]> bbs.cooldavid.org Git - net-next-2.6.git/blame - fs/cifs/connect.c
git://bbs.cooldavid.org / net-next-2.6.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
cifs: clean up set_cifs_acl interfaces
[net-next-2.6.git] / fs / cifs / connect.c
CommitLineData
1da177e4
LT		 1/*
2 * fs/cifs/connect.c
3 *
d185cda7 4 * Copyright (C) International Business Machines Corp., 2002,2009
1da177e4
LT		 5 * Author(s): Steve French (sfrench@us.ibm.com)
6 *
7 * This library is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU Lesser General Public License as published
9 * by the Free Software Foundation; either version 2.1 of the License, or
10 * (at your option) any later version.
11 *
12 * This library is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See
15 * the GNU Lesser General Public License for more details.
16 *
17 * You should have received a copy of the GNU Lesser General Public License
18 * along with this library; if not, write to the Free Software
fb8c4b14 19 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
1da177e4
LT		 20 */
21#include <linux/fs.h>
22#include <linux/net.h>
23#include <linux/string.h>
24#include <linux/list.h>
25#include <linux/wait.h>
1da177e4
LT		 26#include <linux/pagemap.h>
27#include <linux/ctype.h>
28#include <linux/utsname.h>
29#include <linux/mempool.h>
b8643e1b 30#include <linux/delay.h>
f191401f 31#include <linux/completion.h>
aaf737ad 32#include <linux/kthread.h>
0ae0efad 33#include <linux/pagevec.h>
7dfb7103 34#include <linux/freezer.h>
5c2503a8 35#include <linux/namei.h>
1da177e4
LT		 36#include <asm/uaccess.h>
37#include <asm/processor.h>
0e2bedaa 38#include <net/ipv6.h>
1da177e4
LT		 39#include "cifspdu.h"
40#include "cifsglob.h"
41#include "cifsproto.h"
42#include "cifs_unicode.h"
43#include "cifs_debug.h"
44#include "cifs_fs_sb.h"
45#include "ntlmssp.h"
46#include "nterr.h"
47#include "rfc1002pdu.h"
a2653eba 48#include "cn_cifs.h"
1da177e4
LT		 49
50#define CIFS_PORT 445
51#define RFC1001_PORT 139
52
1da177e4
LT		 53extern void SMBNTencrypt(unsigned char *passwd, unsigned char *c8,
54 unsigned char *p24);
55
56extern mempool_t *cifs_req_poolp;
57
58struct smb_vol {
59 char *username;
60 char *password;
61 char *domainname;
62 char *UNC;
63 char *UNCip;
95b1cb90 64 char *in6_addr; /* ipv6 address as human readable form of in6_addr */
1da177e4
LT		 65 char *iocharset; /* local code page for mapping to and from Unicode */
66 char source_rfc1001_name[16]; /* netbios name of client */
a10faeb2 67 char target_rfc1001_name[16]; /* netbios name of server for Win9x/ME */
1da177e4
LT		 68 uid_t linux_uid;
69 gid_t linux_gid;
70 mode_t file_mode;
71 mode_t dir_mode;
189acaae 72 unsigned secFlg;
4b18f2a9
SF		 73 bool rw:1;
74 bool retry:1;
75 bool intr:1;
76 bool setuids:1;
77 bool override_uid:1;
78 bool override_gid:1;
d0a9c078 79 bool dynperm:1;
4b18f2a9
SF		 80 bool noperm:1;
81 bool no_psx_acl:1; /* set if posix acl support should be disabled */
82 bool cifs_acl:1;
83 bool no_xattr:1; /* set if xattr (EA) support should be disabled*/
84 bool server_ino:1; /* use inode numbers from server ie UniqueId */
85 bool direct_io:1;
95b1cb90
SF		 86 bool remap:1; /* set to remap seven reserved chars in filenames */
87 bool posix_paths:1; /* unset to not ask for posix pathnames. */
4b18f2a9
SF		 88 bool no_linux_ext:1;
89 bool sfu_emul:1;
95b1cb90
SF		 90 bool nullauth:1; /* attempt to authenticate with null user */
91 bool nocase:1; /* request case insensitive filenames */
92 bool nobrl:1; /* disable sending byte range locks to srv */
13a6e42a 93 bool mand_lock:1; /* send mandatory not posix byte range lock reqs */
95b1cb90 94 bool seal:1; /* request transport encryption on share */
84210e91
