32 *pdatalen)
2466
{
2467
	char *end_of_smb;
2468
	__u32 data_count, data_offset, parm_count, parm_offset;
2469
	struct smb_com_ntransact_rsp *pSMBr;
2470

S
Steve French 已提交
2471 2472 2473
	*pdatalen = 0;
	*pparmlen = 0;

S
Steve French 已提交
2474
	if (buf == NULL)
2475 2476 2477 2478 2479
		return -EINVAL;

	pSMBr = (struct smb_com_ntransact_rsp *)buf;

	/* ByteCount was converted from little endian in SendReceive */
2480
	end_of_smb = 2 /* sizeof byte count */ + pSMBr->ByteCount +
2481 2482 2483 2484
			(char *)&pSMBr->ByteCount;

	data_offset = le32_to_cpu(pSMBr->DataOffset);
	data_count = le32_to_cpu(pSMBr->DataCount);
2485
	parm_offset = le32_to_cpu(pSMBr->ParameterOffset);
2486 2487 2488 2489 2490 2491
	parm_count = le32_to_cpu(pSMBr->ParameterCount);

	*ppparm = (char *)&pSMBr->hdr.Protocol + parm_offset;
	*ppdata = (char *)&pSMBr->hdr.Protocol + data_offset;

	/* should we also check that parm and data areas do not overlap? */
S
Steve French 已提交
2492 2493
	if (*ppparm > end_of_smb) {
		cFYI(1, ("parms start after end of smb"));
2494
		return -EINVAL;
S
Steve French 已提交
2495 2496
	} else if (parm_count + *ppparm > end_of_smb) {
		cFYI(1, ("parm end after end of smb"));
2497
		return -EINVAL;
S
Steve French 已提交
2498 2499
	} else if (*ppdata > end_of_smb) {
		cFYI(1, ("data starts after end of smb"));
2500
		return -EINVAL;
S
Steve French 已提交
2501
	} else if (data_count + *ppdata > end_of_smb) {
2502
		cFYI(1, ("data %p + count %d (%p) ends after end of smb %p start %p",
2503 2504
			*ppdata, data_count, (data_count + *ppdata),
			end_of_smb, pSMBr));
2505
		return -EINVAL;
S
Steve French 已提交
2506 2507
	} else if (parm_count + data_count > pSMBr->ByteCount) {
		cFYI(1, ("parm count and data count larger than SMB"));
2508 2509
		return -EINVAL;
	}
S
Steve French 已提交
2510 2511
	*pdatalen = data_count;
	*pparmlen = parm_count;
2512 2513 2514
	return 0;
}

L
Linus Torvalds 已提交
2515 2516 2517
int
CIFSSMBQueryReparseLinkInfo(const int xid, struct cifsTconInfo *tcon,
			const unsigned char *searchName,
2518
			char *symlinkinfo, const int buflen, __u16 fid,
L
Linus Torvalds 已提交
2519 2520 2521 2522
			const struct nls_table *nls_codepage)
{
	int rc = 0;
	int bytes_returned;
2523 2524
	struct smb_com_transaction_ioctl_req *pSMB;
	struct smb_com_transaction_ioctl_rsp *pSMBr;
L
Linus Torvalds 已提交
2525 2526 2527 2528 2529 2530 2531 2532 2533 2534 2535

	cFYI(1, ("In Windows reparse style QueryLink for path %s", searchName));
	rc = smb_init(SMB_COM_NT_TRANSACT, 23, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	pSMB->TotalParameterCount = 0 ;
	pSMB->TotalDataCount = 0;
	pSMB->MaxParameterCount = cpu_to_le32(2);
	/* BB find exact data count max from sess structure BB */
2536 2537
	pSMB->MaxDataCount = cpu_to_le32((tcon->ses->server->maxBuf -
					  MAX_CIFS_HDR_SIZE) & 0xFFFFFF00);
L
Linus Torvalds 已提交
2538 2539 2540 2541 2542 2543 2544 2545 2546 2547 2548 2549 2550 2551 2552 2553 2554 2555 2556 2557 2558
	pSMB->MaxSetupCount = 4;
	pSMB->Reserved = 0;
	pSMB->ParameterOffset = 0;
	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->SetupCount = 4;
	pSMB->SubCommand = cpu_to_le16(NT_TRANSACT_IOCTL);
	pSMB->ParameterCount = pSMB->TotalParameterCount;
	pSMB->FunctionCode = cpu_to_le32(FSCTL_GET_REPARSE_POINT);
	pSMB->IsFsctl = 1; /* FSCTL */
	pSMB->IsRootFlag = 0;
	pSMB->Fid = fid; /* file handle always le */
	pSMB->ByteCount = 0;

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
		cFYI(1, ("Send error in QueryReparseLinkInfo = %d", rc));
	} else {		/* decode response */
		__u32 data_offset = le32_to_cpu(pSMBr->DataOffset);
		__u32 data_count = le32_to_cpu(pSMBr->DataCount);
2559
		if ((pSMBr->ByteCount < 2) || (data_offset > 512)) {
L
Linus Torvalds 已提交
2560 2561
		/* BB also check enough total bytes returned */
			rc = -EIO;	/* bad smb */
2562 2563 2564 2565 2566
			goto qreparse_out;
		}
		if (data_count && (data_count < 2048)) {
			char *end_of_smb = 2 /* sizeof byte count */ +
				pSMBr->ByteCount + (char *)&pSMBr->ByteCount;
L
Linus Torvalds 已提交
2567

2568
			struct reparse_data *reparse_buf =
2569 2570 2571
						(struct reparse_data *)
						((char *)&pSMBr->hdr.Protocol
								 + data_offset);
2572 2573 2574 2575 2576 2577 2578 2579 2580 2581 2582
			if ((char *)reparse_buf >= end_of_smb) {
				rc = -EIO;
				goto qreparse_out;
			}
			if ((reparse_buf->LinkNamesBuf +
				reparse_buf->TargetNameOffset +
				reparse_buf->TargetNameLen) > end_of_smb) {
				cFYI(1, ("reparse buf beyond SMB"));
				rc = -EIO;
				goto qreparse_out;
			}
2583

2584 2585
			if (pSMBr->hdr.Flags2 & SMBFLG2_UNICODE) {
				cifs_from_ucs2(symlinkinfo, (__le16 *)
2586 2587
						(reparse_buf->LinkNamesBuf +
						reparse_buf->TargetNameOffset),
2588 2589 2590 2591 2592 2593 2594 2595 2596
						buflen,
						reparse_buf->TargetNameLen,
						nls_codepage, 0);
			} else { /* ASCII names */
				strncpy(symlinkinfo,
					reparse_buf->LinkNamesBuf +
					reparse_buf->TargetNameOffset,
					min_t(const int, buflen,
					   reparse_buf->TargetNameLen));
L
Linus Torvalds 已提交
2597
			}
2598 2599 2600 2601
		} else {
			rc = -EIO;
			cFYI(1, ("Invalid return data count on "
				 "get reparse info ioctl"));
L
Linus Torvalds 已提交
2602
		}
2603 2604 2605
		symlinkinfo[buflen] = 0; /* just in case so the caller
					does not go off the end of the buffer */
		cFYI(1, ("readlink result - %s", symlinkinfo));
L
Linus Torvalds 已提交
2606
	}
S
Steve French 已提交
2607

L
Linus Torvalds 已提交
2608
qreparse_out:
2609
	cifs_buf_release(pSMB);
L
Linus Torvalds 已提交
2610 2611 2612 2613 2614 2615

	/* Note: On -EAGAIN error only caller can retry on handle based calls
		since file handle passed in no longer valid */

	return rc;
}
2616
#endif /* CIFS_EXPERIMENTAL */
L
Linus Torvalds 已提交
2617 2618 2619 2620

#ifdef CONFIG_CIFS_POSIX

/*Convert an Access Control Entry from wire format to local POSIX xattr format*/
2621 2622
static void cifs_convert_ace(posix_acl_xattr_entry *ace,
			     struct cifs_posix_ace *cifs_ace)
L
Linus Torvalds 已提交
2623 2624
{
	/* u8 cifs fields do not need le conversion */
2625 2626 2627
	ace->e_perm = cpu_to_le16(cifs_ace->cifs_e_perm);
	ace->e_tag  = cpu_to_le16(cifs_ace->cifs_e_tag);
	ace->e_id   = cpu_to_le32(le64_to_cpu(cifs_ace->cifs_uid));
L
Linus Torvalds 已提交
2628 2629 2630 2631 2632 2633
	/* cFYI(1,("perm %d tag %d id %d",ace->e_perm,ace->e_tag,ace->e_id)); */

	return;
}

/* Convert ACL from CIFS POSIX wire format to local Linux POSIX ACL xattr */
2634 2635
static int cifs_copy_posix_acl(char *trgt, char *src, const int buflen,
			       const int acl_type, const int size_of_data_area)
L
Linus Torvalds 已提交
2636 2637 2638 2639
{
	int size =  0;
	int i;
	__u16 count;
2640 2641 2642
	struct cifs_posix_ace *pACE;
	struct cifs_posix_acl *cifs_acl = (struct cifs_posix_acl *)src;
	posix_acl_xattr_header *local_acl = (posix_acl_xattr_header *)trgt;
L
Linus Torvalds 已提交
2643 2644 2645 2646

	if (le16_to_cpu(cifs_acl->version) != CIFS_ACL_VERSION)
		return -EOPNOTSUPP;

S
Steve French 已提交
2647
	if (acl_type & ACL_TYPE_ACCESS) {
L
Linus Torvalds 已提交
2648 2649 2650 2651 2652
		count = le16_to_cpu(cifs_acl->access_entry_count);
		pACE = &cifs_acl->ace_array[0];
		size = sizeof(struct cifs_posix_acl);
		size += sizeof(struct cifs_posix_ace) * count;
		/* check if we would go beyond end of SMB */
S
Steve French 已提交
2653
		if (size_of_data_area < size) {
2654 2655
			cFYI(1, ("bad CIFS POSIX ACL size %d vs. %d",
				size_of_data_area, size));
L
Linus Torvalds 已提交
2656 2657
			return -EINVAL;
		}
S
Steve French 已提交
2658
	} else if (acl_type & ACL_TYPE_DEFAULT) {
L
Linus Torvalds 已提交
2659 2660 2661 2662 2663 2664 2665 2666
		count = le16_to_cpu(cifs_acl->access_entry_count);
		size = sizeof(struct cifs_posix_acl);
		size += sizeof(struct cifs_posix_ace) * count;
/* skip past access ACEs to get to default ACEs */
		pACE = &cifs_acl->ace_array[count];
		count = le16_to_cpu(cifs_acl->default_entry_count);
		size += sizeof(struct cifs_posix_ace) * count;
		/* check if we would go beyond end of SMB */
S
Steve French 已提交
2667
		if (size_of_data_area < size)
L
Linus Torvalds 已提交
2668 2669 2670 2671 2672 2673 2674
			return -EINVAL;
	} else {
		/* illegal type */
		return -EINVAL;
	}

	size = posix_acl_xattr_size(count);
S
Steve French 已提交
2675
	if ((buflen == 0) || (local_acl == NULL)) {
2676
		/* used to query ACL EA size */
S
Steve French 已提交
2677
	} else if (size > buflen) {
L
Linus Torvalds 已提交
2678 2679
		return -ERANGE;
	} else /* buffer big enough */ {
2680
		local_acl->a_version = cpu_to_le32(POSIX_ACL_XATTR_VERSION);
2681 2682 2683
		for (i = 0; i < count ; i++) {
			cifs_convert_ace(&local_acl->a_entries[i], pACE);
			pACE++;
L
Linus Torvalds 已提交
2684 2685 2686 2687 2688
		}
	}
	return size;
}

2689 2690
static __u16 convert_ace_to_cifs_ace(struct cifs_posix_ace *cifs_ace,
				     const posix_acl_xattr_entry *local_ace)
L
Linus Torvalds 已提交
2691 2692 2693
{
	__u16 rc = 0; /* 0 = ACL converted ok */

2694 2695
	cifs_ace->cifs_e_perm = le16_to_cpu(local_ace->e_perm);
	cifs_ace->cifs_e_tag =  le16_to_cpu(local_ace->e_tag);
L
Linus Torvalds 已提交
2696
	/* BB is there a better way to handle the large uid? */
S
Steve French 已提交
2697
	if (local_ace->e_id == cpu_to_le32(-1)) {
L
Linus Torvalds 已提交
2698 2699
	/* Probably no need to le convert -1 on any arch but can not hurt */
		cifs_ace->cifs_uid = cpu_to_le64(-1);
2700
	} else
2701
		cifs_ace->cifs_uid = cpu_to_le64(le32_to_cpu(local_ace->e_id));
2702
	/*cFYI(1,("perm %d tag %d id %d",ace->e_perm,ace->e_tag,ace->e_id));*/
L
Linus Torvalds 已提交
2703 2704 2705 2706
	return rc;
}

/* Convert ACL from local Linux POSIX xattr to CIFS POSIX ACL wire format */
2707 2708
static __u16 ACL_to_cifs_posix(char *parm_data, const char *pACL,
			       const int buflen, const int acl_type)
L
Linus Torvalds 已提交
2709 2710
{
	__u16 rc = 0;
2711 2712
	struct cifs_posix_acl *cifs_acl = (struct cifs_posix_acl *)parm_data;
	posix_acl_xattr_header *local_acl = (posix_acl_xattr_header *)pACL;
L
Linus Torvalds 已提交
2713 2714 2715
	int count;
	int i;

S
Steve French 已提交
2716
	if ((buflen == 0) || (pACL == NULL) || (cifs_acl == NULL))
L
Linus Torvalds 已提交
2717 2718 2719
		return 0;

	count = posix_acl_xattr_count((size_t)buflen);
2720
	cFYI(1, ("setting acl with %d entries from buf of length %d and "
2721
		"version of %d",
2722
		count, buflen, le32_to_cpu(local_acl->a_version)));
S
Steve French 已提交
2723
	if (le32_to_cpu(local_acl->a_version) != 2) {
2724
		cFYI(1, ("unknown POSIX ACL version %d",
2725
		     le32_to_cpu(local_acl->a_version)));
L
Linus Torvalds 已提交
2726 2727 2728
		return 0;
	}
	cifs_acl->version = cpu_to_le16(1);
S
Steve French 已提交
2729
	if (acl_type == ACL_TYPE_ACCESS)
2730
		cifs_acl->access_entry_count = cpu_to_le16(count);
S
Steve French 已提交
2731
	else if (acl_type == ACL_TYPE_DEFAULT)
2732
		cifs_acl->default_entry_count = cpu_to_le16(count);
L
Linus Torvalds 已提交
2733
	else {
2734
		cFYI(1, ("unknown ACL type %d", acl_type));
L
Linus Torvalds 已提交
2735 2736
		return 0;
	}
2737
	for (i = 0; i < count; i++) {
L
Linus Torvalds 已提交
2738 2739
		rc = convert_ace_to_cifs_ace(&cifs_acl->ace_array[i],
					&local_acl->a_entries[i]);
S
Steve French 已提交
2740
		if (rc != 0) {
L
Linus Torvalds 已提交
2741 2742 2743 2744
			/* ACE not converted */
			break;
		}
	}
S
Steve French 已提交
2745
	if (rc == 0) {
L
Linus Torvalds 已提交
2746 2747 2748 2749 2750 2751 2752 2753 2754
		rc = (__u16)(count * sizeof(struct cifs_posix_ace));
		rc += sizeof(struct cifs_posix_acl);
		/* BB add check to make sure ACL does not overflow SMB */
	}
	return rc;
}

int
CIFSSMBGetPosixACL(const int xid, struct cifsTconInfo *tcon,
2755 2756 2757
		   const unsigned char *searchName,
		   char *acl_inf, const int buflen, const int acl_type,
		   const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
2758 2759 2760 2761 2762 2763 2764 2765
{
/* SMB_QUERY_POSIX_ACL */
	TRANSACTION2_QPI_REQ *pSMB = NULL;
	TRANSACTION2_QPI_RSP *pSMBr = NULL;
	int rc = 0;
	int bytes_returned;
	int name_len;
	__u16 params, byte_count;
2766

L
Linus Torvalds 已提交
2767 2768 2769 2770 2771 2772 2773
	cFYI(1, ("In GetPosixACL (Unix) for path %s", searchName));

queryAclRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		(void **) &pSMBr);
	if (rc)
		return rc;
2774

L
Linus Torvalds 已提交
2775 2776
	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
2777
			cifsConvertToUCS((__le16 *) pSMB->FileName, searchName,
2778
					 PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
2779 2780 2781 2782
		name_len++;     /* trailing null */
		name_len *= 2;
		pSMB->FileName[name_len] = 0;
		pSMB->FileName[name_len+1] = 0;
2783
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
2784 2785 2786 2787 2788 2789 2790 2791
		name_len = strnlen(searchName, PATH_MAX);
		name_len++;     /* trailing null */
		strncpy(pSMB->FileName, searchName, name_len);
	}

	params = 2 /* level */  + 4 /* rsrvd */  + name_len /* incl null */ ;
	pSMB->TotalDataCount = 0;
	pSMB->MaxParameterCount = cpu_to_le16(2);
2792
	/* BB find exact max data count below from sess structure BB */
L
Linus Torvalds 已提交
2793 2794 2795 2796 2797 2798 2799
	pSMB->MaxDataCount = cpu_to_le16(4000);
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	pSMB->ParameterOffset = cpu_to_le16(
2800 2801
		offsetof(struct smb_com_transaction2_qpi_req,
			 InformationLevel) - 4);
L
Linus Torvalds 已提交
2802 2803 2804 2805 2806 2807 2808 2809 2810 2811 2812 2813 2814 2815 2816
	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_QUERY_PATH_INFORMATION);
	byte_count = params + 1 /* pad */ ;
	pSMB->TotalParameterCount = cpu_to_le16(params);
	pSMB->ParameterCount = pSMB->TotalParameterCount;
	pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_POSIX_ACL);
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
		(struct smb_hdr *) pSMBr, &bytes_returned, 0);
2817
	cifs_stats_inc(&tcon->num_acl_get);
L
Linus Torvalds 已提交
2818 2819 2820 2821
	if (rc) {
		cFYI(1, ("Send error in Query POSIX ACL = %d", rc));
	} else {
		/* decode response */
2822

