connect.c 85.0 KB
Newer Older
L
Linus Torvalds 已提交
1 2 3
/*
 *   fs/cifs/connect.c
 *
4
 *   Copyright (C) International Business Machines  Corp., 2002,2009
L
Linus Torvalds 已提交
5 6 7 8 9 10 11 12 13 14 15 16 17 18
 *   Author(s): Steve French (sfrench@us.ibm.com)
 *
 *   This library is free software; you can redistribute it and/or modify
 *   it under the terms of the GNU Lesser General Public License as published
 *   by the Free Software Foundation; either version 2.1 of the License, or
 *   (at your option) any later version.
 *
 *   This library is distributed in the hope that it will be useful,
 *   but WITHOUT ANY WARRANTY; without even the implied warranty of
 *   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See
 *   the GNU Lesser General Public License for more details.
 *
 *   You should have received a copy of the GNU Lesser General Public License
 *   along with this library; if not, write to the Free Software
S
Steve French 已提交
19
 *   Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
L
Linus Torvalds 已提交
20 21 22 23 24 25
 */
#include <linux/fs.h>
#include <linux/net.h>
#include <linux/string.h>
#include <linux/list.h>
#include <linux/wait.h>
26
#include <linux/slab.h>
L
Linus Torvalds 已提交
27 28 29 30
#include <linux/pagemap.h>
#include <linux/ctype.h>
#include <linux/utsname.h>
#include <linux/mempool.h>
31
#include <linux/delay.h>
32
#include <linux/completion.h>
33
#include <linux/kthread.h>
34
#include <linux/pagevec.h>
35
#include <linux/freezer.h>
36
#include <linux/namei.h>
L
Linus Torvalds 已提交
37 38
#include <asm/uaccess.h>
#include <asm/processor.h>
39
#include <linux/inet.h>
40
#include <net/ipv6.h>
L
Linus Torvalds 已提交
41 42 43 44 45 46 47 48 49
#include "cifspdu.h"
#include "cifsglob.h"
#include "cifsproto.h"
#include "cifs_unicode.h"
#include "cifs_debug.h"
#include "cifs_fs_sb.h"
#include "ntlmssp.h"
#include "nterr.h"
#include "rfc1002pdu.h"
50
#include "cn_cifs.h"
51
#include "fscache.h"
L
Linus Torvalds 已提交
52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68

#define CIFS_PORT 445
#define RFC1001_PORT 139

extern void SMBNTencrypt(unsigned char *passwd, unsigned char *c8,
			 unsigned char *p24);

extern mempool_t *cifs_req_poolp;

struct smb_vol {
	char *username;
	char *password;
	char *domainname;
	char *UNC;
	char *UNCip;
	char *iocharset;  /* local code page for mapping to and from Unicode */
	char source_rfc1001_name[16]; /* netbios name of client */
69
	char target_rfc1001_name[16]; /* netbios name of server for Win9x/ME */
70
	uid_t cred_uid;
L
Linus Torvalds 已提交
71 72 73 74
	uid_t linux_uid;
	gid_t linux_gid;
	mode_t file_mode;
	mode_t dir_mode;
75
	unsigned secFlg;
76 77 78 79 80
	bool retry:1;
	bool intr:1;
	bool setuids:1;
	bool override_uid:1;
	bool override_gid:1;
81
	bool dynperm:1;
82 83 84 85 86 87
	bool noperm:1;
	bool no_psx_acl:1; /* set if posix acl support should be disabled */
	bool cifs_acl:1;
	bool no_xattr:1;   /* set if xattr (EA) support should be disabled*/
	bool server_ino:1; /* use inode numbers from server ie UniqueId */
	bool direct_io:1;
88 89
	bool remap:1;      /* set to remap seven reserved chars in filenames */
	bool posix_paths:1; /* unset to not ask for posix pathnames. */
90 91
	bool no_linux_ext:1;
	bool sfu_emul:1;
92 93 94
	bool nullauth:1;   /* attempt to authenticate with null user */
	bool nocase:1;     /* request case insensitive filenames */
	bool nobrl:1;      /* disable sending byte range locks to srv */
95
	bool mand_lock:1;  /* send mandatory not posix byte range lock reqs */
96
	bool seal:1;       /* request transport encryption on share */
S
Steve French 已提交
97 98
	bool nodfs:1;      /* Do not request DFS, even if available */
	bool local_lease:1; /* check leases only on local system, not remote */
99 100
	bool noblocksnd:1;
	bool noautotune:1;
101
	bool nostrictsync:1; /* do not force expensive SMBflush on every sync */
102
	bool fsc:1;	/* enable fscache */
L
Linus Torvalds 已提交
103 104
	unsigned int rsize;
	unsigned int wsize;
105
	bool sockopt_tcp_nodelay:1;
L
Linus Torvalds 已提交
106
	unsigned short int port;
S
Steve French 已提交
107
	char *prepath;
108
	struct nls_table *local_nls;
L
Linus Torvalds 已提交
109 110
};

111
static int ipv4_connect(struct TCP_Server_Info *server);
112
static int ipv6_connect(struct TCP_Server_Info *server);
L
Linus Torvalds 已提交
113

114 115 116 117 118 119 120 121
/*
 * cifs tcp session reconnection
 *
 * mark tcp session as reconnecting so temporarily locked
 * mark all smb sessions as reconnecting for tcp session
 * reconnect tcp session
 * wake up waiters on reconnection? - (not needed currently)
 */
122
static int
L
Linus Torvalds 已提交
123 124 125
cifs_reconnect(struct TCP_Server_Info *server)
{
	int rc = 0;
126
	struct list_head *tmp, *tmp2;
L
Linus Torvalds 已提交
127 128
	struct cifsSesInfo *ses;
	struct cifsTconInfo *tcon;
S
Steve French 已提交
129
	struct mid_q_entry *mid_entry;
130

L
Linus Torvalds 已提交
131
	spin_lock(&GlobalMid_Lock);
132
	if (server->tcpStatus == CifsExiting) {
S
Steve French 已提交
133
		/* the demux thread will exit normally
L
Linus Torvalds 已提交
134 135 136 137 138 139 140 141
		next time through the loop */
		spin_unlock(&GlobalMid_Lock);
		return rc;
	} else
		server->tcpStatus = CifsNeedReconnect;
	spin_unlock(&GlobalMid_Lock);
	server->maxBuf = 0;

142
	cFYI(1, "Reconnecting tcp session");
L
Linus Torvalds 已提交
143 144 145

	/* before reconnecting the tcp session, mark the smb session (uid)
		and the tid bad so they are not used until reconnected */
146 147 148 149 150
	read_lock(&cifs_tcp_ses_lock);
	list_for_each(tmp, &server->smb_ses_list) {
		ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
		ses->need_reconnect = true;
		ses->ipc_tid = 0;
151 152
		list_for_each(tmp2, &ses->tcon_list) {
			tcon = list_entry(tmp2, struct cifsTconInfo, tcon_list);
S
Steve French 已提交
153
			tcon->need_reconnect = true;
L
Linus Torvalds 已提交
154 155
		}
	}
156
	read_unlock(&cifs_tcp_ses_lock);
L
Linus Torvalds 已提交
157
	/* do not want to be sending data on a socket we are freeing */
J
Jeff Layton 已提交
158
	mutex_lock(&server->srv_mutex);
S
Steve French 已提交
159
	if (server->ssocket) {
160 161
		cFYI(1, "State: 0x%x Flags: 0x%lx", server->ssocket->state,
			server->ssocket->flags);
162
		kernel_sock_shutdown(server->ssocket, SHUT_WR);
163
		cFYI(1, "Post shutdown state: 0x%x Flags: 0x%lx",
S
Steve French 已提交
164
			server->ssocket->state,
165
			server->ssocket->flags);
L
Linus Torvalds 已提交
166 167 168 169 170 171 172 173 174
		sock_release(server->ssocket);
		server->ssocket = NULL;
	}

	spin_lock(&GlobalMid_Lock);
	list_for_each(tmp, &server->pending_mid_q) {
		mid_entry = list_entry(tmp, struct
					mid_q_entry,
					qhead);
175
		if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
176 177 178 179
				/* Mark other intransit requests as needing
				   retry so we do not immediately mark the
				   session bad again (ie after we reconnect
				   below) as they timeout too */
180
			mid_entry->midState = MID_RETRY_NEEDED;
L
Linus Torvalds 已提交
181 182 183
		}
	}
	spin_unlock(&GlobalMid_Lock);
J
Jeff Layton 已提交
184
	mutex_unlock(&server->srv_mutex);
L
Linus Torvalds 已提交
185

186 187
	while ((server->tcpStatus != CifsExiting) &&
	       (server->tcpStatus != CifsGood)) {
188
		try_to_freeze();
189
		if (server->addr.sockAddr6.sin6_family == AF_INET6)
190
			rc = ipv6_connect(server);
191 192
		else
			rc = ipv4_connect(server);
S
Steve French 已提交
193
		if (rc) {
194
			cFYI(1, "reconnect error %d", rc);
195
			msleep(3000);
L
Linus Torvalds 已提交
196 197 198
		} else {
			atomic_inc(&tcpSesReconnectCount);
			spin_lock(&GlobalMid_Lock);
199
			if (server->tcpStatus != CifsExiting)
L
Linus Torvalds 已提交
200
				server->tcpStatus = CifsGood;
201
			server->sequence_number = 0;
S
Steve French 已提交
202
			spin_unlock(&GlobalMid_Lock);
L
Linus Torvalds 已提交
203 204 205 206 207 208 209
	/*		atomic_set(&server->inFlight,0);*/
			wake_up(&server->response_q);
		}
	}
	return rc;
}

S
Steve French 已提交
210
/*
211 212 213 214 215 216
	return codes:
		0 	not a transact2, or all data present
		>0 	transact2 with that much data missing
		-EINVAL = invalid transact2

 */
S
Steve French 已提交
217
static int check2ndT2(struct smb_hdr *pSMB, unsigned int maxBufSize)
218
{
S
Steve French 已提交
219 220
	struct smb_t2_rsp *pSMBt;
	int total_data_size;
221 222 223
	int data_in_this_rsp;
	int remaining;

S
Steve French 已提交
224
	if (pSMB->Command != SMB_COM_TRANSACTION2)
225 226
		return 0;

S
Steve French 已提交
227 228 229
	/* check for plausible wct, bcc and t2 data and parm sizes */
	/* check for parm and data offset going beyond end of smb */
	if (pSMB->WordCount != 10) { /* coalesce_t2 depends on this */
230
		cFYI(1, "invalid transact2 word count");
231 232 233 234 235 236 237 238 239 240
		return -EINVAL;
	}

	pSMBt = (struct smb_t2_rsp *)pSMB;

	total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
	data_in_this_rsp = le16_to_cpu(pSMBt->t2_rsp.DataCount);

	remaining = total_data_size - data_in_this_rsp;

S
Steve French 已提交
241
	if (remaining == 0)
242
		return 0;
S
Steve French 已提交
243
	else if (remaining < 0) {
244 245
		cFYI(1, "total data %d smaller than data in frame %d",
			total_data_size, data_in_this_rsp);
246 247
		return -EINVAL;
	} else {
248 249
		cFYI(1, "missing %d bytes from transact2, check next response",
			remaining);
S
Steve French 已提交
250
		if (total_data_size > maxBufSize) {
251 252
			cERROR(1, "TotalDataSize %d is over maximum buffer %d",
				total_data_size, maxBufSize);
S
Steve French 已提交
253
			return -EINVAL;
254 255 256 257 258
		}
		return remaining;
	}
}

S
Steve French 已提交
259
static int coalesce_t2(struct smb_hdr *psecond, struct smb_hdr *pTargetSMB)
260 261 262 263 264 265 266
{
	struct smb_t2_rsp *pSMB2 = (struct smb_t2_rsp *)psecond;
	struct smb_t2_rsp *pSMBt  = (struct smb_t2_rsp *)pTargetSMB;
	int total_data_size;
	int total_in_buf;
	int remaining;
	int total_in_buf2;
S
Steve French 已提交
267 268
	char *data_area_of_target;
	char *data_area_of_buf2;
269 270 271 272
	__u16 byte_count;

	total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);

S
Steve French 已提交
273
	if (total_data_size != le16_to_cpu(pSMB2->t2_rsp.TotalDataCount)) {
274
		cFYI(1, "total data size of primary and secondary t2 differ");
275 276 277 278 279
	}

	total_in_buf = le16_to_cpu(pSMBt->t2_rsp.DataCount);

	remaining = total_data_size - total_in_buf;
280

S
Steve French 已提交
281
	if (remaining < 0)
282 283
		return -EINVAL;

S
Steve French 已提交
284
	if (remaining == 0) /* nothing to do, ignore */
285
		return 0;
286

287
	total_in_buf2 = le16_to_cpu(pSMB2->t2_rsp.DataCount);
S
Steve French 已提交
288
	if (remaining < total_in_buf2) {
289
		cFYI(1, "transact2 2nd response contains too much data");
290 291 292
	}

	/* find end of first SMB data area */
S
Steve French 已提交
293
	data_area_of_target = (char *)&pSMBt->hdr.Protocol +
294 295 296 297
				le16_to_cpu(pSMBt->t2_rsp.DataOffset);
	/* validate target area */

	data_area_of_buf2 = (char *) &pSMB2->hdr.Protocol +
S
Steve French 已提交
298
					le16_to_cpu(pSMB2->t2_rsp.DataOffset);
299 300 301 302

	data_area_of_target += total_in_buf;

	/* copy second buffer into end of first buffer */
S
Steve French 已提交
303
	memcpy(data_area_of_target, data_area_of_buf2, total_in_buf2);
304 305 306 307 308 309
	total_in_buf += total_in_buf2;
	pSMBt->t2_rsp.DataCount = cpu_to_le16(total_in_buf);
	byte_count = le16_to_cpu(BCC_LE(pTargetSMB));
	byte_count += total_in_buf2;
	BCC_LE(pTargetSMB) = cpu_to_le16(byte_count);

310
	byte_count = pTargetSMB->smb_buf_length;
311 312 313
	byte_count += total_in_buf2;

	/* BB also add check that we are not beyond maximum buffer size */
314

315
	pTargetSMB->smb_buf_length = byte_count;
316

S
Steve French 已提交
317
	if (remaining == total_in_buf2) {
318
		cFYI(1, "found the last secondary response");
319 320 321 322 323 324
		return 0; /* we are done */
	} else /* more responses to go */
		return 1;

}

L
Linus Torvalds 已提交
325 326 327 328 329 330
static int
cifs_demultiplex_thread(struct TCP_Server_Info *server)
{
	int length;
	unsigned int pdu_length, total_read;
	struct smb_hdr *smb_buffer = NULL;
331 332
	struct smb_hdr *bigbuf = NULL;
	struct smb_hdr *smallbuf = NULL;
L
Linus Torvalds 已提交
333 334 335 336 337 338 339
	struct msghdr smb_msg;
	struct kvec iov;
	struct socket *csocket = server->ssocket;
	struct list_head *tmp;
	struct cifsSesInfo *ses;
	struct task_struct *task_to_wake = NULL;
	struct mid_q_entry *mid_entry;
340
	char temp;
341 342
	bool isLargeBuf = false;
	bool isMultiRsp;
343
	int reconnect;
L
Linus Torvalds 已提交
344 345

	current->flags |= PF_MEMALLOC;
346
	cFYI(1, "Demultiplex PID: %d", task_pid_nr(current));
347 348 349

	length = atomic_inc_return(&tcpSesAllocCount);
	if (length > 1)
350 351
		mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
				GFP_KERNEL);
L
Linus Torvalds 已提交
352

353
	set_freezable();
354
	while (server->tcpStatus != CifsExiting) {
355 356
		if (try_to_freeze())
			continue;
357 358
		if (bigbuf == NULL) {
			bigbuf = cifs_buf_get();
359
			if (!bigbuf) {
360
				cERROR(1, "No memory for large SMB response");
361 362 363 364
				msleep(3000);
				/* retry will check if exiting */
				continue;
			}
365 366
		} else if (isLargeBuf) {
			/* we are reusing a dirty large buf, clear its start */
367
			memset(bigbuf, 0, sizeof(struct smb_hdr));
L
Linus Torvalds 已提交
368
		}
369 370 371

		if (smallbuf == NULL) {
			smallbuf = cifs_small_buf_get();
372
			if (!smallbuf) {
373
				cERROR(1, "No memory for SMB response");
374 375 376 377 378 379
				msleep(1000);
				/* retry will check if exiting */
				continue;
			}
			/* beginning of smb buffer is cleared in our buf_get */
		} else /* if existing small buf clear beginning */
380
			memset(smallbuf, 0, sizeof(struct smb_hdr));
381

382 383
		isLargeBuf = false;
		isMultiRsp = false;
384
		smb_buffer = smallbuf;
L
Linus Torvalds 已提交
385 386 387 388
		iov.iov_base = smb_buffer;
		iov.iov_len = 4;
		smb_msg.msg_control = NULL;
		smb_msg.msg_controllen = 0;
389 390
		pdu_length = 4; /* enough to get RFC1001 header */
incomplete_rcv:
L
Linus Torvalds 已提交
391 392
		length =
		    kernel_recvmsg(csocket, &smb_msg,
393
				&iov, 1, pdu_length, 0 /* BB other flags? */);
L
Linus Torvalds 已提交
394

