4 * Copyright (C) International Business Machines Corp., 2002,2009
5 * Author(s): Steve French (sfrench@us.ibm.com)
7 * This library is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU Lesser General Public License as published
9 * by the Free Software Foundation; either version 2.1 of the License, or
10 * (at your option) any later version.
12 * This library is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See
15 * the GNU Lesser General Public License for more details.
17 * You should have received a copy of the GNU Lesser General Public License
18 * along with this library; if not, write to the Free Software
19 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
22 #include <linux/net.h>
23 #include <linux/string.h>
24 #include <linux/list.h>
25 #include <linux/wait.h>
26 #include <linux/pagemap.h>
27 #include <linux/ctype.h>
28 #include <linux/utsname.h>
29 #include <linux/mempool.h>
30 #include <linux/delay.h>
31 #include <linux/completion.h>
32 #include <linux/kthread.h>
33 #include <linux/pagevec.h>
34 #include <linux/freezer.h>
35 #include <linux/namei.h>
36 #include <asm/uaccess.h>
37 #include <asm/processor.h>
38 #include <linux/inet.h>
42 #include "cifsproto.h"
43 #include "cifs_unicode.h"
44 #include "cifs_debug.h"
45 #include "cifs_fs_sb.h"
48 #include "rfc1002pdu.h"
52 #define RFC1001_PORT 139
54 extern void SMBNTencrypt(unsigned char *passwd, unsigned char *c8,
57 extern mempool_t *cifs_req_poolp;
65 char *iocharset; /* local code page for mapping to and from Unicode */
66 char source_rfc1001_name[16]; /* netbios name of client */
67 char target_rfc1001_name[16]; /* netbios name of server for Win9x/ME */
81 bool no_psx_acl:1; /* set if posix acl support should be disabled */
83 bool no_xattr:1; /* set if xattr (EA) support should be disabled*/
84 bool server_ino:1; /* use inode numbers from server ie UniqueId */
86 bool remap:1; /* set to remap seven reserved chars in filenames */
87 bool posix_paths:1; /* unset to not ask for posix pathnames. */
90 bool nullauth:1; /* attempt to authenticate with null user */
91 bool nocase:1; /* request case insensitive filenames */
92 bool nobrl:1; /* disable sending byte range locks to srv */
93 bool mand_lock:1; /* send mandatory not posix byte range lock reqs */
94 bool seal:1; /* request transport encryption on share */
95 bool nodfs:1; /* Do not request DFS, even if available */
96 bool local_lease:1; /* check leases only on local system, not remote */
99 bool nostrictsync:1; /* do not force expensive SMBflush on every sync */
102 unsigned int sockopt;
103 unsigned short int port;
107 static int ipv4_connect(struct TCP_Server_Info *server);
108 static int ipv6_connect(struct TCP_Server_Info *server);
111 * cifs tcp session reconnection
113 * mark tcp session as reconnecting so temporarily locked
114 * mark all smb sessions as reconnecting for tcp session
115 * reconnect tcp session
116 * wake up waiters on reconnection? - (not needed currently)
119 cifs_reconnect(struct TCP_Server_Info *server)
122 struct list_head *tmp, *tmp2;
123 struct cifsSesInfo *ses;
124 struct cifsTconInfo *tcon;
125 struct mid_q_entry *mid_entry;
127 spin_lock(&GlobalMid_Lock);
128 if (server->tcpStatus == CifsExiting) {
129 /* the demux thread will exit normally
130 next time through the loop */
131 spin_unlock(&GlobalMid_Lock);
134 server->tcpStatus = CifsNeedReconnect;
135 spin_unlock(&GlobalMid_Lock);
138 cFYI(1, ("Reconnecting tcp session"));
140 /* before reconnecting the tcp session, mark the smb session (uid)
141 and the tid bad so they are not used until reconnected */
142 read_lock(&cifs_tcp_ses_lock);
143 list_for_each(tmp, &server->smb_ses_list) {
144 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
145 ses->need_reconnect = true;
147 list_for_each(tmp2, &ses->tcon_list) {
148 tcon = list_entry(tmp2, struct cifsTconInfo, tcon_list);
149 tcon->need_reconnect = true;
152 read_unlock(&cifs_tcp_ses_lock);
153 /* do not want to be sending data on a socket we are freeing */
154 mutex_lock(&server->srv_mutex);
155 if (server->ssocket) {
156 cFYI(1, ("State: 0x%x Flags: 0x%lx", server->ssocket->state,
157 server->ssocket->flags));
158 kernel_sock_shutdown(server->ssocket, SHUT_WR);
159 cFYI(1, ("Post shutdown state: 0x%x Flags: 0x%lx",
160 server->ssocket->state,
161 server->ssocket->flags));
162 sock_release(server->ssocket);
163 server->ssocket = NULL;
166 spin_lock(&GlobalMid_Lock);
167 list_for_each(tmp, &server->pending_mid_q) {
168 mid_entry = list_entry(tmp, struct
171 if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
172 /* Mark other intransit requests as needing
173 retry so we do not immediately mark the
174 session bad again (ie after we reconnect
175 below) as they timeout too */
176 mid_entry->midState = MID_RETRY_NEEDED;
179 spin_unlock(&GlobalMid_Lock);
180 mutex_unlock(&server->srv_mutex);
182 while ((server->tcpStatus != CifsExiting) &&
183 (server->tcpStatus != CifsGood)) {
185 if (server->addr.sockAddr6.sin6_family == AF_INET6)
186 rc = ipv6_connect(server);
188 rc = ipv4_connect(server);
190 cFYI(1, ("reconnect error %d", rc));
193 atomic_inc(&tcpSesReconnectCount);
194 spin_lock(&GlobalMid_Lock);
195 if (server->tcpStatus != CifsExiting)
196 server->tcpStatus = CifsGood;
197 server->sequence_number = 0;
198 spin_unlock(&GlobalMid_Lock);
199 /* atomic_set(&server->inFlight,0);*/
200 wake_up(&server->response_q);
208 0 not a transact2, or all data present
209 >0 transact2 with that much data missing
210 -EINVAL = invalid transact2
213 static int check2ndT2(struct smb_hdr *pSMB, unsigned int maxBufSize)
215 struct smb_t2_rsp *pSMBt;
217 int data_in_this_rsp;
220 if (pSMB->Command != SMB_COM_TRANSACTION2)
223 /* check for plausible wct, bcc and t2 data and parm sizes */
224 /* check for parm and data offset going beyond end of smb */
225 if (pSMB->WordCount != 10) { /* coalesce_t2 depends on this */
226 cFYI(1, ("invalid transact2 word count"));
230 pSMBt = (struct smb_t2_rsp *)pSMB;
232 total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
233 data_in_this_rsp = le16_to_cpu(pSMBt->t2_rsp.DataCount);
235 remaining = total_data_size - data_in_this_rsp;
239 else if (remaining < 0) {
240 cFYI(1, ("total data %d smaller than data in frame %d",
241 total_data_size, data_in_this_rsp));
244 cFYI(1, ("missing %d bytes from transact2, check next response",
246 if (total_data_size > maxBufSize) {
247 cERROR(1, ("TotalDataSize %d is over maximum buffer %d",
248 total_data_size, maxBufSize));
255 static int coalesce_t2(struct smb_hdr *psecond, struct smb_hdr *pTargetSMB)
257 struct smb_t2_rsp *pSMB2 = (struct smb_t2_rsp *)psecond;
258 struct smb_t2_rsp *pSMBt = (struct smb_t2_rsp *)pTargetSMB;
263 char *data_area_of_target;
264 char *data_area_of_buf2;
267 total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
269 if (total_data_size != le16_to_cpu(pSMB2->t2_rsp.TotalDataCount)) {
270 cFYI(1, ("total data size of primary and secondary t2 differ"));
273 total_in_buf = le16_to_cpu(pSMBt->t2_rsp.DataCount);
275 remaining = total_data_size - total_in_buf;
280 if (remaining == 0) /* nothing to do, ignore */
283 total_in_buf2 = le16_to_cpu(pSMB2->t2_rsp.DataCount);
284 if (remaining < total_in_buf2) {
285 cFYI(1, ("transact2 2nd response contains too much data"));
288 /* find end of first SMB data area */
289 data_area_of_target = (char *)&pSMBt->hdr.Protocol +
290 le16_to_cpu(pSMBt->t2_rsp.DataOffset);
291 /* validate target area */
293 data_area_of_buf2 = (char *) &pSMB2->hdr.Protocol +
294 le16_to_cpu(pSMB2->t2_rsp.DataOffset);
296 data_area_of_target += total_in_buf;
298 /* copy second buffer into end of first buffer */
299 memcpy(data_area_of_target, data_area_of_buf2, total_in_buf2);
300 total_in_buf += total_in_buf2;
301 pSMBt->t2_rsp.DataCount = cpu_to_le16(total_in_buf);
302 byte_count = le16_to_cpu(BCC_LE(pTargetSMB));
303 byte_count += total_in_buf2;
304 BCC_LE(pTargetSMB) = cpu_to_le16(byte_count);
306 byte_count = pTargetSMB->smb_buf_length;
307 byte_count += total_in_buf2;
309 /* BB also add check that we are not beyond maximum buffer size */
311 pTargetSMB->smb_buf_length = byte_count;
313 if (remaining == total_in_buf2) {
314 cFYI(1, ("found the last secondary response"));
315 return 0; /* we are done */
316 } else /* more responses to go */
322 cifs_demultiplex_thread(struct TCP_Server_Info *server)
325 unsigned int pdu_length, total_read;
326 struct smb_hdr *smb_buffer = NULL;
327 struct smb_hdr *bigbuf = NULL;
328 struct smb_hdr *smallbuf = NULL;
329 struct msghdr smb_msg;
331 struct socket *csocket = server->ssocket;
332 struct list_head *tmp;
333 struct cifsSesInfo *ses;
334 struct task_struct *task_to_wake = NULL;
335 struct mid_q_entry *mid_entry;
337 bool isLargeBuf = false;
341 current->flags |= PF_MEMALLOC;
342 cFYI(1, ("Demultiplex PID: %d", task_pid_nr(current)));
344 length = atomic_inc_return(&tcpSesAllocCount);
346 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
350 while (server->tcpStatus != CifsExiting) {
353 if (bigbuf == NULL) {
354 bigbuf = cifs_buf_get();
356 cERROR(1, ("No memory for large SMB response"));
358 /* retry will check if exiting */
361 } else if (isLargeBuf) {
362 /* we are reusing a dirty large buf, clear its start */
363 memset(bigbuf, 0, sizeof(struct smb_hdr));
366 if (smallbuf == NULL) {