L
Linus Torvalds 已提交
2823 2824 2825 2826 2827 2828 2829 2830 2831
		rc = validate_t2((struct smb_t2_rsp *)pSMBr);
		if (rc || (pSMBr->ByteCount < 2))
		/* BB also check enough total bytes returned */
			rc = -EIO;      /* bad smb */
		else {
			__u16 data_offset = le16_to_cpu(pSMBr->t2.DataOffset);
			__u16 count = le16_to_cpu(pSMBr->t2.DataCount);
			rc = cifs_copy_posix_acl(acl_inf,
				(char *)&pSMBr->hdr.Protocol+data_offset,
2832
				buflen, acl_type, count);
L
Linus Torvalds 已提交
2833 2834 2835 2836 2837 2838 2839 2840 2841 2842
		}
	}
	cifs_buf_release(pSMB);
	if (rc == -EAGAIN)
		goto queryAclRetry;
	return rc;
}

int
CIFSSMBSetPosixACL(const int xid, struct cifsTconInfo *tcon,
2843 2844 2845 2846
		   const unsigned char *fileName,
		   const char *local_acl, const int buflen,
		   const int acl_type,
		   const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
2847 2848 2849 2850 2851 2852 2853 2854 2855 2856 2857 2858
{
	struct smb_com_transaction2_spi_req *pSMB = NULL;
	struct smb_com_transaction2_spi_rsp *pSMBr = NULL;
	char *parm_data;
	int name_len;
	int rc = 0;
	int bytes_returned = 0;
	__u16 params, byte_count, data_count, param_offset, offset;

	cFYI(1, ("In SetPosixACL (Unix) for path %s", fileName));
setAclRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
2859
		      (void **) &pSMBr);
L
Linus Torvalds 已提交
2860 2861 2862 2863
	if (rc)
		return rc;
	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
2864
			cifsConvertToUCS((__le16 *) pSMB->FileName, fileName,
2865
				      PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
2866 2867
		name_len++;     /* trailing null */
		name_len *= 2;
2868
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
2869 2870 2871 2872 2873 2874
		name_len = strnlen(fileName, PATH_MAX);
		name_len++;     /* trailing null */
		strncpy(pSMB->FileName, fileName, name_len);
	}
	params = 6 + name_len;
	pSMB->MaxParameterCount = cpu_to_le16(2);
2875 2876
	/* BB find max SMB size from sess */
	pSMB->MaxDataCount = cpu_to_le16(1000);
L
Linus Torvalds 已提交
2877 2878 2879 2880 2881 2882
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	param_offset = offsetof(struct smb_com_transaction2_spi_req,
2883
				InformationLevel) - 4;
L
Linus Torvalds 已提交
2884 2885 2886 2887 2888
	offset = param_offset + params;
	parm_data = ((char *) &pSMB->hdr.Protocol) + offset;
	pSMB->ParameterOffset = cpu_to_le16(param_offset);

	/* convert to on the wire format for POSIX ACL */
2889
	data_count = ACL_to_cifs_posix(parm_data, local_acl, buflen, acl_type);
L
Linus Torvalds 已提交
2890

S
Steve French 已提交
2891
	if (data_count == 0) {
L
Linus Torvalds 已提交
2892 2893 2894 2895 2896 2897 2898 2899 2900 2901 2902 2903 2904 2905 2906 2907 2908
		rc = -EOPNOTSUPP;
		goto setACLerrorExit;
	}
	pSMB->DataOffset = cpu_to_le16(offset);
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_SET_PATH_INFORMATION);
	pSMB->InformationLevel = cpu_to_le16(SMB_SET_POSIX_ACL);
	byte_count = 3 /* pad */  + params + data_count;
	pSMB->DataCount = cpu_to_le16(data_count);
	pSMB->TotalDataCount = pSMB->DataCount;
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);
	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
2909
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
S
Steve French 已提交
2910
	if (rc)
L
Linus Torvalds 已提交
2911 2912 2913 2914 2915 2916 2917 2918 2919
		cFYI(1, ("Set POSIX ACL returned %d", rc));

setACLerrorExit:
	cifs_buf_release(pSMB);
	if (rc == -EAGAIN)
		goto setAclRetry;
	return rc;
}

2920 2921 2922
/* BB fix tabs in this function FIXME BB */
int
CIFSGetExtAttr(const int xid, struct cifsTconInfo *tcon,
S
Steve French 已提交
2923
	       const int netfid, __u64 *pExtAttrBits, __u64 *pMask)
2924
{
2925 2926 2927 2928 2929
	int rc = 0;
	struct smb_t2_qfi_req *pSMB = NULL;
	struct smb_t2_qfi_rsp *pSMBr = NULL;
	int bytes_returned;
	__u16 params, byte_count;
2930

S
Steve French 已提交
2931 2932 2933
	cFYI(1, ("In GetExtAttr"));
	if (tcon == NULL)
		return -ENODEV;
2934 2935

GetExtAttrRetry:
S
Steve French 已提交
2936 2937 2938 2939
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
			(void **) &pSMBr);
	if (rc)
		return rc;
2940

S
Steve French 已提交
2941
	params = 2 /* level */ + 2 /* fid */;
S
Steve French 已提交
2942 2943 2944 2945 2946 2947 2948 2949 2950 2951 2952 2953 2954 2955 2956 2957 2958 2959 2960 2961 2962
	pSMB->t2.TotalDataCount = 0;
	pSMB->t2.MaxParameterCount = cpu_to_le16(4);
	/* BB find exact max data count below from sess structure BB */
	pSMB->t2.MaxDataCount = cpu_to_le16(4000);
	pSMB->t2.MaxSetupCount = 0;
	pSMB->t2.Reserved = 0;
	pSMB->t2.Flags = 0;
	pSMB->t2.Timeout = 0;
	pSMB->t2.Reserved2 = 0;
	pSMB->t2.ParameterOffset = cpu_to_le16(offsetof(struct smb_t2_qfi_req,
					       Fid) - 4);
	pSMB->t2.DataCount = 0;
	pSMB->t2.DataOffset = 0;
	pSMB->t2.SetupCount = 1;
	pSMB->t2.Reserved3 = 0;
	pSMB->t2.SubCommand = cpu_to_le16(TRANS2_QUERY_FILE_INFORMATION);
	byte_count = params + 1 /* pad */ ;
	pSMB->t2.TotalParameterCount = cpu_to_le16(params);
	pSMB->t2.ParameterCount = pSMB->t2.TotalParameterCount;
	pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_ATTR_FLAGS);
	pSMB->Pad = 0;
2963
	pSMB->Fid = netfid;
S
Steve French 已提交
2964 2965 2966 2967 2968 2969 2970 2971 2972 2973 2974 2975 2976 2977 2978 2979 2980 2981 2982 2983 2984 2985 2986 2987 2988 2989 2990 2991
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->t2.ByteCount = cpu_to_le16(byte_count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
		cFYI(1, ("error %d in GetExtAttr", rc));
	} else {
		/* decode response */
		rc = validate_t2((struct smb_t2_rsp *)pSMBr);
		if (rc || (pSMBr->ByteCount < 2))
		/* BB also check enough total bytes returned */
			/* If rc should we check for EOPNOSUPP and
			   disable the srvino flag? or in caller? */
			rc = -EIO;      /* bad smb */
		else {
			__u16 data_offset = le16_to_cpu(pSMBr->t2.DataOffset);
			__u16 count = le16_to_cpu(pSMBr->t2.DataCount);
			struct file_chattr_info *pfinfo;
			/* BB Do we need a cast or hash here ? */
			if (count != 16) {
				cFYI(1, ("Illegal size ret in GetExtAttr"));
				rc = -EIO;
				goto GetExtAttrOut;
			}
			pfinfo = (struct file_chattr_info *)
				 (data_offset + (char *) &pSMBr->hdr.Protocol);
			*pExtAttrBits = le64_to_cpu(pfinfo->mode);
2992
			*pMask = le64_to_cpu(pfinfo->mask);
S
Steve French 已提交
2993 2994
		}
	}
2995
GetExtAttrOut:
S
Steve French 已提交
2996 2997 2998 2999
	cifs_buf_release(pSMB);
	if (rc == -EAGAIN)
		goto GetExtAttrRetry;
	return rc;
3000 3001 3002
}

#endif /* CONFIG_POSIX */
L
Linus Torvalds 已提交
3003

S
Steve French 已提交
3004
#ifdef CONFIG_CIFS_EXPERIMENTAL
3005 3006 3007
/* Get Security Descriptor (by handle) from remote server for a file or dir */
int
CIFSSMBGetCIFSACL(const int xid, struct cifsTconInfo *tcon, __u16 fid,
S
Steve French 已提交
3008
		  struct cifs_ntsd **acl_inf, __u32 *pbuflen)
3009 3010 3011
{
	int rc = 0;
	int buf_type = 0;
S
Steve French 已提交
3012
	QUERY_SEC_DESC_REQ *pSMB;
3013 3014 3015 3016
	struct kvec iov[1];

	cFYI(1, ("GetCifsACL"));

S
Steve French 已提交
3017 3018 3019
	*pbuflen = 0;
	*acl_inf = NULL;

S
Steve French 已提交
3020
	rc = smb_init_nttransact(NT_TRANSACT_QUERY_SECURITY_DESC, 0,
3021 3022 3023 3024 3025 3026 3027 3028 3029 3030 3031 3032 3033 3034 3035
			8 /* parm len */, tcon, (void **) &pSMB);
	if (rc)
		return rc;

	pSMB->MaxParameterCount = cpu_to_le32(4);
	/* BB TEST with big acls that might need to be e.g. larger than 16K */
	pSMB->MaxSetupCount = 0;
	pSMB->Fid = fid; /* file handle always le */
	pSMB->AclFlags = cpu_to_le32(CIFS_ACL_OWNER | CIFS_ACL_GROUP |
				     CIFS_ACL_DACL);
	pSMB->ByteCount = cpu_to_le16(11); /* 3 bytes pad + 8 bytes parm */
	pSMB->hdr.smb_buf_length += 11;
	iov[0].iov_base = (char *)pSMB;
	iov[0].iov_len = pSMB->hdr.smb_buf_length + 4;

3036
	rc = SendReceive2(xid, tcon->ses, iov, 1 /* num iovec */, &buf_type,
3037
			 CIFS_STD_OP);
3038 3039 3040 3041
	cifs_stats_inc(&tcon->num_acl_get);
	if (rc) {
		cFYI(1, ("Send error in QuerySecDesc = %d", rc));
	} else {                /* decode response */
S
Steve French 已提交
3042
		__le32 *parm;
S
Steve French 已提交
3043 3044
		__u32 parm_len;
		__u32 acl_len;
3045
		struct smb_com_ntransact_rsp *pSMBr;
S
Steve French 已提交
3046
		char *pdata;
3047 3048

/* validate_nttransact */
3049
		rc = validate_ntransact(iov[0].iov_base, (char **)&parm,
S
Steve French 已提交
3050
					&pdata, &parm_len, pbuflen);
S
Steve French 已提交
3051
		if (rc)
3052 3053 3054
			goto qsec_out;
		pSMBr = (struct smb_com_ntransact_rsp *)iov[0].iov_base;

S
Steve French 已提交
3055
		cFYI(1, ("smb %p parm %p data %p", pSMBr, parm, *acl_inf));
3056 3057 3058

		if (le32_to_cpu(pSMBr->ParameterCount) != 4) {
			rc = -EIO;      /* bad smb */
S
Steve French 已提交
3059
			*pbuflen = 0;
3060 3061 3062 3063 3064
			goto qsec_out;
		}

/* BB check that data area is minimum length and as big as acl_len */

3065
		acl_len = le32_to_cpu(*parm);
S
Steve French 已提交
3066 3067 3068 3069 3070 3071
		if (acl_len != *pbuflen) {
			cERROR(1, ("acl length %d does not match %d",
				   acl_len, *pbuflen));
			if (*pbuflen > acl_len)
				*pbuflen = acl_len;
		}
3072

S
Steve French 已提交
3073 3074 3075 3076 3077 3078 3079 3080 3081 3082 3083 3084 3085 3086 3087
		/* check if buffer is big enough for the acl
		   header followed by the smallest SID */
		if ((*pbuflen < sizeof(struct cifs_ntsd) + 8) ||
		    (*pbuflen >= 64 * 1024)) {
			cERROR(1, ("bad acl length %d", *pbuflen));
			rc = -EINVAL;
			*pbuflen = 0;
		} else {
			*acl_inf = kmalloc(*pbuflen, GFP_KERNEL);
			if (*acl_inf == NULL) {
				*pbuflen = 0;
				rc = -ENOMEM;
			}
			memcpy(*acl_inf, pdata, *pbuflen);
		}
3088 3089
	}
qsec_out:
S
Steve French 已提交
3090
	if (buf_type == CIFS_SMALL_BUFFER)
3091
		cifs_small_buf_release(iov[0].iov_base);
S
Steve French 已提交
3092
	else if (buf_type == CIFS_LARGE_BUFFER)
3093
		cifs_buf_release(iov[0].iov_base);
3094
/*	cifs_small_buf_release(pSMB); */ /* Freed earlier now in SendReceive2 */
3095 3096
	return rc;
}
3097 3098 3099 3100 3101 3102 3103 3104 3105 3106 3107 3108 3109 3110 3111 3112 3113 3114 3115 3116 3117 3118 3119 3120 3121 3122 3123 3124 3125 3126 3127 3128 3129 3130 3131 3132 3133 3134 3135 3136 3137 3138 3139 3140 3141 3142 3143 3144 3145 3146 3147 3148 3149 3150 3151 3152 3153 3154 3155 3156 3157 3158 3159 3160 3161

int
CIFSSMBSetCIFSACL(const int xid, struct cifsTconInfo *tcon, __u16 fid,
			struct cifs_ntsd *pntsd, __u32 acllen)
{
	__u16 byte_count, param_count, data_count, param_offset, data_offset;
	int rc = 0;
	int bytes_returned = 0;
	SET_SEC_DESC_REQ *pSMB = NULL;
	NTRANSACT_RSP *pSMBr = NULL;

setCifsAclRetry:
	rc = smb_init(SMB_COM_NT_TRANSACT, 19, tcon, (void **) &pSMB,
			(void **) &pSMBr);
	if (rc)
			return (rc);

	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;

	param_count = 8;
	param_offset = offsetof(struct smb_com_transaction_ssec_req, Fid) - 4;
	data_count = acllen;
	data_offset = param_offset + param_count;
	byte_count = 3 /* pad */  + param_count;

	pSMB->DataCount = cpu_to_le32(data_count);
	pSMB->TotalDataCount = pSMB->DataCount;
	pSMB->MaxParameterCount = cpu_to_le32(4);
	pSMB->MaxDataCount = cpu_to_le32(16384);
	pSMB->ParameterCount = cpu_to_le32(param_count);
	pSMB->ParameterOffset = cpu_to_le32(param_offset);
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	pSMB->DataOffset = cpu_to_le32(data_offset);
	pSMB->SetupCount = 0;
	pSMB->SubCommand = cpu_to_le16(NT_TRANSACT_SET_SECURITY_DESC);
	pSMB->ByteCount = cpu_to_le16(byte_count+data_count);

	pSMB->Fid = fid; /* file handle always le */
	pSMB->Reserved2 = 0;
	pSMB->AclFlags = cpu_to_le32(CIFS_ACL_DACL);

	if (pntsd && acllen) {
		memcpy((char *) &pSMBr->hdr.Protocol + data_offset,
			(char *) pntsd,
			acllen);
		pSMB->hdr.smb_buf_length += (byte_count + data_count);

	} else
		pSMB->hdr.smb_buf_length += byte_count;

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
		(struct smb_hdr *) pSMBr, &bytes_returned, 0);

	cFYI(1, ("SetCIFSACL bytes_returned: %d, rc: %d", bytes_returned, rc));
	if (rc)
		cFYI(1, ("Set CIFS ACL returned %d", rc));
	cifs_buf_release(pSMB);

	if (rc == -EAGAIN)
		goto setCifsAclRetry;

	return (rc);
}

S
Steve French 已提交
3162
#endif /* CONFIG_CIFS_EXPERIMENTAL */
3163

3164 3165 3166
/* Legacy Query Path Information call for lookup to old servers such
   as Win9x/WinME */
int SMBQueryInformation(const int xid, struct cifsTconInfo *tcon,
3167 3168 3169
			const unsigned char *searchName,
			FILE_ALL_INFO *pFinfo,
			const struct nls_table *nls_codepage, int remap)
3170
{
S
Steve French 已提交
3171 3172
	QUERY_INFORMATION_REQ *pSMB;
	QUERY_INFORMATION_RSP *pSMBr;
3173 3174 3175 3176
	int rc = 0;
	int bytes_returned;
	int name_len;