SF		 95 bool nodfs:1; /* Do not request DFS, even if available */
96 bool local_lease:1; /* check leases only on local system, not remote */
edf1ae40
SF		 97 bool noblocksnd:1;
98 bool noautotune:1;
be652445 99 bool nostrictsync:1; /* do not force expensive SMBflush on every sync */
1da177e4
LT		 100 unsigned int rsize;
101 unsigned int wsize;
102 unsigned int sockopt;
103 unsigned short int port;
fb8c4b14 104 char *prepath;
1da177e4
LT		 105};
106
bcf4b106 107static int ipv4_connect(struct TCP_Server_Info *server);
d5c5605c 108static int ipv6_connect(struct TCP_Server_Info *server);
1da177e4 109
d5c5605c
JL		 110/*
111 * cifs tcp session reconnection
112 *
113 * mark tcp session as reconnecting so temporarily locked
114 * mark all smb sessions as reconnecting for tcp session
115 * reconnect tcp session
116 * wake up waiters on reconnection? - (not needed currently)
117 */
2cd646a2 118static int
1da177e4
LT		 119cifs_reconnect(struct TCP_Server_Info *server)
120{
121 int rc = 0;
f1987b44 122 struct list_head *tmp, *tmp2;
1da177e4
LT		 123 struct cifsSesInfo *ses;
124 struct cifsTconInfo *tcon;
fb8c4b14 125 struct mid_q_entry *mid_entry;
50c2f753 126
1da177e4 127 spin_lock(&GlobalMid_Lock);
469ee614 128 if (server->tcpStatus == CifsExiting) {
fb8c4b14 129 /* the demux thread will exit normally
1da177e4
LT		 130 next time through the loop */
131 spin_unlock(&GlobalMid_Lock);
132 return rc;
133 } else
134 server->tcpStatus = CifsNeedReconnect;
135 spin_unlock(&GlobalMid_Lock);
136 server->maxBuf = 0;
137
e4eb295d 138 cFYI(1, ("Reconnecting tcp session"));
1da177e4
LT		 139
140 /* before reconnecting the tcp session, mark the smb session (uid)
141 and the tid bad so they are not used until reconnected */
14fbf50d
JL		 142 read_lock(&cifs_tcp_ses_lock);
143 list_for_each(tmp, &server->smb_ses_list) {
144 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
145 ses->need_reconnect = true;
146 ses->ipc_tid = 0;
f1987b44
JL		 147 list_for_each(tmp2, &ses->tcon_list) {
148 tcon = list_entry(tmp2, struct cifsTconInfo, tcon_list);
3b795210 149 tcon->need_reconnect = true;
1da177e4 150 }
1da177e4 151 }
f1987b44 152 read_unlock(&cifs_tcp_ses_lock);
1da177e4 153 /* do not want to be sending data on a socket we are freeing */
72ca545b 154 mutex_lock(&server->srv_mutex);
fb8c4b14 155 if (server->ssocket) {
467a8f8d 156 cFYI(1, ("State: 0x%x Flags: 0x%lx", server->ssocket->state,
1da177e4 157 server->ssocket->flags));
91cf45f0 158 kernel_sock_shutdown(server->ssocket, SHUT_WR);
fb8c4b14 159 cFYI(1, ("Post shutdown state: 0x%x Flags: 0x%lx",
467a8f8d 160 server->ssocket->state,
1da177e4
LT		 161 server->ssocket->flags));
162 sock_release(server->ssocket);
163 server->ssocket = NULL;
164 }
165
166 spin_lock(&GlobalMid_Lock);
167 list_for_each(tmp, &server->pending_mid_q) {
168 mid_entry = list_entry(tmp, struct
169 mid_q_entry,
170 qhead);
ad8b15f0 171 if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
09d1db5c
SF		 172 /* Mark other intransit requests as needing
173 retry so we do not immediately mark the
174 session bad again (ie after we reconnect
175 below) as they timeout too */
ad8b15f0 176 mid_entry->midState = MID_RETRY_NEEDED;
1da177e4
LT		 177 }
178 }
179 spin_unlock(&GlobalMid_Lock);
72ca545b 180 mutex_unlock(&server->srv_mutex);
1da177e4 181
469ee614
JL		 182 while ((server->tcpStatus != CifsExiting) &&
183 (server->tcpStatus != CifsGood)) {
6c3d8909 184 try_to_freeze();
bcf4b106 185 if (server->addr.sockAddr6.sin6_family == AF_INET6)
d5c5605c 186 rc = ipv6_connect(server);
bcf4b106
JL		 187 else
188 rc = ipv4_connect(server);
fb8c4b14
SF		 189 if (rc) {
190 cFYI(1, ("reconnect error %d", rc));
0cb766ae 191 msleep(3000);
1da177e4
LT		 192 } else {