367 smallbuf = cifs_small_buf_get();
369 cERROR(1, ("No memory for SMB response"));
371 /* retry will check if exiting */
374 /* beginning of smb buffer is cleared in our buf_get */
375 } else /* if existing small buf clear beginning */
376 memset(smallbuf, 0, sizeof(struct smb_hdr));
380 smb_buffer = smallbuf;
381 iov.iov_base = smb_buffer;
383 smb_msg.msg_control = NULL;
384 smb_msg.msg_controllen = 0;
385 pdu_length = 4; /* enough to get RFC1001 header */
388 kernel_recvmsg(csocket, &smb_msg,
389 &iov, 1, pdu_length, 0 /* BB other flags? */);
391 if (server->tcpStatus == CifsExiting) {
393 } else if (server->tcpStatus == CifsNeedReconnect) {
394 cFYI(1, ("Reconnect after server stopped responding"));
395 cifs_reconnect(server);
396 cFYI(1, ("call to reconnect done"));
397 csocket = server->ssocket;
399 } else if ((length == -ERESTARTSYS) || (length == -EAGAIN)) {
400 msleep(1); /* minimum sleep to prevent looping
401 allowing socket to clear and app threads to set
402 tcpStatus CifsNeedReconnect if server hung */
403 if (pdu_length < 4) {
404 iov.iov_base = (4 - pdu_length) +
406 iov.iov_len = pdu_length;
407 smb_msg.msg_control = NULL;
408 smb_msg.msg_controllen = 0;
412 } else if (length <= 0) {
413 if (server->tcpStatus == CifsNew) {
414 cFYI(1, ("tcp session abend after SMBnegprot"));
415 /* some servers kill the TCP session rather than
416 returning an SMB negprot error, in which
417 case reconnecting here is not going to help,
418 and so simply return error to mount */
421 if (!try_to_freeze() && (length == -EINTR)) {
422 cFYI(1, ("cifsd thread killed"));
425 cFYI(1, ("Reconnect after unexpected peek error %d",
427 cifs_reconnect(server);
428 csocket = server->ssocket;
429 wake_up(&server->response_q);
431 } else if (length < pdu_length) {
432 cFYI(1, ("requested %d bytes but only got %d bytes",
433 pdu_length, length));
434 pdu_length -= length;
439 /* The right amount was read from socket - 4 bytes */
440 /* so we can now interpret the length field */
442 /* the first byte big endian of the length field,
443 is actually not part of the length but the type
444 with the most common, zero, as regular data */
445 temp = *((char *) smb_buffer);
447 /* Note that FC 1001 length is big endian on the wire,
448 but we convert it here so it is always manipulated
449 as host byte order */
450 pdu_length = be32_to_cpu((__force __be32)smb_buffer->smb_buf_length);
451 smb_buffer->smb_buf_length = pdu_length;
453 cFYI(1, ("rfc1002 length 0x%x", pdu_length+4));
455 if (temp == (char) RFC1002_SESSION_KEEP_ALIVE) {
457 } else if (temp == (char)RFC1002_POSITIVE_SESSION_RESPONSE) {
458 cFYI(1, ("Good RFC 1002 session rsp"));
460 } else if (temp == (char)RFC1002_NEGATIVE_SESSION_RESPONSE) {
461 /* we get this from Windows 98 instead of
462 an error on SMB negprot response */
463 cFYI(1, ("Negative RFC1002 Session Response Error 0x%x)",
465 if (server->tcpStatus == CifsNew) {
466 /* if nack on negprot (rather than
467 ret of smb negprot error) reconnecting
468 not going to help, ret error to mount */
471 /* give server a second to
472 clean up before reconnect attempt */
474 /* always try 445 first on reconnect
475 since we get NACK on some if we ever
476 connected to port 139 (the NACK is
477 since we do not begin with RFC1001
478 session initialize frame) */
479 server->addr.sockAddr.sin_port =
481 cifs_reconnect(server);
482 csocket = server->ssocket;
483 wake_up(&server->response_q);
486 } else if (temp != (char) 0) {
487 cERROR(1, ("Unknown RFC 1002 frame"));
488 cifs_dump_mem(" Received Data: ", (char *)smb_buffer,
490 cifs_reconnect(server);
491 csocket = server->ssocket;
495 /* else we have an SMB response */
496 if ((pdu_length > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE - 4) ||
497 (pdu_length < sizeof(struct smb_hdr) - 1 - 4)) {
498 cERROR(1, ("Invalid size SMB length %d pdu_length %d",
499 length, pdu_length+4));
500 cifs_reconnect(server);
501 csocket = server->ssocket;
502 wake_up(&server->response_q);
509 if (pdu_length > MAX_CIFS_SMALL_BUFFER_SIZE - 4) {
511 memcpy(bigbuf, smallbuf, 4);
515 iov.iov_base = 4 + (char *)smb_buffer;
516 iov.iov_len = pdu_length;
517 for (total_read = 0; total_read < pdu_length;
518 total_read += length) {
519 length = kernel_recvmsg(csocket, &smb_msg, &iov, 1,
520 pdu_length - total_read, 0);
521 if ((server->tcpStatus == CifsExiting) ||
522 (length == -EINTR)) {
526 } else if (server->tcpStatus == CifsNeedReconnect) {
527 cifs_reconnect(server);
528 csocket = server->ssocket;
529 /* Reconnect wakes up rspns q */
530 /* Now we will reread sock */
533 } else if ((length == -ERESTARTSYS) ||
534 (length == -EAGAIN)) {
535 msleep(1); /* minimum sleep to prevent looping,
536 allowing socket to clear and app
537 threads to set tcpStatus
538 CifsNeedReconnect if server hung*/
541 } else if (length <= 0) {
542 cERROR(1, ("Received no data, expecting %d",
543 pdu_length - total_read));
544 cifs_reconnect(server);
545 csocket = server->ssocket;
552 else if (reconnect == 1)
555 length += 4; /* account for rfc1002 hdr */
558 dump_smb(smb_buffer, length);
559 if (checkSMB(smb_buffer, smb_buffer->Mid, total_read+4)) {
560 cifs_dump_mem("Bad SMB: ", smb_buffer, 48);
566 spin_lock(&GlobalMid_Lock);
567 list_for_each(tmp, &server->pending_mid_q) {
568 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
570 if ((mid_entry->mid == smb_buffer->Mid) &&
571 (mid_entry->midState == MID_REQUEST_SUBMITTED) &&
572 (mid_entry->command == smb_buffer->Command)) {
573 if (check2ndT2(smb_buffer,server->maxBuf) > 0) {
574 /* We have a multipart transact2 resp */
576 if (mid_entry->resp_buf) {
577 /* merge response - fix up 1st*/
578 if (coalesce_t2(smb_buffer,
579 mid_entry->resp_buf)) {
580 mid_entry->multiRsp =
584 /* all parts received */
585 mid_entry->multiEnd =
591 cERROR(1,("1st trans2 resp needs bigbuf"));
592 /* BB maybe we can fix this up, switch
593 to already allocated large buffer? */
595 /* Have first buffer */
596 mid_entry->resp_buf =
598 mid_entry->largeBuf =
605 mid_entry->resp_buf = smb_buffer;
606 mid_entry->largeBuf = isLargeBuf;
608 task_to_wake = mid_entry->tsk;
609 mid_entry->midState = MID_RESPONSE_RECEIVED;
610 #ifdef CONFIG_CIFS_STATS2
611 mid_entry->when_received = jiffies;
613 /* so we do not time out requests to server
614 which is still responding (since server could
615 be busy but not dead) */
616 server->lstrp = jiffies;
620 spin_unlock(&GlobalMid_Lock);
622 /* Was previous buf put in mpx struct for multi-rsp? */
624 /* smb buffer will be freed by user thread */
630 wake_up_process(task_to_wake);
631 } else if (!is_valid_oplock_break(smb_buffer, server) &&
633 cERROR(1, ("No task to wake, unknown frame received! "
634 "NumMids %d", midCount.counter));
635 cifs_dump_mem("Received Data is: ", (char *)smb_buffer,
636 sizeof(struct smb_hdr));
637 #ifdef CONFIG_CIFS_DEBUG2
638 cifs_dump_detail(smb_buffer);
639 cifs_dump_mids(server);
640 #endif /* CIFS_DEBUG2 */
643 } /* end while !EXITING */
645 /* take it off the list, if it's not already */
646 write_lock(&cifs_tcp_ses_lock);
647 list_del_init(&server->tcp_ses_list);
648 write_unlock(&cifs_tcp_ses_lock);
650 spin_lock(&GlobalMid_Lock);
651 server->tcpStatus = CifsExiting;
652 spin_unlock(&GlobalMid_Lock);
653 wake_up_all(&server->response_q);
655 /* check if we have blocked requests that need to free */
656 /* Note that cifs_max_pending is normally 50, but
657 can be set at module install time to as little as two */
658 spin_lock(&GlobalMid_Lock);
659 if (atomic_read(&server->inFlight) >= cifs_max_pending)
660 atomic_set(&server->inFlight, cifs_max_pending - 1);
661 /* We do not want to set the max_pending too low or we
662 could end up with the counter going negative */
663 spin_unlock(&GlobalMid_Lock);
664 /* Although there should not be any requests blocked on
665 this queue it can not hurt to be paranoid and try to wake up requests
666 that may haven been blocked when more than 50 at time were on the wire
667 to the same server - they now will see the session is in exit state
668 and get out of SendReceive. */
669 wake_up_all(&server->request_q);
670 /* give those requests time to exit */
673 if (server->ssocket) {
674 sock_release(csocket);
675 server->ssocket = NULL;
677 /* buffer usuallly freed in free_mid - need to free it here on exit */
678 cifs_buf_release(bigbuf);
679 if (smallbuf) /* no sense logging a debug message if NULL */
680 cifs_small_buf_release(smallbuf);
683 * BB: we shouldn't have to do any of this. It shouldn't be
684 * possible to exit from the thread with active SMB sessions
686 read_lock(&cifs_tcp_ses_lock);
687 if (list_empty(&server->pending_mid_q)) {
688 /* loop through server session structures attached to this and
690 list_for_each(tmp, &server->smb_ses_list) {
691 ses = list_entry(tmp, struct cifsSesInfo,
693 ses->status = CifsExiting;
696 read_unlock(&cifs_tcp_ses_lock);
698 /* although we can not zero the server struct pointer yet,
699 since there are active requests which may depnd on them,
700 mark the corresponding SMB sessions as exiting too */
701 list_for_each(tmp, &server->smb_ses_list) {
702 ses = list_entry(tmp, struct cifsSesInfo,
704 ses->status = CifsExiting;
707 spin_lock(&GlobalMid_Lock);
708 list_for_each(tmp, &server->pending_mid_q) {
709 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