3177
	cFYI(1, ("In SMBQPath path %s", searchName));
3178 3179
QInfRetry:
	rc = smb_init(SMB_COM_QUERY_INFORMATION, 0, tcon, (void **) &pSMB,
3180
		      (void **) &pSMBr);
3181 3182 3183 3184 3185
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
3186 3187
			cifsConvertToUCS((__le16 *) pSMB->FileName, searchName,
					PATH_MAX, nls_codepage, remap);
3188 3189
		name_len++;     /* trailing null */
		name_len *= 2;
3190
	} else {
3191 3192 3193 3194 3195
		name_len = strnlen(searchName, PATH_MAX);
		name_len++;     /* trailing null */
		strncpy(pSMB->FileName, searchName, name_len);
	}
	pSMB->BufferFormat = 0x04;
3196
	name_len++; /* account for buffer type byte */
3197 3198 3199 3200
	pSMB->hdr.smb_buf_length += (__u16) name_len;
	pSMB->ByteCount = cpu_to_le16(name_len);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
3201
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
3202 3203
	if (rc) {
		cFYI(1, ("Send error in QueryInfo = %d", rc));
S
Steve French 已提交
3204
	} else if (pFinfo) {
3205 3206
		struct timespec ts;
		__u32 time = le32_to_cpu(pSMBr->last_write_time);
S
Steve French 已提交
3207 3208

		/* decode response */
3209
		/* BB FIXME - add time zone adjustment BB */
3210
		memset(pFinfo, 0, sizeof(FILE_ALL_INFO));
3211 3212 3213
		ts.tv_nsec = 0;
		ts.tv_sec = time;
		/* decode time fields */
A
Al Viro 已提交
3214
		pFinfo->ChangeTime = cpu_to_le64(cifs_UnixTimeToNT(ts));
3215 3216
		pFinfo->LastWriteTime = pFinfo->ChangeTime;
		pFinfo->LastAccessTime = 0;
3217 3218 3219 3220 3221
		pFinfo->AllocationSize =
			cpu_to_le64(le32_to_cpu(pSMBr->size));
		pFinfo->EndOfFile = pFinfo->AllocationSize;
		pFinfo->Attributes =
			cpu_to_le32(le16_to_cpu(pSMBr->attr));
3222 3223 3224 3225 3226 3227 3228 3229 3230 3231 3232 3233 3234 3235
	} else
		rc = -EIO; /* bad buffer passed in */

	cifs_buf_release(pSMB);

	if (rc == -EAGAIN)
		goto QInfRetry;

	return rc;
}




L
Linus Torvalds 已提交
3236 3237 3238
int
CIFSSMBQPathInfo(const int xid, struct cifsTconInfo *tcon,
		 const unsigned char *searchName,
S
Steve French 已提交
3239
		 FILE_ALL_INFO *pFindData,
3240
		 int legacy /* old style infolevel */,
3241
		 const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
3242 3243 3244 3245 3246 3247 3248 3249 3250 3251 3252 3253 3254 3255 3256 3257 3258 3259
{
/* level 263 SMB_QUERY_FILE_ALL_INFO */
	TRANSACTION2_QPI_REQ *pSMB = NULL;
	TRANSACTION2_QPI_RSP *pSMBr = NULL;
	int rc = 0;
	int bytes_returned;
	int name_len;
	__u16 params, byte_count;

/* cFYI(1, ("In QPathInfo path %s", searchName)); */
QPathInfoRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
3260
		    cifsConvertToUCS((__le16 *) pSMB->FileName, searchName,
3261
				     PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
3262 3263
		name_len++;	/* trailing null */
		name_len *= 2;
3264
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
3265 3266 3267 3268 3269
		name_len = strnlen(searchName, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->FileName, searchName, name_len);
	}

3270
	params = 2 /* level */ + 4 /* reserved */ + name_len /* includes NUL */;
L
Linus Torvalds 已提交
3271 3272
	pSMB->TotalDataCount = 0;
	pSMB->MaxParameterCount = cpu_to_le16(2);
3273 3274
	/* BB find exact max SMB PDU from sess structure BB */
	pSMB->MaxDataCount = cpu_to_le16(4000);
L
Linus Torvalds 已提交
3275 3276 3277 3278 3279 3280
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	pSMB->ParameterOffset = cpu_to_le16(offsetof(
3281
	struct smb_com_transaction2_qpi_req, InformationLevel) - 4);
L
Linus Torvalds 已提交
3282 3283 3284 3285 3286 3287 3288 3289
	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_QUERY_PATH_INFORMATION);
	byte_count = params + 1 /* pad */ ;
	pSMB->TotalParameterCount = cpu_to_le16(params);
	pSMB->ParameterCount = pSMB->TotalParameterCount;
S
Steve French 已提交
3290
	if (legacy)
3291 3292 3293
		pSMB->InformationLevel = cpu_to_le16(SMB_INFO_STANDARD);
	else
		pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_FILE_ALL_INFO);
L
Linus Torvalds 已提交
3294 3295 3296 3297 3298 3299 3300 3301 3302 3303 3304
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
		cFYI(1, ("Send error in QPathInfo = %d", rc));
	} else {		/* decode response */
		rc = validate_t2((struct smb_t2_rsp *)pSMBr);

3305 3306
		if (rc) /* BB add auto retry on EOPNOTSUPP? */
			rc = -EIO;
3307
		else if (!legacy && (pSMBr->ByteCount < 40))
L
Linus Torvalds 已提交
3308
			rc = -EIO;	/* bad smb */
S
Steve French 已提交
3309
		else if (legacy && (pSMBr->ByteCount < 24))
3310 3311 3312
			rc = -EIO;  /* 24 or 26 expected but we do not read
					last field */
		else if (pFindData) {
3313
			int size;
L
Linus Torvalds 已提交
3314
			__u16 data_offset = le16_to_cpu(pSMBr->t2.DataOffset);
S
Steve French 已提交
3315 3316 3317 3318 3319 3320

			/* On legacy responses we do not read the last field,
			EAsize, fortunately since it varies by subdialect and
			also note it differs on Set vs. Get, ie two bytes or 4
			bytes depending but we don't care here */
			if (legacy)
3321 3322 3323
				size = sizeof(FILE_INFO_STANDARD);
			else
				size = sizeof(FILE_ALL_INFO);
L
Linus Torvalds 已提交
3324 3325
			memcpy((char *) pFindData,
			       (char *) &pSMBr->hdr.Protocol +
3326
			       data_offset, size);
L
Linus Torvalds 已提交
3327 3328 3329 3330 3331 3332 3333 3334 3335 3336 3337 3338 3339
		} else
		    rc = -ENOMEM;
	}
	cifs_buf_release(pSMB);
	if (rc == -EAGAIN)
		goto QPathInfoRetry;

	return rc;
}

int
CIFSSMBUnixQPathInfo(const int xid, struct cifsTconInfo *tcon,
		     const unsigned char *searchName,
3340
		     FILE_UNIX_BASIC_INFO *pFindData,
3341
		     const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
3342 3343 3344 3345 3346 3347 3348 3349 3350 3351 3352 3353 3354 3355 3356 3357 3358 3359
{
/* SMB_QUERY_FILE_UNIX_BASIC */
	TRANSACTION2_QPI_REQ *pSMB = NULL;
	TRANSACTION2_QPI_RSP *pSMBr = NULL;
	int rc = 0;
	int bytes_returned = 0;
	int name_len;
	__u16 params, byte_count;

	cFYI(1, ("In QPathInfo (Unix) the path %s", searchName));
UnixQPathInfoRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
3360
		    cifsConvertToUCS((__le16 *) pSMB->FileName, searchName,
3361
				  PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
3362 3363
		name_len++;	/* trailing null */
		name_len *= 2;
3364
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
3365 3366 3367 3368 3369
		name_len = strnlen(searchName, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->FileName, searchName, name_len);
	}

3370
	params = 2 /* level */ + 4 /* reserved */ + name_len /* includes NUL */;
L
Linus Torvalds 已提交
3371 3372 3373
	pSMB->TotalDataCount = 0;
	pSMB->MaxParameterCount = cpu_to_le16(2);
	/* BB find exact max SMB PDU from sess structure BB */
3374
	pSMB->MaxDataCount = cpu_to_le16(4000);
L
Linus Torvalds 已提交
3375 3376 3377 3378 3379 3380
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	pSMB->ParameterOffset = cpu_to_le16(offsetof(
3381
	struct smb_com_transaction2_qpi_req, InformationLevel) - 4);
L
Linus Torvalds 已提交
3382 3383 3384 3385 3386 3387 3388 3389 3390 3391 3392 3393 3394 3395 3396 3397 3398 3399 3400 3401 3402
	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_QUERY_PATH_INFORMATION);
	byte_count = params + 1 /* pad */ ;
	pSMB->TotalParameterCount = cpu_to_le16(params);
	pSMB->ParameterCount = pSMB->TotalParameterCount;
	pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_FILE_UNIX_BASIC);
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
		cFYI(1, ("Send error in QPathInfo = %d", rc));
	} else {		/* decode response */
		rc = validate_t2((struct smb_t2_rsp *)pSMBr);

		if (rc || (pSMBr->ByteCount < sizeof(FILE_UNIX_BASIC_INFO))) {
3403 3404 3405
			cERROR(1, ("Malformed FILE_UNIX_BASIC_INFO response.\n"
				   "Unix Extensions can be disabled on mount "
				   "by specifying the nosfu mount option."));
L
Linus Torvalds 已提交
3406 3407 3408 3409 3410 3411
			rc = -EIO;	/* bad smb */
		} else {
			__u16 data_offset = le16_to_cpu(pSMBr->t2.DataOffset);
			memcpy((char *) pFindData,
			       (char *) &pSMBr->hdr.Protocol +
			       data_offset,
S
Steve French 已提交
3412
			       sizeof(FILE_UNIX_BASIC_INFO));
L
Linus Torvalds 已提交
3413 3414 3415 3416 3417 3418 3419 3420 3421 3422 3423 3424
		}
	}
	cifs_buf_release(pSMB);
	if (rc == -EAGAIN)
		goto UnixQPathInfoRetry;

	return rc;
}

/* xid, tcon, searchName and codepage are input parms, rest are returned */
int
CIFSFindFirst(const int xid, struct cifsTconInfo *tcon,
3425
	      const char *searchName,
L
Linus Torvalds 已提交
3426
	      const struct nls_table *nls_codepage,
3427 3428
	      __u16 *pnetfid,
	      struct cifs_search_info *psrch_inf, int remap, const char dirsep)
L
Linus Torvalds 已提交
3429 3430 3431 3432
{
/* level 257 SMB_ */
	TRANSACTION2_FFIRST_REQ *pSMB = NULL;
	TRANSACTION2_FFIRST_RSP *pSMBr = NULL;
S
Steve French 已提交
3433
	T2_FFIRST_RSP_PARMS *parms;
L
Linus Torvalds 已提交
3434 3435 3436 3437 3438
	int rc = 0;
	int bytes_returned = 0;
	int name_len;
	__u16 params, byte_count;

3439
	cFYI(1, ("In FindFirst for %s", searchName));
L
Linus Torvalds 已提交
3440 3441 3442 3443 3444 3445 3446 3447 3448

findFirstRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
3449
		    cifsConvertToUCS((__le16 *) pSMB->FileName, searchName,
3450 3451 3452 3453
				 PATH_MAX, nls_codepage, remap);
		/* We can not add the asterik earlier in case
		it got remapped to 0xF03A as if it were part of the
		directory name instead of a wildcard */
L
Linus Torvalds 已提交
3454
		name_len *= 2;
3455
		pSMB->FileName[name_len] = dirsep;
3456 3457 3458 3459
		pSMB->FileName[name_len+1] = 0;
		pSMB->FileName[name_len+2] = '*';
		pSMB->FileName[name_len+3] = 0;
		name_len += 4; /* now the trailing null */
L
Linus Torvalds 已提交
3460 3461
		pSMB->FileName[name_len] = 0; /* null terminate just in case */
		pSMB->FileName[name_len+1] = 0;
3462
		name_len += 2;
L
Linus Torvalds 已提交
3463 3464 3465
	} else {	/* BB add check for overrun of SMB buf BB */
		name_len = strnlen(searchName, PATH_MAX);
/* BB fix here and in unicode clause above ie
S
Steve French 已提交
3466
		if (name_len > buffersize-header)
L
Linus Torvalds 已提交
3467 3468
			free buffer exit; BB */
		strncpy(pSMB->FileName, searchName, name_len);
3469
		pSMB->FileName[name_len] = dirsep;
3470 3471 3472
		pSMB->FileName[name_len+1] = '*';
		pSMB->FileName[name_len+2] = 0;
		name_len += 3;
L
Linus Torvalds 已提交
3473 3474 3475 3476 3477 3478 3479 3480 3481 3482 3483 3484 3485 3486 3487 3488
	}

	params = 12 + name_len /* includes null */ ;
	pSMB->TotalDataCount = 0;	/* no EAs */
	pSMB->MaxParameterCount = cpu_to_le16(10);
	pSMB->MaxDataCount = cpu_to_le16((tcon->ses->server->maxBuf -
					  MAX_CIFS_HDR_SIZE) & 0xFFFFFF00);
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	byte_count = params + 1 /* pad */ ;
	pSMB->TotalParameterCount = cpu_to_le16(params);
	pSMB->ParameterCount = pSMB->TotalParameterCount;
	pSMB->ParameterOffset = cpu_to_le16(
3489 3490
	      offsetof(struct smb_com_transaction2_ffirst_req, SearchAttributes)
		- 4);
L
Linus Torvalds 已提交
3491 3492 3493 3494 3495 3496 3497 3498
	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->SetupCount = 1;	/* one byte, no need to make endian neutral */
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_FIND_FIRST);
	pSMB->SearchAttributes =
	    cpu_to_le16(ATTR_READONLY | ATTR_HIDDEN | ATTR_SYSTEM |
			ATTR_DIRECTORY);
3499 3500
	pSMB->SearchCount = cpu_to_le16(CIFSMaxBufSize/sizeof(FILE_UNIX_INFO));
	pSMB->SearchFlags = cpu_to_le16(CIFS_SEARCH_CLOSE_AT_END |
L
Linus Torvalds 已提交
3501 3502 3503 3504 3505 3506 3507 3508 3509 3510
		CIFS_SEARCH_RETURN_RESUME);
	pSMB->InformationLevel = cpu_to_le16(psrch_inf->info_level);

	/* BB what should we set StorageType to? Does it matter? BB */
	pSMB->SearchStorageType = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
3511
	cifs_stats_inc(&tcon->num_ffirst);
L
Linus Torvalds 已提交
3512

3513 3514
	if (rc) {/* BB add logic to retry regular search if Unix search
			rejected unexpectedly by server */
L
Linus Torvalds 已提交
3515 3516
		/* BB Add code to handle unsupported level rc */
		cFYI(1, ("Error in FindFirst = %d", rc));
3517

3518
		cifs_buf_release(pSMB);
L
Linus Torvalds 已提交
3519 3520 3521 3522 3523 3524 3525 3526

		/* BB eventually could optimize out free and realloc of buf */
		/*    for this case */
		if (rc == -EAGAIN)
			goto findFirstRetry;
	} else { /* decode response */
		/* BB remember to free buffer if error BB */
		rc = validate_t2((struct smb_t2_rsp *)pSMBr);
S
Steve French 已提交
3527
		if (rc == 0) {
3528 3529
			unsigned int lnoff;

L
Linus Torvalds 已提交
3530
			if (pSMBr->hdr.Flags2 & SMBFLG2_UNICODE)
3531
				psrch_inf->unicode = true;
L
Linus Torvalds 已提交
3532
			else
3533
				psrch_inf->unicode = false;
L
Linus Torvalds 已提交
3534 3535

			psrch_inf->ntwrk_buf_start = (char *)pSMBr;
3536
			psrch_inf->smallBuf = 0;
3537 3538
			psrch_inf->srch_entries_start =
				(char *) &pSMBr->hdr.Protocol +
L
Linus Torvalds 已提交
3539 3540 3541 3542
					le16_to_cpu(pSMBr->t2.DataOffset);
			parms = (T2_FFIRST_RSP_PARMS *)((char *) &pSMBr->hdr.Protocol +
			       le16_to_cpu(pSMBr->t2.ParameterOffset));

S
Steve French 已提交
3543
			if (parms->EndofSearch)
3544
				psrch_inf->endOfSearch = true;
L
Linus Torvalds 已提交
3545
			else
3546
				psrch_inf->endOfSearch = false;
L
Linus Torvalds 已提交
3547

3548 3549
			psrch_inf->entries_in_buffer =
					le16_to_cpu(parms->SearchCount);
3550
			psrch_inf->index_of_last_entry = 2 /* skip . and .. */ +
L
Linus Torvalds 已提交
3551
				psrch_inf->entries_in_buffer;
3552 3553 3554 3555 3556 3557 3558 3559
			lnoff = le16_to_cpu(parms->LastNameOffset);
			if (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE <
			      lnoff) {
				cERROR(1, ("ignoring corrupt resume name"));
				psrch_inf->last_entry = NULL;
				return rc;
			}

3560
			psrch_inf->last_entry = psrch_inf->srch_entries_start +
3561 3562
							lnoff;