193 atomic_inc(&tcpSesReconnectCount);
194 spin_lock(&GlobalMid_Lock);
469ee614 195 if (server->tcpStatus != CifsExiting)
1da177e4 196 server->tcpStatus = CifsGood;
ad009ac9 197 server->sequence_number = 0;
fb8c4b14 198 spin_unlock(&GlobalMid_Lock);
1da177e4
LT		 199 /* atomic_set(&server->inFlight,0);*/
200 wake_up(&server->response_q);
201 }
202 }
203 return rc;
204}
205
fb8c4b14 206/*
e4eb295d
SF		 207 return codes:
208 0 not a transact2, or all data present
209 >0 transact2 with that much data missing
210 -EINVAL = invalid transact2
211
212 */
fb8c4b14 213static int check2ndT2(struct smb_hdr *pSMB, unsigned int maxBufSize)
e4eb295d 214{
fb8c4b14
SF		 215 struct smb_t2_rsp *pSMBt;
216 int total_data_size;
e4eb295d
SF		 217 int data_in_this_rsp;
218 int remaining;
219
fb8c4b14 220 if (pSMB->Command != SMB_COM_TRANSACTION2)
e4eb295d
SF		 221 return 0;
222
fb8c4b14
SF		 223 /* check for plausible wct, bcc and t2 data and parm sizes */
224 /* check for parm and data offset going beyond end of smb */
225 if (pSMB->WordCount != 10) { /* coalesce_t2 depends on this */
467a8f8d 226 cFYI(1, ("invalid transact2 word count"));
e4eb295d
SF		 227 return -EINVAL;
228 }
229
230 pSMBt = (struct smb_t2_rsp *)pSMB;
231
232 total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
233 data_in_this_rsp = le16_to_cpu(pSMBt->t2_rsp.DataCount);
234
235 remaining = total_data_size - data_in_this_rsp;
236
fb8c4b14 237 if (remaining == 0)
e4eb295d 238 return 0;
fb8c4b14 239 else if (remaining < 0) {
467a8f8d 240 cFYI(1, ("total data %d smaller than data in frame %d",
e4eb295d
SF		 241 total_data_size, data_in_this_rsp));
242 return -EINVAL;
243 } else {
467a8f8d 244 cFYI(1, ("missing %d bytes from transact2, check next response",
e4eb295d 245 remaining));
fb8c4b14
SF		 246 if (total_data_size > maxBufSize) {
247 cERROR(1, ("TotalDataSize %d is over maximum buffer %d",
248 total_data_size, maxBufSize));
249 return -EINVAL;
e4eb295d
SF		 250 }
251 return remaining;
252 }
253}
254
fb8c4b14 255static int coalesce_t2(struct smb_hdr *psecond, struct smb_hdr *pTargetSMB)
e4eb295d
SF		 256{
257 struct smb_t2_rsp *pSMB2 = (struct smb_t2_rsp *)psecond;
258 struct smb_t2_rsp *pSMBt = (struct smb_t2_rsp *)pTargetSMB;
259 int total_data_size;
260 int total_in_buf;
261 int remaining;
262 int total_in_buf2;
fb8c4b14
SF		 263 char *data_area_of_target;
264 char *data_area_of_buf2;
e4eb295d
SF		 265 __u16 byte_count;
266
267 total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
268
fb8c4b14 269 if (total_data_size != le16_to_cpu(pSMB2->t2_rsp.TotalDataCount)) {
63135e08 270 cFYI(1, ("total data size of primary and secondary t2 differ"));
e4eb295d
SF		 271 }
272
273 total_in_buf = le16_to_cpu(pSMBt->t2_rsp.DataCount);
274
275 remaining = total_data_size - total_in_buf;
50c2f753 276
fb8c4b14 277 if (remaining < 0)
e4eb295d
SF		 278 return -EINVAL;
279
fb8c4b14 280 if (remaining == 0) /* nothing to do, ignore */
e4eb295d 281 return 0;
50c2f753 282
e4eb295d 283 total_in_buf2 = le16_to_cpu(pSMB2->t2_rsp.DataCount);
fb8c4b14 284 if (remaining < total_in_buf2) {
467a8f8d 285 cFYI(1, ("transact2 2nd response contains too much data"));
e4eb295d
SF		 286 }
287
288 /* find end of first SMB data area */
fb8c4b14 289 data_area_of_target = (char *)&pSMBt->hdr.Protocol +
e4eb295d
SF		 290 le16_to_cpu(pSMBt->t2_rsp.DataOffset);
291 /* validate target area */
292
293 data_area_of_buf2 = (char *) &pSMB2->hdr.Protocol +
fb8c4b14 294 le16_to_cpu(pSMB2->t2_rsp.DataOffset);
e4eb295d
SF		 295
296 data_area_of_target += total_in_buf;
297
298 /* copy second buffer into end of first buffer */
fb8c4b14 299 memcpy(data_area_of_target, data_area_of_buf2, total_in_buf2);
e4eb295d
SF		 300 total_in_buf += total_in_buf2;