710 if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
711 cFYI(1, ("Clearing Mid 0x%x - waking up ",
713 task_to_wake = mid_entry->tsk;
715 wake_up_process(task_to_wake);
718 spin_unlock(&GlobalMid_Lock);
719 read_unlock(&cifs_tcp_ses_lock);
720 /* 1/8th of sec is more than enough time for them to exit */
724 if (!list_empty(&server->pending_mid_q)) {
725 /* mpx threads have not exited yet give them
726 at least the smb send timeout time for long ops */
727 /* due to delays on oplock break requests, we need
728 to wait at least 45 seconds before giving up
729 on a request getting a response and going ahead
731 cFYI(1, ("Wait for exit from demultiplex thread"));
733 /* if threads still have not exited they are probably never
734 coming home not much else we can do but free the memory */
737 /* last chance to mark ses pointers invalid
738 if there are any pointing to this (e.g
739 if a crazy root user tried to kill cifsd
740 kernel thread explicitly this might happen) */
741 /* BB: This shouldn't be necessary, see above */
742 read_lock(&cifs_tcp_ses_lock);
743 list_for_each(tmp, &server->smb_ses_list) {
744 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
747 read_unlock(&cifs_tcp_ses_lock);
749 kfree(server->hostname);
750 task_to_wake = xchg(&server->tsk, NULL);
753 length = atomic_dec_return(&tcpSesAllocCount);
755 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
758 /* if server->tsk was NULL then wait for a signal before exiting */
760 set_current_state(TASK_INTERRUPTIBLE);
761 while (!signal_pending(current)) {
763 set_current_state(TASK_INTERRUPTIBLE);
765 set_current_state(TASK_RUNNING);
768 module_put_and_exit(0);
771 /* extract the host portion of the UNC string */
773 extract_hostname(const char *unc)
779 /* skip double chars at beginning of string */
780 /* BB: check validity of these bytes? */
783 /* delimiter between hostname and sharename is always '\\' now */
784 delim = strchr(src, '\\');
786 return ERR_PTR(-EINVAL);
789 dst = kmalloc((len + 1), GFP_KERNEL);
791 return ERR_PTR(-ENOMEM);
793 memcpy(dst, src, len);
800 cifs_parse_mount_options(char *options, const char *devname,
805 unsigned int temp_len, i, j;
811 if (Local_System_Name[0] != 0)
812 memcpy(vol->source_rfc1001_name, Local_System_Name, 15);
814 char *nodename = utsname()->nodename;
815 int n = strnlen(nodename, 15);
816 memset(vol->source_rfc1001_name, 0x20, 15);
817 for (i = 0; i < n; i++) {
818 /* does not have to be perfect mapping since field is
819 informational, only used for servers that do not support
820 port 445 and it can be overridden at mount time */
821 vol->source_rfc1001_name[i] = toupper(nodename[i]);
824 vol->source_rfc1001_name[15] = 0;
825 /* null target name indicates to use *SMBSERVR default called name
826 if we end up sending RFC1001 session initialize */
827 vol->target_rfc1001_name[0] = 0;
828 vol->linux_uid = current_uid(); /* use current_euid() instead? */
829 vol->linux_gid = current_gid();
831 /* default to only allowing write access to owner of the mount */
832 vol->dir_mode = vol->file_mode = S_IRUGO | S_IXUGO | S_IWUSR;
834 /* vol->retry default is 0 (i.e. "soft" limited retry not hard retry) */
836 /* default is always to request posix paths. */
837 vol->posix_paths = 1;
838 /* default to using server inode numbers where available */
844 if (strncmp(options, "sep=", 4) == 0) {
845 if (options[4] != 0) {
846 separator[0] = options[4];
849 cFYI(1, ("Null separator not allowed"));
853 while ((data = strsep(&options, separator)) != NULL) {
856 if ((value = strchr(data, '=')) != NULL)
859 /* Have to parse this before we parse for "user" */
860 if (strnicmp(data, "user_xattr", 10) == 0) {
862 } else if (strnicmp(data, "nouser_xattr", 12) == 0) {
864 } else if (strnicmp(data, "user", 4) == 0) {
867 "CIFS: invalid or missing username\n");
868 return 1; /* needs_arg; */
869 } else if (!*value) {
870 /* null user, ie anonymous, authentication */
873 if (strnlen(value, 200) < 200) {
874 vol->username = value;
876 printk(KERN_WARNING "CIFS: username too long\n");
879 } else if (strnicmp(data, "pass", 4) == 0) {
881 vol->password = NULL;
883 } else if (value[0] == 0) {
884 /* check if string begins with double comma
885 since that would mean the password really
886 does start with a comma, and would not
887 indicate an empty string */
888 if (value[1] != separator[0]) {
889 vol->password = NULL;
893 temp_len = strlen(value);
894 /* removed password length check, NTLM passwords
895 can be arbitrarily long */
897 /* if comma in password, the string will be
898 prematurely null terminated. Commas in password are
899 specified across the cifs mount interface by a double
900 comma ie ,, and a comma used as in other cases ie ','
901 as a parameter delimiter/separator is single and due
902 to the strsep above is temporarily zeroed. */
904 /* NB: password legally can have multiple commas and
905 the only illegal character in a password is null */
907 if ((value[temp_len] == 0) &&
908 (value[temp_len+1] == separator[0])) {
910 value[temp_len] = separator[0];
911 temp_len += 2; /* move after second comma */
912 while (value[temp_len] != 0) {
913 if (value[temp_len] == separator[0]) {
914 if (value[temp_len+1] ==
916 /* skip second comma */
919 /* single comma indicating start
926 if (value[temp_len] == 0) {
930 /* point option to start of next parm */
931 options = value + temp_len + 1;
933 /* go from value to value + temp_len condensing
934 double commas to singles. Note that this ends up
935 allocating a few bytes too many, which is ok */
936 vol->password = kzalloc(temp_len, GFP_KERNEL);
937 if (vol->password == NULL) {
938 printk(KERN_WARNING "CIFS: no memory "
942 for (i = 0, j = 0; i < temp_len; i++, j++) {
943 vol->password[j] = value[i];
944 if (value[i] == separator[0]
945 && value[i+1] == separator[0]) {
946 /* skip second comma */
950 vol->password[j] = 0;
952 vol->password = kzalloc(temp_len+1, GFP_KERNEL);
953 if (vol->password == NULL) {
954 printk(KERN_WARNING "CIFS: no memory "
958 strcpy(vol->password, value);
960 } else if (!strnicmp(data, "ip", 2) ||
961 !strnicmp(data, "addr", 4)) {
962 if (!value || !*value) {
964 } else if (strnlen(value, INET6_ADDRSTRLEN) <
968 printk(KERN_WARNING "CIFS: ip address "
972 } else if (strnicmp(data, "sec", 3) == 0) {
973 if (!value || !*value) {
974 cERROR(1, ("no security value specified"));
976 } else if (strnicmp(value, "krb5i", 5) == 0) {
977 vol->secFlg |= CIFSSEC_MAY_KRB5 |
979 } else if (strnicmp(value, "krb5p", 5) == 0) {
980 /* vol->secFlg |= CIFSSEC_MUST_SEAL |
982 cERROR(1, ("Krb5 cifs privacy not supported"));
984 } else if (strnicmp(value, "krb5", 4) == 0) {
985 vol->secFlg |= CIFSSEC_MAY_KRB5;
986 #ifdef CONFIG_CIFS_EXPERIMENTAL
987 } else if (strnicmp(value, "ntlmsspi", 8) == 0) {
988 vol->secFlg |= CIFSSEC_MAY_NTLMSSP |
990 } else if (strnicmp(value, "ntlmssp", 7) == 0) {
991 vol->secFlg |= CIFSSEC_MAY_NTLMSSP;
993 } else if (strnicmp(value, "ntlmv2i", 7) == 0) {
994 vol->secFlg |= CIFSSEC_MAY_NTLMV2 |
996 } else if (strnicmp(value, "ntlmv2", 6) == 0) {
997 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
998 } else if (strnicmp(value, "ntlmi", 5) == 0) {
999 vol->secFlg |= CIFSSEC_MAY_NTLM |
1001 } else if (strnicmp(value, "ntlm", 4) == 0) {
1002 /* ntlm is default so can be turned off too */
1003 vol->secFlg |= CIFSSEC_MAY_NTLM;
1004 } else if (strnicmp(value, "nontlm", 6) == 0) {
1005 /* BB is there a better way to do this? */
1006 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
1007 #ifdef CONFIG_CIFS_WEAK_PW_HASH
1008 } else if (strnicmp(value, "lanman", 6) == 0) {
1009 vol->secFlg |= CIFSSEC_MAY_LANMAN;
1011 } else if (strnicmp(value, "none", 4) == 0) {
1014 cERROR(1, ("bad security option: %s", value));
1017 } else if ((strnicmp(data, "unc", 3) == 0)
1018 || (strnicmp(data, "target", 6) == 0)
1019 || (strnicmp(data, "path", 4) == 0)) {
1020 if (!value || !*value) {
1021 printk(KERN_WARNING "CIFS: invalid path to "
1022 "network resource\n");
1023 return 1; /* needs_arg; */
1025 if ((temp_len = strnlen(value, 300)) < 300) {
1026 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1027 if (vol->UNC == NULL)
1029 strcpy(vol->UNC, value);
1030 if (strncmp(vol->UNC, "//", 2) == 0) {
1033 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1035 "CIFS: UNC Path does not begin "
1036 "with // or \\\\ \n");
1040 printk(KERN_WARNING "CIFS: UNC name too long\n");
1043 } else if ((strnicmp(data, "domain", 3) == 0)
1044 || (strnicmp(data, "workgroup", 5) == 0)) {
1045 if (!value || !*value) {
1046 printk(KERN_WARNING "CIFS: invalid domain name\n");
1047 return 1; /* needs_arg; */
1049 /* BB are there cases in which a comma can be valid in
1050 a domain name and need special handling? */
1051 if (strnlen(value, 256) < 256) {
1052 vol->domainname = value;
1053 cFYI(1, ("Domain name set"));
1055 printk(KERN_WARNING "CIFS: domain name too "
1059 } else if (strnicmp(data, "prefixpath", 10) == 0) {
1060 if (!value || !*value) {
1062 "CIFS: invalid path prefix\n");
1063 return 1; /* needs_argument */
1065 if ((temp_len = strnlen(value, 1024)) < 1024) {
1066 if (value[0] != '/')
1067 temp_len++; /* missing leading slash */
1068 vol->prepath = kmalloc(temp_len+1, GFP_KERNEL);
1069 if (vol->prepath == NULL)
1071 if (value[0] != '/') {
1072 vol->prepath[0] = '/';