L
Linus Torvalds 已提交
3563 3564 3565 3566 3567 3568 3569 3570 3571 3572
			*pnetfid = parms->SearchHandle;
		} else {
			cifs_buf_release(pSMB);
		}
	}

	return rc;
}

int CIFSFindNext(const int xid, struct cifsTconInfo *tcon,
3573
		 __u16 searchHandle, struct cifs_search_info *psrch_inf)
L
Linus Torvalds 已提交
3574 3575 3576
{
	TRANSACTION2_FNEXT_REQ *pSMB = NULL;
	TRANSACTION2_FNEXT_RSP *pSMBr = NULL;
S
Steve French 已提交
3577
	T2_FNEXT_RSP_PARMS *parms;
L
Linus Torvalds 已提交
3578 3579 3580 3581 3582 3583 3584
	char *response_data;
	int rc = 0;
	int bytes_returned, name_len;
	__u16 params, byte_count;

	cFYI(1, ("In FindNext"));

3585
	if (psrch_inf->endOfSearch)
L
Linus Torvalds 已提交
3586 3587 3588 3589 3590 3591 3592
		return -ENOENT;

	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		(void **) &pSMBr);
	if (rc)
		return rc;

3593
	params = 14; /* includes 2 bytes of null string, converted to LE below*/
L
Linus Torvalds 已提交
3594 3595 3596 3597
	byte_count = 0;
	pSMB->TotalDataCount = 0;       /* no EAs */
	pSMB->MaxParameterCount = cpu_to_le16(8);
	pSMB->MaxDataCount =
3598 3599
		cpu_to_le16((tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE) &
				0xFFFFFF00);
L
Linus Torvalds 已提交
3600 3601 3602 3603 3604 3605 3606 3607 3608 3609 3610 3611 3612 3613
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	pSMB->ParameterOffset =  cpu_to_le16(
	      offsetof(struct smb_com_transaction2_fnext_req,SearchHandle) - 4);
	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_FIND_NEXT);
	pSMB->SearchHandle = searchHandle;      /* always kept as le */
	pSMB->SearchCount =
S
Steve French 已提交
3614
		cpu_to_le16(CIFSMaxBufSize / sizeof(FILE_UNIX_INFO));
L
Linus Torvalds 已提交
3615 3616 3617 3618 3619 3620 3621
	pSMB->InformationLevel = cpu_to_le16(psrch_inf->info_level);
	pSMB->ResumeKey = psrch_inf->resume_key;
	pSMB->SearchFlags =
	      cpu_to_le16(CIFS_SEARCH_CLOSE_AT_END | CIFS_SEARCH_RETURN_RESUME);

	name_len = psrch_inf->resume_name_len;
	params += name_len;
S
Steve French 已提交
3622
	if (name_len < PATH_MAX) {
L
Linus Torvalds 已提交
3623 3624
		memcpy(pSMB->ResumeFileName, psrch_inf->presume_name, name_len);
		byte_count += name_len;
3625 3626 3627
		/* 14 byte parm len above enough for 2 byte null terminator */
		pSMB->ResumeFileName[name_len] = 0;
		pSMB->ResumeFileName[name_len+1] = 0;
L
Linus Torvalds 已提交
3628 3629 3630 3631 3632 3633 3634 3635 3636
	} else {
		rc = -EINVAL;
		goto FNext2_err_exit;
	}
	byte_count = params + 1 /* pad */ ;
	pSMB->TotalParameterCount = cpu_to_le16(params);
	pSMB->ParameterCount = pSMB->TotalParameterCount;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);
3637

L
Linus Torvalds 已提交
3638 3639
	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			(struct smb_hdr *) pSMBr, &bytes_returned, 0);
3640
	cifs_stats_inc(&tcon->num_fnext);
L
Linus Torvalds 已提交
3641 3642
	if (rc) {
		if (rc == -EBADF) {
3643
			psrch_inf->endOfSearch = true;
J
Jeff Layton 已提交
3644
			cifs_buf_release(pSMB);
3645
			rc = 0; /* search probably was closed at end of search*/
L
Linus Torvalds 已提交
3646 3647 3648 3649
		} else
			cFYI(1, ("FindNext returned = %d", rc));
	} else {                /* decode response */
		rc = validate_t2((struct smb_t2_rsp *)pSMBr);
3650

S
Steve French 已提交
3651
		if (rc == 0) {
3652 3653
			unsigned int lnoff;

L
Linus Torvalds 已提交
3654 3655
			/* BB fixme add lock for file (srch_info) struct here */
			if (pSMBr->hdr.Flags2 & SMBFLG2_UNICODE)
3656
				psrch_inf->unicode = true;
L
Linus Torvalds 已提交
3657
			else
3658
				psrch_inf->unicode = false;
L
Linus Torvalds 已提交
3659 3660 3661 3662 3663
			response_data = (char *) &pSMBr->hdr.Protocol +
			       le16_to_cpu(pSMBr->t2.ParameterOffset);
			parms = (T2_FNEXT_RSP_PARMS *)response_data;
			response_data = (char *)&pSMBr->hdr.Protocol +
				le16_to_cpu(pSMBr->t2.DataOffset);
S
Steve French 已提交
3664
			if (psrch_inf->smallBuf)
3665 3666 3667 3668
				cifs_small_buf_release(
					psrch_inf->ntwrk_buf_start);
			else
				cifs_buf_release(psrch_inf->ntwrk_buf_start);
L
Linus Torvalds 已提交
3669 3670
			psrch_inf->srch_entries_start = response_data;
			psrch_inf->ntwrk_buf_start = (char *)pSMB;
3671
			psrch_inf->smallBuf = 0;
S
Steve French 已提交
3672
			if (parms->EndofSearch)
3673
				psrch_inf->endOfSearch = true;
L
Linus Torvalds 已提交
3674
			else
3675
				psrch_inf->endOfSearch = false;
3676 3677
			psrch_inf->entries_in_buffer =
						le16_to_cpu(parms->SearchCount);
L
Linus Torvalds 已提交
3678 3679
			psrch_inf->index_of_last_entry +=
				psrch_inf->entries_in_buffer;
3680 3681 3682 3683 3684 3685 3686 3687 3688 3689
			lnoff = le16_to_cpu(parms->LastNameOffset);
			if (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE <
			      lnoff) {
				cERROR(1, ("ignoring corrupt resume name"));
				psrch_inf->last_entry = NULL;
				return rc;
			} else
				psrch_inf->last_entry =
					psrch_inf->srch_entries_start + lnoff;

3690 3691
/*  cFYI(1,("fnxt2 entries in buf %d index_of_last %d",
	    psrch_inf->entries_in_buffer, psrch_inf->index_of_last_entry)); */
L
Linus Torvalds 已提交
3692 3693 3694 3695 3696 3697 3698 3699 3700 3701 3702 3703 3704 3705 3706 3707 3708 3709

			/* BB fixme add unlock here */
		}

	}

	/* BB On error, should we leave previous search buf (and count and
	last entry fields) intact or free the previous one? */

	/* Note: On -EAGAIN error only caller can retry on handle based calls
	since file handle passed in no longer valid */
FNext2_err_exit:
	if (rc != 0)
		cifs_buf_release(pSMB);
	return rc;
}

int
3710 3711
CIFSFindClose(const int xid, struct cifsTconInfo *tcon,
	      const __u16 searchHandle)
L
Linus Torvalds 已提交
3712 3713 3714 3715 3716 3717 3718 3719 3720
{
	int rc = 0;
	FINDCLOSE_REQ *pSMB = NULL;

	cFYI(1, ("In CIFSSMBFindClose"));
	rc = small_smb_init(SMB_COM_FIND_CLOSE2, 1, tcon, (void **)&pSMB);

	/* no sense returning error if session restarted
		as file handle has been closed */
S
Steve French 已提交
3721
	if (rc == -EAGAIN)
L
Linus Torvalds 已提交
3722 3723 3724 3725 3726 3727
		return 0;
	if (rc)
		return rc;

	pSMB->FileID = searchHandle;
	pSMB->ByteCount = 0;
3728
	rc = SendReceiveNoRsp(xid, tcon->ses, (struct smb_hdr *) pSMB, 0);
S
Steve French 已提交
3729
	if (rc)
L
Linus Torvalds 已提交
3730
		cERROR(1, ("Send error in FindClose = %d", rc));
S
Steve French 已提交
3731

3732
	cifs_stats_inc(&tcon->num_fclose);
L
Linus Torvalds 已提交
3733 3734 3735 3736 3737 3738 3739 3740 3741 3742

	/* Since session is dead, search handle closed on server already */
	if (rc == -EAGAIN)
		rc = 0;

	return rc;
}

int
CIFSGetSrvInodeNumber(const int xid, struct cifsTconInfo *tcon,
3743
		      const unsigned char *searchName,
S
Steve French 已提交
3744
		      __u64 *inode_number,
3745
		      const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
3746 3747 3748 3749 3750 3751 3752
{
	int rc = 0;
	TRANSACTION2_QPI_REQ *pSMB = NULL;
	TRANSACTION2_QPI_RSP *pSMBr = NULL;
	int name_len, bytes_returned;
	__u16 params, byte_count;

3753
	cFYI(1, ("In GetSrvInodeNum for %s", searchName));
S
Steve French 已提交
3754
	if (tcon == NULL)
3755
		return -ENODEV;
L
Linus Torvalds 已提交
3756 3757 3758

GetInodeNumberRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
3759
		      (void **) &pSMBr);
L
Linus Torvalds 已提交
3760 3761 3762 3763 3764
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
3765
			cifsConvertToUCS((__le16 *) pSMB->FileName, searchName,
3766
					 PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
3767 3768
		name_len++;     /* trailing null */
		name_len *= 2;
3769
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
3770 3771 3772 3773 3774 3775 3776 3777 3778 3779 3780 3781 3782 3783 3784 3785
		name_len = strnlen(searchName, PATH_MAX);
		name_len++;     /* trailing null */
		strncpy(pSMB->FileName, searchName, name_len);
	}

	params = 2 /* level */  + 4 /* rsrvd */  + name_len /* incl null */ ;
	pSMB->TotalDataCount = 0;
	pSMB->MaxParameterCount = cpu_to_le16(2);
	/* BB find exact max data count below from sess structure BB */
	pSMB->MaxDataCount = cpu_to_le16(4000);
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	pSMB->ParameterOffset = cpu_to_le16(offsetof(
3786
		struct smb_com_transaction2_qpi_req, InformationLevel) - 4);
L
Linus Torvalds 已提交
3787 3788 3789 3790 3791 3792 3793 3794 3795 3796 3797 3798 3799 3800 3801 3802 3803 3804 3805 3806 3807 3808 3809 3810 3811
	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_QUERY_PATH_INFORMATION);
	byte_count = params + 1 /* pad */ ;
	pSMB->TotalParameterCount = cpu_to_le16(params);
	pSMB->ParameterCount = pSMB->TotalParameterCount;
	pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_FILE_INTERNAL_INFO);
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
		(struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
		cFYI(1, ("error %d in QueryInternalInfo", rc));
	} else {
		/* decode response */
		rc = validate_t2((struct smb_t2_rsp *)pSMBr);
		if (rc || (pSMBr->ByteCount < 2))
		/* BB also check enough total bytes returned */
			/* If rc should we check for EOPNOSUPP and
			disable the srvino flag? or in caller? */
			rc = -EIO;      /* bad smb */
3812
		else {
L
Linus Torvalds 已提交
3813 3814
			__u16 data_offset = le16_to_cpu(pSMBr->t2.DataOffset);
			__u16 count = le16_to_cpu(pSMBr->t2.DataCount);
3815
			struct file_internal_info *pfinfo;
L
Linus Torvalds 已提交
3816
			/* BB Do we need a cast or hash here ? */
S
Steve French 已提交
3817
			if (count < 8) {
L
Linus Torvalds 已提交
3818 3819 3820 3821 3822 3823
				cFYI(1, ("Illegal size ret in QryIntrnlInf"));
				rc = -EIO;
				goto GetInodeNumOut;
			}
			pfinfo = (struct file_internal_info *)
				(data_offset + (char *) &pSMBr->hdr.Protocol);
3824
			*inode_number = le64_to_cpu(pfinfo->UniqueId);
L
Linus Torvalds 已提交
3825 3826 3827 3828 3829 3830 3831 3832 3833
		}
	}
GetInodeNumOut:
	cifs_buf_release(pSMB);
	if (rc == -EAGAIN)
		goto GetInodeNumberRetry;
	return rc;
}

3834 3835 3836 3837 3838 3839 3840
/* parses DFS refferal V3 structure
 * caller is responsible for freeing target_nodes
 * returns:
 * 	on success - 0
 *	on failure - errno
 */
static int
3841
parse_DFS_referrals(TRANSACTION2_GET_DFS_REFER_RSP *pSMBr,
3842 3843
		unsigned int *num_of_nodes,
		struct dfs_info3_param **target_nodes,
3844 3845
		const struct nls_table *nls_codepage, int remap,
		const char *searchName)
3846 3847 3848 3849 3850 3851
{
	int i, rc = 0;
	char *data_end;
	bool is_unicode;
	struct dfs_referral_level_3 *ref;

3852 3853 3854 3855
	if (pSMBr->hdr.Flags2 & SMBFLG2_UNICODE)
		is_unicode = true;
	else
		is_unicode = false;
3856 3857 3858 3859 3860 3861
	*num_of_nodes = le16_to_cpu(pSMBr->NumberOfReferrals);

	if (*num_of_nodes < 1) {
		cERROR(1, ("num_referrals: must be at least > 0,"
			"but we get num_referrals = %d\n", *num_of_nodes));
		rc = -EINVAL;
3862
		goto parse_DFS_referrals_exit;
3863 3864 3865
	}

	ref = (struct dfs_referral_level_3 *) &(pSMBr->referrals);
A
Al Viro 已提交
3866
	if (ref->VersionNumber != cpu_to_le16(3)) {
3867
		cERROR(1, ("Referrals of V%d version are not supported,"
A
Al Viro 已提交
3868
			"should be V3", le16_to_cpu(ref->VersionNumber)));
3869
		rc = -EINVAL;
3870
		goto parse_DFS_referrals_exit;
3871 3872 3873 3874 3875 3876 3877 3878
	}

	/* get the upper boundary of the resp buffer */
	data_end = (char *)(&(pSMBr->PathConsumed)) +
				le16_to_cpu(pSMBr->t2.DataCount);

	cFYI(1, ("num_referrals: %d dfs flags: 0x%x ... \n",
			*num_of_nodes,
3879
			le32_to_cpu(pSMBr->DFSFlags)));
3880 3881 3882 3883 3884 3885

	*target_nodes = kzalloc(sizeof(struct dfs_info3_param) *
			*num_of_nodes, GFP_KERNEL);
	if (*target_nodes == NULL) {
		cERROR(1, ("Failed to allocate buffer for target_nodes\n"));
		rc = -ENOMEM;
3886
		goto parse_DFS_referrals_exit;
3887 3888 3889 3890 3891 3892 3893 3894
	}

	/* collect neccessary data from referrals */
	for (i = 0; i < *num_of_nodes; i++) {
		char *temp;
		int max_len;
		struct dfs_info3_param *node = (*target_nodes)+i;

3895
		node->flags = le32_to_cpu(pSMBr->DFSFlags);
3896
		if (is_unicode) {
3897 3898
			__le16 *tmp = kmalloc(strlen(searchName)*2 + 2,
						GFP_KERNEL);
3899 3900 3901 3902
			if (tmp == NULL) {
				rc = -ENOMEM;
				goto parse_DFS_referrals_exit;
			}
3903 3904
			cifsConvertToUCS((__le16 *) tmp, searchName,
					PATH_MAX, nls_codepage, remap);
3905 3906
			node->path_consumed = cifs_ucs2_bytes(tmp,
					le16_to_cpu(pSMBr->PathConsumed),
3907 3908 3909 3910 3911
					nls_codepage);
			kfree(tmp);
		} else
			node->path_consumed = le16_to_cpu(pSMBr->PathConsumed);

3912 3913 3914 3915 3916 3917
		node->server_type = le16_to_cpu(ref->ServerType);
		node->ref_flag = le16_to_cpu(ref->ReferralEntryFlags);

		/* copy DfsPath */
		temp = (char *)ref + le16_to_cpu(ref->DfsPathOffset);
		max_len = data_end - temp;
3918 3919
		node->path_name = cifs_strndup_from_ucs(temp, max_len,
						      is_unicode, nls_codepage);
3920 3921
		if (!node->path_name) {
			rc = -ENOMEM;
3922
			goto parse_DFS_referrals_exit;
3923
		}
3924 3925 3926 3927

		/* copy link target UNC */
		temp = (char *)ref + le16_to_cpu(ref->NetworkAddressOffset);
		max_len = data_end - temp;
3928 3929
		node->node_name = cifs_strndup_from_ucs(temp, max_len,
						      is_unicode, nls_codepage);
3930 3931
		if (!node->node_name)
			rc = -ENOMEM;
3932 3933
	}

3934
parse_DFS_referrals_exit:
3935 3936 3937 3938 3939 3940 3941 3942
	if (rc) {
		free_dfs_info_array(*target_nodes, *num_of_nodes);
		*target_nodes = NULL;
		*num_of_nodes = 0;
	}
	return rc;
}

L
Linus Torvalds 已提交
3943 3944 3945
int
CIFSGetDFSRefer(const int xid, struct cifsSesInfo *ses,
		const unsigned char *searchName,
S
Steve French 已提交
3946 3947
		struct dfs_info3_param **target_nodes,
		unsigned int *num_of_nodes,
3948
		const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
3949 3950 3951 3952 3953 3954 3955 3956
{
/* TRANS2_GET_DFS_REFERRAL */
	TRANSACTION2_GET_DFS_REFER_REQ *pSMB = NULL;
	TRANSACTION2_GET_DFS_REFER_RSP *pSMBr = NULL;
	int rc = 0;
	int bytes_returned;
	int name_len;
	__u16 params, byte_count;
S
Steve French 已提交
3957 3958
	*num_of_nodes = 0;
	*target_nodes = NULL;
L
Linus Torvalds 已提交
3959 3960 3961 3962 3963 3964 3965 3966 3967

	cFYI(1, ("In GetDFSRefer the path %s", searchName));
	if (ses == NULL)
		return -ENODEV;
getDFSRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, NULL, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;
3968 3969