301 pSMBt->t2_rsp.DataCount = cpu_to_le16(total_in_buf);
302 byte_count = le16_to_cpu(BCC_LE(pTargetSMB));
303 byte_count += total_in_buf2;
304 BCC_LE(pTargetSMB) = cpu_to_le16(byte_count);
305
70ca734a 306 byte_count = pTargetSMB->smb_buf_length;
e4eb295d
SF		 307 byte_count += total_in_buf2;
308
309 /* BB also add check that we are not beyond maximum buffer size */
50c2f753 310
70ca734a 311 pTargetSMB->smb_buf_length = byte_count;
e4eb295d 312
fb8c4b14 313 if (remaining == total_in_buf2) {
467a8f8d 314 cFYI(1, ("found the last secondary response"));
e4eb295d
SF		 315 return 0; /* we are done */
316 } else /* more responses to go */
317 return 1;
318
319}
320
1da177e4
LT		 321static int
322cifs_demultiplex_thread(struct TCP_Server_Info *server)
323{
324 int length;
325 unsigned int pdu_length, total_read;
326 struct smb_hdr *smb_buffer = NULL;
b8643e1b
SF		 327 struct smb_hdr *bigbuf = NULL;
328 struct smb_hdr *smallbuf = NULL;
1da177e4
LT		 329 struct msghdr smb_msg;
330 struct kvec iov;
331 struct socket *csocket = server->ssocket;
332 struct list_head *tmp;
333 struct cifsSesInfo *ses;
334 struct task_struct *task_to_wake = NULL;
335 struct mid_q_entry *mid_entry;
70ca734a 336 char temp;
4b18f2a9
SF		 337 bool isLargeBuf = false;
338 bool isMultiRsp;
e4eb295d 339 int reconnect;
1da177e4 340
1da177e4 341 current->flags |= PF_MEMALLOC;
ba25f9dc 342 cFYI(1, ("Demultiplex PID: %d", task_pid_nr(current)));
93d0ec85
JL		 343
344 length = atomic_inc_return(&tcpSesAllocCount);
345 if (length > 1)
26f57364
SF		 346 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
347 GFP_KERNEL);
1da177e4 348
83144186 349 set_freezable();
469ee614 350 while (server->tcpStatus != CifsExiting) {
ede1327e
SF		 351 if (try_to_freeze())
352 continue;
b8643e1b
SF		 353 if (bigbuf == NULL) {
354 bigbuf = cifs_buf_get();
0fd1ffe0
PM		 355 if (!bigbuf) {
356 cERROR(1, ("No memory for large SMB response"));
b8643e1b
SF		 357 msleep(3000);
358 /* retry will check if exiting */
359 continue;
360 }
0fd1ffe0
PM		 361 } else if (isLargeBuf) {
362 /* we are reusing a dirty large buf, clear its start */
26f57364 363 memset(bigbuf, 0, sizeof(struct smb_hdr));
1da177e4 364 }
b8643e1b
SF		 365
366 if (smallbuf == NULL) {
367 smallbuf = cifs_small_buf_get();
0fd1ffe0
PM		 368 if (!smallbuf) {
369 cERROR(1, ("No memory for SMB response"));
b8643e1b
SF		 370 msleep(1000);
371 /* retry will check if exiting */
372 continue;
373 }
374 /* beginning of smb buffer is cleared in our buf_get */
375 } else /* if existing small buf clear beginning */
26f57364 376 memset(smallbuf, 0, sizeof(struct smb_hdr));
b8643e1b 377
4b18f2a9
SF		 378 isLargeBuf = false;
379 isMultiRsp = false;
b8643e1b 380 smb_buffer = smallbuf;
1da177e4
LT		 381 iov.iov_base = smb_buffer;
382 iov.iov_len = 4;
383 smb_msg.msg_control = NULL;
384 smb_msg.msg_controllen = 0;
f01d5e14
SF		 385 pdu_length = 4; /* enough to get RFC1001 header */
386incomplete_rcv:
1da177e4
LT		 387 length =
388 kernel_recvmsg(csocket, &smb_msg,
f01d5e14 389 &iov, 1, pdu_length, 0 /* BB other flags? */);
1da177e4 390
469ee614 391 if (server->tcpStatus == CifsExiting) {
1da177e4
LT		 392 break;
393 } else if (server->tcpStatus == CifsNeedReconnect) {
0fd1ffe0 394 cFYI(1, ("Reconnect after server stopped responding"));
1da177e4 395 cifs_reconnect(server);
0fd1ffe0 396 cFYI(1, ("call to reconnect done"));
1da177e4
LT		 397 csocket = server->ssocket;
398 continue;
399 } else if ((length == -ERESTARTSYS) || (length == -EAGAIN)) {
b8643e1b 400 msleep(1); /* minimum sleep to prevent looping
1da177e4
LT		 401 allowing socket to clear and app threads to set
402 tcpStatus CifsNeedReconnect if server hung */
c527c8a7
SF		 403 if (pdu_length < 4) {