395
		if (server->tcpStatus == CifsExiting) {
L
Linus Torvalds 已提交
396 397
			break;
		} else if (server->tcpStatus == CifsNeedReconnect) {
398
			cFYI(1, "Reconnect after server stopped responding");
L
Linus Torvalds 已提交
399
			cifs_reconnect(server);
400
			cFYI(1, "call to reconnect done");
L
Linus Torvalds 已提交
401 402
			csocket = server->ssocket;
			continue;
403 404 405
		} else if (length == -ERESTARTSYS ||
			   length == -EAGAIN ||
			   length == -EINTR) {
406
			msleep(1); /* minimum sleep to prevent looping
L
Linus Torvalds 已提交
407 408
				allowing socket to clear and app threads to set
				tcpStatus CifsNeedReconnect if server hung */
409 410 411 412 413 414
			if (pdu_length < 4) {
				iov.iov_base = (4 - pdu_length) +
							(char *)smb_buffer;
				iov.iov_len = pdu_length;
				smb_msg.msg_control = NULL;
				smb_msg.msg_controllen = 0;
415
				goto incomplete_rcv;
416
			} else
417
				continue;
L
Linus Torvalds 已提交
418
		} else if (length <= 0) {
419 420
			cFYI(1, "Reconnect after unexpected peek error %d",
				length);
L
Linus Torvalds 已提交
421 422 423 424
			cifs_reconnect(server);
			csocket = server->ssocket;
			wake_up(&server->response_q);
			continue;
425
		} else if (length < pdu_length) {
426 427
			cFYI(1, "requested %d bytes but only got %d bytes",
				  pdu_length, length);
428 429 430
			pdu_length -= length;
			msleep(1);
			goto incomplete_rcv;
431
		}
L
Linus Torvalds 已提交
432

433 434
		/* The right amount was read from socket - 4 bytes */
		/* so we can now interpret the length field */
435

436 437 438 439
		/* the first byte big endian of the length field,
		is actually not part of the length but the type
		with the most common, zero, as regular data */
		temp = *((char *) smb_buffer);
440

S
Steve French 已提交
441
		/* Note that FC 1001 length is big endian on the wire,
442 443
		but we convert it here so it is always manipulated
		as host byte order */
444
		pdu_length = be32_to_cpu((__force __be32)smb_buffer->smb_buf_length);
445 446
		smb_buffer->smb_buf_length = pdu_length;

447
		cFYI(1, "rfc1002 length 0x%x", pdu_length+4);
448

449
		if (temp == (char) RFC1002_SESSION_KEEP_ALIVE) {
S
Steve French 已提交
450
			continue;
451
		} else if (temp == (char)RFC1002_POSITIVE_SESSION_RESPONSE) {
452
			cFYI(1, "Good RFC 1002 session rsp");
453
			continue;
454
		} else if (temp == (char)RFC1002_NEGATIVE_SESSION_RESPONSE) {
S
Steve French 已提交
455
			/* we get this from Windows 98 instead of
456
			   an error on SMB negprot response */
457 458
			cFYI(1, "Negative RFC1002 Session Response Error 0x%x)",
				pdu_length);
459 460 461 462 463 464 465
			/* give server a second to clean up  */
			msleep(1000);
			/* always try 445 first on reconnect since we get NACK
			 * on some if we ever connected to port 139 (the NACK
			 * is since we do not begin with RFC1001 session
			 * initialize frame)
			 */
466 467
			cifs_set_port((struct sockaddr *)
					&server->addr.sockAddr, CIFS_PORT);
468 469 470 471
			cifs_reconnect(server);
			csocket = server->ssocket;
			wake_up(&server->response_q);
			continue;
472
		} else if (temp != (char) 0) {
473
			cERROR(1, "Unknown RFC 1002 frame");
474 475
			cifs_dump_mem(" Received Data: ", (char *)smb_buffer,
				      length);
476 477 478
			cifs_reconnect(server);
			csocket = server->ssocket;
			continue;
479 480 481
		}

		/* else we have an SMB response */
S
Steve French 已提交
482
		if ((pdu_length > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE - 4) ||
483
			    (pdu_length < sizeof(struct smb_hdr) - 1 - 4)) {
484 485
			cERROR(1, "Invalid size SMB length %d pdu_length %d",
					length, pdu_length+4);
486 487 488 489
			cifs_reconnect(server);
			csocket = server->ssocket;
			wake_up(&server->response_q);
			continue;
S
Steve French 已提交
490
		}
491 492 493 494

		/* else length ok */
		reconnect = 0;

S
Steve French 已提交
495
		if (pdu_length > MAX_CIFS_SMALL_BUFFER_SIZE - 4) {
496
			isLargeBuf = true;
497 498 499 500 501 502
			memcpy(bigbuf, smallbuf, 4);
			smb_buffer = bigbuf;
		}
		length = 0;
		iov.iov_base = 4 + (char *)smb_buffer;
		iov.iov_len = pdu_length;
S
Steve French 已提交
503
		for (total_read = 0; total_read < pdu_length;
504 505 506
		     total_read += length) {
			length = kernel_recvmsg(csocket, &smb_msg, &iov, 1,
						pdu_length - total_read, 0);
507
			if (server->tcpStatus == CifsExiting) {
508 509 510 511
				/* then will exit */
				reconnect = 2;
				break;
			} else if (server->tcpStatus == CifsNeedReconnect) {
512 513
				cifs_reconnect(server);
				csocket = server->ssocket;
S
Steve French 已提交
514
				/* Reconnect wakes up rspns q */
515 516 517
				/* Now we will reread sock */
				reconnect = 1;
				break;
518 519 520
			} else if (length == -ERESTARTSYS ||
				   length == -EAGAIN ||
				   length == -EINTR) {
521
				msleep(1); /* minimum sleep to prevent looping,
S
Steve French 已提交
522
					      allowing socket to clear and app
523 524
					      threads to set tcpStatus
					      CifsNeedReconnect if server hung*/
525
				length = 0;
526
				continue;
527
			} else if (length <= 0) {
528 529
				cERROR(1, "Received no data, expecting %d",
					      pdu_length - total_read);
530 531 532 533
				cifs_reconnect(server);
				csocket = server->ssocket;
				reconnect = 1;
				break;
534
			}
535
		}
S
Steve French 已提交
536
		if (reconnect == 2)
537
			break;
S
Steve French 已提交
538
		else if (reconnect == 1)
539
			continue;
L
Linus Torvalds 已提交
540

541
		length += 4; /* account for rfc1002 hdr */
542

543

544
		dump_smb(smb_buffer, length);
545
		if (checkSMB(smb_buffer, smb_buffer->Mid, total_read+4)) {
546
			cifs_dump_mem("Bad SMB: ", smb_buffer, 48);
547 548
			continue;
		}
L
Linus Torvalds 已提交
549

550 551 552 553 554 555

		task_to_wake = NULL;
		spin_lock(&GlobalMid_Lock);
		list_for_each(tmp, &server->pending_mid_q) {
			mid_entry = list_entry(tmp, struct mid_q_entry, qhead);

556
			if ((mid_entry->mid == smb_buffer->Mid) &&
557 558
			    (mid_entry->midState == MID_REQUEST_SUBMITTED) &&
			    (mid_entry->command == smb_buffer->Command)) {
S
Steve French 已提交
559
				if (check2ndT2(smb_buffer,server->maxBuf) > 0) {
560
					/* We have a multipart transact2 resp */
561
					isMultiRsp = true;
S
Steve French 已提交
562
					if (mid_entry->resp_buf) {
563
						/* merge response - fix up 1st*/
564
						if (coalesce_t2(smb_buffer,
565
							mid_entry->resp_buf)) {
566 567
							mid_entry->multiRsp =
								 true;
568 569 570
							break;
						} else {
							/* all parts received */
571 572
							mid_entry->multiEnd =
								 true;
573
							goto multi_t2_fnd;
574 575
						}
					} else {
S
Steve French 已提交
576
						if (!isLargeBuf) {
577
							cERROR(1, "1st trans2 resp needs bigbuf");
578
					/* BB maybe we can fix this up,  switch
579
					   to already allocated large buffer? */
580
						} else {
581
							/* Have first buffer */
582 583
							mid_entry->resp_buf =
								 smb_buffer;
584 585
							mid_entry->largeBuf =
								 true;
586 587 588 589
							bigbuf = NULL;
						}
					}
					break;
590
				}
591
				mid_entry->resp_buf = smb_buffer;
592
				mid_entry->largeBuf = isLargeBuf;
593 594 595
multi_t2_fnd:
				task_to_wake = mid_entry->tsk;
				mid_entry->midState = MID_RESPONSE_RECEIVED;
S
Steve French 已提交
596 597 598
#ifdef CONFIG_CIFS_STATS2
				mid_entry->when_received = jiffies;
#endif
599 600 601 602
				/* so we do not time out requests to  server
				which is still responding (since server could
				be busy but not dead) */
				server->lstrp = jiffies;
603
				break;
604
			}
L
Linus Torvalds 已提交
605
		}
606 607
		spin_unlock(&GlobalMid_Lock);
		if (task_to_wake) {
608
			/* Was previous buf put in mpx struct for multi-rsp? */
S
Steve French 已提交
609
			if (!isMultiRsp) {
610
				/* smb buffer will be freed by user thread */
611
				if (isLargeBuf)
612
					bigbuf = NULL;
613
				else
614 615
					smallbuf = NULL;
			}
616
			wake_up_process(task_to_wake);
617 618
		} else if (!is_valid_oplock_break(smb_buffer, server) &&
			   !isMultiRsp) {
619 620
			cERROR(1, "No task to wake, unknown frame received! "
				   "NumMids %d", midCount.counter);
621
			cifs_dump_mem("Received Data is: ", (char *)smb_buffer,
622
				      sizeof(struct smb_hdr));
623 624 625 626
#ifdef CONFIG_CIFS_DEBUG2
			cifs_dump_detail(smb_buffer);
			cifs_dump_mids(server);
#endif /* CIFS_DEBUG2 */
627

628 629 630
		}
	} /* end while !EXITING */

631 632 633 634 635
	/* take it off the list, if it's not already */
	write_lock(&cifs_tcp_ses_lock);
	list_del_init(&server->tcp_ses_list);
	write_unlock(&cifs_tcp_ses_lock);

L
Linus Torvalds 已提交
636 637
	spin_lock(&GlobalMid_Lock);
	server->tcpStatus = CifsExiting;
638
	spin_unlock(&GlobalMid_Lock);
639
	wake_up_all(&server->response_q);
640

641 642 643
	/* check if we have blocked requests that need to free */
	/* Note that cifs_max_pending is normally 50, but
	can be set at module install time to as little as two */
644
	spin_lock(&GlobalMid_Lock);
S
Steve French 已提交
645
	if (atomic_read(&server->inFlight) >= cifs_max_pending)
646 647 648
		atomic_set(&server->inFlight, cifs_max_pending - 1);
	/* We do not want to set the max_pending too low or we
	could end up with the counter going negative */
L
Linus Torvalds 已提交
649
	spin_unlock(&GlobalMid_Lock);
650
	/* Although there should not be any requests blocked on
L
Linus Torvalds 已提交
651
	this queue it can not hurt to be paranoid and try to wake up requests
652
	that may haven been blocked when more than 50 at time were on the wire
L
Linus Torvalds 已提交
653 654 655 656
	to the same server - they now will see the session is in exit state
	and get out of SendReceive.  */
	wake_up_all(&server->request_q);
	/* give those requests time to exit */
657
	msleep(125);
658

S
Steve French 已提交
659
	if (server->ssocket) {
L
Linus Torvalds 已提交
660 661 662
		sock_release(csocket);
		server->ssocket = NULL;
	}
663
	/* buffer usuallly freed in free_mid - need to free it here on exit */
664 665
	cifs_buf_release(bigbuf);
	if (smallbuf) /* no sense logging a debug message if NULL */
666
		cifs_small_buf_release(smallbuf);
L
Linus Torvalds 已提交
667

668 669 670 671 672
	/*
	 * BB: we shouldn't have to do any of this. It shouldn't be
	 * possible to exit from the thread with active SMB sessions
	 */
	read_lock(&cifs_tcp_ses_lock);
L
Linus Torvalds 已提交
673
	if (list_empty(&server->pending_mid_q)) {
674 675
		/* loop through server session structures attached to this and
		    mark them dead */
676 677 678 679 680
		list_for_each(tmp, &server->smb_ses_list) {
			ses = list_entry(tmp, struct cifsSesInfo,
					 smb_ses_list);
			ses->status = CifsExiting;
			ses->server = NULL;
L
Linus Torvalds 已提交
681
		}
682
		read_unlock(&cifs_tcp_ses_lock);
L
Linus Torvalds 已提交
683
	} else {
684 685 686
		/* although we can not zero the server struct pointer yet,
		since there are active requests which may depnd on them,
		mark the corresponding SMB sessions as exiting too */
687
		list_for_each(tmp, &server->smb_ses_list) {
688
			ses = list_entry(tmp, struct cifsSesInfo,
689 690
					 smb_ses_list);
			ses->status = CifsExiting;
691 692
		}

L
Linus Torvalds 已提交
693 694 695 696
		spin_lock(&GlobalMid_Lock);
		list_for_each(tmp, &server->pending_mid_q) {
		mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
			if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
697 698
				cFYI(1, "Clearing Mid 0x%x - waking up ",
					 mid_entry->mid);
L
Linus Torvalds 已提交
699
				task_to_wake = mid_entry->tsk;
700
				if (task_to_wake)
L
Linus Torvalds 已提交
701 702 703 704
					wake_up_process(task_to_wake);
			}
		}
		spin_unlock(&GlobalMid_Lock);
705
		read_unlock(&cifs_tcp_ses_lock);
L
Linus Torvalds 已提交
706
		/* 1/8th of sec is more than enough time for them to exit */
707
		msleep(125);
L
Linus Torvalds 已提交
708 709
	}

710
	if (!list_empty(&server->pending_mid_q)) {
711
		/* mpx threads have not exited yet give them
L
Linus Torvalds 已提交
712
		at least the smb send timeout time for long ops */
713 714 715 716
		/* due to delays on oplock break requests, we need
		to wait at least 45 seconds before giving up
		on a request getting a response and going ahead
		and killing cifsd */
717
		cFYI(1, "Wait for exit from demultiplex thread");
718
		msleep(46000);
L
Linus Torvalds 已提交
719 720 721 722
		/* if threads still have not exited they are probably never
		coming home not much else we can do but free the memory */
	}

723 724
	/* last chance to mark ses pointers invalid
	if there are any pointing to this (e.g
725
	if a crazy root user tried to kill cifsd
726
	kernel thread explicitly this might happen) */
727 728 729 730 731
	/* BB: This shouldn't be necessary, see above */
	read_lock(&cifs_tcp_ses_lock);
	list_for_each(tmp, &server->smb_ses_list) {
		ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
		ses->server = NULL;
732
	}
733
	read_unlock(&cifs_tcp_ses_lock);
734

735
	kfree(server->hostname);
736
	task_to_wake = xchg(&server->tsk, NULL);
737
	kfree(server);
738 739

	length = atomic_dec_return(&tcpSesAllocCount);
740 741 742
	if (length  > 0)
		mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
				GFP_KERNEL);
743

744 745 746 747 748 749 750 751 752 753
	/* if server->tsk was NULL then wait for a signal before exiting */
	if (!task_to_wake) {
		set_current_state(TASK_INTERRUPTIBLE);
		while (!signal_pending(current)) {
			schedule();
			set_current_state(TASK_INTERRUPTIBLE);
		}
		set_current_state(TASK_RUNNING);
	}

754
	module_put_and_exit(0);
L
Linus Torvalds 已提交
755 756
}

757 758 759 760 761 762 763 764 765 766 767 768 769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784
/* extract the host portion of the UNC string */
static char *
extract_hostname(const char *unc)
{
	const char *src;
	char *dst, *delim;
	unsigned int len;

	/* skip double chars at beginning of string */
	/* BB: check validity of these bytes? */
	src = unc + 2;