	/* server pointer checked in called function,
3970 3971
	but should never be null here anyway */
	pSMB->hdr.Mid = GetNextMid(ses->server);
L
Linus Torvalds 已提交
3972 3973
	pSMB->hdr.Tid = ses->ipc_tid;
	pSMB->hdr.Uid = ses->Suid;
3974
	if (ses->capabilities & CAP_STATUS32)
L
Linus Torvalds 已提交
3975
		pSMB->hdr.Flags2 |= SMBFLG2_ERR_STATUS;
3976
	if (ses->capabilities & CAP_DFS)
L
Linus Torvalds 已提交
3977 3978 3979 3980 3981
		pSMB->hdr.Flags2 |= SMBFLG2_DFS;

	if (ses->capabilities & CAP_UNICODE) {
		pSMB->hdr.Flags2 |= SMBFLG2_UNICODE;
		name_len =
3982
		    cifsConvertToUCS((__le16 *) pSMB->RequestFileName,
3983
				     searchName, PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
3984 3985
		name_len++;	/* trailing null */
		name_len *= 2;
3986
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
3987 3988 3989 3990 3991
		name_len = strnlen(searchName, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->RequestFileName, searchName, name_len);
	}

S
Steve French 已提交
3992 3993
	if (ses->server) {
		if (ses->server->secMode &
S
Steve French 已提交
3994 3995 3996 3997
		   (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
			pSMB->hdr.Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
	}

3998
	pSMB->hdr.Uid = ses->Suid;
S
Steve French 已提交
3999

L
Linus Torvalds 已提交
4000 4001 4002 4003 4004
	params = 2 /* level */  + name_len /*includes null */ ;
	pSMB->TotalDataCount = 0;
	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->MaxParameterCount = 0;
4005 4006
	/* BB find exact max SMB PDU from sess structure BB */
	pSMB->MaxDataCount = cpu_to_le16(4000);
L
Linus Torvalds 已提交
4007 4008 4009 4010 4011 4012
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	pSMB->ParameterOffset = cpu_to_le16(offsetof(
4013
	  struct smb_com_transaction2_get_dfs_refer_req, MaxReferralLevel) - 4);
L
Linus Torvalds 已提交
4014 4015 4016 4017 4018 4019 4020 4021 4022 4023 4024 4025 4026 4027
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_GET_DFS_REFERRAL);
	byte_count = params + 3 /* pad */ ;
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	pSMB->MaxReferralLevel = cpu_to_le16(3);
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);

	rc = SendReceive(xid, ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
		cFYI(1, ("Send error in GetDFSRefer = %d", rc));
S
Steve French 已提交
4028 4029 4030
		goto GetDFSRefExit;
	}
	rc = validate_t2((struct smb_t2_rsp *)pSMBr);
L
Linus Torvalds 已提交
4031

S
Steve French 已提交
4032
	/* BB Also check if enough total bytes returned? */
4033
	if (rc || (pSMBr->ByteCount < 17)) {
S
Steve French 已提交
4034
		rc = -EIO;      /* bad smb */
4035 4036
		goto GetDFSRefExit;
	}
S
Steve French 已提交
4037

4038 4039 4040
	cFYI(1, ("Decoding GetDFSRefer response BCC: %d  Offset %d",
				pSMBr->ByteCount,
				le16_to_cpu(pSMBr->t2.DataOffset)));
L
Linus Torvalds 已提交
4041

4042
	/* parse returned result into more usable form */
4043
	rc = parse_DFS_referrals(pSMBr, num_of_nodes,
4044 4045
				 target_nodes, nls_codepage, remap,
				 searchName);
S
Steve French 已提交
4046

L
Linus Torvalds 已提交
4047
GetDFSRefExit:
4048
	cifs_buf_release(pSMB);
L
Linus Torvalds 已提交
4049 4050 4051 4052 4053 4054 4055

	if (rc == -EAGAIN)
		goto getDFSRetry;

	return rc;
}

4056 4057 4058 4059 4060 4061 4062 4063 4064 4065 4066 4067 4068 4069 4070 4071 4072 4073 4074 4075 4076 4077 4078 4079 4080 4081 4082 4083 4084 4085 4086 4087 4088 4089 4090 4091 4092 4093 4094 4095 4096 4097 4098 4099 4100 4101 4102 4103 4104 4105 4106 4107 4108
/* Query File System Info such as free space to old servers such as Win 9x */
int
SMBOldQFSInfo(const int xid, struct cifsTconInfo *tcon, struct kstatfs *FSData)
{
/* level 0x01 SMB_QUERY_FILE_SYSTEM_INFO */
	TRANSACTION2_QFSI_REQ *pSMB = NULL;
	TRANSACTION2_QFSI_RSP *pSMBr = NULL;
	FILE_SYSTEM_ALLOC_INFO *response_data;
	int rc = 0;
	int bytes_returned = 0;
	__u16 params, byte_count;

	cFYI(1, ("OldQFSInfo"));
oldQFSInfoRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		(void **) &pSMBr);
	if (rc)
		return rc;

	params = 2;     /* level */
	pSMB->TotalDataCount = 0;
	pSMB->MaxParameterCount = cpu_to_le16(2);
	pSMB->MaxDataCount = cpu_to_le16(1000);
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	byte_count = params + 1 /* pad */ ;
	pSMB->TotalParameterCount = cpu_to_le16(params);
	pSMB->ParameterCount = pSMB->TotalParameterCount;
	pSMB->ParameterOffset = cpu_to_le16(offsetof(
	struct smb_com_transaction2_qfsi_req, InformationLevel) - 4);
	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_QUERY_FS_INFORMATION);
	pSMB->InformationLevel = cpu_to_le16(SMB_INFO_ALLOCATION);
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
		(struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
		cFYI(1, ("Send error in QFSInfo = %d", rc));
	} else {                /* decode response */
		rc = validate_t2((struct smb_t2_rsp *)pSMBr);

		if (rc || (pSMBr->ByteCount < 18))
			rc = -EIO;      /* bad smb */
		else {
			__u16 data_offset = le16_to_cpu(pSMBr->t2.DataOffset);
4109
			cFYI(1, ("qfsinf resp BCC: %d  Offset %d",
4110 4111
				 pSMBr->ByteCount, data_offset));

4112
			response_data = (FILE_SYSTEM_ALLOC_INFO *)
4113 4114 4115 4116 4117 4118
				(((char *) &pSMBr->hdr.Protocol) + data_offset);
			FSData->f_bsize =
				le16_to_cpu(response_data->BytesPerSector) *
				le32_to_cpu(response_data->
					SectorsPerAllocationUnit);
			FSData->f_blocks =
4119
			       le32_to_cpu(response_data->TotalAllocationUnits);
4120 4121 4122 4123 4124 4125 4126 4127 4128 4129 4130 4131 4132 4133 4134 4135 4136
			FSData->f_bfree = FSData->f_bavail =
				le32_to_cpu(response_data->FreeAllocationUnits);
			cFYI(1,
			     ("Blocks: %lld  Free: %lld Block size %ld",
			      (unsigned long long)FSData->f_blocks,
			      (unsigned long long)FSData->f_bfree,
			      FSData->f_bsize));
		}
	}
	cifs_buf_release(pSMB);

	if (rc == -EAGAIN)
		goto oldQFSInfoRetry;

	return rc;
}

L
Linus Torvalds 已提交
4137
int
4138
CIFSSMBQFSInfo(const int xid, struct cifsTconInfo *tcon, struct kstatfs *FSData)
L
Linus Torvalds 已提交
4139 4140 4141 4142 4143 4144 4145 4146 4147 4148 4149 4150 4151 4152 4153 4154 4155 4156 4157
{
/* level 0x103 SMB_QUERY_FILE_SYSTEM_INFO */
	TRANSACTION2_QFSI_REQ *pSMB = NULL;
	TRANSACTION2_QFSI_RSP *pSMBr = NULL;
	FILE_SYSTEM_INFO *response_data;
	int rc = 0;
	int bytes_returned = 0;
	__u16 params, byte_count;

	cFYI(1, ("In QFSInfo"));
QFSInfoRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	params = 2;	/* level */
	pSMB->TotalDataCount = 0;
	pSMB->MaxParameterCount = cpu_to_le16(2);
4158
	pSMB->MaxDataCount = cpu_to_le16(1000);
L
Linus Torvalds 已提交
4159 4160 4161 4162 4163 4164 4165 4166 4167
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	byte_count = params + 1 /* pad */ ;
	pSMB->TotalParameterCount = cpu_to_le16(params);
	pSMB->ParameterCount = pSMB->TotalParameterCount;
	pSMB->ParameterOffset = cpu_to_le16(offsetof(
4168
		struct smb_com_transaction2_qfsi_req, InformationLevel) - 4);
L
Linus Torvalds 已提交
4169 4170 4171 4172 4173 4174 4175 4176 4177 4178 4179 4180
	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_QUERY_FS_INFORMATION);
	pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_FS_SIZE_INFO);
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
4181
		cFYI(1, ("Send error in QFSInfo = %d", rc));
L
Linus Torvalds 已提交
4182
	} else {		/* decode response */
4183
		rc = validate_t2((struct smb_t2_rsp *)pSMBr);
L
Linus Torvalds 已提交
4184

4185
		if (rc || (pSMBr->ByteCount < 24))
L
Linus Torvalds 已提交
4186 4187 4188 4189 4190 4191 4192 4193 4194 4195 4196 4197 4198 4199 4200 4201 4202 4203 4204 4205 4206 4207 4208 4209 4210 4211 4212 4213 4214 4215 4216 4217
			rc = -EIO;	/* bad smb */
		else {
			__u16 data_offset = le16_to_cpu(pSMBr->t2.DataOffset);

			response_data =
			    (FILE_SYSTEM_INFO
			     *) (((char *) &pSMBr->hdr.Protocol) +
				 data_offset);
			FSData->f_bsize =
			    le32_to_cpu(response_data->BytesPerSector) *
			    le32_to_cpu(response_data->
					SectorsPerAllocationUnit);
			FSData->f_blocks =
			    le64_to_cpu(response_data->TotalAllocationUnits);
			FSData->f_bfree = FSData->f_bavail =
			    le64_to_cpu(response_data->FreeAllocationUnits);
			cFYI(1,
			     ("Blocks: %lld  Free: %lld Block size %ld",
			      (unsigned long long)FSData->f_blocks,
			      (unsigned long long)FSData->f_bfree,
			      FSData->f_bsize));
		}
	}
	cifs_buf_release(pSMB);

	if (rc == -EAGAIN)
		goto QFSInfoRetry;

	return rc;
}

int
4218
CIFSSMBQFSAttributeInfo(const int xid, struct cifsTconInfo *tcon)
L
Linus Torvalds 已提交
4219 4220 4221 4222 4223 4224 4225 4226 4227 4228 4229 4230 4231 4232 4233 4234 4235 4236 4237
{
/* level 0x105  SMB_QUERY_FILE_SYSTEM_INFO */
	TRANSACTION2_QFSI_REQ *pSMB = NULL;
	TRANSACTION2_QFSI_RSP *pSMBr = NULL;
	FILE_SYSTEM_ATTRIBUTE_INFO *response_data;
	int rc = 0;
	int bytes_returned = 0;
	__u16 params, byte_count;

	cFYI(1, ("In QFSAttributeInfo"));
QFSAttributeRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	params = 2;	/* level */
	pSMB->TotalDataCount = 0;
	pSMB->MaxParameterCount = cpu_to_le16(2);
4238 4239
	/* BB find exact max SMB PDU from sess structure BB */
	pSMB->MaxDataCount = cpu_to_le16(1000);
L
Linus Torvalds 已提交
4240 4241 4242 4243 4244 4245 4246 4247 4248
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	byte_count = params + 1 /* pad */ ;
	pSMB->TotalParameterCount = cpu_to_le16(params);
	pSMB->ParameterCount = pSMB->TotalParameterCount;
	pSMB->ParameterOffset = cpu_to_le16(offsetof(
4249
		struct smb_com_transaction2_qfsi_req, InformationLevel) - 4);
L
Linus Torvalds 已提交
4250 4251 4252 4253 4254 4255 4256 4257 4258 4259 4260 4261 4262 4263 4264 4265
	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_QUERY_FS_INFORMATION);
	pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_FS_ATTRIBUTE_INFO);
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
		cERROR(1, ("Send error in QFSAttributeInfo = %d", rc));
	} else {		/* decode response */
		rc = validate_t2((struct smb_t2_rsp *)pSMBr);

4266 4267
		if (rc || (pSMBr->ByteCount < 13)) {
			/* BB also check if enough bytes returned */
L
Linus Torvalds 已提交
4268 4269 4270 4271 4272 4273 4274 4275
			rc = -EIO;	/* bad smb */
		} else {
			__u16 data_offset = le16_to_cpu(pSMBr->t2.DataOffset);
			response_data =
			    (FILE_SYSTEM_ATTRIBUTE_INFO
			     *) (((char *) &pSMBr->hdr.Protocol) +
				 data_offset);
			memcpy(&tcon->fsAttrInfo, response_data,
4276
			       sizeof(FILE_SYSTEM_ATTRIBUTE_INFO));
L
Linus Torvalds 已提交
4277 4278 4279 4280 4281 4282 4283 4284 4285 4286 4287
		}
	}
	cifs_buf_release(pSMB);

	if (rc == -EAGAIN)
		goto QFSAttributeRetry;

	return rc;
}

int
4288
CIFSSMBQFSDeviceInfo(const int xid, struct cifsTconInfo *tcon)
L
Linus Torvalds 已提交
4289 4290 4291 4292 4293 4294 4295 4296 4297 4298 4299 4300 4301 4302 4303 4304 4305 4306 4307
{
/* level 0x104 SMB_QUERY_FILE_SYSTEM_INFO */
	TRANSACTION2_QFSI_REQ *pSMB = NULL;
	TRANSACTION2_QFSI_RSP *pSMBr = NULL;
	FILE_SYSTEM_DEVICE_INFO *response_data;
	int rc = 0;
	int bytes_returned = 0;
	__u16 params, byte_count;

	cFYI(1, ("In QFSDeviceInfo"));
QFSDeviceRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	params = 2;	/* level */
	pSMB->TotalDataCount = 0;
	pSMB->MaxParameterCount = cpu_to_le16(2);
4308 4309
	/* BB find exact max SMB PDU from sess structure BB */
	pSMB->MaxDataCount = cpu_to_le16(1000);
L
Linus Torvalds 已提交
4310 4311 4312 4313 4314 4315 4316 4317 4318
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	byte_count = params + 1 /* pad */ ;
	pSMB->TotalParameterCount = cpu_to_le16(params);
	pSMB->ParameterCount = pSMB->TotalParameterCount;
	pSMB->ParameterOffset = cpu_to_le16(offsetof(
4319
		struct smb_com_transaction2_qfsi_req, InformationLevel) - 4);
L
Linus Torvalds 已提交
4320 4321 4322 4323 4324 4325 4326 4327 4328 4329 4330 4331 4332 4333 4334 4335 4336

	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_QUERY_FS_INFORMATION);
	pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_FS_DEVICE_INFO);
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
		cFYI(1, ("Send error in QFSDeviceInfo = %d", rc));
	} else {		/* decode response */
		rc = validate_t2((struct smb_t2_rsp *)pSMBr);