404 iov.iov_base = (4 - pdu_length) +
405 (char *)smb_buffer;
406 iov.iov_len = pdu_length;
407 smb_msg.msg_control = NULL;
408 smb_msg.msg_controllen = 0;
c18c732e 409 goto incomplete_rcv;
c527c8a7 410 } else
c18c732e 411 continue;
1da177e4 412 } else if (length <= 0) {
0fd1ffe0
PM		 413 if (server->tcpStatus == CifsNew) {
414 cFYI(1, ("tcp session abend after SMBnegprot"));
09d1db5c
SF		 415 /* some servers kill the TCP session rather than
416 returning an SMB negprot error, in which
417 case reconnecting here is not going to help,
418 and so simply return error to mount */
1da177e4
LT		 419 break;
420 }
0fd1ffe0 421 if (!try_to_freeze() && (length == -EINTR)) {
467a8f8d 422 cFYI(1, ("cifsd thread killed"));
1da177e4
LT		 423 break;
424 }
467a8f8d 425 cFYI(1, ("Reconnect after unexpected peek error %d",
57337e42 426 length));
1da177e4
LT		 427 cifs_reconnect(server);
428 csocket = server->ssocket;
429 wake_up(&server->response_q);
430 continue;
2a974680
PT		 431 } else if (length < pdu_length) {
432 cFYI(1, ("requested %d bytes but only got %d bytes",
433 pdu_length, length));
f01d5e14 434 pdu_length -= length;
f01d5e14
SF		 435 msleep(1);
436 goto incomplete_rcv;
46810cbf 437 }
1da177e4 438
70ca734a
SF		 439 /* The right amount was read from socket - 4 bytes */
440 /* so we can now interpret the length field */
46810cbf 441
70ca734a
SF		 442 /* the first byte big endian of the length field,
443 is actually not part of the length but the type
444 with the most common, zero, as regular data */
445 temp = *((char *) smb_buffer);
46810cbf 446
fb8c4b14 447 /* Note that FC 1001 length is big endian on the wire,
70ca734a
SF		 448 but we convert it here so it is always manipulated
449 as host byte order */
5ca33c6a 450 pdu_length = be32_to_cpu((__force __be32)smb_buffer->smb_buf_length);
70ca734a
SF		 451 smb_buffer->smb_buf_length = pdu_length;
452
467a8f8d 453 cFYI(1, ("rfc1002 length 0x%x", pdu_length+4));
46810cbf 454
70ca734a 455 if (temp == (char) RFC1002_SESSION_KEEP_ALIVE) {
fb8c4b14 456 continue;
70ca734a 457 } else if (temp == (char)RFC1002_POSITIVE_SESSION_RESPONSE) {
467a8f8d 458 cFYI(1, ("Good RFC 1002 session rsp"));
e4eb295d 459 continue;
70ca734a 460 } else if (temp == (char)RFC1002_NEGATIVE_SESSION_RESPONSE) {
fb8c4b14 461 /* we get this from Windows 98 instead of
46810cbf 462 an error on SMB negprot response */
fb8c4b14 463 cFYI(1, ("Negative RFC1002 Session Response Error 0x%x)",
70ca734a 464 pdu_length));
fb8c4b14
SF		 465 if (server->tcpStatus == CifsNew) {
466 /* if nack on negprot (rather than
46810cbf
SF		 467 ret of smb negprot error) reconnecting
468 not going to help, ret error to mount */
469 break;
470 } else {
471 /* give server a second to
472 clean up before reconnect attempt */
473 msleep(1000);
474 /* always try 445 first on reconnect
475 since we get NACK on some if we ever
fb8c4b14 476 connected to port 139 (the NACK is
46810cbf
SF		 477 since we do not begin with RFC1001
478 session initialize frame) */
fb8c4b14 479 server->addr.sockAddr.sin_port =
46810cbf 480 htons(CIFS_PORT);
1da177e4
LT		 481 cifs_reconnect(server);
482 csocket = server->ssocket;
46810cbf 483 wake_up(&server->response_q);
1da177e4 484 continue;
46810cbf 485 }
70ca734a 486 } else if (temp != (char) 0) {
fb8c4b14 487 cERROR(1, ("Unknown RFC 1002 frame"));
70ca734a
SF		 488 cifs_dump_mem(" Received Data: ", (char *)smb_buffer,
489 length);
46810cbf
SF		 490 cifs_reconnect(server);
491 csocket = server->ssocket;
492 continue;
e4eb295d
SF		 493 }
494
495 /* else we have an SMB response */
fb8c4b14 496 if ((pdu_length > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE - 4) ||
26f57364 497 (pdu_length < sizeof(struct smb_hdr) - 1 - 4)) {