	/* delimiter between hostname and sharename is always '\\' now */
	delim = strchr(src, '\\');
	if (!delim)
		return ERR_PTR(-EINVAL);

	len = delim - src;
	dst = kmalloc((len + 1), GFP_KERNEL);
	if (dst == NULL)
		return ERR_PTR(-ENOMEM);

	memcpy(dst, src, len);
	dst[len] = '\0';

	return dst;
}

L
Linus Torvalds 已提交
785
static int
786 787
cifs_parse_mount_options(char *options, const char *devname,
			 struct smb_vol *vol)
L
Linus Torvalds 已提交
788 789 790 791 792
{
	char *value;
	char *data;
	unsigned int  temp_len, i, j;
	char separator[2];
793 794 795 796
	short int override_uid = -1;
	short int override_gid = -1;
	bool uid_specified = false;
	bool gid_specified = false;
L
Linus Torvalds 已提交
797 798

	separator[0] = ',';
799
	separator[1] = 0;
L
Linus Torvalds 已提交
800

801
	if (Local_System_Name[0] != 0)
802
		memcpy(vol->source_rfc1001_name, Local_System_Name, 15);
803
	else {
804
		char *nodename = utsname()->nodename;
805 806 807
		int n = strnlen(nodename, 15);
		memset(vol->source_rfc1001_name, 0x20, 15);
		for (i = 0; i < n; i++) {
808 809 810
			/* does not have to be perfect mapping since field is
			informational, only used for servers that do not support
			port 445 and it can be overridden at mount time */
811
			vol->source_rfc1001_name[i] = toupper(nodename[i]);
812
		}
L
Linus Torvalds 已提交
813 814
	}
	vol->source_rfc1001_name[15] = 0;
815 816 817
	/* null target name indicates to use *SMBSERVR default called name
	   if we end up sending RFC1001 session initialize */
	vol->target_rfc1001_name[0] = 0;
818 819
	vol->cred_uid = current_uid();
	vol->linux_uid = current_uid();
820
	vol->linux_gid = current_gid();
821 822 823

	/* default to only allowing write access to owner of the mount */
	vol->dir_mode = vol->file_mode = S_IRUGO | S_IXUGO | S_IWUSR;
L
Linus Torvalds 已提交
824 825

	/* vol->retry default is 0 (i.e. "soft" limited retry not hard retry) */
826 827
	/* default is always to request posix paths. */
	vol->posix_paths = 1;
828 829
	/* default to using server inode numbers where available */
	vol->server_ino = 1;
830

L
Linus Torvalds 已提交
831 832 833
	if (!options)
		return 1;

834
	if (strncmp(options, "sep=", 4) == 0) {
S
Steve French 已提交
835
		if (options[4] != 0) {
L
Linus Torvalds 已提交
836 837 838
			separator[0] = options[4];
			options += 5;
		} else {
839
			cFYI(1, "Null separator not allowed");
L
Linus Torvalds 已提交
840 841
		}
	}
842

L
Linus Torvalds 已提交
843 844 845 846 847 848
	while ((data = strsep(&options, separator)) != NULL) {
		if (!*data)
			continue;
		if ((value = strchr(data, '=')) != NULL)
			*value++ = '\0';

849 850
		/* Have to parse this before we parse for "user" */
		if (strnicmp(data, "user_xattr", 10) == 0) {
L
Linus Torvalds 已提交
851
			vol->no_xattr = 0;
852
		} else if (strnicmp(data, "nouser_xattr", 12) == 0) {
L
Linus Torvalds 已提交
853 854
			vol->no_xattr = 1;
		} else if (strnicmp(data, "user", 4) == 0) {
S
Steve French 已提交
855
			if (!value) {
L
Linus Torvalds 已提交
856 857 858
				printk(KERN_WARNING
				       "CIFS: invalid or missing username\n");
				return 1;	/* needs_arg; */
S
Steve French 已提交
859
			} else if (!*value) {
S
Steve French 已提交
860 861
				/* null user, ie anonymous, authentication */
				vol->nullauth = 1;
L
Linus Torvalds 已提交
862 863 864 865 866 867 868 869 870 871 872
			}
			if (strnlen(value, 200) < 200) {
				vol->username = value;
			} else {
				printk(KERN_WARNING "CIFS: username too long\n");
				return 1;
			}
		} else if (strnicmp(data, "pass", 4) == 0) {
			if (!value) {
				vol->password = NULL;
				continue;
S
Steve French 已提交
873
			} else if (value[0] == 0) {
L
Linus Torvalds 已提交
874 875 876 877
				/* check if string begins with double comma
				   since that would mean the password really
				   does start with a comma, and would not
				   indicate an empty string */
S
Steve French 已提交
878
				if (value[1] != separator[0]) {
L
Linus Torvalds 已提交
879 880 881 882 883 884 885 886
					vol->password = NULL;
					continue;
				}
			}
			temp_len = strlen(value);
			/* removed password length check, NTLM passwords
				can be arbitrarily long */

887
			/* if comma in password, the string will be
L
Linus Torvalds 已提交
888 889 890 891 892 893 894 895 896
			prematurely null terminated.  Commas in password are
			specified across the cifs mount interface by a double
			comma ie ,, and a comma used as in other cases ie ','
			as a parameter delimiter/separator is single and due
			to the strsep above is temporarily zeroed. */

			/* NB: password legally can have multiple commas and
			the only illegal character in a password is null */

897
			if ((value[temp_len] == 0) &&
898
			    (value[temp_len+1] == separator[0])) {
L
Linus Torvalds 已提交
899 900
				/* reinsert comma */
				value[temp_len] = separator[0];
901 902
				temp_len += 2;  /* move after second comma */
				while (value[temp_len] != 0)  {
L
Linus Torvalds 已提交
903
					if (value[temp_len] == separator[0]) {
904
						if (value[temp_len+1] ==
905 906 907
						     separator[0]) {
						/* skip second comma */
							temp_len++;
908
						} else {
L
Linus Torvalds 已提交
909 910 911 912 913 914 915
						/* single comma indicating start
							 of next parm */
							break;
						}
					}
					temp_len++;
				}
S
Steve French 已提交
916
				if (value[temp_len] == 0) {
L
Linus Torvalds 已提交
917 918 919 920 921 922
					options = NULL;
				} else {
					value[temp_len] = 0;
					/* point option to start of next parm */
					options = value + temp_len + 1;
				}
923
				/* go from value to value + temp_len condensing
L
Linus Torvalds 已提交
924 925
				double commas to singles. Note that this ends up
				allocating a few bytes too many, which is ok */
926
				vol->password = kzalloc(temp_len, GFP_KERNEL);
S
Steve French 已提交
927
				if (vol->password == NULL) {
928 929
					printk(KERN_WARNING "CIFS: no memory "
							    "for password\n");
930 931
					return 1;
				}
932
				for (i = 0, j = 0; i < temp_len; i++, j++) {
L
Linus Torvalds 已提交
933
					vol->password[j] = value[i];
S
Steve French 已提交
934
					if (value[i] == separator[0]
935
						&& value[i+1] == separator[0]) {
L
Linus Torvalds 已提交
936 937 938 939 940 941
						/* skip second comma */
						i++;
					}
				}
				vol->password[j] = 0;
			} else {
942
				vol->password = kzalloc(temp_len+1, GFP_KERNEL);
S
Steve French 已提交
943
				if (vol->password == NULL) {
944 945
					printk(KERN_WARNING "CIFS: no memory "
							    "for password\n");
946 947
					return 1;
				}
L
Linus Torvalds 已提交
948 949
				strcpy(vol->password, value);
			}
950 951
		} else if (!strnicmp(data, "ip", 2) ||
			   !strnicmp(data, "addr", 4)) {
L
Linus Torvalds 已提交
952 953
			if (!value || !*value) {
				vol->UNCip = NULL;
954 955
			} else if (strnlen(value, INET6_ADDRSTRLEN) <
							INET6_ADDRSTRLEN) {
L
Linus Torvalds 已提交
956 957
				vol->UNCip = value;
			} else {
958 959
				printk(KERN_WARNING "CIFS: ip address "
						    "too long\n");
L
Linus Torvalds 已提交
960 961
				return 1;
			}
962 963
		} else if (strnicmp(data, "sec", 3) == 0) {
			if (!value || !*value) {
964
				cERROR(1, "no security value specified");
965 966 967
				continue;
			} else if (strnicmp(value, "krb5i", 5) == 0) {
				vol->secFlg |= CIFSSEC_MAY_KRB5 |
968
					CIFSSEC_MUST_SIGN;
969
			} else if (strnicmp(value, "krb5p", 5) == 0) {
970 971
				/* vol->secFlg |= CIFSSEC_MUST_SEAL |
					CIFSSEC_MAY_KRB5; */
972
				cERROR(1, "Krb5 cifs privacy not supported");
973 974
				return 1;
			} else if (strnicmp(value, "krb5", 4) == 0) {
975
				vol->secFlg |= CIFSSEC_MAY_KRB5;
976 977 978 979 980 981 982
#ifdef CONFIG_CIFS_EXPERIMENTAL
			} else if (strnicmp(value, "ntlmsspi", 8) == 0) {
				vol->secFlg |= CIFSSEC_MAY_NTLMSSP |
					CIFSSEC_MUST_SIGN;
			} else if (strnicmp(value, "ntlmssp", 7) == 0) {
				vol->secFlg |= CIFSSEC_MAY_NTLMSSP;
#endif
983
			} else if (strnicmp(value, "ntlmv2i", 7) == 0) {
984
				vol->secFlg |= CIFSSEC_MAY_NTLMV2 |
985
					CIFSSEC_MUST_SIGN;
986
			} else if (strnicmp(value, "ntlmv2", 6) == 0) {
987
				vol->secFlg |= CIFSSEC_MAY_NTLMV2;
988
			} else if (strnicmp(value, "ntlmi", 5) == 0) {
989
				vol->secFlg |= CIFSSEC_MAY_NTLM |
990
					CIFSSEC_MUST_SIGN;
991 992
			} else if (strnicmp(value, "ntlm", 4) == 0) {
				/* ntlm is default so can be turned off too */
993
				vol->secFlg |= CIFSSEC_MAY_NTLM;
994
			} else if (strnicmp(value, "nontlm", 6) == 0) {
995
				/* BB is there a better way to do this? */
996
				vol->secFlg |= CIFSSEC_MAY_NTLMV2;
997 998
#ifdef CONFIG_CIFS_WEAK_PW_HASH
			} else if (strnicmp(value, "lanman", 6) == 0) {
999
				vol->secFlg |= CIFSSEC_MAY_LANMAN;
1000
#endif
1001
			} else if (strnicmp(value, "none", 4) == 0) {
1002
				vol->nullauth = 1;
1003
			} else {
1004
				cERROR(1, "bad security option: %s", value);
1005 1006
				return 1;
			}
L
Linus Torvalds 已提交
1007 1008 1009 1010
		} else if ((strnicmp(data, "unc", 3) == 0)
			   || (strnicmp(data, "target", 6) == 0)
			   || (strnicmp(data, "path", 4) == 0)) {
			if (!value || !*value) {
1011 1012
				printk(KERN_WARNING "CIFS: invalid path to "
						    "network resource\n");
L
Linus Torvalds 已提交
1013 1014 1015
				return 1;	/* needs_arg; */
			}
			if ((temp_len = strnlen(value, 300)) < 300) {
1016
				vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1017
				if (vol->UNC == NULL)
L
Linus Torvalds 已提交
1018
					return 1;
1019
				strcpy(vol->UNC, value);
L
Linus Torvalds 已提交
1020 1021 1022
				if (strncmp(vol->UNC, "//", 2) == 0) {
					vol->UNC[0] = '\\';
					vol->UNC[1] = '\\';
1023
				} else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
L
Linus Torvalds 已提交
1024
					printk(KERN_WARNING
1025 1026
					       "CIFS: UNC Path does not begin "
					       "with // or \\\\ \n");
L
Linus Torvalds 已提交
1027 1028 1029 1030 1031 1032 1033 1034 1035 1036 1037 1038 1039 1040
					return 1;
				}
			} else {
				printk(KERN_WARNING "CIFS: UNC name too long\n");
				return 1;
			}
		} else if ((strnicmp(data, "domain", 3) == 0)
			   || (strnicmp(data, "workgroup", 5) == 0)) {
			if (!value || !*value) {
				printk(KERN_WARNING "CIFS: invalid domain name\n");
				return 1;	/* needs_arg; */
			}
			/* BB are there cases in which a comma can be valid in
			a domain name and need special handling? */
1041
			if (strnlen(value, 256) < 256) {
L
Linus Torvalds 已提交
1042
				vol->domainname = value;
1043
				cFYI(1, "Domain name set");
L
Linus Torvalds 已提交
1044
			} else {
1045 1046
				printk(KERN_WARNING "CIFS: domain name too "
						    "long\n");
L
Linus Torvalds 已提交
1047 1048
				return 1;
			}
1049 1050 1051 1052 1053 1054 1055
		} else if (strnicmp(data, "prefixpath", 10) == 0) {
			if (!value || !*value) {
				printk(KERN_WARNING
					"CIFS: invalid path prefix\n");
				return 1;       /* needs_argument */
			}
			if ((temp_len = strnlen(value, 1024)) < 1024) {
1056
				if (value[0] != '/')
1057
					temp_len++;  /* missing leading slash */
1058 1059 1060
				vol->prepath = kmalloc(temp_len+1, GFP_KERNEL);
				if (vol->prepath == NULL)
					return 1;
1061
				if (value[0] != '/') {
1062
					vol->prepath[0] = '/';
1063
					strcpy(vol->prepath+1, value);
1064
				} else
1065
					strcpy(vol->prepath, value);
1066
				cFYI(1, "prefix path %s", vol->prepath);
1067 1068 1069 1070
			} else {
				printk(KERN_WARNING "CIFS: prefix too long\n");
				return 1;
			}
L
Linus Torvalds 已提交
1071 1072
		} else if (strnicmp(data, "iocharset", 9) == 0) {
			if (!value || !*value) {
1073 1074
				printk(KERN_WARNING "CIFS: invalid iocharset "
						    "specified\n");
L
Linus Torvalds 已提交
1075 1076 1077
				return 1;	/* needs_arg; */
			}
			if (strnlen(value, 65) < 65) {
1078
				if (strnicmp(value, "default", 7))
L
Linus Torvalds 已提交
1079
					vol->iocharset = value;
1080 1081
				/* if iocharset not set then load_nls_default
				   is used by caller */
1082
				cFYI(1, "iocharset set to %s", value);
L
Linus Torvalds 已提交
1083
			} else {
1084 1085
				printk(KERN_WARNING "CIFS: iocharset name "
						    "too long.\n");
L
Linus Torvalds 已提交
1086 1087
				return 1;
			}
1088 1089 1090 1091 1092 1093 1094 1095 1096 1097 1098 1099 1100 1101
		} else if (!strnicmp(data, "uid", 3) && value && *value) {
			vol->linux_uid = simple_strtoul(value, &value, 0);
			uid_specified = true;
		} else if (!strnicmp(data, "forceuid", 8)) {
			override_uid = 1;
		} else if (!strnicmp(data, "noforceuid", 10)) {
			override_uid = 0;
		} else if (!strnicmp(data, "gid", 3) && value && *value) {
			vol->linux_gid = simple_strtoul(value, &value, 0);
			gid_specified = true;
		} else if (!strnicmp(data, "forcegid", 8)) {
			override_gid = 1;
		} else if (!strnicmp(data, "noforcegid", 10)) {
			override_gid = 0;
L
Linus Torvalds 已提交
1102 1103 1104 1105 1106 1107 1108 1109 1110 1111 1112 1113 1114 1115 1116 1117 1118 1119 1120 1121 1122 1123 1124 1125 1126 1127 1128 1129 1130 1131 1132
		} else if (strnicmp(data, "file_mode", 4) == 0) {
			if (value && *value) {
				vol->file_mode =
					simple_strtoul(value, &value, 0);
			}
		} else if (strnicmp(data, "dir_mode", 4) == 0) {
			if (value && *value) {
				vol->dir_mode =
					simple_strtoul(value, &value, 0);
			}
		} else if (strnicmp(data, "dirmode", 4) == 0) {
			if (value && *value) {
				vol->dir_mode =
					simple_strtoul(value, &value, 0);
			}
		} else if (strnicmp(data, "port", 4) == 0) {
			if (value && *value) {
				vol->port =
					simple_strtoul(value, &value, 0);
			}
		} else if (strnicmp(data, "rsize", 5) == 0) {
			if (value && *value) {
				vol->rsize =
					simple_strtoul(value, &value, 0);
			}
		} else if (strnicmp(data, "wsize", 5) == 0) {
			if (value && *value) {
				vol->wsize =
					simple_strtoul(value, &value, 0);
			}
		} else if (strnicmp(data, "sockopt", 5) == 0) {
1133
			if (!value || !*value) {
1134
				cERROR(1, "no socket option specified");
1135 1136 1137
				continue;
			} else if (strnicmp(value, "TCP_NODELAY", 11) == 0) {
				vol->sockopt_tcp_nodelay = 1;
L
Linus Torvalds 已提交
1138 1139 1140
			}
		} else if (strnicmp(data, "netbiosname", 4) == 0) {
			if (!value || !*value || (*value == ' ')) {
1141
				cFYI(1, "invalid (empty) netbiosname");
L
Linus Torvalds 已提交
1142
			} else {
1143 1144 1145
				memset(vol->source_rfc1001_name, 0x20, 15);
				for (i = 0; i < 15; i++) {
				/* BB are there cases in which a comma can be
L
Linus Torvalds 已提交
1146 1147 1148 1149
				valid in this workstation netbios name (and need
				special handling)? */