1073 strcpy(vol->prepath+1, value);
1075 strcpy(vol->prepath, value);
1076 cFYI(1, ("prefix path %s", vol->prepath));
1078 printk(KERN_WARNING "CIFS: prefix too long\n");
1081 } else if (strnicmp(data, "iocharset", 9) == 0) {
1082 if (!value || !*value) {
1083 printk(KERN_WARNING "CIFS: invalid iocharset "
1085 return 1; /* needs_arg; */
1087 if (strnlen(value, 65) < 65) {
1088 if (strnicmp(value, "default", 7))
1089 vol->iocharset = value;
1090 /* if iocharset not set then load_nls_default
1091 is used by caller */
1092 cFYI(1, ("iocharset set to %s", value));
1094 printk(KERN_WARNING "CIFS: iocharset name "
1098 } else if (strnicmp(data, "uid", 3) == 0) {
1099 if (value && *value)
1101 simple_strtoul(value, &value, 0);
1102 } else if (strnicmp(data, "forceuid", 8) == 0) {
1103 vol->override_uid = 1;
1104 } else if (strnicmp(data, "gid", 3) == 0) {
1105 if (value && *value)
1107 simple_strtoul(value, &value, 0);
1108 } else if (strnicmp(data, "forcegid", 8) == 0) {
1109 vol->override_gid = 1;
1110 } else if (strnicmp(data, "file_mode", 4) == 0) {
1111 if (value && *value) {
1113 simple_strtoul(value, &value, 0);
1115 } else if (strnicmp(data, "dir_mode", 4) == 0) {
1116 if (value && *value) {
1118 simple_strtoul(value, &value, 0);
1120 } else if (strnicmp(data, "dirmode", 4) == 0) {
1121 if (value && *value) {
1123 simple_strtoul(value, &value, 0);
1125 } else if (strnicmp(data, "port", 4) == 0) {
1126 if (value && *value) {
1128 simple_strtoul(value, &value, 0);
1130 } else if (strnicmp(data, "rsize", 5) == 0) {
1131 if (value && *value) {
1133 simple_strtoul(value, &value, 0);
1135 } else if (strnicmp(data, "wsize", 5) == 0) {
1136 if (value && *value) {
1138 simple_strtoul(value, &value, 0);
1140 } else if (strnicmp(data, "sockopt", 5) == 0) {
1141 if (value && *value) {
1143 simple_strtoul(value, &value, 0);
1145 } else if (strnicmp(data, "netbiosname", 4) == 0) {
1146 if (!value || !*value || (*value == ' ')) {
1147 cFYI(1, ("invalid (empty) netbiosname"));
1149 memset(vol->source_rfc1001_name, 0x20, 15);
1150 for (i = 0; i < 15; i++) {
1151 /* BB are there cases in which a comma can be
1152 valid in this workstation netbios name (and need
1153 special handling)? */
1155 /* We do not uppercase netbiosname for user */
1159 vol->source_rfc1001_name[i] =
1162 /* The string has 16th byte zero still from
1163 set at top of the function */
1164 if ((i == 15) && (value[i] != 0))
1165 printk(KERN_WARNING "CIFS: netbiosname"
1166 " longer than 15 truncated.\n");
1168 } else if (strnicmp(data, "servern", 7) == 0) {
1169 /* servernetbiosname specified override *SMBSERVER */
1170 if (!value || !*value || (*value == ' ')) {
1171 cFYI(1, ("empty server netbiosname specified"));
1173 /* last byte, type, is 0x20 for servr type */
1174 memset(vol->target_rfc1001_name, 0x20, 16);
1176 for (i = 0; i < 15; i++) {
1177 /* BB are there cases in which a comma can be
1178 valid in this workstation netbios name
1179 (and need special handling)? */
1181 /* user or mount helper must uppercase
1186 vol->target_rfc1001_name[i] =
1189 /* The string has 16th byte zero still from
1190 set at top of the function */
1191 if ((i == 15) && (value[i] != 0))
1192 printk(KERN_WARNING "CIFS: server net"
1193 "biosname longer than 15 truncated.\n");
1195 } else if (strnicmp(data, "credentials", 4) == 0) {
1197 } else if (strnicmp(data, "version", 3) == 0) {
1199 } else if (strnicmp(data, "guest", 5) == 0) {
1201 } else if (strnicmp(data, "rw", 2) == 0) {
1203 } else if (strnicmp(data, "noblocksend", 11) == 0) {
1204 vol->noblocksnd = 1;
1205 } else if (strnicmp(data, "noautotune", 10) == 0) {
1206 vol->noautotune = 1;
1207 } else if ((strnicmp(data, "suid", 4) == 0) ||
1208 (strnicmp(data, "nosuid", 6) == 0) ||
1209 (strnicmp(data, "exec", 4) == 0) ||
1210 (strnicmp(data, "noexec", 6) == 0) ||
1211 (strnicmp(data, "nodev", 5) == 0) ||
1212 (strnicmp(data, "noauto", 6) == 0) ||
1213 (strnicmp(data, "dev", 3) == 0)) {
1214 /* The mount tool or mount.cifs helper (if present)
1215 uses these opts to set flags, and the flags are read
1216 by the kernel vfs layer before we get here (ie
1217 before read super) so there is no point trying to
1218 parse these options again and set anything and it
1219 is ok to just ignore them */
1221 } else if (strnicmp(data, "ro", 2) == 0) {
1223 } else if (strnicmp(data, "hard", 4) == 0) {
1225 } else if (strnicmp(data, "soft", 4) == 0) {
1227 } else if (strnicmp(data, "perm", 4) == 0) {
1229 } else if (strnicmp(data, "noperm", 6) == 0) {
1231 } else if (strnicmp(data, "mapchars", 8) == 0) {
1233 } else if (strnicmp(data, "nomapchars", 10) == 0) {
1235 } else if (strnicmp(data, "sfu", 3) == 0) {
1237 } else if (strnicmp(data, "nosfu", 5) == 0) {
1239 } else if (strnicmp(data, "nodfs", 5) == 0) {
1241 } else if (strnicmp(data, "posixpaths", 10) == 0) {
1242 vol->posix_paths = 1;
1243 } else if (strnicmp(data, "noposixpaths", 12) == 0) {
1244 vol->posix_paths = 0;
1245 } else if (strnicmp(data, "nounix", 6) == 0) {
1246 vol->no_linux_ext = 1;
1247 } else if (strnicmp(data, "nolinux", 7) == 0) {
1248 vol->no_linux_ext = 1;
1249 } else if ((strnicmp(data, "nocase", 6) == 0) ||
1250 (strnicmp(data, "ignorecase", 10) == 0)) {
1252 } else if (strnicmp(data, "brl", 3) == 0) {
1254 } else if ((strnicmp(data, "nobrl", 5) == 0) ||
1255 (strnicmp(data, "nolock", 6) == 0)) {
1257 /* turn off mandatory locking in mode
1258 if remote locking is turned off since the
1259 local vfs will do advisory */
1260 if (vol->file_mode ==
1261 (S_IALLUGO & ~(S_ISUID | S_IXGRP)))
1262 vol->file_mode = S_IALLUGO;
1263 } else if (strnicmp(data, "forcemandatorylock", 9) == 0) {
1264 /* will take the shorter form "forcemand" as well */
1265 /* This mount option will force use of mandatory
1266 (DOS/Windows style) byte range locks, instead of
1267 using posix advisory byte range locks, even if the
1268 Unix extensions are available and posix locks would
1269 be supported otherwise. If Unix extensions are not
1270 negotiated this has no effect since mandatory locks
1271 would be used (mandatory locks is all that those
1272 those servers support) */
1274 } else if (strnicmp(data, "setuids", 7) == 0) {
1276 } else if (strnicmp(data, "nosetuids", 9) == 0) {
1278 } else if (strnicmp(data, "dynperm", 7) == 0) {
1279 vol->dynperm = true;
1280 } else if (strnicmp(data, "nodynperm", 9) == 0) {
1281 vol->dynperm = false;
1282 } else if (strnicmp(data, "nohard", 6) == 0) {
1284 } else if (strnicmp(data, "nosoft", 6) == 0) {
1286 } else if (strnicmp(data, "nointr", 6) == 0) {
1288 } else if (strnicmp(data, "intr", 4) == 0) {
1290 } else if (strnicmp(data, "nostrictsync", 12) == 0) {
1291 vol->nostrictsync = 1;
1292 } else if (strnicmp(data, "strictsync", 10) == 0) {
1293 vol->nostrictsync = 0;
1294 } else if (strnicmp(data, "serverino", 7) == 0) {
1295 vol->server_ino = 1;
1296 } else if (strnicmp(data, "noserverino", 9) == 0) {
1297 vol->server_ino = 0;
1298 } else if (strnicmp(data, "cifsacl", 7) == 0) {
1300 } else if (strnicmp(data, "nocifsacl", 9) == 0) {
1302 } else if (strnicmp(data, "acl", 3) == 0) {
1303 vol->no_psx_acl = 0;
1304 } else if (strnicmp(data, "noacl", 5) == 0) {
1305 vol->no_psx_acl = 1;
1306 #ifdef CONFIG_CIFS_EXPERIMENTAL
1307 } else if (strnicmp(data, "locallease", 6) == 0) {
1308 vol->local_lease = 1;
1310 } else if (strnicmp(data, "sign", 4) == 0) {
1311 vol->secFlg |= CIFSSEC_MUST_SIGN;
1312 } else if (strnicmp(data, "seal", 4) == 0) {
1313 /* we do not do the following in secFlags because seal
1314 is a per tree connection (mount) not a per socket
1315 or per-smb connection option in the protocol */
1316 /* vol->secFlg |= CIFSSEC_MUST_SEAL; */
1318 } else if (strnicmp(data, "direct", 6) == 0) {
1320 } else if (strnicmp(data, "forcedirectio", 13) == 0) {
1322 } else if (strnicmp(data, "noac", 4) == 0) {
1323 printk(KERN_WARNING "CIFS: Mount option noac not "
1324 "supported. Instead set "
1325 "/proc/fs/cifs/LookupCacheEnabled to 0\n");
1327 printk(KERN_WARNING "CIFS: Unknown mount option %s\n",
1330 if (vol->UNC == NULL) {
1331 if (devname == NULL) {
1332 printk(KERN_WARNING "CIFS: Missing UNC name for mount "
1336 if ((temp_len = strnlen(devname, 300)) < 300) {
1337 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1338 if (vol->UNC == NULL)
1340 strcpy(vol->UNC, devname);
1341 if (strncmp(vol->UNC, "//", 2) == 0) {
1344 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1345 printk(KERN_WARNING "CIFS: UNC Path does not "
1346 "begin with // or \\\\ \n");
1349 value = strpbrk(vol->UNC+2, "/\\");
1353 printk(KERN_WARNING "CIFS: UNC name too long\n");
1357 if (vol->UNCip == NULL)
1358 vol->UNCip = &vol->UNC[2];
1363 static struct TCP_Server_Info *
1364 cifs_find_tcp_session(struct sockaddr_storage *addr)
1366 struct list_head *tmp;
1367 struct TCP_Server_Info *server;
1368 struct sockaddr_in *addr4 = (struct sockaddr_in *) addr;
1369 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *) addr;
1371 write_lock(&cifs_tcp_ses_lock);
1372 list_for_each(tmp, &cifs_tcp_ses_list) {
1373 server = list_entry(tmp, struct TCP_Server_Info,
1376 * the demux thread can exit on its own while still in CifsNew
1377 * so don't accept any sockets in that state. Since the
1378 * tcpStatus never changes back to CifsNew it's safe to check
1379 * for this without a lock.