e4eb295d 498 cERROR(1, ("Invalid size SMB length %d pdu_length %d",
46810cbf 499 length, pdu_length+4));
e4eb295d
SF		 500 cifs_reconnect(server);
501 csocket = server->ssocket;
502 wake_up(&server->response_q);
503 continue;
fb8c4b14 504 }
e4eb295d
SF		 505
506 /* else length ok */
507 reconnect = 0;
508
fb8c4b14 509 if (pdu_length > MAX_CIFS_SMALL_BUFFER_SIZE - 4) {
4b18f2a9 510 isLargeBuf = true;
e4eb295d
SF		 511 memcpy(bigbuf, smallbuf, 4);
512 smb_buffer = bigbuf;
513 }
514 length = 0;
515 iov.iov_base = 4 + (char *)smb_buffer;
516 iov.iov_len = pdu_length;
fb8c4b14 517 for (total_read = 0; total_read < pdu_length;
e4eb295d
SF		 518 total_read += length) {
519 length = kernel_recvmsg(csocket, &smb_msg, &iov, 1,
520 pdu_length - total_read, 0);
469ee614 521 if ((server->tcpStatus == CifsExiting) ||
e4eb295d
SF		 522 (length == -EINTR)) {
523 /* then will exit */
524 reconnect = 2;
525 break;
526 } else if (server->tcpStatus == CifsNeedReconnect) {
46810cbf
SF		 527 cifs_reconnect(server);
528 csocket = server->ssocket;
fb8c4b14 529 /* Reconnect wakes up rspns q */
e4eb295d
SF		 530 /* Now we will reread sock */
531 reconnect = 1;
532 break;
fb8c4b14 533 } else if ((length == -ERESTARTSYS) ||
e4eb295d
SF		 534 (length == -EAGAIN)) {
535 msleep(1); /* minimum sleep to prevent looping,
fb8c4b14 536 allowing socket to clear and app
e4eb295d
SF		 537 threads to set tcpStatus
538 CifsNeedReconnect if server hung*/
c18c732e 539 length = 0;
46810cbf 540 continue;
e4eb295d 541 } else if (length <= 0) {
fb8c4b14 542 cERROR(1, ("Received no data, expecting %d",
e4eb295d
SF		 543 pdu_length - total_read));
544 cifs_reconnect(server);
545 csocket = server->ssocket;
546 reconnect = 1;
547 break;
46810cbf 548 }
e4eb295d 549 }
fb8c4b14 550 if (reconnect == 2)
e4eb295d 551 break;
fb8c4b14 552 else if (reconnect == 1)
e4eb295d 553 continue;
1da177e4 554
e4eb295d 555 length += 4; /* account for rfc1002 hdr */
50c2f753 556
09d1db5c 557
e4eb295d 558 dump_smb(smb_buffer, length);
184ed211 559 if (checkSMB(smb_buffer, smb_buffer->Mid, total_read+4)) {
b387eaeb 560 cifs_dump_mem("Bad SMB: ", smb_buffer, 48);
e4eb295d
SF		 561 continue;
562 }
1da177e4 563
e4eb295d
SF		 564
565 task_to_wake = NULL;
566 spin_lock(&GlobalMid_Lock);
567 list_for_each(tmp, &server->pending_mid_q) {
568 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
569
50c2f753 570 if ((mid_entry->mid == smb_buffer->Mid) &&
e4eb295d
SF		 571 (mid_entry->midState == MID_REQUEST_SUBMITTED) &&
572 (mid_entry->command == smb_buffer->Command)) {
fb8c4b14 573 if (check2ndT2(smb_buffer,server->maxBuf) > 0) {
e4eb295d 574 /* We have a multipart transact2 resp */
4b18f2a9 575 isMultiRsp = true;
fb8c4b14 576 if (mid_entry->resp_buf) {
e4eb295d 577 /* merge response - fix up 1st*/
50c2f753 578 if (coalesce_t2(smb_buffer,
e4eb295d 579 mid_entry->resp_buf)) {
4b18f2a9
SF		 580 mid_entry->multiRsp =
581 true;
e4eb295d
SF		 582 break;
583 } else {
584 /* all parts received */
4b18f2a9
SF		 585 mid_entry->multiEnd =
586 true;
50c2f753 587 goto multi_t2_fnd;
e4eb295d
SF		 588 }
589 } else {
fb8c4b14 590 if (!isLargeBuf) {
e4eb295d
SF		 591 cERROR(1,("1st trans2 resp needs bigbuf"));
592 /* BB maybe we can fix this up, switch
50c2f753 593 to already allocated large buffer? */
e4eb295d 594 } else {
cd63499c 595 /* Have first buffer */
e4eb295d
SF		 596 mid_entry->resp_buf =
597 smb_buffer;
4b18f2a9
SF		 598 mid_entry->largeBuf =
599 true;
e4eb295d
SF		 600 bigbuf = NULL;
601 }
602 }
603 break;
50c2f753 604 }
e4eb295d 605 mid_entry->resp_buf = smb_buffer;
4b18f2a9 606 mid_entry->largeBuf = isLargeBuf;
e4eb295d
SF		 607multi_t2_fnd:
608 task_to_wake = mid_entry->tsk;
609 mid_entry->midState = MID_RESPONSE_RECEIVED;
1047abc1