				/* We do not uppercase netbiosname for user */
1150
					if (value[i] == 0)
L
Linus Torvalds 已提交
1151
						break;
1152 1153 1154
					else
						vol->source_rfc1001_name[i] =
								value[i];
L
Linus Torvalds 已提交
1155 1156 1157
				}
				/* The string has 16th byte zero still from
				set at top of the function  */
1158 1159 1160
				if ((i == 15) && (value[i] != 0))
					printk(KERN_WARNING "CIFS: netbiosname"
						" longer than 15 truncated.\n");
1161 1162 1163 1164
			}
		} else if (strnicmp(data, "servern", 7) == 0) {
			/* servernetbiosname specified override *SMBSERVER */
			if (!value || !*value || (*value == ' ')) {
1165
				cFYI(1, "empty server netbiosname specified");
1166 1167
			} else {
				/* last byte, type, is 0x20 for servr type */
1168
				memset(vol->target_rfc1001_name, 0x20, 16);
1169

1170
				for (i = 0; i < 15; i++) {
1171
				/* BB are there cases in which a comma can be
1172 1173
				   valid in this workstation netbios name
				   (and need special handling)? */
1174

1175 1176 1177
				/* user or mount helper must uppercase
				   the netbiosname */
					if (value[i] == 0)
1178 1179
						break;
					else
1180 1181
						vol->target_rfc1001_name[i] =
								value[i];
1182 1183 1184
				}
				/* The string has 16th byte zero still from
				   set at top of the function  */
1185 1186 1187
				if ((i == 15) && (value[i] != 0))
					printk(KERN_WARNING "CIFS: server net"
					"biosname longer than 15 truncated.\n");
L
Linus Torvalds 已提交
1188 1189 1190 1191 1192
			}
		} else if (strnicmp(data, "credentials", 4) == 0) {
			/* ignore */
		} else if (strnicmp(data, "version", 3) == 0) {
			/* ignore */
1193
		} else if (strnicmp(data, "guest", 5) == 0) {
L
Linus Torvalds 已提交
1194
			/* ignore */
1195 1196 1197 1198
		} else if (strnicmp(data, "rw", 2) == 0) {
			/* ignore */
		} else if (strnicmp(data, "ro", 2) == 0) {
			/* ignore */
1199 1200 1201 1202
		} else if (strnicmp(data, "noblocksend", 11) == 0) {
			vol->noblocksnd = 1;
		} else if (strnicmp(data, "noautotune", 10) == 0) {
			vol->noautotune = 1;
L
Linus Torvalds 已提交
1203 1204 1205 1206 1207 1208 1209 1210
		} else if ((strnicmp(data, "suid", 4) == 0) ||
				   (strnicmp(data, "nosuid", 6) == 0) ||
				   (strnicmp(data, "exec", 4) == 0) ||
				   (strnicmp(data, "noexec", 6) == 0) ||
				   (strnicmp(data, "nodev", 5) == 0) ||
				   (strnicmp(data, "noauto", 6) == 0) ||
				   (strnicmp(data, "dev", 3) == 0)) {
			/*  The mount tool or mount.cifs helper (if present)
1211 1212 1213 1214 1215
			    uses these opts to set flags, and the flags are read
			    by the kernel vfs layer before we get here (ie
			    before read super) so there is no point trying to
			    parse these options again and set anything and it
			    is ok to just ignore them */
L
Linus Torvalds 已提交
1216 1217 1218 1219 1220 1221 1222 1223 1224
			continue;
		} else if (strnicmp(data, "hard", 4) == 0) {
			vol->retry = 1;
		} else if (strnicmp(data, "soft", 4) == 0) {
			vol->retry = 0;
		} else if (strnicmp(data, "perm", 4) == 0) {
			vol->noperm = 0;
		} else if (strnicmp(data, "noperm", 6) == 0) {
			vol->noperm = 1;
1225 1226 1227 1228
		} else if (strnicmp(data, "mapchars", 8) == 0) {
			vol->remap = 1;
		} else if (strnicmp(data, "nomapchars", 10) == 0) {
			vol->remap = 0;
1229 1230 1231 1232
		} else if (strnicmp(data, "sfu", 3) == 0) {
			vol->sfu_emul = 1;
		} else if (strnicmp(data, "nosfu", 5) == 0) {
			vol->sfu_emul = 0;
S
Steve French 已提交
1233 1234
		} else if (strnicmp(data, "nodfs", 5) == 0) {
			vol->nodfs = 1;
1235 1236 1237 1238
		} else if (strnicmp(data, "posixpaths", 10) == 0) {
			vol->posix_paths = 1;
		} else if (strnicmp(data, "noposixpaths", 12) == 0) {
			vol->posix_paths = 0;
1239 1240 1241 1242
		} else if (strnicmp(data, "nounix", 6) == 0) {
			vol->no_linux_ext = 1;
		} else if (strnicmp(data, "nolinux", 7) == 0) {
			vol->no_linux_ext = 1;
1243
		} else if ((strnicmp(data, "nocase", 6) == 0) ||
1244
			   (strnicmp(data, "ignorecase", 10)  == 0)) {
1245
			vol->nocase = 1;
1246 1247 1248 1249 1250 1251
		} else if (strnicmp(data, "mand", 4) == 0) {
			/* ignore */
		} else if (strnicmp(data, "nomand", 6) == 0) {
			/* ignore */
		} else if (strnicmp(data, "_netdev", 7) == 0) {
			/* ignore */
1252 1253
		} else if (strnicmp(data, "brl", 3) == 0) {
			vol->nobrl =  0;
1254
		} else if ((strnicmp(data, "nobrl", 5) == 0) ||
1255
			   (strnicmp(data, "nolock", 6) == 0)) {
1256
			vol->nobrl =  1;
1257 1258 1259
			/* turn off mandatory locking in mode
			if remote locking is turned off since the
			local vfs will do advisory */
1260 1261
			if (vol->file_mode ==
				(S_IALLUGO & ~(S_ISUID | S_IXGRP)))
1262
				vol->file_mode = S_IALLUGO;
1263 1264 1265 1266 1267 1268 1269 1270 1271 1272 1273
		} else if (strnicmp(data, "forcemandatorylock", 9) == 0) {
			/* will take the shorter form "forcemand" as well */
			/* This mount option will force use of mandatory
			  (DOS/Windows style) byte range locks, instead of
			  using posix advisory byte range locks, even if the
			  Unix extensions are available and posix locks would
			  be supported otherwise. If Unix extensions are not
			  negotiated this has no effect since mandatory locks
			  would be used (mandatory locks is all that those
			  those servers support) */
			vol->mand_lock = 1;
L
Linus Torvalds 已提交
1274 1275 1276 1277
		} else if (strnicmp(data, "setuids", 7) == 0) {
			vol->setuids = 1;
		} else if (strnicmp(data, "nosetuids", 9) == 0) {
			vol->setuids = 0;
1278 1279 1280 1281
		} else if (strnicmp(data, "dynperm", 7) == 0) {
			vol->dynperm = true;
		} else if (strnicmp(data, "nodynperm", 9) == 0) {
			vol->dynperm = false;
L
Linus Torvalds 已提交
1282 1283 1284 1285 1286 1287 1288 1289
		} else if (strnicmp(data, "nohard", 6) == 0) {
			vol->retry = 0;
		} else if (strnicmp(data, "nosoft", 6) == 0) {
			vol->retry = 1;
		} else if (strnicmp(data, "nointr", 6) == 0) {
			vol->intr = 0;
		} else if (strnicmp(data, "intr", 4) == 0) {
			vol->intr = 1;
1290 1291 1292 1293
		} else if (strnicmp(data, "nostrictsync", 12) == 0) {
			vol->nostrictsync = 1;
		} else if (strnicmp(data, "strictsync", 10) == 0) {
			vol->nostrictsync = 0;
1294
		} else if (strnicmp(data, "serverino", 7) == 0) {
L
Linus Torvalds 已提交
1295
			vol->server_ino = 1;
1296
		} else if (strnicmp(data, "noserverino", 9) == 0) {
L
Linus Torvalds 已提交
1297
			vol->server_ino = 0;
1298
		} else if (strnicmp(data, "cifsacl", 7) == 0) {
1299 1300 1301
			vol->cifs_acl = 1;
		} else if (strnicmp(data, "nocifsacl", 9) == 0) {
			vol->cifs_acl = 0;
1302
		} else if (strnicmp(data, "acl", 3) == 0) {
L
Linus Torvalds 已提交
1303
			vol->no_psx_acl = 0;
1304
		} else if (strnicmp(data, "noacl", 5) == 0) {
L
Linus Torvalds 已提交
1305
			vol->no_psx_acl = 1;
S
Steve French 已提交
1306 1307 1308 1309
#ifdef CONFIG_CIFS_EXPERIMENTAL
		} else if (strnicmp(data, "locallease", 6) == 0) {
			vol->local_lease = 1;
#endif
1310
		} else if (strnicmp(data, "sign", 4) == 0) {
1311
			vol->secFlg |= CIFSSEC_MUST_SIGN;
1312 1313 1314 1315 1316 1317
		} else if (strnicmp(data, "seal", 4) == 0) {
			/* we do not do the following in secFlags because seal
			   is a per tree connection (mount) not a per socket
			   or per-smb connection option in the protocol */
			/* vol->secFlg |= CIFSSEC_MUST_SEAL; */
			vol->seal = 1;
1318
		} else if (strnicmp(data, "direct", 6) == 0) {
L
Linus Torvalds 已提交
1319
			vol->direct_io = 1;
1320
		} else if (strnicmp(data, "forcedirectio", 13) == 0) {
L
Linus Torvalds 已提交
1321 1322
			vol->direct_io = 1;
		} else if (strnicmp(data, "noac", 4) == 0) {
1323 1324 1325
			printk(KERN_WARNING "CIFS: Mount option noac not "
				"supported. Instead set "
				"/proc/fs/cifs/LookupCacheEnabled to 0\n");
1326 1327
		} else if (strnicmp(data, "fsc", 3) == 0) {
			vol->fsc = true;
L
Linus Torvalds 已提交
1328
		} else
1329 1330
			printk(KERN_WARNING "CIFS: Unknown mount option %s\n",
						data);
L
Linus Torvalds 已提交
1331 1332
	}
	if (vol->UNC == NULL) {
1333
		if (devname == NULL) {
1334 1335
			printk(KERN_WARNING "CIFS: Missing UNC name for mount "
						"target\n");
L
Linus Torvalds 已提交
1336 1337 1338
			return 1;
		}
		if ((temp_len = strnlen(devname, 300)) < 300) {
1339
			vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1340
			if (vol->UNC == NULL)
L
Linus Torvalds 已提交
1341
				return 1;
1342
			strcpy(vol->UNC, devname);
L
Linus Torvalds 已提交
1343 1344 1345 1346
			if (strncmp(vol->UNC, "//", 2) == 0) {
				vol->UNC[0] = '\\';
				vol->UNC[1] = '\\';
			} else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1347 1348
				printk(KERN_WARNING "CIFS: UNC Path does not "
						    "begin with // or \\\\ \n");
L
Linus Torvalds 已提交
1349 1350
				return 1;
			}
1351 1352 1353
			value = strpbrk(vol->UNC+2, "/\\");
			if (value)
				*value = '\\';
L
Linus Torvalds 已提交
1354 1355 1356 1357 1358
		} else {
			printk(KERN_WARNING "CIFS: UNC name too long\n");
			return 1;
		}
	}
S
Steve French 已提交
1359
	if (vol->UNCip == NULL)
L
Linus Torvalds 已提交
1360 1361
		vol->UNCip = &vol->UNC[2];

1362 1363 1364 1365 1366 1367 1368 1369 1370 1371 1372 1373
	if (uid_specified)
		vol->override_uid = override_uid;
	else if (override_uid == 1)
		printk(KERN_NOTICE "CIFS: ignoring forceuid mount option "
				   "specified with no uid= option.\n");

	if (gid_specified)
		vol->override_gid = override_gid;
	else if (override_gid == 1)
		printk(KERN_NOTICE "CIFS: ignoring forcegid mount option "
				   "specified with no gid= option.\n");

L
Linus Torvalds 已提交
1374 1375 1376
	return 0;
}

1377 1378 1379 1380 1381 1382 1383 1384 1385 1386 1387 1388 1389 1390 1391 1392 1393 1394 1395 1396 1397 1398 1399 1400 1401 1402 1403 1404 1405 1406 1407
static bool
match_address(struct TCP_Server_Info *server, struct sockaddr *addr)
{
	struct sockaddr_in *addr4 = (struct sockaddr_in *)addr;
	struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)addr;

	switch (addr->sa_family) {
	case AF_INET:
		if (addr4->sin_addr.s_addr !=
		    server->addr.sockAddr.sin_addr.s_addr)
			return false;
		if (addr4->sin_port &&
		    addr4->sin_port != server->addr.sockAddr.sin_port)
			return false;
		break;
	case AF_INET6:
		if (!ipv6_addr_equal(&addr6->sin6_addr,
				     &server->addr.sockAddr6.sin6_addr))
			return false;
		if (addr6->sin6_scope_id !=
		    server->addr.sockAddr6.sin6_scope_id)
			return false;
		if (addr6->sin6_port &&
		    addr6->sin6_port != server->addr.sockAddr6.sin6_port)
			return false;
		break;
	}

	return true;
}

1408 1409 1410 1411 1412 1413 1414 1415 1416 1417 1418 1419 1420 1421 1422 1423 1424 1425 1426 1427 1428 1429 1430 1431 1432 1433 1434 1435 1436 1437 1438 1439 1440 1441 1442 1443 1444 1445 1446 1447 1448 1449 1450 1451 1452 1453 1454 1455
static bool
match_security(struct TCP_Server_Info *server, struct smb_vol *vol)
{
	unsigned int secFlags;

	if (vol->secFlg & (~(CIFSSEC_MUST_SIGN | CIFSSEC_MUST_SEAL)))
		secFlags = vol->secFlg;
	else
		secFlags = global_secflags | vol->secFlg;

	switch (server->secType) {
	case LANMAN:
		if (!(secFlags & (CIFSSEC_MAY_LANMAN|CIFSSEC_MAY_PLNTXT)))
			return false;
		break;
	case NTLMv2:
		if (!(secFlags & CIFSSEC_MAY_NTLMV2))
			return false;
		break;
	case NTLM:
		if (!(secFlags & CIFSSEC_MAY_NTLM))
			return false;
		break;
	case Kerberos:
		if (!(secFlags & CIFSSEC_MAY_KRB5))
			return false;
		break;
	case RawNTLMSSP:
		if (!(secFlags & CIFSSEC_MAY_NTLMSSP))
			return false;
		break;
	default:
		/* shouldn't happen */
		return false;
	}

	/* now check if signing mode is acceptible */
	if ((secFlags & CIFSSEC_MAY_SIGN) == 0 &&
	    (server->secMode & SECMODE_SIGN_REQUIRED))
			return false;
	else if (((secFlags & CIFSSEC_MUST_SIGN) == CIFSSEC_MUST_SIGN) &&
		 (server->secMode &
		  (SECMODE_SIGN_ENABLED|SECMODE_SIGN_REQUIRED)) == 0)
			return false;

	return true;
}

1456
static struct TCP_Server_Info *
1457
cifs_find_tcp_session(struct sockaddr *addr, struct smb_vol *vol)
L
Linus Torvalds 已提交
1458
{
1459 1460 1461
	struct TCP_Server_Info *server;

	write_lock(&cifs_tcp_ses_lock);
1462
	list_for_each_entry(server, &cifs_tcp_ses_list, tcp_ses_list) {
1463 1464 1465 1466 1467 1468 1469
		/*
		 * the demux thread can exit on its own while still in CifsNew
		 * so don't accept any sockets in that state. Since the
		 * tcpStatus never changes back to CifsNew it's safe to check
		 * for this without a lock.
		 */
		if (server->tcpStatus == CifsNew)
1470
			continue;
L
Linus Torvalds 已提交
1471

1472 1473
		if (!match_address(server, addr))
			continue;
1474

1475 1476 1477
		if (!match_security(server, vol))
			continue;

1478 1479
		++server->srv_count;
		write_unlock(&cifs_tcp_ses_lock);
1480
		cFYI(1, "Existing tcp session with server found");
1481
		return server;
L
Linus Torvalds 已提交
1482
	}
1483
	write_unlock(&cifs_tcp_ses_lock);
L
Linus Torvalds 已提交
1484 1485
	return NULL;
}
1486

1487
static void
1488
cifs_put_tcp_session(struct TCP_Server_Info *server)
L
Linus Torvalds 已提交
1489
{
1490
	struct task_struct *task;
1491

1492 1493 1494 1495
	write_lock(&cifs_tcp_ses_lock);
	if (--server->srv_count > 0) {
		write_unlock(&cifs_tcp_ses_lock);
		return;
L
Linus Torvalds 已提交
1496
	}
1497

1498 1499
	list_del_init(&server->tcp_ses_list);
	write_unlock(&cifs_tcp_ses_lock);
1500

1501 1502 1503
	spin_lock(&GlobalMid_Lock);
	server->tcpStatus = CifsExiting;
	spin_unlock(&GlobalMid_Lock);
1504

1505 1506
	cifs_fscache_release_client_cookie(server);

1507 1508 1509
	task = xchg(&server->tsk, NULL);
	if (task)
		force_sig(SIGKILL, task);
L
Linus Torvalds 已提交
1510 1511
}