1381 if (server->tcpStatus == CifsNew)
1384 if (addr->ss_family == AF_INET &&
1385 (addr4->sin_addr.s_addr !=
1386 server->addr.sockAddr.sin_addr.s_addr))
1388 else if (addr->ss_family == AF_INET6 &&
1389 !ipv6_addr_equal(&server->addr.sockAddr6.sin6_addr,
1393 ++server->srv_count;
1394 write_unlock(&cifs_tcp_ses_lock);
1395 cFYI(1, ("Existing tcp session with server found"));
1398 write_unlock(&cifs_tcp_ses_lock);
1403 cifs_put_tcp_session(struct TCP_Server_Info *server)
1405 struct task_struct *task;
1407 write_lock(&cifs_tcp_ses_lock);
1408 if (--server->srv_count > 0) {
1409 write_unlock(&cifs_tcp_ses_lock);
1413 list_del_init(&server->tcp_ses_list);
1414 write_unlock(&cifs_tcp_ses_lock);
1416 spin_lock(&GlobalMid_Lock);
1417 server->tcpStatus = CifsExiting;
1418 spin_unlock(&GlobalMid_Lock);
1420 task = xchg(&server->tsk, NULL);
1422 force_sig(SIGKILL, task);
1425 static struct TCP_Server_Info *
1426 cifs_get_tcp_session(struct smb_vol *volume_info)
1428 struct TCP_Server_Info *tcp_ses = NULL;
1429 struct sockaddr_storage addr;
1430 struct sockaddr_in *sin_server = (struct sockaddr_in *) &addr;
1431 struct sockaddr_in6 *sin_server6 = (struct sockaddr_in6 *) &addr;
1434 memset(&addr, 0, sizeof(struct sockaddr_storage));
1436 cFYI(1, ("UNC: %s ip: %s", volume_info->UNC, volume_info->UNCip));
1438 if (volume_info->UNCip && volume_info->UNC) {
1439 rc = cifs_convert_address(volume_info->UNCip, &addr);
1441 /* we failed translating address */
1445 } else if (volume_info->UNCip) {
1446 /* BB using ip addr as tcp_ses name to connect to the
1448 cERROR(1, ("Connecting to DFS root not implemented yet"));
1451 } else /* which tcp_sess DFS root would we conect to */ {
1453 ("CIFS mount error: No UNC path (e.g. -o "
1454 "unc=//192.168.1.100/public) specified"));
1459 /* see if we already have a matching tcp_ses */
1460 tcp_ses = cifs_find_tcp_session(&addr);
1464 tcp_ses = kzalloc(sizeof(struct TCP_Server_Info), GFP_KERNEL);
1470 tcp_ses->hostname = extract_hostname(volume_info->UNC);
1471 if (IS_ERR(tcp_ses->hostname)) {
1472 rc = PTR_ERR(tcp_ses->hostname);
1476 tcp_ses->noblocksnd = volume_info->noblocksnd;
1477 tcp_ses->noautotune = volume_info->noautotune;
1478 atomic_set(&tcp_ses->inFlight, 0);
1479 init_waitqueue_head(&tcp_ses->response_q);
1480 init_waitqueue_head(&tcp_ses->request_q);
1481 INIT_LIST_HEAD(&tcp_ses->pending_mid_q);
1482 mutex_init(&tcp_ses->srv_mutex);
1483 memcpy(tcp_ses->workstation_RFC1001_name,
1484 volume_info->source_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1485 memcpy(tcp_ses->server_RFC1001_name,
1486 volume_info->target_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1487 tcp_ses->sequence_number = 0;
1488 INIT_LIST_HEAD(&tcp_ses->tcp_ses_list);
1489 INIT_LIST_HEAD(&tcp_ses->smb_ses_list);
1492 * at this point we are the only ones with the pointer
1493 * to the struct since the kernel thread not created yet
1494 * no need to spinlock this init of tcpStatus or srv_count
1496 tcp_ses->tcpStatus = CifsNew;
1497 ++tcp_ses->srv_count;
1499 if (addr.ss_family == AF_INET6) {
1500 cFYI(1, ("attempting ipv6 connect"));
1501 /* BB should we allow ipv6 on port 139? */
1502 /* other OS never observed in Wild doing 139 with v6 */
1503 memcpy(&tcp_ses->addr.sockAddr6, sin_server6,
1504 sizeof(struct sockaddr_in6));
1505 sin_server6->sin6_port = htons(volume_info->port);
1506 rc = ipv6_connect(tcp_ses);
1508 memcpy(&tcp_ses->addr.sockAddr, sin_server,
1509 sizeof(struct sockaddr_in));
1510 sin_server->sin_port = htons(volume_info->port);
1511 rc = ipv4_connect(tcp_ses);
1514 cERROR(1, ("Error connecting to socket. Aborting operation"));
1519 * since we're in a cifs function already, we know that
1520 * this will succeed. No need for try_module_get().
1522 __module_get(THIS_MODULE);
1523 tcp_ses->tsk = kthread_run((void *)(void *)cifs_demultiplex_thread,
1525 if (IS_ERR(tcp_ses->tsk)) {
1526 rc = PTR_ERR(tcp_ses->tsk);
1527 cERROR(1, ("error %d create cifsd thread", rc));
1528 module_put(THIS_MODULE);
1532 /* thread spawned, put it on the list */
1533 write_lock(&cifs_tcp_ses_lock);
1534 list_add(&tcp_ses->tcp_ses_list, &cifs_tcp_ses_list);
1535 write_unlock(&cifs_tcp_ses_lock);
1541 kfree(tcp_ses->hostname);
1542 if (tcp_ses->ssocket)
1543 sock_release(tcp_ses->ssocket);
1549 static struct cifsSesInfo *
1550 cifs_find_smb_ses(struct TCP_Server_Info *server, char *username)
1552 struct list_head *tmp;
1553 struct cifsSesInfo *ses;
1555 write_lock(&cifs_tcp_ses_lock);
1556 list_for_each(tmp, &server->smb_ses_list) {
1557 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
1558 if (strncmp(ses->userName, username, MAX_USERNAME_SIZE))
1562 write_unlock(&cifs_tcp_ses_lock);
1565 write_unlock(&cifs_tcp_ses_lock);
1570 cifs_put_smb_ses(struct cifsSesInfo *ses)
1573 struct TCP_Server_Info *server = ses->server;
1575 write_lock(&cifs_tcp_ses_lock);
1576 if (--ses->ses_count > 0) {
1577 write_unlock(&cifs_tcp_ses_lock);
1581 list_del_init(&ses->smb_ses_list);
1582 write_unlock(&cifs_tcp_ses_lock);
1584 if (ses->status == CifsGood) {
1586 CIFSSMBLogoff(xid, ses);
1590 cifs_put_tcp_session(server);
1593 static struct cifsTconInfo *
1594 cifs_find_tcon(struct cifsSesInfo *ses, const char *unc)
1596 struct list_head *tmp;
1597 struct cifsTconInfo *tcon;
1599 write_lock(&cifs_tcp_ses_lock);
1600 list_for_each(tmp, &ses->tcon_list) {
1601 tcon = list_entry(tmp, struct cifsTconInfo, tcon_list);
1602 if (tcon->tidStatus == CifsExiting)
1604 if (strncmp(tcon->treeName, unc, MAX_TREE_SIZE))
1608 write_unlock(&cifs_tcp_ses_lock);
1611 write_unlock(&cifs_tcp_ses_lock);
1616 cifs_put_tcon(struct cifsTconInfo *tcon)
1619 struct cifsSesInfo *ses = tcon->ses;
1621 write_lock(&cifs_tcp_ses_lock);
1622 if (--tcon->tc_count > 0) {
1623 write_unlock(&cifs_tcp_ses_lock);
1627 list_del_init(&tcon->tcon_list);
1628 write_unlock(&cifs_tcp_ses_lock);
1631 CIFSSMBTDis(xid, tcon);
1634 DeleteTconOplockQEntries(tcon);
1636 cifs_put_smb_ses(ses);
1640 get_dfs_path(int xid, struct cifsSesInfo *pSesInfo, const char *old_path,
1641 const struct nls_table *nls_codepage, unsigned int *pnum_referrals,
1642 struct dfs_info3_param **preferrals, int remap)
1647 *pnum_referrals = 0;
1650 if (pSesInfo->ipc_tid == 0) {
1651 temp_unc = kmalloc(2 /* for slashes */ +
1652 strnlen(pSesInfo->serverName,
1653 SERVER_NAME_LEN_WITH_NULL * 2)
1654 + 1 + 4 /* slash IPC$ */ + 2,
1656 if (temp_unc == NULL)
1660 strcpy(temp_unc + 2, pSesInfo->serverName);
1661 strcpy(temp_unc + 2 + strlen(pSesInfo->serverName), "\\IPC$");
1662 rc = CIFSTCon(xid, pSesInfo, temp_unc, NULL, nls_codepage);
1664 ("CIFS Tcon rc = %d ipc_tid = %d", rc, pSesInfo->ipc_tid));
1668 rc = CIFSGetDFSRefer(xid, pSesInfo, old_path, preferrals,
1669 pnum_referrals, nls_codepage, remap);
1670 /* BB map targetUNCs to dfs_info3 structures, here or
1671 in CIFSGetDFSRefer BB */
1676 #ifdef CONFIG_DEBUG_LOCK_ALLOC
1677 static struct lock_class_key cifs_key[2];
1678 static struct lock_class_key cifs_slock_key[2];
1681 cifs_reclassify_socket4(struct socket *sock)
1683 struct sock *sk = sock->sk;
1684 BUG_ON(sock_owned_by_user(sk));
1685 sock_lock_init_class_and_name(sk, "slock-AF_INET-CIFS",
1686 &cifs_slock_key[0], "sk_lock-AF_INET-CIFS", &cifs_key[0]);
1690 cifs_reclassify_socket6(struct socket *sock)
1692 struct sock *sk = sock->sk;
1693 BUG_ON(sock_owned_by_user(sk));
1694 sock_lock_init_class_and_name(sk, "slock-AF_INET6-CIFS",
1695 &cifs_slock_key[1], "sk_lock-AF_INET6-CIFS", &cifs_key[1]);
1699 cifs_reclassify_socket4(struct socket *sock)
1704 cifs_reclassify_socket6(struct socket *sock)
1709 /* See RFC1001 section 14 on representation of Netbios names */
1710 static void rfc1002mangle(char *target, char *source, unsigned int length)
1714 for (i = 0, j = 0; i < (length); i++) {
1715 /* mask a nibble at a time and encode */
1716 target[j] = 'A' + (0x0F & (source[i] >> 4));
1717 target[j+1] = 'A' + (0x0F & source[i]);
1725 ipv4_connect(struct TCP_Server_Info *server)
1728 bool connected = false;
1729 __be16 orig_port = 0;
1730 struct socket *socket = server->ssocket;
1732 if (socket == NULL) {
1733 rc = sock_create_kern(PF_INET, SOCK_STREAM,
1734 IPPROTO_TCP, &socket);
1736 cERROR(1, ("Error %d creating socket", rc));
1740 /* BB other socket options to set KEEPALIVE, NODELAY? */
1741 cFYI(1, ("Socket created"));
1742 server->ssocket = socket;
1743 socket->sk->sk_allocation = GFP_NOFS;
1744 cifs_reclassify_socket4(socket);
1747 /* user overrode default port */
1748 if (server->addr.sockAddr.sin_port) {
1749 rc = socket->ops->connect(socket, (struct sockaddr *)
1750 &server->addr.sockAddr,
1751 sizeof(struct sockaddr_in), 0);
1757 /* save original port so we can retry user specified port
1758 later if fall back ports fail this time */
1759 orig_port = server->addr.sockAddr.sin_port;
1761 /* do not retry on the same port we just failed on */
1762 if (server->addr.sockAddr.sin_port != htons(CIFS_PORT)) {
1763 server->addr.sockAddr.sin_port = htons(CIFS_PORT);
1764 rc = socket->ops->connect(socket,
1766 &server->addr.sockAddr,
1767 sizeof(struct sockaddr_in), 0);
1773 server->addr.sockAddr.sin_port = htons(RFC1001_PORT);
1774 rc = socket->ops->connect(socket, (struct sockaddr *)
1775 &server->addr.sockAddr,
1776 sizeof(struct sockaddr_in), 0);
1781 /* give up here - unless we want to retry on different
1782 protocol families some day */
1785 server->addr.sockAddr.sin_port = orig_port;
1786 cFYI(1, ("Error %d connecting to server via ipv4", rc));
1787 sock_release(socket);
1788 server->ssocket = NULL;
1794 * Eventually check for other socket options to change from
1795 * the default. sock_setsockopt not used because it expects
1798 socket->sk->sk_rcvtimeo = 7 * HZ;
1799 socket->sk->sk_sndtimeo = 5 * HZ;
1801 /* make the bufsizes depend on wsize/rsize and max requests */
1802 if (server->noautotune) {
1803 if (socket->sk->sk_sndbuf < (200 * 1024))
1804 socket->sk->sk_sndbuf = 200 * 1024;
1805 if (socket->sk->sk_rcvbuf < (140 * 1024))
1806 socket->sk->sk_rcvbuf = 140 * 1024;
1809 cFYI(1, ("sndbuf %d rcvbuf %d rcvtimeo 0x%lx",
1810 socket->sk->sk_sndbuf,
1811 socket->sk->sk_rcvbuf, socket->sk->sk_rcvtimeo));
1813 /* send RFC1001 sessinit */
1814 if (server->addr.sockAddr.sin_port == htons(RFC1001_PORT)) {
1815 /* some servers require RFC1001 sessinit before sending
1816 negprot - BB check reconnection in case where second
1817 sessinit is sent but no second negprot */
1818 struct rfc1002_session_packet *ses_init_buf;
1819 struct smb_hdr *smb_buf;
1820 ses_init_buf = kzalloc(sizeof(struct rfc1002_session_packet),
1823 ses_init_buf->trailer.session_req.called_len = 32;
1824 if (server->server_RFC1001_name &&
1825 server->server_RFC1001_name[0] != 0)
1826 rfc1002mangle(ses_init_buf->trailer.