S
Steve French 已提交
4337
		if (rc || (pSMBr->ByteCount < sizeof(FILE_SYSTEM_DEVICE_INFO)))
L
Linus Torvalds 已提交
4338 4339 4340 4341
			rc = -EIO;	/* bad smb */
		else {
			__u16 data_offset = le16_to_cpu(pSMBr->t2.DataOffset);
			response_data =
4342 4343
			    (FILE_SYSTEM_DEVICE_INFO *)
				(((char *) &pSMBr->hdr.Protocol) +
L
Linus Torvalds 已提交
4344 4345
				 data_offset);
			memcpy(&tcon->fsDevInfo, response_data,
4346
			       sizeof(FILE_SYSTEM_DEVICE_INFO));
L
Linus Torvalds 已提交
4347 4348 4349 4350 4351 4352 4353 4354 4355 4356 4357
		}
	}
	cifs_buf_release(pSMB);

	if (rc == -EAGAIN)
		goto QFSDeviceRetry;

	return rc;
}

int
4358
CIFSSMBQFSUnixInfo(const int xid, struct cifsTconInfo *tcon)
L
Linus Torvalds 已提交
4359 4360 4361 4362 4363 4364 4365 4366 4367 4368 4369 4370 4371 4372 4373 4374 4375 4376 4377 4378 4379
{
/* level 0x200  SMB_QUERY_CIFS_UNIX_INFO */
	TRANSACTION2_QFSI_REQ *pSMB = NULL;
	TRANSACTION2_QFSI_RSP *pSMBr = NULL;
	FILE_SYSTEM_UNIX_INFO *response_data;
	int rc = 0;
	int bytes_returned = 0;
	__u16 params, byte_count;

	cFYI(1, ("In QFSUnixInfo"));
QFSUnixRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	params = 2;	/* level */
	pSMB->TotalDataCount = 0;
	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->MaxParameterCount = cpu_to_le16(2);
4380 4381
	/* BB find exact max SMB PDU from sess structure BB */
	pSMB->MaxDataCount = cpu_to_le16(100);
L
Linus Torvalds 已提交
4382 4383 4384 4385 4386 4387 4388 4389
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	byte_count = params + 1 /* pad */ ;
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalParameterCount = pSMB->ParameterCount;
4390 4391
	pSMB->ParameterOffset = cpu_to_le16(offsetof(struct
			smb_com_transaction2_qfsi_req, InformationLevel) - 4);
L
Linus Torvalds 已提交
4392 4393 4394 4395 4396 4397 4398 4399 4400 4401 4402 4403 4404 4405 4406 4407 4408 4409 4410 4411 4412 4413 4414
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_QUERY_FS_INFORMATION);
	pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_CIFS_UNIX_INFO);
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
		cERROR(1, ("Send error in QFSUnixInfo = %d", rc));
	} else {		/* decode response */
		rc = validate_t2((struct smb_t2_rsp *)pSMBr);

		if (rc || (pSMBr->ByteCount < 13)) {
			rc = -EIO;	/* bad smb */
		} else {
			__u16 data_offset = le16_to_cpu(pSMBr->t2.DataOffset);
			response_data =
			    (FILE_SYSTEM_UNIX_INFO
			     *) (((char *) &pSMBr->hdr.Protocol) +
				 data_offset);
			memcpy(&tcon->fsUnixInfo, response_data,
4415
			       sizeof(FILE_SYSTEM_UNIX_INFO));
L
Linus Torvalds 已提交
4416 4417 4418 4419 4420 4421 4422 4423 4424 4425 4426
		}
	}
	cifs_buf_release(pSMB);

	if (rc == -EAGAIN)
		goto QFSUnixRetry;


	return rc;
}

4427
int
4428
CIFSSMBSetFSUnixInfo(const int xid, struct cifsTconInfo *tcon, __u64 cap)
4429 4430 4431 4432 4433 4434 4435 4436 4437 4438
{
/* level 0x200  SMB_SET_CIFS_UNIX_INFO */
	TRANSACTION2_SETFSI_REQ *pSMB = NULL;
	TRANSACTION2_SETFSI_RSP *pSMBr = NULL;
	int rc = 0;
	int bytes_returned = 0;
	__u16 params, param_offset, offset, byte_count;

	cFYI(1, ("In SETFSUnixInfo"));
SETFSUnixRetry:
4439
	/* BB switch to small buf init to save memory */
4440 4441 4442 4443 4444 4445 4446 4447 4448 4449 4450
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	params = 4;	/* 2 bytes zero followed by info level. */
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
4451 4452
	param_offset = offsetof(struct smb_com_transaction2_setfsi_req, FileNum)
				- 4;
4453 4454 4455
	offset = param_offset + params;

	pSMB->MaxParameterCount = cpu_to_le16(4);
4456 4457
	/* BB find exact max SMB PDU from sess structure BB */
	pSMB->MaxDataCount = cpu_to_le16(100);
4458 4459 4460 4461 4462 4463 4464 4465 4466 4467 4468 4469 4470 4471 4472 4473 4474 4475 4476 4477 4478 4479 4480 4481 4482 4483 4484 4485 4486 4487
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_SET_FS_INFORMATION);
	byte_count = 1 /* pad */ + params + 12;

	pSMB->DataCount = cpu_to_le16(12);
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalDataCount = pSMB->DataCount;
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	pSMB->ParameterOffset = cpu_to_le16(param_offset);
	pSMB->DataOffset = cpu_to_le16(offset);

	/* Params. */
	pSMB->FileNum = 0;
	pSMB->InformationLevel = cpu_to_le16(SMB_SET_CIFS_UNIX_INFO);

	/* Data. */
	pSMB->ClientUnixMajor = cpu_to_le16(CIFS_UNIX_MAJOR_VERSION);
	pSMB->ClientUnixMinor = cpu_to_le16(CIFS_UNIX_MINOR_VERSION);
	pSMB->ClientUnixCap = cpu_to_le64(cap);

	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
		cERROR(1, ("Send error in SETFSUnixInfo = %d", rc));
	} else {		/* decode response */
		rc = validate_t2((struct smb_t2_rsp *)pSMBr);
S
Steve French 已提交
4488
		if (rc)
4489 4490 4491 4492 4493 4494 4495 4496 4497 4498 4499
			rc = -EIO;	/* bad smb */
	}
	cifs_buf_release(pSMB);

	if (rc == -EAGAIN)
		goto SETFSUnixRetry;

	return rc;
}


L
Linus Torvalds 已提交
4500 4501 4502

int
CIFSSMBQFSPosixInfo(const int xid, struct cifsTconInfo *tcon,
4503
		   struct kstatfs *FSData)
L
Linus Torvalds 已提交
4504 4505 4506 4507 4508 4509 4510 4511 4512 4513 4514 4515 4516 4517 4518 4519 4520 4521 4522 4523 4524
{
/* level 0x201  SMB_QUERY_CIFS_POSIX_INFO */
	TRANSACTION2_QFSI_REQ *pSMB = NULL;
	TRANSACTION2_QFSI_RSP *pSMBr = NULL;
	FILE_SYSTEM_POSIX_INFO *response_data;
	int rc = 0;
	int bytes_returned = 0;
	__u16 params, byte_count;

	cFYI(1, ("In QFSPosixInfo"));
QFSPosixRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	params = 2;	/* level */
	pSMB->TotalDataCount = 0;
	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->MaxParameterCount = cpu_to_le16(2);
4525 4526
	/* BB find exact max SMB PDU from sess structure BB */
	pSMB->MaxDataCount = cpu_to_le16(100);
L
Linus Torvalds 已提交
4527 4528 4529 4530 4531 4532 4533 4534
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	byte_count = params + 1 /* pad */ ;
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalParameterCount = pSMB->ParameterCount;
4535 4536
	pSMB->ParameterOffset = cpu_to_le16(offsetof(struct
			smb_com_transaction2_qfsi_req, InformationLevel) - 4);
L
Linus Torvalds 已提交
4537 4538 4539 4540 4541 4542 4543 4544 4545 4546 4547 4548 4549 4550 4551 4552 4553 4554 4555 4556 4557 4558 4559 4560 4561 4562 4563 4564
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_QUERY_FS_INFORMATION);
	pSMB->InformationLevel = cpu_to_le16(SMB_QUERY_POSIX_FS_INFO);
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
		cFYI(1, ("Send error in QFSUnixInfo = %d", rc));
	} else {		/* decode response */
		rc = validate_t2((struct smb_t2_rsp *)pSMBr);

		if (rc || (pSMBr->ByteCount < 13)) {
			rc = -EIO;	/* bad smb */
		} else {
			__u16 data_offset = le16_to_cpu(pSMBr->t2.DataOffset);
			response_data =
			    (FILE_SYSTEM_POSIX_INFO
			     *) (((char *) &pSMBr->hdr.Protocol) +
				 data_offset);
			FSData->f_bsize =
					le32_to_cpu(response_data->BlockSize);
			FSData->f_blocks =
					le64_to_cpu(response_data->TotalBlocks);
			FSData->f_bfree =
			    le64_to_cpu(response_data->BlocksAvail);
S
Steve French 已提交
4565
			if (response_data->UserBlocksAvail == cpu_to_le64(-1)) {
L
Linus Torvalds 已提交
4566 4567 4568
				FSData->f_bavail = FSData->f_bfree;
			} else {
				FSData->f_bavail =
4569
				    le64_to_cpu(response_data->UserBlocksAvail);
L
Linus Torvalds 已提交
4570
			}
S
Steve French 已提交
4571
			if (response_data->TotalFileNodes != cpu_to_le64(-1))
L
Linus Torvalds 已提交
4572
				FSData->f_files =
4573
				     le64_to_cpu(response_data->TotalFileNodes);
S
Steve French 已提交
4574
			if (response_data->FreeFileNodes != cpu_to_le64(-1))
L
Linus Torvalds 已提交
4575
				FSData->f_ffree =
4576
				      le64_to_cpu(response_data->FreeFileNodes);
L
Linus Torvalds 已提交
4577 4578 4579 4580 4581 4582 4583 4584 4585 4586 4587
		}
	}
	cifs_buf_release(pSMB);

	if (rc == -EAGAIN)
		goto QFSPosixRetry;

	return rc;
}


4588 4589 4590
/* We can not use write of zero bytes trick to
   set file size due to need for large file support.  Also note that
   this SetPathInfo is preferred to SetFileInfo based method in next
L
Linus Torvalds 已提交
4591 4592 4593 4594 4595
   routine which is only needed to work around a sharing violation bug
   in Samba which this routine can run into */

int
CIFSSMBSetEOF(const int xid, struct cifsTconInfo *tcon, const char *fileName,
4596
	      __u64 size, bool SetAllocation,
4597
	      const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
4598 4599 4600 4601 4602 4603 4604 4605 4606 4607 4608 4609 4610 4611 4612 4613 4614 4615
{
	struct smb_com_transaction2_spi_req *pSMB = NULL;
	struct smb_com_transaction2_spi_rsp *pSMBr = NULL;
	struct file_end_of_file_info *parm_data;
	int name_len;
	int rc = 0;
	int bytes_returned = 0;
	__u16 params, byte_count, data_count, param_offset, offset;

	cFYI(1, ("In SetEOF"));
SetEOFRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
4616
		    cifsConvertToUCS((__le16 *) pSMB->FileName, fileName,
4617
				     PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
4618 4619
		name_len++;	/* trailing null */
		name_len *= 2;
4620
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
4621 4622 4623 4624 4625
		name_len = strnlen(fileName, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->FileName, fileName, name_len);
	}
	params = 6 + name_len;
4626
	data_count = sizeof(struct file_end_of_file_info);
L
Linus Torvalds 已提交
4627
	pSMB->MaxParameterCount = cpu_to_le16(2);
4628
	pSMB->MaxDataCount = cpu_to_le16(4100);
L
Linus Torvalds 已提交
4629 4630 4631 4632 4633 4634
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	param_offset = offsetof(struct smb_com_transaction2_spi_req,
4635
				InformationLevel) - 4;
L
Linus Torvalds 已提交
4636
	offset = param_offset + params;
S
Steve French 已提交
4637
	if (SetAllocation) {
4638 4639 4640 4641 4642 4643 4644
		if (tcon->ses->capabilities & CAP_INFOLEVEL_PASSTHRU)
			pSMB->InformationLevel =
				cpu_to_le16(SMB_SET_FILE_ALLOCATION_INFO2);
		else
			pSMB->InformationLevel =
				cpu_to_le16(SMB_SET_FILE_ALLOCATION_INFO);
	} else /* Set File Size */  {
L
Linus Torvalds 已提交
4645 4646
	    if (tcon->ses->capabilities & CAP_INFOLEVEL_PASSTHRU)
		    pSMB->InformationLevel =
4647
				cpu_to_le16(SMB_SET_FILE_END_OF_FILE_INFO2);
L
Linus Torvalds 已提交
4648 4649
	    else
		    pSMB->InformationLevel =
4650
				cpu_to_le16(SMB_SET_FILE_END_OF_FILE_INFO);
L
Linus Torvalds 已提交
4651 4652 4653 4654 4655 4656 4657 4658 4659 4660 4661 4662 4663 4664 4665 4666 4667 4668 4669 4670 4671
	}

	parm_data =
	    (struct file_end_of_file_info *) (((char *) &pSMB->hdr.Protocol) +
				       offset);
	pSMB->ParameterOffset = cpu_to_le16(param_offset);
	pSMB->DataOffset = cpu_to_le16(offset);
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_SET_PATH_INFORMATION);
	byte_count = 3 /* pad */  + params + data_count;
	pSMB->DataCount = cpu_to_le16(data_count);
	pSMB->TotalDataCount = pSMB->DataCount;
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	parm_data->FileSize = cpu_to_le64(size);
	pSMB->ByteCount = cpu_to_le16(byte_count);
	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
S
Steve French 已提交
4672
	if (rc)
L
Linus Torvalds 已提交
4673 4674 4675 4676 4677 4678 4679 4680 4681 4682 4683
		cFYI(1, ("SetPathInfo (file size) returned %d", rc));

	cifs_buf_release(pSMB);

	if (rc == -EAGAIN)
		goto SetEOFRetry;

	return rc;
}

int
4684
CIFSSMBSetFileSize(const int xid, struct cifsTconInfo *tcon, __u64 size,
4685
		   __u16 fid, __u32 pid_of_opener, bool SetAllocation)
L
Linus Torvalds 已提交
4686 4687 4688 4689 4690 4691 4692 4693 4694
{
	struct smb_com_transaction2_sfi_req *pSMB  = NULL;
	char *data_offset;
	struct file_end_of_file_info *parm_data;
	int rc = 0;
	__u16 params, param_offset, offset, byte_count, count;

	cFYI(1, ("SetFileSize (via SetFileInfo) %lld",
			(long long)size));
4695 4696
	rc = small_smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB);

L
Linus Torvalds 已提交
4697 4698 4699 4700 4701
	if (rc)
		return rc;

	pSMB->hdr.Pid = cpu_to_le16((__u16)pid_of_opener);
	pSMB->hdr.PidHigh = cpu_to_le16((__u16)(pid_of_opener >> 16));
4702

L
Linus Torvalds 已提交
4703 4704 4705 4706 4707 4708 4709 4710 4711
	params = 6;
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	param_offset = offsetof(struct smb_com_transaction2_sfi_req, Fid) - 4;
	offset = param_offset + params;

4712
	data_offset = (char *) (&pSMB->hdr.Protocol) + offset;
L
Linus Torvalds 已提交
4713 4714 4715

	count = sizeof(struct file_end_of_file_info);
	pSMB->MaxParameterCount = cpu_to_le16(2);
4716 4717
	/* BB find exact max SMB PDU from sess structure BB */
	pSMB->MaxDataCount = cpu_to_le16(1000);
L
Linus Torvalds 已提交
4718 4719 4720 4721 4722 4723 4724 4725 4726 4727
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_SET_FILE_INFORMATION);
	byte_count = 3 /* pad */  + params + count;
	pSMB->DataCount = cpu_to_le16(count);
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalDataCount = pSMB->DataCount;
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	pSMB->ParameterOffset = cpu_to_le16(param_offset);
	parm_data =
4728 4729
		(struct file_end_of_file_info *) (((char *) &pSMB->hdr.Protocol)
				+ offset);
L
Linus Torvalds 已提交
4730 4731 4732
	pSMB->DataOffset = cpu_to_le16(offset);
	parm_data->FileSize = cpu_to_le64(size);
	pSMB->Fid = fid;
S
Steve French 已提交
4733
	if (SetAllocation) {
L
Linus Torvalds 已提交
4734 4735 4736 4737 4738 4739
		if (tcon->ses->capabilities & CAP_INFOLEVEL_PASSTHRU)
			pSMB->InformationLevel =
				cpu_to_le16(SMB_SET_FILE_ALLOCATION_INFO2);
		else
			pSMB->InformationLevel =
				cpu_to_le16(SMB_SET_FILE_ALLOCATION_INFO);
4740
	} else /* Set File Size */  {
L
Linus Torvalds 已提交
4741 4742
	    if (tcon->ses->capabilities & CAP_INFOLEVEL_PASSTHRU)
		    pSMB->InformationLevel =
4743
				cpu_to_le16(SMB_SET_FILE_END_OF_FILE_INFO2);
L
Linus Torvalds 已提交
4744 4745
	    else
		    pSMB->InformationLevel =
4746
				cpu_to_le16(SMB_SET_FILE_END_OF_FILE_INFO);
L
Linus Torvalds 已提交
4747 4748 4749 4750
	}
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);
4751
	rc = SendReceiveNoRsp(xid, tcon->ses, (struct smb_hdr *) pSMB, 0);
L
Linus Torvalds 已提交
4752 4753 4754 4755 4756 4757
	if (rc) {
		cFYI(1,
		     ("Send error in SetFileInfo (SetFileSize) = %d",
		      rc));
	}

4758
	/* Note: On -EAGAIN error only caller can retry on handle based calls
L
Linus Torvalds 已提交
4759 4760 4761 4762 4763
		since file handle passed in no longer valid */

	return rc;
}

4764
/* Some legacy servers such as NT4 require that the file times be set on
L
Linus Torvalds 已提交
4765 4766 4767 4768 4769 4770
   an open handle, rather than by pathname - this is awkward due to
   potential access conflicts on the open, but it is unavoidable for these
   old servers since the only other choice is to go from 100 nanosecond DCE
   time and resort to the original setpathinfo level which takes the ancient
   DOS time format with 2 second granularity */
int
4771 4772
CIFSSMBSetFileInfo(const int xid, struct cifsTconInfo *tcon,
		    const FILE_BASIC_INFO *data, __u16 fid, __u32 pid_of_opener)
L
Linus Torvalds 已提交
4773 4774 4775 4776 4777 4778 4779
{
	struct smb_com_transaction2_sfi_req *pSMB  = NULL;
	char *data_offset;
	int rc = 0;
	__u16 params, param_offset, offset, byte_count, count;

	cFYI(1, ("Set Times (via SetFileInfo)"));
4780 4781
	rc = small_smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB);

L
Linus Torvalds 已提交
4782 4783 4784
	if (rc)
		return rc;

4785 4786
	pSMB->hdr.Pid = cpu_to_le16((__u16)pid_of_opener);
	pSMB->hdr.PidHigh = cpu_to_le16((__u16)(pid_of_opener >> 16));
4787

L
Linus Torvalds 已提交
4788 4789 4790 4791 4792 4793 4794 4795 4796
	params = 6;
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	param_offset = offsetof(struct smb_com_transaction2_sfi_req, Fid) - 4;
	offset = param_offset + params;