1512 1513 1514 1515
static struct TCP_Server_Info *
cifs_get_tcp_session(struct smb_vol *volume_info)
{
	struct TCP_Server_Info *tcp_ses = NULL;
1516
	struct sockaddr_storage addr;
1517 1518 1519 1520
	struct sockaddr_in *sin_server = (struct sockaddr_in *) &addr;
	struct sockaddr_in6 *sin_server6 = (struct sockaddr_in6 *) &addr;
	int rc;

1521
	memset(&addr, 0, sizeof(struct sockaddr_storage));
1522

1523
	cFYI(1, "UNC: %s ip: %s", volume_info->UNC, volume_info->UNCip);
1524

1525
	if (volume_info->UNCip && volume_info->UNC) {
1526 1527
		rc = cifs_fill_sockaddr((struct sockaddr *)&addr,
					volume_info->UNCip,
1528
					strlen(volume_info->UNCip),
1529
					volume_info->port);
1530
		if (!rc) {
1531 1532 1533 1534 1535 1536 1537
			/* we failed translating address */
			rc = -EINVAL;
			goto out_err;
		}
	} else if (volume_info->UNCip) {
		/* BB using ip addr as tcp_ses name to connect to the
		   DFS root below */
1538
		cERROR(1, "Connecting to DFS root not implemented yet");
1539 1540 1541
		rc = -EINVAL;
		goto out_err;
	} else /* which tcp_sess DFS root would we conect to */ {
1542 1543
		cERROR(1, "CIFS mount error: No UNC path (e.g. -o "
			"unc=//192.168.1.100/public) specified");
1544 1545 1546 1547 1548
		rc = -EINVAL;
		goto out_err;
	}

	/* see if we already have a matching tcp_ses */
1549
	tcp_ses = cifs_find_tcp_session((struct sockaddr *)&addr, volume_info);
1550 1551 1552 1553 1554 1555 1556 1557 1558 1559 1560 1561 1562 1563 1564 1565 1566
	if (tcp_ses)
		return tcp_ses;

	tcp_ses = kzalloc(sizeof(struct TCP_Server_Info), GFP_KERNEL);
	if (!tcp_ses) {
		rc = -ENOMEM;
		goto out_err;
	}

	tcp_ses->hostname = extract_hostname(volume_info->UNC);
	if (IS_ERR(tcp_ses->hostname)) {
		rc = PTR_ERR(tcp_ses->hostname);
		goto out_err;
	}

	tcp_ses->noblocksnd = volume_info->noblocksnd;
	tcp_ses->noautotune = volume_info->noautotune;
1567
	tcp_ses->tcp_nodelay = volume_info->sockopt_tcp_nodelay;
1568 1569 1570 1571 1572 1573 1574 1575 1576 1577 1578 1579 1580 1581 1582 1583 1584 1585 1586 1587 1588
	atomic_set(&tcp_ses->inFlight, 0);
	init_waitqueue_head(&tcp_ses->response_q);
	init_waitqueue_head(&tcp_ses->request_q);
	INIT_LIST_HEAD(&tcp_ses->pending_mid_q);
	mutex_init(&tcp_ses->srv_mutex);
	memcpy(tcp_ses->workstation_RFC1001_name,
		volume_info->source_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
	memcpy(tcp_ses->server_RFC1001_name,
		volume_info->target_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
	tcp_ses->sequence_number = 0;
	INIT_LIST_HEAD(&tcp_ses->tcp_ses_list);
	INIT_LIST_HEAD(&tcp_ses->smb_ses_list);

	/*
	 * at this point we are the only ones with the pointer
	 * to the struct since the kernel thread not created yet
	 * no need to spinlock this init of tcpStatus or srv_count
	 */
	tcp_ses->tcpStatus = CifsNew;
	++tcp_ses->srv_count;

1589
	if (addr.ss_family == AF_INET6) {
1590
		cFYI(1, "attempting ipv6 connect");
1591 1592 1593 1594
		/* BB should we allow ipv6 on port 139? */
		/* other OS never observed in Wild doing 139 with v6 */
		memcpy(&tcp_ses->addr.sockAddr6, sin_server6,
			sizeof(struct sockaddr_in6));
1595
		rc = ipv6_connect(tcp_ses);
1596 1597 1598
	} else {
		memcpy(&tcp_ses->addr.sockAddr, sin_server,
			sizeof(struct sockaddr_in));
1599
		rc = ipv4_connect(tcp_ses);
1600 1601
	}
	if (rc < 0) {
1602
		cERROR(1, "Error connecting to socket. Aborting operation");
1603 1604 1605 1606 1607 1608 1609 1610 1611 1612 1613 1614
		goto out_err;
	}

	/*
	 * since we're in a cifs function already, we know that
	 * this will succeed. No need for try_module_get().
	 */
	__module_get(THIS_MODULE);
	tcp_ses->tsk = kthread_run((void *)(void *)cifs_demultiplex_thread,
				  tcp_ses, "cifsd");
	if (IS_ERR(tcp_ses->tsk)) {
		rc = PTR_ERR(tcp_ses->tsk);
1615
		cERROR(1, "error %d create cifsd thread", rc);
1616 1617 1618 1619 1620 1621 1622 1623 1624
		module_put(THIS_MODULE);
		goto out_err;
	}

	/* thread spawned, put it on the list */
	write_lock(&cifs_tcp_ses_lock);
	list_add(&tcp_ses->tcp_ses_list, &cifs_tcp_ses_list);
	write_unlock(&cifs_tcp_ses_lock);

1625 1626
	cifs_fscache_get_client_cookie(tcp_ses);

1627 1628 1629 1630
	return tcp_ses;

out_err:
	if (tcp_ses) {
1631 1632
		if (!IS_ERR(tcp_ses->hostname))
			kfree(tcp_ses->hostname);
1633 1634 1635 1636 1637 1638 1639
		if (tcp_ses->ssocket)
			sock_release(tcp_ses->ssocket);
		kfree(tcp_ses);
	}
	return ERR_PTR(rc);
}

1640
static struct cifsSesInfo *
1641
cifs_find_smb_ses(struct TCP_Server_Info *server, struct smb_vol *vol)
L
Linus Torvalds 已提交
1642
{
1643
	struct cifsSesInfo *ses;
1644

1645
	write_lock(&cifs_tcp_ses_lock);
1646 1647 1648
	list_for_each_entry(ses, &server->smb_ses_list, smb_ses_list) {
		switch (server->secType) {
		case Kerberos:
1649
			if (vol->cred_uid != ses->cred_uid)
1650 1651 1652 1653 1654 1655 1656 1657
				continue;
			break;
		default:
			/* anything else takes username/password */
			if (strncmp(ses->userName, vol->username,
				    MAX_USERNAME_SIZE))
				continue;
			if (strlen(vol->username) != 0 &&
1658
			    ses->password != NULL &&
1659 1660
			    strncmp(ses->password,
				    vol->password ? vol->password : "",
1661 1662 1663
				    MAX_PASSWORD_SIZE))
				continue;
		}
1664 1665 1666 1667 1668 1669 1670
		++ses->ses_count;
		write_unlock(&cifs_tcp_ses_lock);
		return ses;
	}
	write_unlock(&cifs_tcp_ses_lock);
	return NULL;
}
1671

1672 1673 1674 1675 1676
static void
cifs_put_smb_ses(struct cifsSesInfo *ses)
{
	int xid;
	struct TCP_Server_Info *server = ses->server;
1677

1678
	cFYI(1, "%s: ses_count=%d\n", __func__, ses->ses_count);
1679 1680 1681 1682 1683
	write_lock(&cifs_tcp_ses_lock);
	if (--ses->ses_count > 0) {
		write_unlock(&cifs_tcp_ses_lock);
		return;
	}
1684

1685 1686
	list_del_init(&ses->smb_ses_list);
	write_unlock(&cifs_tcp_ses_lock);
1687

1688 1689 1690 1691 1692 1693 1694 1695
	if (ses->status == CifsGood) {
		xid = GetXid();
		CIFSSMBLogoff(xid, ses);
		_FreeXid(xid);
	}
	sesInfoFree(ses);
	cifs_put_tcp_session(server);
}
1696

1697 1698 1699 1700 1701 1702 1703 1704
static struct cifsSesInfo *
cifs_get_smb_ses(struct TCP_Server_Info *server, struct smb_vol *volume_info)
{
	int rc = -ENOMEM, xid;
	struct cifsSesInfo *ses;

	xid = GetXid();

1705
	ses = cifs_find_smb_ses(server, volume_info);
1706 1707 1708 1709 1710 1711 1712
	if (ses) {
		cFYI(1, "Existing smb sess found (status=%d)", ses->status);

		/* existing SMB ses has a server reference already */
		cifs_put_tcp_session(server);

		mutex_lock(&ses->session_mutex);
1713 1714 1715 1716 1717 1718 1719 1720
		rc = cifs_negotiate_protocol(xid, ses);
		if (rc) {
			mutex_unlock(&ses->session_mutex);
			/* problem -- put our ses reference */
			cifs_put_smb_ses(ses);
			FreeXid(xid);
			return ERR_PTR(rc);
		}
1721 1722 1723 1724 1725 1726 1727 1728 1729 1730 1731 1732 1733 1734 1735 1736 1737 1738 1739 1740 1741 1742 1743 1744 1745 1746 1747 1748 1749 1750 1751 1752 1753 1754 1755 1756 1757 1758 1759 1760 1761 1762 1763 1764 1765 1766 1767
		if (ses->need_reconnect) {
			cFYI(1, "Session needs reconnect");
			rc = cifs_setup_session(xid, ses,
						volume_info->local_nls);
			if (rc) {
				mutex_unlock(&ses->session_mutex);
				/* problem -- put our reference */
				cifs_put_smb_ses(ses);
				FreeXid(xid);
				return ERR_PTR(rc);
			}
		}
		mutex_unlock(&ses->session_mutex);
		FreeXid(xid);
		return ses;
	}

	cFYI(1, "Existing smb sess not found");
	ses = sesInfoAlloc();
	if (ses == NULL)
		goto get_ses_fail;

	/* new SMB session uses our server ref */
	ses->server = server;
	if (server->addr.sockAddr6.sin6_family == AF_INET6)
		sprintf(ses->serverName, "%pI6",
			&server->addr.sockAddr6.sin6_addr);
	else
		sprintf(ses->serverName, "%pI4",
			&server->addr.sockAddr.sin_addr.s_addr);

	if (volume_info->username)
		strncpy(ses->userName, volume_info->username,
			MAX_USERNAME_SIZE);

	/* volume_info->password freed at unmount */
	if (volume_info->password) {
		ses->password = kstrdup(volume_info->password, GFP_KERNEL);
		if (!ses->password)
			goto get_ses_fail;
	}
	if (volume_info->domainname) {
		int len = strlen(volume_info->domainname);
		ses->domainName = kmalloc(len + 1, GFP_KERNEL);
		if (ses->domainName)
			strcpy(ses->domainName, volume_info->domainname);
	}
1768
	ses->cred_uid = volume_info->cred_uid;
1769 1770 1771 1772
	ses->linux_uid = volume_info->linux_uid;
	ses->overrideSecFlg = volume_info->secFlg;

	mutex_lock(&ses->session_mutex);
1773 1774 1775
	rc = cifs_negotiate_protocol(xid, ses);
	if (!rc)
		rc = cifs_setup_session(xid, ses, volume_info->local_nls);
1776
	mutex_unlock(&ses->session_mutex);
1777
	if (rc)
1778 1779 1780 1781 1782 1783 1784 1785 1786 1787 1788 1789 1790 1791 1792 1793
		goto get_ses_fail;

	/* success, put it on the list */
	write_lock(&cifs_tcp_ses_lock);
	list_add(&ses->smb_ses_list, &server->smb_ses_list);
	write_unlock(&cifs_tcp_ses_lock);

	FreeXid(xid);
	return ses;

get_ses_fail:
	sesInfoFree(ses);
	FreeXid(xid);
	return ERR_PTR(rc);
}

1794 1795 1796 1797 1798 1799 1800 1801 1802 1803 1804 1805
static struct cifsTconInfo *
cifs_find_tcon(struct cifsSesInfo *ses, const char *unc)
{
	struct list_head *tmp;
	struct cifsTconInfo *tcon;

	write_lock(&cifs_tcp_ses_lock);
	list_for_each(tmp, &ses->tcon_list) {
		tcon = list_entry(tmp, struct cifsTconInfo, tcon_list);
		if (tcon->tidStatus == CifsExiting)
			continue;
		if (strncmp(tcon->treeName, unc, MAX_TREE_SIZE))
1806 1807
			continue;

1808 1809
		++tcon->tc_count;
		write_unlock(&cifs_tcp_ses_lock);
1810
		return tcon;
L
Linus Torvalds 已提交
1811
	}
1812
	write_unlock(&cifs_tcp_ses_lock);
L
Linus Torvalds 已提交
1813 1814 1815
	return NULL;
}

1816 1817 1818 1819 1820 1821
static void
cifs_put_tcon(struct cifsTconInfo *tcon)
{
	int xid;
	struct cifsSesInfo *ses = tcon->ses;

1822
	cFYI(1, "%s: tc_count=%d\n", __func__, tcon->tc_count);
1823 1824 1825 1826 1827 1828 1829 1830 1831 1832 1833 1834 1835
	write_lock(&cifs_tcp_ses_lock);
	if (--tcon->tc_count > 0) {
		write_unlock(&cifs_tcp_ses_lock);
		return;
	}

	list_del_init(&tcon->tcon_list);
	write_unlock(&cifs_tcp_ses_lock);

	xid = GetXid();
	CIFSSMBTDis(xid, tcon);
	_FreeXid(xid);

1836
	cifs_fscache_release_super_cookie(tcon);
1837
	tconInfoFree(tcon);
1838 1839 1840
	cifs_put_smb_ses(ses);
}

1841 1842 1843 1844 1845 1846 1847 1848 1849 1850 1851 1852 1853 1854 1855 1856 1857 1858 1859 1860 1861 1862 1863 1864 1865 1866 1867 1868 1869 1870 1871 1872 1873 1874 1875 1876 1877 1878 1879 1880 1881 1882 1883 1884 1885 1886 1887 1888 1889 1890 1891 1892 1893 1894 1895 1896 1897 1898 1899 1900 1901 1902 1903 1904 1905 1906
static struct cifsTconInfo *
cifs_get_tcon(struct cifsSesInfo *ses, struct smb_vol *volume_info)
{
	int rc, xid;
	struct cifsTconInfo *tcon;

	tcon = cifs_find_tcon(ses, volume_info->UNC);
	if (tcon) {
		cFYI(1, "Found match on UNC path");
		/* existing tcon already has a reference */
		cifs_put_smb_ses(ses);
		if (tcon->seal != volume_info->seal)
			cERROR(1, "transport encryption setting "
				   "conflicts with existing tid");
		return tcon;
	}

	tcon = tconInfoAlloc();
	if (tcon == NULL) {
		rc = -ENOMEM;
		goto out_fail;
	}

	tcon->ses = ses;
	if (volume_info->password) {
		tcon->password = kstrdup(volume_info->password, GFP_KERNEL);
		if (!tcon->password) {
			rc = -ENOMEM;
			goto out_fail;
		}
	}

	if (strchr(volume_info->UNC + 3, '\\') == NULL
	    && strchr(volume_info->UNC + 3, '/') == NULL) {
		cERROR(1, "Missing share name");
		rc = -ENODEV;
		goto out_fail;
	}

	/* BB Do we need to wrap session_mutex around
	 * this TCon call and Unix SetFS as
	 * we do on SessSetup and reconnect? */
	xid = GetXid();
	rc = CIFSTCon(xid, ses, volume_info->UNC, tcon, volume_info->local_nls);
	FreeXid(xid);
	cFYI(1, "CIFS Tcon rc = %d", rc);
	if (rc)
		goto out_fail;

	if (volume_info->nodfs) {
		tcon->Flags &= ~SMB_SHARE_IS_IN_DFS;
		cFYI(1, "DFS disabled (%d)", tcon->Flags);
	}
	tcon->seal = volume_info->seal;
	/* we can have only one retry value for a connection
	   to a share so for resources mounted more than once
	   to the same server share the last value passed in
	   for the retry flag is used */
	tcon->retry = volume_info->retry;
	tcon->nocase = volume_info->nocase;
	tcon->local_lease = volume_info->local_lease;

	write_lock(&cifs_tcp_ses_lock);
	list_add(&tcon->tcon_list, &ses->tcon_list);
	write_unlock(&cifs_tcp_ses_lock);

1907 1908
	cifs_fscache_get_super_cookie(tcon);

1909 1910 1911 1912 1913 1914 1915 1916
	return tcon;

out_fail:
	tconInfoFree(tcon);
	return ERR_PTR(rc);
}


L
Linus Torvalds 已提交
1917
int
1918 1919
get_dfs_path(int xid, struct cifsSesInfo *pSesInfo, const char *old_path,
	     const struct nls_table *nls_codepage, unsigned int *pnum_referrals,
S
Steve French 已提交
1920
	     struct dfs_info3_param **preferrals, int remap)
L
Linus Torvalds 已提交
1921 1922 1923 1924 1925
{
	char *temp_unc;
	int rc = 0;