1827 session_req.called_name,
1828 server->server_RFC1001_name,
1829 RFC1001_NAME_LEN_WITH_NULL);
1831 rfc1002mangle(ses_init_buf->trailer.
1832 session_req.called_name,
1833 DEFAULT_CIFS_CALLED_NAME,
1834 RFC1001_NAME_LEN_WITH_NULL);
1836 ses_init_buf->trailer.session_req.calling_len = 32;
1838 /* calling name ends in null (byte 16) from old smb
1840 if (server->workstation_RFC1001_name &&
1841 server->workstation_RFC1001_name[0] != 0)
1842 rfc1002mangle(ses_init_buf->trailer.
1843 session_req.calling_name,
1844 server->workstation_RFC1001_name,
1845 RFC1001_NAME_LEN_WITH_NULL);
1847 rfc1002mangle(ses_init_buf->trailer.
1848 session_req.calling_name,
1850 RFC1001_NAME_LEN_WITH_NULL);
1852 ses_init_buf->trailer.session_req.scope1 = 0;
1853 ses_init_buf->trailer.session_req.scope2 = 0;
1854 smb_buf = (struct smb_hdr *)ses_init_buf;
1855 /* sizeof RFC1002_SESSION_REQUEST with no scope */
1856 smb_buf->smb_buf_length = 0x81000044;
1857 rc = smb_send(server, smb_buf, 0x44);
1858 kfree(ses_init_buf);
1859 msleep(1); /* RFC1001 layer in at least one server
1860 requires very short break before negprot
1861 presumably because not expecting negprot
1862 to follow so fast. This is a simple
1863 solution that works without
1864 complicating the code and causes no
1865 significant slowing down on mount
1866 for everyone else */
1868 /* else the negprot may still work without this
1869 even though malloc failed */
1877 ipv6_connect(struct TCP_Server_Info *server)
1880 bool connected = false;
1881 __be16 orig_port = 0;
1882 struct socket *socket = server->ssocket;
1884 if (socket == NULL) {
1885 rc = sock_create_kern(PF_INET6, SOCK_STREAM,
1886 IPPROTO_TCP, &socket);
1888 cERROR(1, ("Error %d creating ipv6 socket", rc));
1893 /* BB other socket options to set KEEPALIVE, NODELAY? */
1894 cFYI(1, ("ipv6 Socket created"));
1895 server->ssocket = socket;
1896 socket->sk->sk_allocation = GFP_NOFS;
1897 cifs_reclassify_socket6(socket);
1900 /* user overrode default port */
1901 if (server->addr.sockAddr6.sin6_port) {
1902 rc = socket->ops->connect(socket,
1903 (struct sockaddr *) &server->addr.sockAddr6,
1904 sizeof(struct sockaddr_in6), 0);
1910 /* save original port so we can retry user specified port
1911 later if fall back ports fail this time */
1913 orig_port = server->addr.sockAddr6.sin6_port;
1914 /* do not retry on the same port we just failed on */
1915 if (server->addr.sockAddr6.sin6_port != htons(CIFS_PORT)) {
1916 server->addr.sockAddr6.sin6_port = htons(CIFS_PORT);
1917 rc = socket->ops->connect(socket, (struct sockaddr *)
1918 &server->addr.sockAddr6,
1919 sizeof(struct sockaddr_in6), 0);
1925 server->addr.sockAddr6.sin6_port = htons(RFC1001_PORT);
1926 rc = socket->ops->connect(socket, (struct sockaddr *)
1927 &server->addr.sockAddr6,
1928 sizeof(struct sockaddr_in6), 0);
1933 /* give up here - unless we want to retry on different
1934 protocol families some day */
1937 server->addr.sockAddr6.sin6_port = orig_port;
1938 cFYI(1, ("Error %d connecting to server via ipv6", rc));
1939 sock_release(socket);
1940 server->ssocket = NULL;
1945 * Eventually check for other socket options to change from
1946 * the default. sock_setsockopt not used because it expects
1949 socket->sk->sk_rcvtimeo = 7 * HZ;
1950 socket->sk->sk_sndtimeo = 5 * HZ;
1951 server->ssocket = socket;
1956 void reset_cifs_unix_caps(int xid, struct cifsTconInfo *tcon,
1957 struct super_block *sb, struct smb_vol *vol_info)
1959 /* if we are reconnecting then should we check to see if
1960 * any requested capabilities changed locally e.g. via
1961 * remount but we can not do much about it here
1962 * if they have (even if we could detect it by the following)
1963 * Perhaps we could add a backpointer to array of sb from tcon
1964 * or if we change to make all sb to same share the same
1965 * sb as NFS - then we only have one backpointer to sb.
1966 * What if we wanted to mount the server share twice once with
1967 * and once without posixacls or posix paths? */
1968 __u64 saved_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
1970 if (vol_info && vol_info->no_linux_ext) {
1971 tcon->fsUnixInfo.Capability = 0;
1972 tcon->unix_ext = 0; /* Unix Extensions disabled */
1973 cFYI(1, ("Linux protocol extensions disabled"));
1975 } else if (vol_info)
1976 tcon->unix_ext = 1; /* Unix Extensions supported */
1978 if (tcon->unix_ext == 0) {
1979 cFYI(1, ("Unix extensions disabled so not set on reconnect"));
1983 if (!CIFSSMBQFSUnixInfo(xid, tcon)) {
1984 __u64 cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
1986 /* check for reconnect case in which we do not
1987 want to change the mount behavior if we can avoid it */
1988 if (vol_info == NULL) {
1989 /* turn off POSIX ACL and PATHNAMES if not set
1990 originally at mount time */
1991 if ((saved_cap & CIFS_UNIX_POSIX_ACL_CAP) == 0)
1992 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
1993 if ((saved_cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
1994 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
1995 cERROR(1, ("POSIXPATH support change"));
1996 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
1997 } else if ((cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
1998 cERROR(1, ("possible reconnect error"));
2000 ("server disabled POSIX path support"));
2004 cap &= CIFS_UNIX_CAP_MASK;
2005 if (vol_info && vol_info->no_psx_acl)
2006 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2007 else if (CIFS_UNIX_POSIX_ACL_CAP & cap) {
2008 cFYI(1, ("negotiated posix acl support"));
2010 sb->s_flags |= MS_POSIXACL;
2013 if (vol_info && vol_info->posix_paths == 0)
2014 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2015 else if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) {
2016 cFYI(1, ("negotiate posix pathnames"));
2018 CIFS_SB(sb)->mnt_cifs_flags |=
2019 CIFS_MOUNT_POSIX_PATHS;
2022 /* We might be setting the path sep back to a different
2023 form if we are reconnecting and the server switched its
2024 posix path capability for this share */
2025 if (sb && (CIFS_SB(sb)->prepathlen > 0))
2026 CIFS_SB(sb)->prepath[0] = CIFS_DIR_SEP(CIFS_SB(sb));
2028 if (sb && (CIFS_SB(sb)->rsize > 127 * 1024)) {
2029 if ((cap & CIFS_UNIX_LARGE_READ_CAP) == 0) {
2030 CIFS_SB(sb)->rsize = 127 * 1024;
2032 ("larger reads not supported by srv"));
2037 cFYI(1, ("Negotiate caps 0x%x", (int)cap));
2038 #ifdef CONFIG_CIFS_DEBUG2
2039 if (cap & CIFS_UNIX_FCNTL_CAP)
2040 cFYI(1, ("FCNTL cap"));
2041 if (cap & CIFS_UNIX_EXTATTR_CAP)
2042 cFYI(1, ("EXTATTR cap"));
2043 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2044 cFYI(1, ("POSIX path cap"));
2045 if (cap & CIFS_UNIX_XATTR_CAP)
2046 cFYI(1, ("XATTR cap"));
2047 if (cap & CIFS_UNIX_POSIX_ACL_CAP)
2048 cFYI(1, ("POSIX ACL cap"));
2049 if (cap & CIFS_UNIX_LARGE_READ_CAP)
2050 cFYI(1, ("very large read cap"));
2051 if (cap & CIFS_UNIX_LARGE_WRITE_CAP)
2052 cFYI(1, ("very large write cap"));
2053 #endif /* CIFS_DEBUG2 */
2054 if (CIFSSMBSetFSUnixInfo(xid, tcon, cap)) {
2055 if (vol_info == NULL) {
2056 cFYI(1, ("resetting capabilities failed"));
2058 cERROR(1, ("Negotiating Unix capabilities "
2059 "with the server failed. Consider "
2060 "mounting with the Unix Extensions\n"
2061 "disabled, if problems are found, "
2062 "by specifying the nounix mount "
2070 convert_delimiter(char *path, char delim)
2083 for (i = 0; path[i] != '\0'; i++) {
2084 if (path[i] == old_delim)
2089 static void setup_cifs_sb(struct smb_vol *pvolume_info,
2090 struct cifs_sb_info *cifs_sb)
2092 if (pvolume_info->rsize > CIFSMaxBufSize) {
2093 cERROR(1, ("rsize %d too large, using MaxBufSize",
2094 pvolume_info->rsize));
2095 cifs_sb->rsize = CIFSMaxBufSize;
2096 } else if ((pvolume_info->rsize) &&
2097 (pvolume_info->rsize <= CIFSMaxBufSize))
2098 cifs_sb->rsize = pvolume_info->rsize;
2100 cifs_sb->rsize = CIFSMaxBufSize;
2102 if (pvolume_info->wsize > PAGEVEC_SIZE * PAGE_CACHE_SIZE) {
2103 cERROR(1, ("wsize %d too large, using 4096 instead",
2104 pvolume_info->wsize));
2105 cifs_sb->wsize = 4096;
2106 } else if (pvolume_info->wsize)
2107 cifs_sb->wsize = pvolume_info->wsize;
2109 cifs_sb->wsize = min_t(const int,
2110 PAGEVEC_SIZE * PAGE_CACHE_SIZE,
2112 /* old default of CIFSMaxBufSize was too small now
2113 that SMB Write2 can send multiple pages in kvec.