4797
	data_offset = (char *) (&pSMB->hdr.Protocol) + offset;
L
Linus Torvalds 已提交
4798

4799
	count = sizeof(FILE_BASIC_INFO);
L
Linus Torvalds 已提交
4800
	pSMB->MaxParameterCount = cpu_to_le16(2);
4801 4802
	/* BB find max SMB PDU from sess */
	pSMB->MaxDataCount = cpu_to_le16(1000);
L
Linus Torvalds 已提交
4803 4804 4805 4806 4807 4808 4809 4810 4811 4812 4813 4814 4815 4816 4817 4818 4819 4820
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_SET_FILE_INFORMATION);
	byte_count = 3 /* pad */  + params + count;
	pSMB->DataCount = cpu_to_le16(count);
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalDataCount = pSMB->DataCount;
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	pSMB->ParameterOffset = cpu_to_le16(param_offset);
	pSMB->DataOffset = cpu_to_le16(offset);
	pSMB->Fid = fid;
	if (tcon->ses->capabilities & CAP_INFOLEVEL_PASSTHRU)
		pSMB->InformationLevel = cpu_to_le16(SMB_SET_FILE_BASIC_INFO2);
	else
		pSMB->InformationLevel = cpu_to_le16(SMB_SET_FILE_BASIC_INFO);
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);
4821
	memcpy(data_offset, data, sizeof(FILE_BASIC_INFO));
4822
	rc = SendReceiveNoRsp(xid, tcon->ses, (struct smb_hdr *) pSMB, 0);
S
Steve French 已提交
4823
	if (rc)
4824
		cFYI(1, ("Send error in Set Time (SetFileInfo) = %d", rc));
L
Linus Torvalds 已提交
4825

4826
	/* Note: On -EAGAIN error only caller can retry on handle based calls
L
Linus Torvalds 已提交
4827 4828 4829 4830 4831
		since file handle passed in no longer valid */

	return rc;
}

4832 4833 4834 4835 4836 4837 4838 4839 4840 4841 4842 4843 4844 4845 4846 4847 4848 4849 4850 4851 4852 4853 4854 4855 4856 4857 4858 4859 4860 4861 4862 4863 4864 4865 4866 4867 4868 4869 4870 4871 4872 4873 4874 4875 4876 4877 4878 4879 4880 4881 4882 4883 4884 4885 4886
int
CIFSSMBSetFileDisposition(const int xid, struct cifsTconInfo *tcon,
			  bool delete_file, __u16 fid, __u32 pid_of_opener)
{
	struct smb_com_transaction2_sfi_req *pSMB  = NULL;
	char *data_offset;
	int rc = 0;
	__u16 params, param_offset, offset, byte_count, count;

	cFYI(1, ("Set File Disposition (via SetFileInfo)"));
	rc = small_smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB);

	if (rc)
		return rc;

	pSMB->hdr.Pid = cpu_to_le16((__u16)pid_of_opener);
	pSMB->hdr.PidHigh = cpu_to_le16((__u16)(pid_of_opener >> 16));

	params = 6;
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	param_offset = offsetof(struct smb_com_transaction2_sfi_req, Fid) - 4;
	offset = param_offset + params;

	data_offset = (char *) (&pSMB->hdr.Protocol) + offset;

	count = 1;
	pSMB->MaxParameterCount = cpu_to_le16(2);
	/* BB find max SMB PDU from sess */
	pSMB->MaxDataCount = cpu_to_le16(1000);
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_SET_FILE_INFORMATION);
	byte_count = 3 /* pad */  + params + count;
	pSMB->DataCount = cpu_to_le16(count);
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalDataCount = pSMB->DataCount;
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	pSMB->ParameterOffset = cpu_to_le16(param_offset);
	pSMB->DataOffset = cpu_to_le16(offset);
	pSMB->Fid = fid;
	pSMB->InformationLevel = cpu_to_le16(SMB_SET_FILE_DISPOSITION_INFO);
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);
	*data_offset = delete_file ? 1 : 0;
	rc = SendReceiveNoRsp(xid, tcon->ses, (struct smb_hdr *) pSMB, 0);
	if (rc)
		cFYI(1, ("Send error in SetFileDisposition = %d", rc));

	return rc;
}
L
Linus Torvalds 已提交
4887 4888

int
4889 4890 4891
CIFSSMBSetPathInfo(const int xid, struct cifsTconInfo *tcon,
		   const char *fileName, const FILE_BASIC_INFO *data,
		   const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
4892 4893 4894 4895 4896 4897 4898 4899 4900 4901 4902 4903 4904 4905 4906 4907 4908 4909 4910
{
	TRANSACTION2_SPI_REQ *pSMB = NULL;
	TRANSACTION2_SPI_RSP *pSMBr = NULL;
	int name_len;
	int rc = 0;
	int bytes_returned = 0;
	char *data_offset;
	__u16 params, param_offset, offset, byte_count, count;

	cFYI(1, ("In SetTimes"));

SetTimesRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
4911
		    cifsConvertToUCS((__le16 *) pSMB->FileName, fileName,
4912
				     PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
4913 4914
		name_len++;	/* trailing null */
		name_len *= 2;
4915
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
4916 4917 4918 4919 4920 4921
		name_len = strnlen(fileName, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->FileName, fileName, name_len);
	}

	params = 6 + name_len;
4922
	count = sizeof(FILE_BASIC_INFO);
L
Linus Torvalds 已提交
4923
	pSMB->MaxParameterCount = cpu_to_le16(2);
4924 4925
	/* BB find max SMB PDU from sess structure BB */
	pSMB->MaxDataCount = cpu_to_le16(1000);
L
Linus Torvalds 已提交
4926 4927 4928 4929 4930 4931
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	param_offset = offsetof(struct smb_com_transaction2_spi_req,
4932
				InformationLevel) - 4;
L
Linus Torvalds 已提交
4933 4934 4935 4936 4937 4938 4939 4940 4941 4942 4943 4944 4945 4946 4947 4948 4949 4950 4951
	offset = param_offset + params;
	data_offset = (char *) (&pSMB->hdr.Protocol) + offset;
	pSMB->ParameterOffset = cpu_to_le16(param_offset);
	pSMB->DataOffset = cpu_to_le16(offset);
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_SET_PATH_INFORMATION);
	byte_count = 3 /* pad */  + params + count;

	pSMB->DataCount = cpu_to_le16(count);
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalDataCount = pSMB->DataCount;
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	if (tcon->ses->capabilities & CAP_INFOLEVEL_PASSTHRU)
		pSMB->InformationLevel = cpu_to_le16(SMB_SET_FILE_BASIC_INFO2);
	else
		pSMB->InformationLevel = cpu_to_le16(SMB_SET_FILE_BASIC_INFO);
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
4952
	memcpy(data_offset, data, sizeof(FILE_BASIC_INFO));
L
Linus Torvalds 已提交
4953 4954 4955
	pSMB->ByteCount = cpu_to_le16(byte_count);
	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
S
Steve French 已提交
4956
	if (rc)
L
Linus Torvalds 已提交
4957 4958 4959 4960 4961 4962 4963 4964 4965 4966 4967 4968 4969 4970 4971 4972 4973 4974 4975 4976 4977 4978 4979 4980 4981 4982 4983 4984 4985 4986 4987 4988 4989 4990 4991
		cFYI(1, ("SetPathInfo (times) returned %d", rc));

	cifs_buf_release(pSMB);

	if (rc == -EAGAIN)
		goto SetTimesRetry;

	return rc;
}

/* Can not be used to set time stamps yet (due to old DOS time format) */
/* Can be used to set attributes */
#if 0  /* Possibly not needed - since it turns out that strangely NT4 has a bug
	  handling it anyway and NT4 was what we thought it would be needed for
	  Do not delete it until we prove whether needed for Win9x though */
int
CIFSSMBSetAttrLegacy(int xid, struct cifsTconInfo *tcon, char *fileName,
		__u16 dos_attrs, const struct nls_table *nls_codepage)
{
	SETATTR_REQ *pSMB = NULL;
	SETATTR_RSP *pSMBr = NULL;
	int rc = 0;
	int bytes_returned;
	int name_len;

	cFYI(1, ("In SetAttrLegacy"));

SetAttrLgcyRetry:
	rc = smb_init(SMB_COM_SETATTR, 8, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
4992
			ConvertToUCS((__le16 *) pSMB->fileName, fileName,
L
Linus Torvalds 已提交
4993 4994 4995
				PATH_MAX, nls_codepage);
		name_len++;     /* trailing null */
		name_len *= 2;
4996
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
4997 4998 4999 5000 5001 5002 5003 5004 5005 5006
		name_len = strnlen(fileName, PATH_MAX);
		name_len++;     /* trailing null */
		strncpy(pSMB->fileName, fileName, name_len);
	}
	pSMB->attr = cpu_to_le16(dos_attrs);
	pSMB->BufferFormat = 0x04;
	pSMB->hdr.smb_buf_length += name_len + 1;
	pSMB->ByteCount = cpu_to_le16(name_len + 1);
	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
S
Steve French 已提交
5007
	if (rc)
L
Linus Torvalds 已提交
5008 5009 5010 5011 5012 5013 5014 5015 5016 5017 5018
		cFYI(1, ("Error in LegacySetAttr = %d", rc));

	cifs_buf_release(pSMB);

	if (rc == -EAGAIN)
		goto SetAttrLgcyRetry;

	return rc;
}
#endif /* temporarily unneeded SetAttr legacy function */

5019 5020 5021 5022 5023 5024 5025 5026 5027 5028 5029 5030 5031 5032 5033 5034 5035 5036 5037 5038 5039 5040 5041 5042 5043 5044 5045 5046 5047 5048 5049 5050 5051 5052 5053 5054 5055 5056 5057 5058 5059
static void
cifs_fill_unix_set_info(FILE_UNIX_BASIC_INFO *data_offset,
			const struct cifs_unix_set_info_args *args)
{
	u64 mode = args->mode;

	/*
	 * Samba server ignores set of file size to zero due to bugs in some
	 * older clients, but we should be precise - we use SetFileSize to
	 * set file size and do not want to truncate file size to zero
	 * accidently as happened on one Samba server beta by putting
	 * zero instead of -1 here
	 */
	data_offset->EndOfFile = cpu_to_le64(NO_CHANGE_64);
	data_offset->NumOfBytes = cpu_to_le64(NO_CHANGE_64);
	data_offset->LastStatusChange = cpu_to_le64(args->ctime);
	data_offset->LastAccessTime = cpu_to_le64(args->atime);
	data_offset->LastModificationTime = cpu_to_le64(args->mtime);
	data_offset->Uid = cpu_to_le64(args->uid);
	data_offset->Gid = cpu_to_le64(args->gid);
	/* better to leave device as zero when it is  */
	data_offset->DevMajor = cpu_to_le64(MAJOR(args->device));
	data_offset->DevMinor = cpu_to_le64(MINOR(args->device));
	data_offset->Permissions = cpu_to_le64(mode);

	if (S_ISREG(mode))
		data_offset->Type = cpu_to_le32(UNIX_FILE);
	else if (S_ISDIR(mode))
		data_offset->Type = cpu_to_le32(UNIX_DIR);
	else if (S_ISLNK(mode))
		data_offset->Type = cpu_to_le32(UNIX_SYMLINK);
	else if (S_ISCHR(mode))
		data_offset->Type = cpu_to_le32(UNIX_CHARDEV);
	else if (S_ISBLK(mode))
		data_offset->Type = cpu_to_le32(UNIX_BLOCKDEV);
	else if (S_ISFIFO(mode))
		data_offset->Type = cpu_to_le32(UNIX_FIFO);
	else if (S_ISSOCK(mode))
		data_offset->Type = cpu_to_le32(UNIX_SOCKET);
}

5060 5061 5062 5063 5064 5065 5066 5067 5068 5069 5070 5071 5072 5073 5074 5075 5076 5077 5078 5079 5080 5081 5082 5083 5084 5085 5086 5087 5088 5089 5090 5091 5092 5093 5094 5095 5096 5097 5098 5099 5100 5101 5102 5103 5104 5105 5106 5107 5108 5109 5110 5111 5112 5113 5114 5115 5116 5117 5118 5119 5120 5121 5122
int
CIFSSMBUnixSetFileInfo(const int xid, struct cifsTconInfo *tcon,
		       const struct cifs_unix_set_info_args *args,
		       u16 fid, u32 pid_of_opener)
{
	struct smb_com_transaction2_sfi_req *pSMB  = NULL;
	FILE_UNIX_BASIC_INFO *data_offset;
	int rc = 0;
	u16 params, param_offset, offset, byte_count, count;

	cFYI(1, ("Set Unix Info (via SetFileInfo)"));
	rc = small_smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB);

	if (rc)
		return rc;

	pSMB->hdr.Pid = cpu_to_le16((__u16)pid_of_opener);
	pSMB->hdr.PidHigh = cpu_to_le16((__u16)(pid_of_opener >> 16));

	params = 6;
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	param_offset = offsetof(struct smb_com_transaction2_sfi_req, Fid) - 4;
	offset = param_offset + params;

	data_offset = (FILE_UNIX_BASIC_INFO *)
				((char *)(&pSMB->hdr.Protocol) + offset);
	count = sizeof(FILE_UNIX_BASIC_INFO);

	pSMB->MaxParameterCount = cpu_to_le16(2);
	/* BB find max SMB PDU from sess */
	pSMB->MaxDataCount = cpu_to_le16(1000);
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_SET_FILE_INFORMATION);
	byte_count = 3 /* pad */  + params + count;
	pSMB->DataCount = cpu_to_le16(count);
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalDataCount = pSMB->DataCount;
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	pSMB->ParameterOffset = cpu_to_le16(param_offset);
	pSMB->DataOffset = cpu_to_le16(offset);
	pSMB->Fid = fid;
	pSMB->InformationLevel = cpu_to_le16(SMB_SET_FILE_UNIX_BASIC);
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);

	cifs_fill_unix_set_info(data_offset, args);

	rc = SendReceiveNoRsp(xid, tcon->ses, (struct smb_hdr *) pSMB, 0);
	if (rc)
		cFYI(1, ("Send error in Set Time (SetFileInfo) = %d", rc));

	/* Note: On -EAGAIN error only caller can retry on handle based calls
		since file handle passed in no longer valid */

	return rc;
}

L
Linus Torvalds 已提交
5123
int
5124 5125 5126
CIFSSMBUnixSetPathInfo(const int xid, struct cifsTconInfo *tcon, char *fileName,
		       const struct cifs_unix_set_info_args *args,
		       const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
5127 5128 5129 5130 5131 5132 5133 5134 5135 5136 5137 5138 5139 5140 5141 5142 5143 5144
{
	TRANSACTION2_SPI_REQ *pSMB = NULL;
	TRANSACTION2_SPI_RSP *pSMBr = NULL;
	int name_len;
	int rc = 0;
	int bytes_returned = 0;
	FILE_UNIX_BASIC_INFO *data_offset;
	__u16 params, param_offset, offset, count, byte_count;

	cFYI(1, ("In SetUID/GID/Mode"));
setPermsRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
5145
		    cifsConvertToUCS((__le16 *) pSMB->FileName, fileName,
5146
				     PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
5147 5148
		name_len++;	/* trailing null */
		name_len *= 2;
5149
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
5150 5151 5152 5153 5154 5155
		name_len = strnlen(fileName, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->FileName, fileName, name_len);
	}

	params = 6 + name_len;
5156
	count = sizeof(FILE_UNIX_BASIC_INFO);
L
Linus Torvalds 已提交
5157
	pSMB->MaxParameterCount = cpu_to_le16(2);
5158 5159
	/* BB find max SMB PDU from sess structure BB */
	pSMB->MaxDataCount = cpu_to_le16(1000);
L
Linus Torvalds 已提交
5160 5161 5162 5163 5164 5165
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	param_offset = offsetof(struct smb_com_transaction2_spi_req,
5166
				InformationLevel) - 4;
L
Linus Torvalds 已提交
5167 5168 5169 5170 5171 5172 5173 5174 5175 5176 5177 5178 5179 5180 5181 5182 5183 5184 5185
	offset = param_offset + params;
	data_offset =
	    (FILE_UNIX_BASIC_INFO *) ((char *) &pSMB->hdr.Protocol +
				      offset);
	memset(data_offset, 0, count);
	pSMB->DataOffset = cpu_to_le16(offset);
	pSMB->ParameterOffset = cpu_to_le16(param_offset);
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_SET_PATH_INFORMATION);
	byte_count = 3 /* pad */  + params + count;
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->DataCount = cpu_to_le16(count);
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	pSMB->TotalDataCount = pSMB->DataCount;
	pSMB->InformationLevel = cpu_to_le16(SMB_SET_FILE_UNIX_BASIC);
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;

5186
	cifs_fill_unix_set_info(data_offset, args);
L
Linus Torvalds 已提交
5187 5188 5189 5190

	pSMB->ByteCount = cpu_to_le16(byte_count);
	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
S
Steve French 已提交
5191
	if (rc)
L
Linus Torvalds 已提交
5192 5193
		cFYI(1, ("SetPathInfo (perms) returned %d", rc));

5194
	cifs_buf_release(pSMB);
L
Linus Torvalds 已提交
5195 5196 5197 5198 5199
	if (rc == -EAGAIN)
		goto setPermsRetry;
	return rc;
}