	*pnum_referrals = 0;
S
Steve French 已提交
1926
	*preferrals = NULL;
L
Linus Torvalds 已提交
1927 1928 1929

	if (pSesInfo->ipc_tid == 0) {
		temp_unc = kmalloc(2 /* for slashes */ +
1930 1931
			strnlen(pSesInfo->serverName,
				SERVER_NAME_LEN_WITH_NULL * 2)
L
Linus Torvalds 已提交
1932 1933 1934 1935 1936 1937 1938 1939 1940
				 + 1 + 4 /* slash IPC$ */  + 2,
				GFP_KERNEL);
		if (temp_unc == NULL)
			return -ENOMEM;
		temp_unc[0] = '\\';
		temp_unc[1] = '\\';
		strcpy(temp_unc + 2, pSesInfo->serverName);
		strcpy(temp_unc + 2 + strlen(pSesInfo->serverName), "\\IPC$");
		rc = CIFSTCon(xid, pSesInfo, temp_unc, NULL, nls_codepage);
1941
		cFYI(1, "CIFS Tcon rc = %d ipc_tid = %d", rc, pSesInfo->ipc_tid);
L
Linus Torvalds 已提交
1942 1943 1944
		kfree(temp_unc);
	}
	if (rc == 0)
S
Steve French 已提交
1945
		rc = CIFSGetDFSRefer(xid, pSesInfo, old_path, preferrals,
1946
				     pnum_referrals, nls_codepage, remap);
S
Steve French 已提交
1947 1948
	/* BB map targetUNCs to dfs_info3 structures, here or
		in CIFSGetDFSRefer BB */
L
Linus Torvalds 已提交
1949 1950 1951 1952

	return rc;
}

1953 1954 1955 1956 1957 1958 1959 1960 1961 1962 1963 1964 1965 1966 1967 1968 1969 1970 1971 1972 1973 1974 1975 1976 1977 1978 1979 1980 1981 1982 1983 1984 1985
#ifdef CONFIG_DEBUG_LOCK_ALLOC
static struct lock_class_key cifs_key[2];
static struct lock_class_key cifs_slock_key[2];

static inline void
cifs_reclassify_socket4(struct socket *sock)
{
	struct sock *sk = sock->sk;
	BUG_ON(sock_owned_by_user(sk));
	sock_lock_init_class_and_name(sk, "slock-AF_INET-CIFS",
		&cifs_slock_key[0], "sk_lock-AF_INET-CIFS", &cifs_key[0]);
}

static inline void
cifs_reclassify_socket6(struct socket *sock)
{
	struct sock *sk = sock->sk;
	BUG_ON(sock_owned_by_user(sk));
	sock_lock_init_class_and_name(sk, "slock-AF_INET6-CIFS",
		&cifs_slock_key[1], "sk_lock-AF_INET6-CIFS", &cifs_key[1]);
}
#else
static inline void
cifs_reclassify_socket4(struct socket *sock)
{
}

static inline void
cifs_reclassify_socket6(struct socket *sock)
{
}
#endif

L
Linus Torvalds 已提交
1986
/* See RFC1001 section 14 on representation of Netbios names */
1987
static void rfc1002mangle(char *target, char *source, unsigned int length)
L
Linus Torvalds 已提交
1988
{
1989
	unsigned int i, j;
L
Linus Torvalds 已提交
1990

1991
	for (i = 0, j = 0; i < (length); i++) {
L
Linus Torvalds 已提交
1992 1993 1994
		/* mask a nibble at a time and encode */
		target[j] = 'A' + (0x0F & (source[i] >> 4));
		target[j+1] = 'A' + (0x0F & source[i]);
1995
		j += 2;
L
Linus Torvalds 已提交
1996 1997 1998 1999 2000 2001
	}

}


static int
2002
ipv4_connect(struct TCP_Server_Info *server)
L
Linus Torvalds 已提交
2003 2004
{
	int rc = 0;
2005
	int val;
2006
	bool connected = false;
L
Linus Torvalds 已提交
2007
	__be16 orig_port = 0;
2008
	struct socket *socket = server->ssocket;
L
Linus Torvalds 已提交
2009

2010
	if (socket == NULL) {
2011
		rc = sock_create_kern(PF_INET, SOCK_STREAM,
2012
				      IPPROTO_TCP, &socket);
L
Linus Torvalds 已提交
2013
		if (rc < 0) {
2014
			cERROR(1, "Error %d creating socket", rc);
L
Linus Torvalds 已提交
2015 2016
			return rc;
		}
2017 2018

		/* BB other socket options to set KEEPALIVE, NODELAY? */
2019
		cFYI(1, "Socket created");
2020 2021 2022
		server->ssocket = socket;
		socket->sk->sk_allocation = GFP_NOFS;
		cifs_reclassify_socket4(socket);
L
Linus Torvalds 已提交
2023 2024
	}

2025 2026 2027 2028 2029
	/* user overrode default port */
	if (server->addr.sockAddr.sin_port) {
		rc = socket->ops->connect(socket, (struct sockaddr *)
					  &server->addr.sockAddr,
					  sizeof(struct sockaddr_in), 0);
L
Linus Torvalds 已提交
2030
		if (rc >= 0)
2031
			connected = true;
2032
	}
L
Linus Torvalds 已提交
2033

S
Steve French 已提交
2034
	if (!connected) {
2035
		/* save original port so we can retry user specified port
L
Linus Torvalds 已提交
2036
			later if fall back ports fail this time  */
2037
		orig_port = server->addr.sockAddr.sin_port;
L
Linus Torvalds 已提交
2038 2039

		/* do not retry on the same port we just failed on */
2040 2041 2042 2043 2044 2045
		if (server->addr.sockAddr.sin_port != htons(CIFS_PORT)) {
			server->addr.sockAddr.sin_port = htons(CIFS_PORT);
			rc = socket->ops->connect(socket,
						(struct sockaddr *)
						&server->addr.sockAddr,
						sizeof(struct sockaddr_in), 0);
L
Linus Torvalds 已提交
2046
			if (rc >= 0)
2047
				connected = true;
L
Linus Torvalds 已提交
2048 2049 2050
		}
	}
	if (!connected) {
2051 2052 2053
		server->addr.sockAddr.sin_port = htons(RFC1001_PORT);
		rc = socket->ops->connect(socket, (struct sockaddr *)
					      &server->addr.sockAddr,
C
Cyrill Gorcunov 已提交
2054
					      sizeof(struct sockaddr_in), 0);
2055
		if (rc >= 0)
2056
			connected = true;
L
Linus Torvalds 已提交
2057 2058 2059 2060 2061
	}

	/* give up here - unless we want to retry on different
		protocol families some day */
	if (!connected) {
S
Steve French 已提交
2062
		if (orig_port)
2063
			server->addr.sockAddr.sin_port = orig_port;
2064
		cFYI(1, "Error %d connecting to server via ipv4", rc);
2065 2066
		sock_release(socket);
		server->ssocket = NULL;
L
Linus Torvalds 已提交
2067 2068
		return rc;
	}
2069 2070 2071 2072 2073 2074 2075 2076


	/*
	 * Eventually check for other socket options to change from
	 *  the default. sock_setsockopt not used because it expects
	 *  user space buffer
	 */
	socket->sk->sk_rcvtimeo = 7 * HZ;
2077
	socket->sk->sk_sndtimeo = 5 * HZ;
2078

2079
	/* make the bufsizes depend on wsize/rsize and max requests */
2080 2081 2082 2083 2084
	if (server->noautotune) {
		if (socket->sk->sk_sndbuf < (200 * 1024))
			socket->sk->sk_sndbuf = 200 * 1024;
		if (socket->sk->sk_rcvbuf < (140 * 1024))
			socket->sk->sk_rcvbuf = 140 * 1024;
2085
	}
L
Linus Torvalds 已提交
2086

2087 2088 2089 2090 2091
	if (server->tcp_nodelay) {
		val = 1;
		rc = kernel_setsockopt(socket, SOL_TCP, TCP_NODELAY,
				(char *)&val, sizeof(val));
		if (rc)
2092
			cFYI(1, "set TCP_NODELAY socket option error %d", rc);
2093 2094
	}

2095
	 cFYI(1, "sndbuf %d rcvbuf %d rcvtimeo 0x%lx",
2096
		 socket->sk->sk_sndbuf,
2097
		 socket->sk->sk_rcvbuf, socket->sk->sk_rcvtimeo);
2098

L
Linus Torvalds 已提交
2099
	/* send RFC1001 sessinit */
2100
	if (server->addr.sockAddr.sin_port == htons(RFC1001_PORT)) {
L
Linus Torvalds 已提交
2101
		/* some servers require RFC1001 sessinit before sending
2102
		negprot - BB check reconnection in case where second
L
Linus Torvalds 已提交
2103
		sessinit is sent but no second negprot */
2104 2105 2106 2107
		struct rfc1002_session_packet *ses_init_buf;
		struct smb_hdr *smb_buf;
		ses_init_buf = kzalloc(sizeof(struct rfc1002_session_packet),
				       GFP_KERNEL);
S
Steve French 已提交
2108
		if (ses_init_buf) {
L
Linus Torvalds 已提交
2109
			ses_init_buf->trailer.session_req.called_len = 32;
2110 2111
			if (server->server_RFC1001_name &&
			    server->server_RFC1001_name[0] != 0)
2112 2113
				rfc1002mangle(ses_init_buf->trailer.
						session_req.called_name,
2114
					      server->server_RFC1001_name,
2115
					      RFC1001_NAME_LEN_WITH_NULL);
2116
			else
2117 2118 2119 2120
				rfc1002mangle(ses_init_buf->trailer.
						session_req.called_name,
					      DEFAULT_CIFS_CALLED_NAME,
					      RFC1001_NAME_LEN_WITH_NULL);
2121

L
Linus Torvalds 已提交
2122
			ses_init_buf->trailer.session_req.calling_len = 32;
2123

L
Linus Torvalds 已提交
2124 2125
			/* calling name ends in null (byte 16) from old smb
			convention. */
2126 2127
			if (server->workstation_RFC1001_name &&
			    server->workstation_RFC1001_name[0] != 0)
2128 2129
				rfc1002mangle(ses_init_buf->trailer.
						session_req.calling_name,
2130
					      server->workstation_RFC1001_name,
2131
					      RFC1001_NAME_LEN_WITH_NULL);
2132
			else
2133 2134 2135 2136
				rfc1002mangle(ses_init_buf->trailer.
						session_req.calling_name,
					      "LINUX_CIFS_CLNT",
					      RFC1001_NAME_LEN_WITH_NULL);
2137

L
Linus Torvalds 已提交
2138 2139 2140 2141 2142
			ses_init_buf->trailer.session_req.scope1 = 0;
			ses_init_buf->trailer.session_req.scope2 = 0;
			smb_buf = (struct smb_hdr *)ses_init_buf;
			/* sizeof RFC1002_SESSION_REQUEST with no scope */
			smb_buf->smb_buf_length = 0x81000044;
2143
			rc = smb_send(server, smb_buf, 0x44);
L
Linus Torvalds 已提交
2144
			kfree(ses_init_buf);
2145
			msleep(1); /* RFC1001 layer in at least one server
2146 2147 2148
				      requires very short break before negprot
				      presumably because not expecting negprot
				      to follow so fast.  This is a simple
2149
				      solution that works without
2150 2151 2152
				      complicating the code and causes no
				      significant slowing down on mount
				      for everyone else */
L
Linus Torvalds 已提交
2153
		}
2154
		/* else the negprot may still work without this
L
Linus Torvalds 已提交
2155
		even though malloc failed */
2156

L
Linus Torvalds 已提交
2157
	}
2158

L
Linus Torvalds 已提交
2159 2160 2161 2162
	return rc;
}

static int
2163
ipv6_connect(struct TCP_Server_Info *server)
L
Linus Torvalds 已提交
2164 2165
{
	int rc = 0;
2166
	int val;
2167
	bool connected = false;
L
Linus Torvalds 已提交
2168
	__be16 orig_port = 0;
2169
	struct socket *socket = server->ssocket;
L
Linus Torvalds 已提交
2170

2171
	if (socket == NULL) {
2172
		rc = sock_create_kern(PF_INET6, SOCK_STREAM,
2173
				      IPPROTO_TCP, &socket);
L
Linus Torvalds 已提交
2174
		if (rc < 0) {
2175
			cERROR(1, "Error %d creating ipv6 socket", rc);
2176
			socket = NULL;
L
Linus Torvalds 已提交
2177 2178 2179
			return rc;
		}

2180
		/* BB other socket options to set KEEPALIVE, NODELAY? */
2181
		cFYI(1, "ipv6 Socket created");
2182 2183 2184 2185
		server->ssocket = socket;
		socket->sk->sk_allocation = GFP_NOFS;
		cifs_reclassify_socket6(socket);
	}
L
Linus Torvalds 已提交
2186

2187 2188 2189 2190
	/* user overrode default port */
	if (server->addr.sockAddr6.sin6_port) {
		rc = socket->ops->connect(socket,
				(struct sockaddr *) &server->addr.sockAddr6,
C
Cyrill Gorcunov 已提交
2191
				sizeof(struct sockaddr_in6), 0);
L
Linus Torvalds 已提交
2192
		if (rc >= 0)
2193
			connected = true;
2194
	}
L
Linus Torvalds 已提交
2195

S
Steve French 已提交
2196
	if (!connected) {
2197
		/* save original port so we can retry user specified port
L
Linus Torvalds 已提交
2198 2199
			later if fall back ports fail this time  */

2200
		orig_port = server->addr.sockAddr6.sin6_port;
L
Linus Torvalds 已提交
2201
		/* do not retry on the same port we just failed on */
2202 2203 2204 2205
		if (server->addr.sockAddr6.sin6_port != htons(CIFS_PORT)) {
			server->addr.sockAddr6.sin6_port = htons(CIFS_PORT);
			rc = socket->ops->connect(socket, (struct sockaddr *)
					&server->addr.sockAddr6,
C
Cyrill Gorcunov 已提交
2206
					sizeof(struct sockaddr_in6), 0);
L
Linus Torvalds 已提交
2207
			if (rc >= 0)
2208
				connected = true;
L
Linus Torvalds 已提交
2209 2210 2211
		}
	}
	if (!connected) {
2212 2213 2214 2215
		server->addr.sockAddr6.sin6_port = htons(RFC1001_PORT);
		rc = socket->ops->connect(socket, (struct sockaddr *)
				&server->addr.sockAddr6,
				sizeof(struct sockaddr_in6), 0);
2216
		if (rc >= 0)
2217
			connected = true;
L
Linus Torvalds 已提交
2218 2219 2220 2221 2222
	}

	/* give up here - unless we want to retry on different
		protocol families some day */
	if (!connected) {
S
Steve French 已提交
2223
		if (orig_port)
2224
			server->addr.sockAddr6.sin6_port = orig_port;
2225
		cFYI(1, "Error %d connecting to server via ipv6", rc);
2226 2227
		sock_release(socket);
		server->ssocket = NULL;
L
Linus Torvalds 已提交
2228 2229
		return rc;
	}
2230

2231 2232 2233 2234 2235 2236
	/*
	 * Eventually check for other socket options to change from
	 * the default. sock_setsockopt not used because it expects
	 * user space buffer
	 */
	socket->sk->sk_rcvtimeo = 7 * HZ;
2237
	socket->sk->sk_sndtimeo = 5 * HZ;
2238 2239 2240 2241 2242 2243

	if (server->tcp_nodelay) {
		val = 1;
		rc = kernel_setsockopt(socket, SOL_TCP, TCP_NODELAY,
				(char *)&val, sizeof(val));
		if (rc)
2244
			cFYI(1, "set TCP_NODELAY socket option error %d", rc);
2245 2246
	}

2247
	server->ssocket = socket;
2248

L
Linus Torvalds 已提交
2249 2250 2251
	return rc;
}

2252 2253
void reset_cifs_unix_caps(int xid, struct cifsTconInfo *tcon,
			  struct super_block *sb, struct smb_vol *vol_info)
2254 2255 2256 2257 2258 2259 2260 2261 2262 2263 2264
{
	/* if we are reconnecting then should we check to see if
	 * any requested capabilities changed locally e.g. via
	 * remount but we can not do much about it here
	 * if they have (even if we could detect it by the following)
	 * Perhaps we could add a backpointer to array of sb from tcon
	 * or if we change to make all sb to same share the same
	 * sb as NFS - then we only have one backpointer to sb.
	 * What if we wanted to mount the server share twice once with
	 * and once without posixacls or posix paths? */
	__u64 saved_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2265

2266 2267 2268
	if (vol_info && vol_info->no_linux_ext) {
		tcon->fsUnixInfo.Capability = 0;
		tcon->unix_ext = 0; /* Unix Extensions disabled */
2269
		cFYI(1, "Linux protocol extensions disabled");
2270 2271 2272 2273 2274
		return;
	} else if (vol_info)
		tcon->unix_ext = 1; /* Unix Extensions supported */

	if (tcon->unix_ext == 0) {
2275
		cFYI(1, "Unix extensions disabled so not set on reconnect");
2276 2277
		return;
	}
2278