SF		 610#ifdef CONFIG_CIFS_STATS2
611 mid_entry->when_received = jiffies;
612#endif
3a5ff61c
SF		 613 /* so we do not time out requests to server
614 which is still responding (since server could
615 be busy but not dead) */
616 server->lstrp = jiffies;
e4eb295d 617 break;
46810cbf 618 }
1da177e4 619 }
e4eb295d
SF		 620 spin_unlock(&GlobalMid_Lock);
621 if (task_to_wake) {
cd63499c 622 /* Was previous buf put in mpx struct for multi-rsp? */
fb8c4b14 623 if (!isMultiRsp) {
cd63499c 624 /* smb buffer will be freed by user thread */
26f57364 625 if (isLargeBuf)
cd63499c 626 bigbuf = NULL;
26f57364 627 else
cd63499c
SF		 628 smallbuf = NULL;
629 }
e4eb295d 630 wake_up_process(task_to_wake);
4b18f2a9
SF		 631 } else if (!is_valid_oplock_break(smb_buffer, server) &&
632 !isMultiRsp) {
50c2f753
SF		 633 cERROR(1, ("No task to wake, unknown frame received! "
634 "NumMids %d", midCount.counter));
635 cifs_dump_mem("Received Data is: ", (char *)smb_buffer,
70ca734a 636 sizeof(struct smb_hdr));
3979877e
SF		 637#ifdef CONFIG_CIFS_DEBUG2
638 cifs_dump_detail(smb_buffer);
639 cifs_dump_mids(server);
640#endif /* CIFS_DEBUG2 */
50c2f753 641
e4eb295d
SF		 642 }
643 } /* end while !EXITING */
644
e7ddee90
JL		 645 /* take it off the list, if it's not already */
646 write_lock(&cifs_tcp_ses_lock);
647 list_del_init(&server->tcp_ses_list);
648 write_unlock(&cifs_tcp_ses_lock);
649
1da177e4
LT		 650 spin_lock(&GlobalMid_Lock);
651 server->tcpStatus = CifsExiting;
e691b9d1 652 spin_unlock(&GlobalMid_Lock);
dbdbb876 653 wake_up_all(&server->response_q);
e691b9d1 654
31ca3bc3
SF		 655 /* check if we have blocked requests that need to free */
656 /* Note that cifs_max_pending is normally 50, but
657 can be set at module install time to as little as two */
e691b9d1 658 spin_lock(&GlobalMid_Lock);
fb8c4b14 659 if (atomic_read(&server->inFlight) >= cifs_max_pending)
31ca3bc3
SF		 660 atomic_set(&server->inFlight, cifs_max_pending - 1);
661 /* We do not want to set the max_pending too low or we
662 could end up with the counter going negative */
1da177e4 663 spin_unlock(&GlobalMid_Lock);
50c2f753 664 /* Although there should not be any requests blocked on
1da177e4 665 this queue it can not hurt to be paranoid and try to wake up requests
09d1db5c 666 that may haven been blocked when more than 50 at time were on the wire
1da177e4
LT		 667 to the same server - they now will see the session is in exit state
668 and get out of SendReceive. */
669 wake_up_all(&server->request_q);
670 /* give those requests time to exit */
b8643e1b 671 msleep(125);
50c2f753 672
fb8c4b14 673 if (server->ssocket) {
1da177e4
LT		 674 sock_release(csocket);
675 server->ssocket = NULL;
676 }
b8643e1b 677 /* buffer usuallly freed in free_mid - need to free it here on exit */
a8a11d39
MK		 678 cifs_buf_release(bigbuf);
679 if (smallbuf) /* no sense logging a debug message if NULL */
b8643e1b 680 cifs_small_buf_release(smallbuf);
1da177e4 681
14fbf50d
JL		 682 /*
683 * BB: we shouldn't have to do any of this. It shouldn't be
684 * possible to exit from the thread with active SMB sessions
685 */
686 read_lock(&cifs_tcp_ses_lock);
1da177e4 687 if (list_empty(&server->pending_mid_q)) {
09d1db5c
SF		 688 /* loop through server session structures attached to this and
689 mark them dead */
14fbf50d
JL		 690 list_for_each(tmp, &server->smb_ses_list) {
691 ses = list_entry(tmp, struct cifsSesInfo,
692 smb_ses_list);
693 ses->status = CifsExiting;
694 ses->server = NULL;
1da177e4 695 }
14fbf50d 696 read_unlock(&cifs_tcp_ses_lock);
1da177e4 697 } else {
31ca3bc3
SF		 698 /* although we can not zero the server struct pointer yet,
699 since there are active requests which may depnd on them,
700 mark the corresponding SMB sessions as exiting too */