5200
int CIFSSMBNotify(const int xid, struct cifsTconInfo *tcon,
5201
		  const int notify_subdirs, const __u16 netfid,
5202
		  __u32 filter, struct file *pfile, int multishot,
5203
		  const struct nls_table *nls_codepage)
L
Linus Torvalds 已提交
5204 5205
{
	int rc = 0;
5206 5207
	struct smb_com_transaction_change_notify_req *pSMB = NULL;
	struct smb_com_ntransaction_change_notify_rsp *pSMBr = NULL;
5208
	struct dir_notify_req *dnotify_req;
L
Linus Torvalds 已提交
5209 5210
	int bytes_returned;

5211
	cFYI(1, ("In CIFSSMBNotify for file handle %d", (int)netfid));
L
Linus Torvalds 已提交
5212
	rc = smb_init(SMB_COM_NT_TRANSACT, 23, tcon, (void **) &pSMB,
5213
		      (void **) &pSMBr);
L
Linus Torvalds 已提交
5214 5215 5216 5217 5218 5219 5220 5221
	if (rc)
		return rc;

	pSMB->TotalParameterCount = 0 ;
	pSMB->TotalDataCount = 0;
	pSMB->MaxParameterCount = cpu_to_le32(2);
	/* BB find exact data count max from sess structure BB */
	pSMB->MaxDataCount = 0; /* same in little endian or be */
5222 5223 5224 5225
/* BB VERIFY verify which is correct for above BB */
	pSMB->MaxDataCount = cpu_to_le32((tcon->ses->server->maxBuf -
					     MAX_CIFS_HDR_SIZE) & 0xFFFFFF00);

L
Linus Torvalds 已提交
5226 5227 5228 5229 5230 5231 5232 5233
	pSMB->MaxSetupCount = 4;
	pSMB->Reserved = 0;
	pSMB->ParameterOffset = 0;
	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->SetupCount = 4; /* single byte does not need le conversion */
	pSMB->SubCommand = cpu_to_le16(NT_TRANSACT_NOTIFY_CHANGE);
	pSMB->ParameterCount = pSMB->TotalParameterCount;
S
Steve French 已提交
5234
	if (notify_subdirs)
L
Linus Torvalds 已提交
5235 5236 5237 5238 5239 5240 5241
		pSMB->WatchTree = 1; /* one byte - no le conversion needed */
	pSMB->Reserved2 = 0;
	pSMB->CompletionFilter = cpu_to_le32(filter);
	pSMB->Fid = netfid; /* file handle always le */
	pSMB->ByteCount = 0;

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
5242 5243
			 (struct smb_hdr *)pSMBr, &bytes_returned,
			 CIFS_ASYNC_OP);
L
Linus Torvalds 已提交
5244 5245
	if (rc) {
		cFYI(1, ("Error in Notify = %d", rc));
5246 5247
	} else {
		/* Add file to outstanding requests */
5248
		/* BB change to kmem cache alloc */
5249
		dnotify_req = kmalloc(
5250 5251
						sizeof(struct dir_notify_req),
						 GFP_KERNEL);
S
Steve French 已提交
5252
		if (dnotify_req) {
5253 5254 5255 5256 5257 5258 5259 5260 5261 5262
			dnotify_req->Pid = pSMB->hdr.Pid;
			dnotify_req->PidHigh = pSMB->hdr.PidHigh;
			dnotify_req->Mid = pSMB->hdr.Mid;
			dnotify_req->Tid = pSMB->hdr.Tid;
			dnotify_req->Uid = pSMB->hdr.Uid;
			dnotify_req->netfid = netfid;
			dnotify_req->pfile = pfile;
			dnotify_req->filter = filter;
			dnotify_req->multishot = multishot;
			spin_lock(&GlobalMid_Lock);
5263
			list_add_tail(&dnotify_req->lhead,
5264 5265
					&GlobalDnotifyReqList);
			spin_unlock(&GlobalMid_Lock);
5266
		} else
5267
			rc = -ENOMEM;
L
Linus Torvalds 已提交
5268 5269
	}
	cifs_buf_release(pSMB);
5270
	return rc;
L
Linus Torvalds 已提交
5271
}
5272

L
Linus Torvalds 已提交
5273
#ifdef CONFIG_CIFS_XATTR
5274 5275 5276 5277 5278 5279 5280 5281 5282
/*
 * Do a path-based QUERY_ALL_EAS call and parse the result. This is a common
 * function used by listxattr and getxattr type calls. When ea_name is set,
 * it looks for that attribute name and stuffs that value into the EAData
 * buffer. When ea_name is NULL, it stuffs a list of attribute names into the
 * buffer. In both cases, the return value is either the length of the
 * resulting data or a negative error code. If EAData is a NULL pointer then
 * the data isn't copied to it, but the length is returned.
 */
L
Linus Torvalds 已提交
5283 5284
ssize_t
CIFSSMBQAllEAs(const int xid, struct cifsTconInfo *tcon,
5285 5286 5287
		const unsigned char *searchName, const unsigned char *ea_name,
		char *EAData, size_t buf_size,
		const struct nls_table *nls_codepage, int remap)
L
Linus Torvalds 已提交
5288 5289 5290 5291 5292 5293
{
		/* BB assumes one setup word */
	TRANSACTION2_QPI_REQ *pSMB = NULL;
	TRANSACTION2_QPI_RSP *pSMBr = NULL;
	int rc = 0;
	int bytes_returned;
5294
	int list_len;
5295
	struct fealist *ea_response_data;
5296 5297
	struct fea *temp_fea;
	char *temp_ptr;
5298
	char *end_of_smb;
5299
	__u16 params, byte_count, data_offset;
L
Linus Torvalds 已提交
5300 5301 5302 5303 5304 5305 5306 5307 5308

	cFYI(1, ("In Query All EAs path %s", searchName));
QAllEAsRetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
5309
		list_len =
5310
		    cifsConvertToUCS((__le16 *) pSMB->FileName, searchName,
5311
				     PATH_MAX, nls_codepage, remap);
5312 5313
		list_len++;	/* trailing null */
		list_len *= 2;
L
Linus Torvalds 已提交
5314
	} else {	/* BB improve the check for buffer overruns BB */
5315 5316 5317
		list_len = strnlen(searchName, PATH_MAX);
		list_len++;	/* trailing null */
		strncpy(pSMB->FileName, searchName, list_len);
L
Linus Torvalds 已提交
5318 5319
	}

5320
	params = 2 /* level */ + 4 /* reserved */ + list_len /* includes NUL */;
L
Linus Torvalds 已提交
5321 5322
	pSMB->TotalDataCount = 0;
	pSMB->MaxParameterCount = cpu_to_le16(2);
5323
	/* BB find exact max SMB PDU from sess structure BB */
5324
	pSMB->MaxDataCount = cpu_to_le16(CIFSMaxBufSize);
L
Linus Torvalds 已提交
5325 5326 5327 5328 5329 5330
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	pSMB->ParameterOffset = cpu_to_le16(offsetof(
5331
	struct smb_com_transaction2_qpi_req, InformationLevel) - 4);
L
Linus Torvalds 已提交
5332 5333 5334 5335 5336 5337 5338 5339 5340 5341 5342 5343 5344 5345 5346 5347 5348
	pSMB->DataCount = 0;
	pSMB->DataOffset = 0;
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_QUERY_PATH_INFORMATION);
	byte_count = params + 1 /* pad */ ;
	pSMB->TotalParameterCount = cpu_to_le16(params);
	pSMB->ParameterCount = pSMB->TotalParameterCount;
	pSMB->InformationLevel = cpu_to_le16(SMB_INFO_QUERY_ALL_EAS);
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);

	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
	if (rc) {
		cFYI(1, ("Send error in QueryAllEAs = %d", rc));
5349 5350
		goto QAllEAsOut;
	}
L
Linus Torvalds 已提交
5351

5352 5353 5354 5355 5356 5357 5358 5359 5360 5361 5362 5363 5364 5365 5366 5367 5368 5369 5370 5371 5372 5373 5374

	/* BB also check enough total bytes returned */
	/* BB we need to improve the validity checking
	of these trans2 responses */

	rc = validate_t2((struct smb_t2_rsp *)pSMBr);
	if (rc || (pSMBr->ByteCount < 4)) {
		rc = -EIO;	/* bad smb */
		goto QAllEAsOut;
	}

	/* check that length of list is not more than bcc */
	/* check that each entry does not go beyond length
	   of list */
	/* check that each element of each entry does not
	   go beyond end of list */
	/* validate_trans2_offsets() */
	/* BB check if start of smb + data_offset > &bcc+ bcc */

	data_offset = le16_to_cpu(pSMBr->t2.DataOffset);
	ea_response_data = (struct fealist *)
				(((char *) &pSMBr->hdr.Protocol) + data_offset);

5375 5376 5377
	list_len = le32_to_cpu(ea_response_data->list_len);
	cFYI(1, ("ea length %d", list_len));
	if (list_len <= 8) {
5378 5379 5380 5381
		cFYI(1, ("empty EA list returned from server"));
		goto QAllEAsOut;
	}

5382 5383 5384 5385 5386 5387 5388 5389
	/* make sure list_len doesn't go past end of SMB */
	end_of_smb = (char *)pByteArea(&pSMBr->hdr) + BCC(&pSMBr->hdr);
	if ((char *)ea_response_data + list_len > end_of_smb) {
		cFYI(1, ("EA list appears to go beyond SMB"));
		rc = -EIO;
		goto QAllEAsOut;
	}

5390
	/* account for ea list len */
5391
	list_len -= 4;
5392 5393
	temp_fea = ea_response_data->list;
	temp_ptr = (char *)temp_fea;
5394
	while (list_len > 0) {
S
Steve French 已提交
5395
		int name_len;
5396
		__u16 value_len;
5397

5398
		list_len -= 4;
5399
		temp_ptr += 4;
5400 5401 5402 5403 5404 5405 5406 5407 5408 5409 5410 5411 5412 5413 5414 5415
		/* make sure we can read name_len and value_len */
		if (list_len < 0) {
			cFYI(1, ("EA entry goes beyond length of list"));
			rc = -EIO;
			goto QAllEAsOut;
		}

		name_len = temp_fea->name_len;
		value_len = le16_to_cpu(temp_fea->value_len);
		list_len -= name_len + 1 + value_len;
		if (list_len < 0) {
			cFYI(1, ("EA entry goes beyond length of list"));
			rc = -EIO;
			goto QAllEAsOut;
		}

5416 5417 5418 5419 5420 5421 5422 5423 5424 5425 5426 5427 5428
		if (ea_name) {
			if (strncmp(ea_name, temp_ptr, name_len) == 0) {
				temp_ptr += name_len + 1;
				rc = value_len;
				if (buf_size == 0)
					goto QAllEAsOut;
				if ((size_t)value_len > buf_size) {
					rc = -ERANGE;
					goto QAllEAsOut;
				}
				memcpy(EAData, temp_ptr, value_len);
				goto QAllEAsOut;
			}
5429
		} else {
5430 5431 5432 5433 5434 5435 5436 5437 5438 5439 5440 5441 5442 5443 5444 5445 5446
			/* account for prefix user. and trailing null */
			rc += (5 + 1 + name_len);
			if (rc < (int) buf_size) {
				memcpy(EAData, "user.", 5);
				EAData += 5;
				memcpy(EAData, temp_ptr, name_len);
				EAData += name_len;
				/* null terminate name */
				*EAData = 0;
				++EAData;
			} else if (buf_size == 0) {
				/* skip copy - calc size only */
			} else {
				/* stop before overrun buffer */
				rc = -ERANGE;
				break;
			}
L
Linus Torvalds 已提交
5447
		}
5448
		temp_ptr += name_len + 1 + value_len;
5449
		temp_fea = (struct fea *)temp_ptr;
L
Linus Torvalds 已提交
5450
	}
5451

5452 5453 5454 5455
	/* didn't find the named attribute */
	if (ea_name)
		rc = -ENODATA;

5456
QAllEAsOut:
5457
	cifs_buf_release(pSMB);
L
Linus Torvalds 已提交
5458 5459 5460 5461 5462 5463 5464 5465
	if (rc == -EAGAIN)
		goto QAllEAsRetry;

	return (ssize_t)rc;
}

int
CIFSSMBSetEA(const int xid, struct cifsTconInfo *tcon, const char *fileName,
5466 5467 5468
	     const char *ea_name, const void *ea_value,
	     const __u16 ea_value_len, const struct nls_table *nls_codepage,
	     int remap)
L
Linus Torvalds 已提交
5469 5470 5471 5472 5473 5474 5475 5476 5477 5478 5479 5480 5481 5482 5483 5484 5485 5486
{
	struct smb_com_transaction2_spi_req *pSMB = NULL;
	struct smb_com_transaction2_spi_rsp *pSMBr = NULL;
	struct fealist *parm_data;
	int name_len;
	int rc = 0;
	int bytes_returned = 0;
	__u16 params, param_offset, byte_count, offset, count;

	cFYI(1, ("In SetEA"));
SetEARetry:
	rc = smb_init(SMB_COM_TRANSACTION2, 15, tcon, (void **) &pSMB,
		      (void **) &pSMBr);
	if (rc)
		return rc;

	if (pSMB->hdr.Flags2 & SMBFLG2_UNICODE) {
		name_len =
5487
		    cifsConvertToUCS((__le16 *) pSMB->FileName, fileName,
5488
				     PATH_MAX, nls_codepage, remap);
L
Linus Torvalds 已提交
5489 5490
		name_len++;	/* trailing null */
		name_len *= 2;
5491
	} else {	/* BB improve the check for buffer overruns BB */
L
Linus Torvalds 已提交
5492 5493 5494 5495 5496 5497 5498 5499 5500 5501
		name_len = strnlen(fileName, PATH_MAX);
		name_len++;	/* trailing null */
		strncpy(pSMB->FileName, fileName, name_len);
	}

	params = 6 + name_len;

	/* done calculating parms using name_len of file name,
	now use name_len to calculate length of ea name
	we are going to create in the inode xattrs */
S
Steve French 已提交
5502
	if (ea_name == NULL)
L
Linus Torvalds 已提交
5503 5504
		name_len = 0;
	else
5505
		name_len = strnlen(ea_name, 255);
L
Linus Torvalds 已提交
5506

5507
	count = sizeof(*parm_data) + ea_value_len + name_len;
L
Linus Torvalds 已提交
5508
	pSMB->MaxParameterCount = cpu_to_le16(2);
5509 5510
	/* BB find max SMB PDU from sess */
	pSMB->MaxDataCount = cpu_to_le16(1000);
L
Linus Torvalds 已提交
5511 5512 5513 5514 5515 5516
	pSMB->MaxSetupCount = 0;
	pSMB->Reserved = 0;
	pSMB->Flags = 0;
	pSMB->Timeout = 0;
	pSMB->Reserved2 = 0;
	param_offset = offsetof(struct smb_com_transaction2_spi_req,
5517
				InformationLevel) - 4;
L
Linus Torvalds 已提交
5518 5519 5520 5521 5522 5523 5524 5525 5526 5527 5528 5529 5530 5531 5532 5533 5534
	offset = param_offset + params;
	pSMB->InformationLevel =
		cpu_to_le16(SMB_SET_FILE_EA);

	parm_data =
		(struct fealist *) (((char *) &pSMB->hdr.Protocol) +
				       offset);
	pSMB->ParameterOffset = cpu_to_le16(param_offset);
	pSMB->DataOffset = cpu_to_le16(offset);
	pSMB->SetupCount = 1;
	pSMB->Reserved3 = 0;
	pSMB->SubCommand = cpu_to_le16(TRANS2_SET_PATH_INFORMATION);
	byte_count = 3 /* pad */  + params + count;
	pSMB->DataCount = cpu_to_le16(count);
	parm_data->list_len = cpu_to_le32(count);
	parm_data->list[0].EA_flags = 0;
	/* we checked above that name len is less than 255 */
A
Alexey Dobriyan 已提交
5535
	parm_data->list[0].name_len = (__u8)name_len;
L
Linus Torvalds 已提交
5536
	/* EA names are always ASCII */
S
Steve French 已提交
5537
	if (ea_name)
5538
		strncpy(parm_data->list[0].name, ea_name, name_len);
L
Linus Torvalds 已提交
5539 5540 5541 5542 5543
	parm_data->list[0].name[name_len] = 0;
	parm_data->list[0].value_len = cpu_to_le16(ea_value_len);
	/* caller ensures that ea_value_len is less than 64K but
	we need to ensure that it fits within the smb */

5544 5545
	/*BB add length check to see if it would fit in
	     negotiated SMB buffer size BB */
S
Steve French 已提交
5546 5547
	/* if (ea_value_len > buffer_size - 512 (enough for header)) */
	if (ea_value_len)
5548 5549
		memcpy(parm_data->list[0].name+name_len+1,
		       ea_value, ea_value_len);
L
Linus Torvalds 已提交
5550 5551 5552 5553 5554 5555 5556 5557 5558

	pSMB->TotalDataCount = pSMB->DataCount;
	pSMB->ParameterCount = cpu_to_le16(params);
	pSMB->TotalParameterCount = pSMB->ParameterCount;
	pSMB->Reserved4 = 0;
	pSMB->hdr.smb_buf_length += byte_count;
	pSMB->ByteCount = cpu_to_le16(byte_count);
	rc = SendReceive(xid, tcon->ses, (struct smb_hdr *) pSMB,
			 (struct smb_hdr *) pSMBr, &bytes_returned, 0);
S
Steve French 已提交
5559
	if (rc)
L
Linus Torvalds 已提交
5560 5561 5562 5563 5564 5565 5566 5567 5568 5569 5570
		cFYI(1, ("SetPathInfo (EA) returned %d", rc));

	cifs_buf_release(pSMB);

	if (rc == -EAGAIN)
		goto SetEARetry;

	return rc;
}

#endif