S
Steve French 已提交
2279
	if (!CIFSSMBQFSUnixInfo(xid, tcon)) {
2280
		__u64 cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2281

2282 2283
		/* check for reconnect case in which we do not
		   want to change the mount behavior if we can avoid it */
S
Steve French 已提交
2284
		if (vol_info == NULL) {
2285
			/* turn off POSIX ACL and PATHNAMES if not set
2286 2287 2288
			   originally at mount time */
			if ((saved_cap & CIFS_UNIX_POSIX_ACL_CAP) == 0)
				cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2289 2290
			if ((saved_cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
				if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2291
					cERROR(1, "POSIXPATH support change");
2292
				cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2293
			} else if ((cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2294 2295
				cERROR(1, "possible reconnect error");
				cERROR(1, "server disabled POSIX path support");
2296
			}
2297
		}
2298

2299
		cap &= CIFS_UNIX_CAP_MASK;
2300
		if (vol_info && vol_info->no_psx_acl)
2301
			cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2302
		else if (CIFS_UNIX_POSIX_ACL_CAP & cap) {
2303
			cFYI(1, "negotiated posix acl support");
S
Steve French 已提交
2304
			if (sb)
2305 2306 2307
				sb->s_flags |= MS_POSIXACL;
		}

2308
		if (vol_info && vol_info->posix_paths == 0)
2309
			cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2310
		else if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) {
2311
			cFYI(1, "negotiate posix pathnames");
2312
			if (sb)
2313
				CIFS_SB(sb)->mnt_cifs_flags |=
2314 2315
					CIFS_MOUNT_POSIX_PATHS;
		}
2316

2317 2318
		/* We might be setting the path sep back to a different
		form if we are reconnecting and the server switched its
2319
		posix path capability for this share */
2320
		if (sb && (CIFS_SB(sb)->prepathlen > 0))
2321
			CIFS_SB(sb)->prepath[0] = CIFS_DIR_SEP(CIFS_SB(sb));
2322 2323 2324 2325

		if (sb && (CIFS_SB(sb)->rsize > 127 * 1024)) {
			if ((cap & CIFS_UNIX_LARGE_READ_CAP) == 0) {
				CIFS_SB(sb)->rsize = 127 * 1024;
2326
				cFYI(DBG2, "larger reads not supported by srv");
2327 2328
			}
		}
2329 2330


2331
		cFYI(1, "Negotiate caps 0x%x", (int)cap);
2332
#ifdef CONFIG_CIFS_DEBUG2
2333
		if (cap & CIFS_UNIX_FCNTL_CAP)
2334
			cFYI(1, "FCNTL cap");
2335
		if (cap & CIFS_UNIX_EXTATTR_CAP)
2336
			cFYI(1, "EXTATTR cap");
2337
		if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2338
			cFYI(1, "POSIX path cap");
2339
		if (cap & CIFS_UNIX_XATTR_CAP)
2340
			cFYI(1, "XATTR cap");
2341
		if (cap & CIFS_UNIX_POSIX_ACL_CAP)
2342
			cFYI(1, "POSIX ACL cap");
2343
		if (cap & CIFS_UNIX_LARGE_READ_CAP)
2344
			cFYI(1, "very large read cap");
2345
		if (cap & CIFS_UNIX_LARGE_WRITE_CAP)
2346
			cFYI(1, "very large write cap");
2347 2348
#endif /* CIFS_DEBUG2 */
		if (CIFSSMBSetFSUnixInfo(xid, tcon, cap)) {
2349
			if (vol_info == NULL) {
2350
				cFYI(1, "resetting capabilities failed");
2351
			} else
2352
				cERROR(1, "Negotiating Unix capabilities "
2353 2354 2355 2356
					   "with the server failed.  Consider "
					   "mounting with the Unix Extensions\n"
					   "disabled, if problems are found, "
					   "by specifying the nounix mount "
2357
					   "option.");
2358

2359 2360 2361 2362
		}
	}
}

2363 2364 2365 2366
static void
convert_delimiter(char *path, char delim)
{
	int i;
2367
	char old_delim;
2368 2369 2370 2371

	if (path == NULL)
		return;

2372
	if (delim == '/')
2373 2374 2375 2376
		old_delim = '\\';
	else
		old_delim = '/';

2377
	for (i = 0; path[i] != '\0'; i++) {
2378
		if (path[i] == old_delim)
2379 2380 2381 2382
			path[i] = delim;
	}
}

S
Steve French 已提交
2383 2384
static void setup_cifs_sb(struct smb_vol *pvolume_info,
			  struct cifs_sb_info *cifs_sb)
2385
{
S
Steve French 已提交
2386
	if (pvolume_info->rsize > CIFSMaxBufSize) {
2387 2388
		cERROR(1, "rsize %d too large, using MaxBufSize",
			pvolume_info->rsize);
S
Steve French 已提交
2389 2390 2391 2392 2393 2394 2395 2396
		cifs_sb->rsize = CIFSMaxBufSize;
	} else if ((pvolume_info->rsize) &&
			(pvolume_info->rsize <= CIFSMaxBufSize))
		cifs_sb->rsize = pvolume_info->rsize;
	else /* default */
		cifs_sb->rsize = CIFSMaxBufSize;

	if (pvolume_info->wsize > PAGEVEC_SIZE * PAGE_CACHE_SIZE) {
2397 2398
		cERROR(1, "wsize %d too large, using 4096 instead",
			  pvolume_info->wsize);
S
Steve French 已提交
2399 2400 2401 2402 2403 2404 2405 2406 2407 2408 2409 2410 2411 2412 2413 2414 2415
		cifs_sb->wsize = 4096;
	} else if (pvolume_info->wsize)
		cifs_sb->wsize = pvolume_info->wsize;
	else
		cifs_sb->wsize = min_t(const int,
					PAGEVEC_SIZE * PAGE_CACHE_SIZE,
					127*1024);
		/* old default of CIFSMaxBufSize was too small now
		   that SMB Write2 can send multiple pages in kvec.
		   RFC1001 does not describe what happens when frame
		   bigger than 128K is sent so use that as max in
		   conjunction with 52K kvec constraint on arch with 4K
		   page size  */

	if (cifs_sb->rsize < 2048) {
		cifs_sb->rsize = 2048;
		/* Windows ME may prefer this */
2416
		cFYI(1, "readsize set to minimum: 2048");
S
Steve French 已提交
2417 2418 2419 2420 2421 2422 2423 2424 2425 2426 2427 2428 2429 2430 2431 2432 2433
	}
	/* calculate prepath */
	cifs_sb->prepath = pvolume_info->prepath;
	if (cifs_sb->prepath) {
		cifs_sb->prepathlen = strlen(cifs_sb->prepath);
		/* we can not convert the / to \ in the path
		separators in the prefixpath yet because we do not
		know (until reset_cifs_unix_caps is called later)
		whether POSIX PATH CAP is available. We normalize
		the / to \ after reset_cifs_unix_caps is called */
		pvolume_info->prepath = NULL;
	} else
		cifs_sb->prepathlen = 0;
	cifs_sb->mnt_uid = pvolume_info->linux_uid;
	cifs_sb->mnt_gid = pvolume_info->linux_gid;
	cifs_sb->mnt_file_mode = pvolume_info->file_mode;
	cifs_sb->mnt_dir_mode = pvolume_info->dir_mode;
2434 2435
	cFYI(1, "file mode: 0x%x  dir mode: 0x%x",
		cifs_sb->mnt_file_mode, cifs_sb->mnt_dir_mode);
S
Steve French 已提交
2436 2437 2438 2439 2440 2441 2442 2443 2444 2445 2446 2447 2448 2449 2450

	if (pvolume_info->noperm)
		cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_PERM;
	if (pvolume_info->setuids)
		cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SET_UID;
	if (pvolume_info->server_ino)
		cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SERVER_INUM;
	if (pvolume_info->remap)
		cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MAP_SPECIAL_CHR;
	if (pvolume_info->no_xattr)
		cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_XATTR;
	if (pvolume_info->sfu_emul)
		cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_UNX_EMUL;
	if (pvolume_info->nobrl)
		cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_BRL;
2451
	if (pvolume_info->nostrictsync)
S
Steve French 已提交
2452
		cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOSSYNC;
2453 2454
	if (pvolume_info->mand_lock)
		cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOPOSIXBRL;
S
Steve French 已提交
2455 2456 2457 2458 2459 2460 2461 2462
	if (pvolume_info->cifs_acl)
		cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_ACL;
	if (pvolume_info->override_uid)
		cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_UID;
	if (pvolume_info->override_gid)
		cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_GID;
	if (pvolume_info->dynperm)
		cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DYNPERM;
2463 2464
	if (pvolume_info->fsc)
		cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_FSCACHE;
S
Steve French 已提交
2465
	if (pvolume_info->direct_io) {
2466
		cFYI(1, "mounting share using direct i/o");
S
Steve French 已提交
2467 2468 2469 2470
		cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DIRECT_IO;
	}

	if ((pvolume_info->cifs_acl) && (pvolume_info->dynperm))
2471 2472
		cERROR(1, "mount option dynperm ignored if cifsacl "
			   "mount option supported");
2473 2474
}

2475 2476 2477 2478 2479 2480 2481 2482 2483 2484 2485 2486 2487 2488 2489 2490 2491 2492 2493
static int
is_path_accessible(int xid, struct cifsTconInfo *tcon,
		   struct cifs_sb_info *cifs_sb, const char *full_path)
{
	int rc;
	FILE_ALL_INFO *pfile_info;

	pfile_info = kmalloc(sizeof(FILE_ALL_INFO), GFP_KERNEL);
	if (pfile_info == NULL)
		return -ENOMEM;

	rc = CIFSSMBQPathInfo(xid, tcon, full_path, pfile_info,
			      0 /* not legacy */, cifs_sb->local_nls,
			      cifs_sb->mnt_cifs_flags &
				CIFS_MOUNT_MAP_SPECIAL_CHR);
	kfree(pfile_info);
	return rc;
}

I
Igor Mammedov 已提交
2494 2495 2496 2497 2498
static void
cleanup_volume_info(struct smb_vol **pvolume_info)
{
	struct smb_vol *volume_info;

D
Dan Carpenter 已提交
2499
	if (!pvolume_info || !*pvolume_info)
I
Igor Mammedov 已提交
2500 2501 2502 2503 2504 2505 2506 2507 2508 2509 2510
		return;

	volume_info = *pvolume_info;
	kzfree(volume_info->password);
	kfree(volume_info->UNC);
	kfree(volume_info->prepath);
	kfree(volume_info);
	*pvolume_info = NULL;
	return;
}

S
Steve French 已提交
2511
#ifdef CONFIG_CIFS_DFS_UPCALL
I
Igor Mammedov 已提交
2512 2513 2514 2515 2516 2517 2518 2519 2520 2521 2522 2523 2524 2525 2526 2527 2528 2529 2530 2531 2532 2533 2534 2535 2536 2537 2538 2539 2540
/* build_path_to_root returns full path to root when
 * we do not have an exiting connection (tcon) */
static char *
build_unc_path_to_root(const struct smb_vol *volume_info,
		const struct cifs_sb_info *cifs_sb)
{
	char *full_path;

	int unc_len = strnlen(volume_info->UNC, MAX_TREE_SIZE + 1);
	full_path = kmalloc(unc_len + cifs_sb->prepathlen + 1, GFP_KERNEL);
	if (full_path == NULL)
		return ERR_PTR(-ENOMEM);

	strncpy(full_path, volume_info->UNC, unc_len);
	if (cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) {
		int i;
		for (i = 0; i < unc_len; i++) {
			if (full_path[i] == '\\')
				full_path[i] = '/';
		}
	}

	if (cifs_sb->prepathlen)
		strncpy(full_path + unc_len, cifs_sb->prepath,
				cifs_sb->prepathlen);

	full_path[unc_len + cifs_sb->prepathlen] = 0; /* add trailing null */
	return full_path;
}
S
Steve French 已提交
2541
#endif
I
Igor Mammedov 已提交
2542

L
Linus Torvalds 已提交
2543 2544
int
cifs_mount(struct super_block *sb, struct cifs_sb_info *cifs_sb,
I
Igor Mammedov 已提交
2545
		char *mount_data_global, const char *devname)
L
Linus Torvalds 已提交
2546
{
2547
	int rc;
L
Linus Torvalds 已提交
2548
	int xid;
2549
	struct smb_vol *volume_info;
2550 2551 2552
	struct cifsSesInfo *pSesInfo;
	struct cifsTconInfo *tcon;
	struct TCP_Server_Info *srvTcp;
2553
	char   *full_path;
S
Steve French 已提交
2554 2555
	char *mount_data = mount_data_global;
#ifdef CONFIG_CIFS_DFS_UPCALL
I
Igor Mammedov 已提交
2556 2557
	struct dfs_info3_param *referrals = NULL;
	unsigned int num_referrals = 0;
2558
	int referral_walks_count = 0;
I
Igor Mammedov 已提交
2559
try_mount_again:
S
Steve French 已提交
2560
#endif
2561 2562 2563 2564
	rc = 0;
	tcon = NULL;
	pSesInfo = NULL;
	srvTcp = NULL;
I
Igor Mammedov 已提交
2565
	full_path = NULL;
L
Linus Torvalds 已提交
2566 2567 2568

	xid = GetXid();

2569 2570 2571 2572 2573
	volume_info = kzalloc(sizeof(struct smb_vol), GFP_KERNEL);
	if (!volume_info) {
		rc = -ENOMEM;
		goto out;
	}
2574

2575
	if (cifs_parse_mount_options(mount_data, devname, volume_info)) {
2576 2577
		rc = -EINVAL;
		goto out;
L
Linus Torvalds 已提交
2578 2579
	}

2580
	if (volume_info->nullauth) {
2581
		cFYI(1, "null user");
2582 2583
		volume_info->username = "";
	} else if (volume_info->username) {
L
Linus Torvalds 已提交
2584
		/* BB fixme parse for domain name here */
2585
		cFYI(1, "Username: %s", volume_info->username);
L
Linus Torvalds 已提交
2586
	} else {
2587
		cifserror("No username specified");
2588 2589
	/* In userspace mount helper we can get user name from alternate
	   locations such as env variables and files on disk */
2590 2591
		rc = -EINVAL;
		goto out;
L
Linus Torvalds 已提交
2592 2593 2594
	}

	/* this is needed for ASCII cp to Unicode converts */
2595
	if (volume_info->iocharset == NULL) {
2596 2597
		/* load_nls_default cannot return null */
		volume_info->local_nls = load_nls_default();
L
Linus Torvalds 已提交
2598
	} else {
2599 2600
		volume_info->local_nls = load_nls(volume_info->iocharset);
		if (volume_info->local_nls == NULL) {
2601 2602
			cERROR(1, "CIFS mount error: iocharset %s not found",
				 volume_info->iocharset);
2603 2604
			rc = -ELIBACC;
			goto out;
L
Linus Torvalds 已提交
2605 2606
		}
	}
2607
	cifs_sb->local_nls = volume_info->local_nls;
L
Linus Torvalds 已提交
2608

2609
	/* get a reference to a tcp session */
2610
	srvTcp = cifs_get_tcp_session(volume_info);
2611 2612 2613
	if (IS_ERR(srvTcp)) {
		rc = PTR_ERR(srvTcp);
		goto out;
L
Linus Torvalds 已提交
2614 2615
	}

2616 2617 2618 2619 2620 2621
	/* get a reference to a SMB session */
	pSesInfo = cifs_get_smb_ses(srvTcp, volume_info);
	if (IS_ERR(pSesInfo)) {
		rc = PTR_ERR(pSesInfo);
		pSesInfo = NULL;
		goto mount_fail_check;
L
Linus Torvalds 已提交
2622
	}
2623

2624 2625 2626 2627 2628
	setup_cifs_sb(volume_info, cifs_sb);
	if (pSesInfo->capabilities & CAP_LARGE_FILES)
		sb->s_maxbytes = MAX_LFS_FILESIZE;
	else
		sb->s_maxbytes = MAX_NON_LFS;
L
Linus Torvalds 已提交
2629

2630
	/* BB FIXME fix time_gran to be larger for LANMAN sessions */
L
Linus Torvalds 已提交
2631 2632
	sb->s_time_gran = 100;

2633 2634 2635 2636 2637
	/* search for existing tcon to this server share */
	tcon = cifs_get_tcon(pSesInfo, volume_info);
	if (IS_ERR(tcon)) {
		rc = PTR_ERR(tcon);
		tcon = NULL;
I
Igor Mammedov 已提交
2638
		goto remote_path_check;
2639
	}
I
Igor Mammedov 已提交
2640

S
Steve French 已提交
2641
	cifs_sb->tcon = tcon;
2642

S
Steve French 已提交
2643 2644 2645 2646 2647
	/* do not care if following two calls succeed - informational */
	if (!tcon->ipc) {
		CIFSSMBQFSDeviceInfo(xid, tcon);
		CIFSSMBQFSAttributeInfo(xid, tcon);
	}
2648