2114 RFC1001 does not describe what happens when frame
2115 bigger than 128K is sent so use that as max in
2116 conjunction with 52K kvec constraint on arch with 4K
2119 if (cifs_sb->rsize < 2048) {
2120 cifs_sb->rsize = 2048;
2121 /* Windows ME may prefer this */
2122 cFYI(1, ("readsize set to minimum: 2048"));
2124 /* calculate prepath */
2125 cifs_sb->prepath = pvolume_info->prepath;
2126 if (cifs_sb->prepath) {
2127 cifs_sb->prepathlen = strlen(cifs_sb->prepath);
2128 /* we can not convert the / to \ in the path
2129 separators in the prefixpath yet because we do not
2130 know (until reset_cifs_unix_caps is called later)
2131 whether POSIX PATH CAP is available. We normalize
2132 the / to \ after reset_cifs_unix_caps is called */
2133 pvolume_info->prepath = NULL;
2135 cifs_sb->prepathlen = 0;
2136 cifs_sb->mnt_uid = pvolume_info->linux_uid;
2137 cifs_sb->mnt_gid = pvolume_info->linux_gid;
2138 cifs_sb->mnt_file_mode = pvolume_info->file_mode;
2139 cifs_sb->mnt_dir_mode = pvolume_info->dir_mode;
2140 cFYI(1, ("file mode: 0x%x dir mode: 0x%x",
2141 cifs_sb->mnt_file_mode, cifs_sb->mnt_dir_mode));
2143 if (pvolume_info->noperm)
2144 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_PERM;
2145 if (pvolume_info->setuids)
2146 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SET_UID;
2147 if (pvolume_info->server_ino)
2148 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SERVER_INUM;
2149 if (pvolume_info->remap)
2150 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MAP_SPECIAL_CHR;
2151 if (pvolume_info->no_xattr)
2152 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_XATTR;
2153 if (pvolume_info->sfu_emul)
2154 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_UNX_EMUL;
2155 if (pvolume_info->nobrl)
2156 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_BRL;
2157 if (pvolume_info->nostrictsync)
2158 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOSSYNC;
2159 if (pvolume_info->mand_lock)
2160 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOPOSIXBRL;
2161 if (pvolume_info->cifs_acl)
2162 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_ACL;
2163 if (pvolume_info->override_uid)
2164 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_UID;
2165 if (pvolume_info->override_gid)
2166 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_GID;
2167 if (pvolume_info->dynperm)
2168 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DYNPERM;
2169 if (pvolume_info->direct_io) {
2170 cFYI(1, ("mounting share using direct i/o"));
2171 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DIRECT_IO;
2174 if ((pvolume_info->cifs_acl) && (pvolume_info->dynperm))
2175 cERROR(1, ("mount option dynperm ignored if cifsacl "
2176 "mount option supported"));
2180 is_path_accessible(int xid, struct cifsTconInfo *tcon,
2181 struct cifs_sb_info *cifs_sb, const char *full_path)
2185 FILE_ALL_INFO *pfile_info;
2187 rc = CIFSGetSrvInodeNumber(xid, tcon, full_path, &inode_num,
2189 cifs_sb->mnt_cifs_flags &
2190 CIFS_MOUNT_MAP_SPECIAL_CHR);
2191 if (rc != -EOPNOTSUPP)
2194 pfile_info = kmalloc(sizeof(FILE_ALL_INFO), GFP_KERNEL);
2195 if (pfile_info == NULL)
2198 rc = CIFSSMBQPathInfo(xid, tcon, full_path, pfile_info,
2199 0 /* not legacy */, cifs_sb->local_nls,
2200 cifs_sb->mnt_cifs_flags &
2201 CIFS_MOUNT_MAP_SPECIAL_CHR);
2207 cleanup_volume_info(struct smb_vol **pvolume_info)
2209 struct smb_vol *volume_info;
2211 if (!pvolume_info && !*pvolume_info)
2214 volume_info = *pvolume_info;
2215 kzfree(volume_info->password);
2216 kfree(volume_info->UNC);
2217 kfree(volume_info->prepath);
2219 *pvolume_info = NULL;
2223 #ifdef CONFIG_CIFS_DFS_UPCALL
2224 /* build_path_to_root returns full path to root when
2225 * we do not have an exiting connection (tcon) */
2227 build_unc_path_to_root(const struct smb_vol *volume_info,
2228 const struct cifs_sb_info *cifs_sb)
2232 int unc_len = strnlen(volume_info->UNC, MAX_TREE_SIZE + 1);
2233 full_path = kmalloc(unc_len + cifs_sb->prepathlen + 1, GFP_KERNEL);
2234 if (full_path == NULL)
2235 return ERR_PTR(-ENOMEM);
2237 strncpy(full_path, volume_info->UNC, unc_len);
2238 if (cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) {
2240 for (i = 0; i < unc_len; i++) {
2241 if (full_path[i] == '\\')
2246 if (cifs_sb->prepathlen)
2247 strncpy(full_path + unc_len, cifs_sb->prepath,
2248 cifs_sb->prepathlen);
2250 full_path[unc_len + cifs_sb->prepathlen] = 0; /* add trailing null */
2256 cifs_mount(struct super_block *sb, struct cifs_sb_info *cifs_sb,
2257 char *mount_data_global, const char *devname)
2261 struct smb_vol *volume_info;
2262 struct cifsSesInfo *pSesInfo = NULL;
2263 struct cifsTconInfo *tcon = NULL;
2264 struct TCP_Server_Info *srvTcp = NULL;
2266 char *mount_data = mount_data_global;
2267 #ifdef CONFIG_CIFS_DFS_UPCALL
2268 struct dfs_info3_param *referrals = NULL;
2269 unsigned int num_referrals = 0;
2270 int referral_walks_count = 0;
2277 volume_info = kzalloc(sizeof(struct smb_vol), GFP_KERNEL);
2283 if (cifs_parse_mount_options(mount_data, devname, volume_info)) {
2288 if (volume_info->nullauth) {
2289 cFYI(1, ("null user"));
2290 volume_info->username = "";
2291 } else if (volume_info->username) {
2292 /* BB fixme parse for domain name here */
2293 cFYI(1, ("Username: %s", volume_info->username));
2295 cifserror("No username specified");
2296 /* In userspace mount helper we can get user name from alternate
2297 locations such as env variables and files on disk */
2303 /* this is needed for ASCII cp to Unicode converts */
2304 if (volume_info->iocharset == NULL) {
2305 cifs_sb->local_nls = load_nls_default();
2306 /* load_nls_default can not return null */
2308 cifs_sb->local_nls = load_nls(volume_info->iocharset);
2309 if (cifs_sb->local_nls == NULL) {
2310 cERROR(1, ("CIFS mount error: iocharset %s not found",
2311 volume_info->iocharset));
2317 /* get a reference to a tcp session */
2318 srvTcp = cifs_get_tcp_session(volume_info);
2319 if (IS_ERR(srvTcp)) {
2320 rc = PTR_ERR(srvTcp);
2324 pSesInfo = cifs_find_smb_ses(srvTcp, volume_info->username);
2326 cFYI(1, ("Existing smb sess found (status=%d)",
2329 * The existing SMB session already has a reference to srvTcp,
2330 * so we can put back the extra one we got before
2332 cifs_put_tcp_session(srvTcp);
2334 down(&pSesInfo->sesSem);
2335 if (pSesInfo->need_reconnect) {
2336 cFYI(1, ("Session needs reconnect"));
2337 rc = cifs_setup_session(xid, pSesInfo,
2338 cifs_sb->local_nls);
2340 up(&pSesInfo->sesSem);
2342 cFYI(1, ("Existing smb sess not found"));
2343 pSesInfo = sesInfoAlloc();
2344 if (pSesInfo == NULL) {
2346 goto mount_fail_check;
2349 /* new SMB session uses our srvTcp ref */
2350 pSesInfo->server = srvTcp;
2351 if (srvTcp->addr.sockAddr6.sin6_family == AF_INET6)
2352 sprintf(pSesInfo->serverName, "%pI6",
2353 &srvTcp->addr.sockAddr6.sin6_addr);
2355 sprintf(pSesInfo->serverName, "%pI4",
2356 &srvTcp->addr.sockAddr.sin_addr.s_addr);
2358 write_lock(&cifs_tcp_ses_lock);
2359 list_add(&pSesInfo->smb_ses_list, &srvTcp->smb_ses_list);
2360 write_unlock(&cifs_tcp_ses_lock);
2362 /* volume_info->password freed at unmount */
2363 if (volume_info->password) {
2364 pSesInfo->password = kstrdup(volume_info->password,
2366 if (!pSesInfo->password) {
2368 goto mount_fail_check;
2371 if (volume_info->username)
2372 strncpy(pSesInfo->userName, volume_info->username,
2374 if (volume_info->domainname) {
2375 int len = strlen(volume_info->domainname);
2376 pSesInfo->domainName = kmalloc(len + 1, GFP_KERNEL);
2377 if (pSesInfo->domainName)
2378 strcpy(pSesInfo->domainName,
2379 volume_info->domainname);
2381 pSesInfo->linux_uid = volume_info->linux_uid;
2382 pSesInfo->overrideSecFlg = volume_info->secFlg;
2383 down(&pSesInfo->sesSem);
2385 /* BB FIXME need to pass vol->secFlgs BB */
2386 rc = cifs_setup_session(xid, pSesInfo,
2387 cifs_sb->local_nls);
2388 up(&pSesInfo->sesSem);
2391 /* search for existing tcon to this server share */
2393 setup_cifs_sb(volume_info, cifs_sb);
2395 tcon = cifs_find_tcon(pSesInfo, volume_info->UNC);
2397 cFYI(1, ("Found match on UNC path"));
2398 /* existing tcon already has a reference */
2399 cifs_put_smb_ses(pSesInfo);
2400 if (tcon->seal != volume_info->seal)
2401 cERROR(1, ("transport encryption setting "
2402 "conflicts with existing tid"));
2404 tcon = tconInfoAlloc();
2407 goto mount_fail_check;
2410 tcon->ses = pSesInfo;
2411 if (volume_info->password) {
2412 tcon->password = kstrdup(volume_info->password,
2414 if (!tcon->password) {
2416 goto mount_fail_check;
2420 if ((strchr(volume_info->UNC + 3, '\\') == NULL)
2421 && (strchr(volume_info->UNC + 3, '/') == NULL)) {
2422 cERROR(1, ("Missing share name"));
2424 goto mount_fail_check;
2426 /* BB Do we need to wrap sesSem around
2427 * this TCon call and Unix SetFS as
2428 * we do on SessSetup and reconnect? */
2429 rc = CIFSTCon(xid, pSesInfo, volume_info->UNC,
2430 tcon, cifs_sb->local_nls);
2431 cFYI(1, ("CIFS Tcon rc = %d", rc));
2432 if (volume_info->nodfs) {
2433 tcon->Flags &= ~SMB_SHARE_IS_IN_DFS;
2434 cFYI(1, ("DFS disabled (%d)",
2439 goto remote_path_check;
2440 tcon->seal = volume_info->seal;
2441 write_lock(&cifs_tcp_ses_lock);
2442 list_add(&tcon->tcon_list, &pSesInfo->tcon_list);
2443 write_unlock(&cifs_tcp_ses_lock);
2446 /* we can have only one retry value for a connection
2447 to a share so for resources mounted more than once
2448 to the same server share the last value passed in
2449 for the retry flag is used */
2450 tcon->retry = volume_info->retry;
2451 tcon->nocase = volume_info->nocase;
2452 tcon->local_lease = volume_info->local_lease;
2455 if (pSesInfo->capabilities & CAP_LARGE_FILES) {
2456 sb->s_maxbytes = (u64) 1 << 63;
2458 sb->s_maxbytes = (u64) 1 << 31; /* 2 GB */
2461 /* BB FIXME fix time_gran to be larger for LANMAN sessions */
2462 sb->s_time_gran = 100;
2465 goto remote_path_check;
2467 cifs_sb->tcon = tcon;
2469 /* do not care if following two calls succeed - informational */
2471 CIFSSMBQFSDeviceInfo(xid, tcon);
2472 CIFSSMBQFSAttributeInfo(xid, tcon);
2475 /* tell server which Unix caps we support */
2476 if (tcon->ses->capabilities & CAP_UNIX)
2477 /* reset of caps checks mount to see if unix extensions
2478 disabled for just this mount */
2479 reset_cifs_unix_caps(xid, tcon, sb, volume_info);
2481 tcon->unix_ext = 0; /* server does not support them */
2483 /* convert forward to back slashes in prepath here if needed */
2484 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2485 convert_delimiter(cifs_sb->prepath, CIFS_DIR_SEP(cifs_sb));
2487 if ((tcon->unix_ext == 0) && (cifs_sb->rsize > (1024 * 127))) {
2488 cifs_sb->rsize = 1024 * 127;
2489 cFYI(DBG2, ("no very large read support, rsize now 127K"));
2491 if (!(tcon->ses->capabilities & CAP_LARGE_WRITE_X))
2492 cifs_sb->wsize = min(cifs_sb->wsize,
2493 (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2494 if (!(tcon->ses->capabilities & CAP_LARGE_READ_X))
2495 cifs_sb->rsize = min(cifs_sb->rsize,
2496 (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2499 /* check if a whole path (including prepath) is not remote */
2500 if (!rc && cifs_sb->prepathlen && tcon) {
2501 /* build_path_to_root works only when we have a valid tcon */
2502 full_path = cifs_build_path_to_root(cifs_sb);
2503 if (full_path == NULL) {
2505 goto mount_fail_check;
2507 rc = is_path_accessible(xid, tcon, cifs_sb, full_path);
2508 if (rc != -EREMOTE) {
2510 goto mount_fail_check;
2515 /* get referral if needed */
2516 if (rc == -EREMOTE) {
2517 #ifdef CONFIG_CIFS_DFS_UPCALL
2518 if (referral_walks_count > MAX_NESTED_LINKS) {
2520 * BB: when we implement proper loop detection,
2521 * we will remove this check. But now we need it
2522 * to prevent an indefinite loop if 'DFS tree' is
2523 * misconfigured (i.e. has loops).