S
Steve French 已提交
2649 2650 2651 2652
	/* tell server which Unix caps we support */
	if (tcon->ses->capabilities & CAP_UNIX)
		/* reset of caps checks mount to see if unix extensions
		   disabled for just this mount */
2653
		reset_cifs_unix_caps(xid, tcon, sb, volume_info);
S
Steve French 已提交
2654 2655
	else
		tcon->unix_ext = 0; /* server does not support them */
2656

S
Steve French 已提交
2657 2658 2659
	/* convert forward to back slashes in prepath here if needed */
	if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
		convert_delimiter(cifs_sb->prepath, CIFS_DIR_SEP(cifs_sb));
2660

S
Steve French 已提交
2661 2662
	if ((tcon->unix_ext == 0) && (cifs_sb->rsize > (1024 * 127))) {
		cifs_sb->rsize = 1024 * 127;
2663
		cFYI(DBG2, "no very large read support, rsize now 127K");
L
Linus Torvalds 已提交
2664
	}
S
Steve French 已提交
2665 2666 2667 2668 2669 2670
	if (!(tcon->ses->capabilities & CAP_LARGE_WRITE_X))
		cifs_sb->wsize = min(cifs_sb->wsize,
			       (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
	if (!(tcon->ses->capabilities & CAP_LARGE_READ_X))
		cifs_sb->rsize = min(cifs_sb->rsize,
			       (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
L
Linus Torvalds 已提交
2671

I
Igor Mammedov 已提交
2672 2673 2674
remote_path_check:
	/* check if a whole path (including prepath) is not remote */
	if (!rc && cifs_sb->prepathlen && tcon) {
2675 2676 2677 2678 2679 2680 2681
		/* build_path_to_root works only when we have a valid tcon */
		full_path = cifs_build_path_to_root(cifs_sb);
		if (full_path == NULL) {
			rc = -ENOMEM;
			goto mount_fail_check;
		}
		rc = is_path_accessible(xid, tcon, cifs_sb, full_path);
I
Igor Mammedov 已提交
2682
		if (rc != -EREMOTE) {
2683 2684 2685 2686 2687 2688
			kfree(full_path);
			goto mount_fail_check;
		}
		kfree(full_path);
	}

I
Igor Mammedov 已提交
2689 2690
	/* get referral if needed */
	if (rc == -EREMOTE) {
2691
#ifdef CONFIG_CIFS_DFS_UPCALL
2692 2693 2694 2695 2696 2697 2698 2699 2700 2701
		if (referral_walks_count > MAX_NESTED_LINKS) {
			/*
			 * BB: when we implement proper loop detection,
			 *     we will remove this check. But now we need it
			 *     to prevent an indefinite loop if 'DFS tree' is
			 *     misconfigured (i.e. has loops).
			 */
			rc = -ELOOP;
			goto mount_fail_check;
		}
I
Igor Mammedov 已提交
2702 2703 2704 2705 2706 2707 2708 2709 2710 2711
		/* convert forward to back slashes in prepath here if needed */
		if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
			convert_delimiter(cifs_sb->prepath,
					CIFS_DIR_SEP(cifs_sb));
		full_path = build_unc_path_to_root(volume_info, cifs_sb);
		if (IS_ERR(full_path)) {
			rc = PTR_ERR(full_path);
			goto mount_fail_check;
		}

2712
		cFYI(1, "Getting referral for: %s", full_path);
I
Igor Mammedov 已提交
2713 2714 2715 2716 2717 2718 2719 2720
		rc = get_dfs_path(xid, pSesInfo , full_path + 1,
			cifs_sb->local_nls, &num_referrals, &referrals,
			cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
		if (!rc && num_referrals > 0) {
			char *fake_devname = NULL;

			if (mount_data != mount_data_global)
				kfree(mount_data);
2721

I
Igor Mammedov 已提交
2722 2723 2724
			mount_data = cifs_compose_mount_options(
					cifs_sb->mountdata, full_path + 1,
					referrals, &fake_devname);
2725

I
Igor Mammedov 已提交
2726
			free_dfs_info_array(referrals, num_referrals);
2727 2728 2729 2730 2731 2732 2733 2734
			kfree(fake_devname);
			kfree(full_path);

			if (IS_ERR(mount_data)) {
				rc = PTR_ERR(mount_data);
				mount_data = NULL;
				goto mount_fail_check;
			}
I
Igor Mammedov 已提交
2735 2736 2737 2738 2739 2740 2741

			if (tcon)
				cifs_put_tcon(tcon);
			else if (pSesInfo)
				cifs_put_smb_ses(pSesInfo);

			cleanup_volume_info(&volume_info);
2742
			referral_walks_count++;
2743
			FreeXid(xid);
I
Igor Mammedov 已提交
2744 2745
			goto try_mount_again;
		}
2746 2747 2748
#else /* No DFS support, return error on mount */
		rc = -EOPNOTSUPP;
#endif
I
Igor Mammedov 已提交
2749 2750 2751 2752 2753 2754 2755 2756 2757 2758 2759 2760 2761 2762 2763 2764 2765 2766
	}

mount_fail_check:
	/* on error free sesinfo and tcon struct if needed */
	if (rc) {
		if (mount_data != mount_data_global)
			kfree(mount_data);
		/* If find_unc succeeded then rc == 0 so we can not end */
		/* up accidently freeing someone elses tcon struct */
		if (tcon)
			cifs_put_tcon(tcon);
		else if (pSesInfo)
			cifs_put_smb_ses(pSesInfo);
		else
			cifs_put_tcp_session(srvTcp);
		goto out;
	}

2767
	/* volume_info->password is freed above when existing session found
L
Linus Torvalds 已提交
2768 2769 2770
	(in which case it is not needed anymore) but when new sesion is created
	the password ptr is put in the new session structure (in which case the
	password will be freed at unmount time) */
2771 2772
out:
	/* zero out password before freeing */
I
Igor Mammedov 已提交
2773
	cleanup_volume_info(&volume_info);
L
Linus Torvalds 已提交
2774 2775 2776 2777 2778 2779 2780 2781 2782 2783 2784 2785 2786 2787 2788
	FreeXid(xid);
	return rc;
}

int
CIFSTCon(unsigned int xid, struct cifsSesInfo *ses,
	 const char *tree, struct cifsTconInfo *tcon,
	 const struct nls_table *nls_codepage)
{
	struct smb_hdr *smb_buffer;
	struct smb_hdr *smb_buffer_response;
	TCONX_REQ *pSMB;
	TCONX_RSP *pSMBr;
	unsigned char *bcc_ptr;
	int rc = 0;
2789
	int length, bytes_left;
L
Linus Torvalds 已提交
2790 2791 2792 2793 2794 2795
	__u16 count;

	if (ses == NULL)
		return -EIO;

	smb_buffer = cifs_buf_get();
S
Steve French 已提交
2796
	if (smb_buffer == NULL)
L
Linus Torvalds 已提交
2797
		return -ENOMEM;
S
Steve French 已提交
2798

L
Linus Torvalds 已提交
2799 2800 2801 2802
	smb_buffer_response = smb_buffer;

	header_assemble(smb_buffer, SMB_COM_TREE_CONNECT_ANDX,
			NULL /*no tid */ , 4 /*wct */ );
2803 2804

	smb_buffer->Mid = GetNextMid(ses->server);
L
Linus Torvalds 已提交
2805 2806 2807 2808 2809 2810 2811
	smb_buffer->Uid = ses->Suid;
	pSMB = (TCONX_REQ *) smb_buffer;
	pSMBr = (TCONX_RSP *) smb_buffer_response;

	pSMB->AndXCommand = 0xFF;
	pSMB->Flags = cpu_to_le16(TCON_EXTENDED_SECINFO);
	bcc_ptr = &pSMB->Password[0];
S
Steve French 已提交
2812
	if ((ses->server->secMode) & SECMODE_USER) {
2813
		pSMB->PasswordLength = cpu_to_le16(1);	/* minimum */
2814
		*bcc_ptr = 0; /* password is null byte */
2815
		bcc_ptr++;              /* skip password */
2816
		/* already aligned so no need to do it below */
2817
	} else {
2818
		pSMB->PasswordLength = cpu_to_le16(CIFS_SESS_KEY_SIZE);
2819 2820 2821
		/* BB FIXME add code to fail this if NTLMv2 or Kerberos
		   specified as required (when that support is added to
		   the vfs in the future) as only NTLM or the much
2822
		   weaker LANMAN (which we do not send by default) is accepted
2823 2824
		   by Samba (not sure whether other servers allow
		   NTLMv2 password here) */
2825
#ifdef CONFIG_CIFS_WEAK_PW_HASH
2826
		if ((global_secflags & CIFSSEC_MAY_LANMAN) &&
J
Jeff Layton 已提交
2827 2828
		    (ses->server->secType == LANMAN))
			calc_lanman_hash(tcon->password, ses->server->cryptKey,
2829 2830 2831
					 ses->server->secMode &
					    SECMODE_PW_ENCRYPT ? true : false,
					 bcc_ptr);
2832 2833
		else
#endif /* CIFS_WEAK_PW_HASH */
J
Jeff Layton 已提交
2834
		SMBNTencrypt(tcon->password, ses->server->cryptKey,
2835 2836
			     bcc_ptr);

2837
		bcc_ptr += CIFS_SESS_KEY_SIZE;
S
Steve French 已提交
2838
		if (ses->capabilities & CAP_UNICODE) {
2839 2840 2841 2842
			/* must align unicode strings */
			*bcc_ptr = 0; /* null byte password */
			bcc_ptr++;
		}
2843
	}
L
Linus Torvalds 已提交
2844

2845
	if (ses->server->secMode &
2846
			(SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
L
Linus Torvalds 已提交
2847 2848 2849 2850 2851 2852 2853 2854 2855 2856 2857
		smb_buffer->Flags2 |= SMBFLG2_SECURITY_SIGNATURE;

	if (ses->capabilities & CAP_STATUS32) {
		smb_buffer->Flags2 |= SMBFLG2_ERR_STATUS;
	}
	if (ses->capabilities & CAP_DFS) {
		smb_buffer->Flags2 |= SMBFLG2_DFS;
	}
	if (ses->capabilities & CAP_UNICODE) {
		smb_buffer->Flags2 |= SMBFLG2_UNICODE;
		length =
2858 2859
		    cifs_strtoUCS((__le16 *) bcc_ptr, tree,
			6 /* max utf8 char length in bytes */ *
2860 2861
			(/* server len*/ + 256 /* share len */), nls_codepage);
		bcc_ptr += 2 * length;	/* convert num 16 bit words to bytes */
L
Linus Torvalds 已提交
2862 2863 2864 2865 2866 2867 2868 2869 2870 2871 2872 2873
		bcc_ptr += 2;	/* skip trailing null */
	} else {		/* ASCII */
		strcpy(bcc_ptr, tree);
		bcc_ptr += strlen(tree) + 1;
	}
	strcpy(bcc_ptr, "?????");
	bcc_ptr += strlen("?????");
	bcc_ptr += 1;
	count = bcc_ptr - &pSMB->Password[0];
	pSMB->hdr.smb_buf_length += count;
	pSMB->ByteCount = cpu_to_le16(count);

2874 2875
	rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response, &length,
			 CIFS_STD_OP);
L
Linus Torvalds 已提交
2876 2877 2878

	/* above now done in SendReceive */
	if ((rc == 0) && (tcon != NULL)) {
2879 2880
		bool is_unicode;

L
Linus Torvalds 已提交
2881
		tcon->tidStatus = CifsGood;
S
Steve French 已提交
2882
		tcon->need_reconnect = false;
L
Linus Torvalds 已提交
2883 2884
		tcon->tid = smb_buffer_response->Tid;
		bcc_ptr = pByteArea(smb_buffer_response);
2885 2886
		bytes_left = BCC(smb_buffer_response);
		length = strnlen(bcc_ptr, bytes_left - 2);
2887 2888 2889 2890 2891
		if (smb_buffer->Flags2 & SMBFLG2_UNICODE)
			is_unicode = true;
		else
			is_unicode = false;

2892

2893
		/* skip service field (NB: this field is always ASCII) */
2894 2895 2896
		if (length == 3) {
			if ((bcc_ptr[0] == 'I') && (bcc_ptr[1] == 'P') &&
			    (bcc_ptr[2] == 'C')) {
2897
				cFYI(1, "IPC connection");
2898 2899 2900 2901 2902
				tcon->ipc = 1;
			}
		} else if (length == 2) {
			if ((bcc_ptr[0] == 'A') && (bcc_ptr[1] == ':')) {
				/* the most common case */
2903
				cFYI(1, "disk share connection");
2904 2905
			}
		}
2906
		bcc_ptr += length + 1;
2907
		bytes_left -= (length + 1);
L
Linus Torvalds 已提交
2908
		strncpy(tcon->treeName, tree, MAX_TREE_SIZE);
2909 2910

		/* mostly informational -- no need to fail on error here */
2911
		kfree(tcon->nativeFileSystem);
2912
		tcon->nativeFileSystem = cifs_strndup_from_ucs(bcc_ptr,
2913
						      bytes_left, is_unicode,
2914 2915
						      nls_codepage);

2916
		cFYI(1, "nativeFileSystem=%s", tcon->nativeFileSystem);
2917

S
Steve French 已提交
2918
		if ((smb_buffer_response->WordCount == 3) ||
S
Steve French 已提交
2919 2920
			 (smb_buffer_response->WordCount == 7))
			/* field is in same location */
2921 2922 2923
			tcon->Flags = le16_to_cpu(pSMBr->OptionalSupport);
		else
			tcon->Flags = 0;
2924
		cFYI(1, "Tcon flags: 0x%x ", tcon->Flags);
L
Linus Torvalds 已提交
2925
	} else if ((rc == 0) && tcon == NULL) {
2926
		/* all we need to save for IPC$ connection */
L
Linus Torvalds 已提交
2927 2928 2929
		ses->ipc_tid = smb_buffer_response->Tid;
	}

2930
	cifs_buf_release(smb_buffer);
L
Linus Torvalds 已提交
2931 2932 2933 2934 2935 2936 2937
	return rc;
}

int
cifs_umount(struct super_block *sb, struct cifs_sb_info *cifs_sb)
{
	int rc = 0;
2938
	char *tmp;
L
Linus Torvalds 已提交
2939

2940 2941
	if (cifs_sb->tcon)
		cifs_put_tcon(cifs_sb->tcon);
2942

L
Linus Torvalds 已提交
2943
	cifs_sb->tcon = NULL;
2944 2945 2946 2947
	tmp = cifs_sb->prepath;
	cifs_sb->prepathlen = 0;
	cifs_sb->prepath = NULL;
	kfree(tmp);
L
Linus Torvalds 已提交
2948

2949
	return rc;
2950
}
L
Linus Torvalds 已提交
2951

2952
int cifs_negotiate_protocol(unsigned int xid, struct cifsSesInfo *ses)
L
Linus Torvalds 已提交
2953 2954
{
	int rc = 0;
2955
	struct TCP_Server_Info *server = ses->server;
L
Linus Torvalds 已提交
2956

2957 2958 2959 2960 2961 2962 2963 2964 2965 2966
	/* only send once per connect */
	if (server->maxBuf != 0)
		return 0;

	rc = CIFSSMBNegotiate(xid, ses);
	if (rc == -EAGAIN) {
		/* retry only once on 1st time connection */
		rc = CIFSSMBNegotiate(xid, ses);
		if (rc == -EAGAIN)
			rc = -EHOSTDOWN;
L
Linus Torvalds 已提交
2967
	}
2968 2969 2970 2971 2972 2973 2974
	if (rc == 0) {
		spin_lock(&GlobalMid_Lock);
		if (server->tcpStatus != CifsExiting)
			server->tcpStatus = CifsGood;
		else
			rc = -EHOSTDOWN;
		spin_unlock(&GlobalMid_Lock);
2975

2976 2977 2978 2979 2980 2981 2982 2983 2984 2985 2986
	}

	return rc;
}


int cifs_setup_session(unsigned int xid, struct cifsSesInfo *ses,
			struct nls_table *nls_info)
{
	int rc = 0;
	struct TCP_Server_Info *server = ses->server;
2987

2988 2989
	ses->flags = 0;
	ses->capabilities = server->capabilities;
2990
	if (linuxExtEnabled == 0)
2991
		ses->capabilities &= (~CAP_UNIX);
2992

2993 2994
	cFYI(1, "Security Mode: 0x%x Capabilities: 0x%x TimeAdjust: %d",
		 server->secMode, server->capabilities, server->timeAdj);
2995

2996
	rc = CIFS_SessSetup(xid, ses, nls_info);
2997
	if (rc) {
2998
		cERROR(1, "Send error in SessSetup = %d", rc);
2999
	} else {
3000
		cFYI(1, "CIFS Session Established successfully");
3001
		spin_lock(&GlobalMid_Lock);
3002 3003
		ses->status = CifsGood;
		ses->need_reconnect = false;
3004
		spin_unlock(&GlobalMid_Lock);
L
Linus Torvalds 已提交
3005
	}
3006

L
Linus Torvalds 已提交
3007 3008 3009
	return rc;
}