2526 goto mount_fail_check;
2528 /* convert forward to back slashes in prepath here if needed */
2529 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2530 convert_delimiter(cifs_sb->prepath,
2531 CIFS_DIR_SEP(cifs_sb));
2532 full_path = build_unc_path_to_root(volume_info, cifs_sb);
2533 if (IS_ERR(full_path)) {
2534 rc = PTR_ERR(full_path);
2535 goto mount_fail_check;
2538 cFYI(1, ("Getting referral for: %s", full_path));
2539 rc = get_dfs_path(xid, pSesInfo , full_path + 1,
2540 cifs_sb->local_nls, &num_referrals, &referrals,
2541 cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
2542 if (!rc && num_referrals > 0) {
2543 char *fake_devname = NULL;
2545 if (mount_data != mount_data_global)
2547 mount_data = cifs_compose_mount_options(
2548 cifs_sb->mountdata, full_path + 1,
2549 referrals, &fake_devname);
2550 kfree(fake_devname);
2551 free_dfs_info_array(referrals, num_referrals);
2554 cifs_put_tcon(tcon);
2556 cifs_put_smb_ses(pSesInfo);
2558 cleanup_volume_info(&volume_info);
2561 referral_walks_count++;
2562 goto try_mount_again;
2564 #else /* No DFS support, return error on mount */
2570 /* on error free sesinfo and tcon struct if needed */
2572 if (mount_data != mount_data_global)
2574 /* If find_unc succeeded then rc == 0 so we can not end */
2575 /* up accidently freeing someone elses tcon struct */
2577 cifs_put_tcon(tcon);
2579 cifs_put_smb_ses(pSesInfo);
2581 cifs_put_tcp_session(srvTcp);
2585 /* volume_info->password is freed above when existing session found
2586 (in which case it is not needed anymore) but when new sesion is created
2587 the password ptr is put in the new session structure (in which case the
2588 password will be freed at unmount time) */
2590 /* zero out password before freeing */
2591 cleanup_volume_info(&volume_info);
2597 CIFSTCon(unsigned int xid, struct cifsSesInfo *ses,
2598 const char *tree, struct cifsTconInfo *tcon,
2599 const struct nls_table *nls_codepage)
2601 struct smb_hdr *smb_buffer;
2602 struct smb_hdr *smb_buffer_response;
2605 unsigned char *bcc_ptr;
2607 int length, bytes_left;
2613 smb_buffer = cifs_buf_get();
2614 if (smb_buffer == NULL) {
2617 smb_buffer_response = smb_buffer;
2619 header_assemble(smb_buffer, SMB_COM_TREE_CONNECT_ANDX,
2620 NULL /*no tid */ , 4 /*wct */ );
2622 smb_buffer->Mid = GetNextMid(ses->server);
2623 smb_buffer->Uid = ses->Suid;
2624 pSMB = (TCONX_REQ *) smb_buffer;
2625 pSMBr = (TCONX_RSP *) smb_buffer_response;
2627 pSMB->AndXCommand = 0xFF;
2628 pSMB->Flags = cpu_to_le16(TCON_EXTENDED_SECINFO);
2629 bcc_ptr = &pSMB->Password[0];
2630 if ((ses->server->secMode) & SECMODE_USER) {
2631 pSMB->PasswordLength = cpu_to_le16(1); /* minimum */
2632 *bcc_ptr = 0; /* password is null byte */
2633 bcc_ptr++; /* skip password */
2634 /* already aligned so no need to do it below */
2636 pSMB->PasswordLength = cpu_to_le16(CIFS_SESS_KEY_SIZE);
2637 /* BB FIXME add code to fail this if NTLMv2 or Kerberos
2638 specified as required (when that support is added to
2639 the vfs in the future) as only NTLM or the much
2640 weaker LANMAN (which we do not send by default) is accepted
2641 by Samba (not sure whether other servers allow
2642 NTLMv2 password here) */
2643 #ifdef CONFIG_CIFS_WEAK_PW_HASH
2644 if ((extended_security & CIFSSEC_MAY_LANMAN) &&
2645 (ses->server->secType == LANMAN))
2646 calc_lanman_hash(tcon->password, ses->server->cryptKey,
2647 ses->server->secMode &
2648 SECMODE_PW_ENCRYPT ? true : false,
2651 #endif /* CIFS_WEAK_PW_HASH */
2652 SMBNTencrypt(tcon->password, ses->server->cryptKey,
2655 bcc_ptr += CIFS_SESS_KEY_SIZE;
2656 if (ses->capabilities & CAP_UNICODE) {
2657 /* must align unicode strings */
2658 *bcc_ptr = 0; /* null byte password */
2663 if (ses->server->secMode &
2664 (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
2665 smb_buffer->Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
2667 if (ses->capabilities & CAP_STATUS32) {
2668 smb_buffer->Flags2 |= SMBFLG2_ERR_STATUS;
2670 if (ses->capabilities & CAP_DFS) {
2671 smb_buffer->Flags2 |= SMBFLG2_DFS;
2673 if (ses->capabilities & CAP_UNICODE) {
2674 smb_buffer->Flags2 |= SMBFLG2_UNICODE;
2676 cifs_strtoUCS((__le16 *) bcc_ptr, tree,
2677 6 /* max utf8 char length in bytes */ *
2678 (/* server len*/ + 256 /* share len */), nls_codepage);
2679 bcc_ptr += 2 * length; /* convert num 16 bit words to bytes */
2680 bcc_ptr += 2; /* skip trailing null */
2681 } else { /* ASCII */
2682 strcpy(bcc_ptr, tree);
2683 bcc_ptr += strlen(tree) + 1;
2685 strcpy(bcc_ptr, "?????");
2686 bcc_ptr += strlen("?????");
2688 count = bcc_ptr - &pSMB->Password[0];
2689 pSMB->hdr.smb_buf_length += count;
2690 pSMB->ByteCount = cpu_to_le16(count);
2692 rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response, &length,
2695 /* above now done in SendReceive */
2696 if ((rc == 0) && (tcon != NULL)) {
2699 tcon->tidStatus = CifsGood;
2700 tcon->need_reconnect = false;
2701 tcon->tid = smb_buffer_response->Tid;
2702 bcc_ptr = pByteArea(smb_buffer_response);
2703 bytes_left = BCC(smb_buffer_response);
2704 length = strnlen(bcc_ptr, bytes_left - 2);
2705 if (smb_buffer->Flags2 & SMBFLG2_UNICODE)
2711 /* skip service field (NB: this field is always ASCII) */
2713 if ((bcc_ptr[0] == 'I') && (bcc_ptr[1] == 'P') &&
2714 (bcc_ptr[2] == 'C')) {
2715 cFYI(1, ("IPC connection"));
2718 } else if (length == 2) {
2719 if ((bcc_ptr[0] == 'A') && (bcc_ptr[1] == ':')) {
2720 /* the most common case */
2721 cFYI(1, ("disk share connection"));
2724 bcc_ptr += length + 1;
2725 bytes_left -= (length + 1);
2726 strncpy(tcon->treeName, tree, MAX_TREE_SIZE);
2728 /* mostly informational -- no need to fail on error here */
2729 tcon->nativeFileSystem = cifs_strndup_from_ucs(bcc_ptr,
2730 bytes_left, is_unicode,
2733 cFYI(1, ("nativeFileSystem=%s", tcon->nativeFileSystem));
2735 if ((smb_buffer_response->WordCount == 3) ||
2736 (smb_buffer_response->WordCount == 7))
2737 /* field is in same location */
2738 tcon->Flags = le16_to_cpu(pSMBr->OptionalSupport);
2741 cFYI(1, ("Tcon flags: 0x%x ", tcon->Flags));
2742 } else if ((rc == 0) && tcon == NULL) {
2743 /* all we need to save for IPC$ connection */
2744 ses->ipc_tid = smb_buffer_response->Tid;
2747 cifs_buf_release(smb_buffer);
2752 cifs_umount(struct super_block *sb, struct cifs_sb_info *cifs_sb)
2758 cifs_put_tcon(cifs_sb->tcon);
2760 cifs_sb->tcon = NULL;
2761 tmp = cifs_sb->prepath;
2762 cifs_sb->prepathlen = 0;
2763 cifs_sb->prepath = NULL;
2769 int cifs_setup_session(unsigned int xid, struct cifsSesInfo *pSesInfo,
2770 struct nls_table *nls_info)
2774 struct TCP_Server_Info *server = pSesInfo->server;
2776 /* what if server changes its buffer size after dropping the session? */
2777 if (server->maxBuf == 0) /* no need to send on reconnect */ {
2778 rc = CIFSSMBNegotiate(xid, pSesInfo);
2779 if (rc == -EAGAIN) {
2780 /* retry only once on 1st time connection */
2781 rc = CIFSSMBNegotiate(xid, pSesInfo);
2786 spin_lock(&GlobalMid_Lock);
2787 if (server->tcpStatus != CifsExiting)
2788 server->tcpStatus = CifsGood;
2791 spin_unlock(&GlobalMid_Lock);
2800 pSesInfo->flags = 0;
2801 pSesInfo->capabilities = server->capabilities;
2802 if (linuxExtEnabled == 0)
2803 pSesInfo->capabilities &= (~CAP_UNIX);
2805 cFYI(1, ("Security Mode: 0x%x Capabilities: 0x%x TimeAdjust: %d",
2806 server->secMode, server->capabilities, server->timeAdj));
2808 rc = CIFS_SessSetup(xid, pSesInfo, first_time, nls_info);
2810 cERROR(1, ("Send error in SessSetup = %d", rc));
2812 cFYI(1, ("CIFS Session Established successfully"));
2813 spin_lock(&GlobalMid_Lock);
2814 pSesInfo->status = CifsGood;
2815 pSesInfo->need_reconnect = false;
2816 spin_unlock(&GlobalMid_Lock);