14fbf50d 701 list_for_each(tmp, &server->smb_ses_list) {
31ca3bc3 702 ses = list_entry(tmp, struct cifsSesInfo,
14fbf50d
JL		 703 smb_ses_list);
704 ses->status = CifsExiting;
31ca3bc3
SF		 705 }
706
1da177e4
LT		 707 spin_lock(&GlobalMid_Lock);
708 list_for_each(tmp, &server->pending_mid_q) {
709 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
710 if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
50c2f753
SF		 711 cFYI(1, ("Clearing Mid 0x%x - waking up ",
712 mid_entry->mid));
1da177e4 713 task_to_wake = mid_entry->tsk;
26f57364 714 if (task_to_wake)
1da177e4 715 wake_up_process(task_to_wake);
1da177e4
LT		 716 }
717 }
718 spin_unlock(&GlobalMid_Lock);
14fbf50d 719 read_unlock(&cifs_tcp_ses_lock);
1da177e4 720 /* 1/8th of sec is more than enough time for them to exit */
b8643e1b 721 msleep(125);
1da177e4
LT		 722 }
723
f191401f 724 if (!list_empty(&server->pending_mid_q)) {
50c2f753 725 /* mpx threads have not exited yet give them
1da177e4 726 at least the smb send timeout time for long ops */
31ca3bc3
SF		 727 /* due to delays on oplock break requests, we need
728 to wait at least 45 seconds before giving up
729 on a request getting a response and going ahead
730 and killing cifsd */
1da177e4 731 cFYI(1, ("Wait for exit from demultiplex thread"));
31ca3bc3 732 msleep(46000);
1da177e4
LT		 733 /* if threads still have not exited they are probably never
734 coming home not much else we can do but free the memory */
735 }
1da177e4 736
31ca3bc3
SF		 737 /* last chance to mark ses pointers invalid
738 if there are any pointing to this (e.g
50c2f753 739 if a crazy root user tried to kill cifsd
31ca3bc3 740 kernel thread explicitly this might happen) */
14fbf50d
JL		 741 /* BB: This shouldn't be necessary, see above */
742 read_lock(&cifs_tcp_ses_lock);
743 list_for_each(tmp, &server->smb_ses_list) {
744 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
745 ses->server = NULL;
31ca3bc3 746 }
14fbf50d 747 read_unlock(&cifs_tcp_ses_lock);
31ca3bc3 748
c359cf3c 749 kfree(server->hostname);
b1c8d2b4 750 task_to_wake = xchg(&server->tsk, NULL);
31ca3bc3 751 kfree(server);
93d0ec85
JL		 752
753 length = atomic_dec_return(&tcpSesAllocCount);
26f57364
SF		 754 if (length > 0)
755 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
756 GFP_KERNEL);
50c2f753 757
b1c8d2b4
JL		 758 /* if server->tsk was NULL then wait for a signal before exiting */
759 if (!task_to_wake) {
760 set_current_state(TASK_INTERRUPTIBLE);
761 while (!signal_pending(current)) {
762 schedule();
763 set_current_state(TASK_INTERRUPTIBLE);
764 }
765 set_current_state(TASK_RUNNING);
766 }
767
0468a2cf 768 module_put_and_exit(0);
1da177e4
LT		 769}
770
c359cf3c
JL		 771/* extract the host portion of the UNC string */
772static char *
773extract_hostname(const char *unc)
774{
775 const char *src;
776 char *dst, *delim;
777 unsigned int len;
778
779 /* skip double chars at beginning of string */
780 /* BB: check validity of these bytes? */
781 src = unc + 2;
782
783 /* delimiter between hostname and sharename is always '\\' now */
784 delim = strchr(src, '\\');
785 if (!delim)
786 return ERR_PTR(-EINVAL);
787
788 len = delim - src;
789 dst = kmalloc((len + 1), GFP_KERNEL);
790 if (dst == NULL)
791 return ERR_PTR(-ENOMEM);
792
793 memcpy(dst, src, len);
794 dst[len] = '\0';
795
796 return dst;
797}
798
1da177e4 799static int
50c2f753
SF		 800cifs_parse_mount_options(char *options, const char *devname,
801 struct smb_vol *vol)
1da177e4
LT		 802{
803 char *value;
804 char *data;
805 unsigned int temp_len, i, j;
806 char separator[2];
807
808 separator[0] = ',';
50c2f753 809 separator[1] = 0;
1da177e4 810
12e36b2f 811 if (Local_System_Name[0] != 0)
50c2f753 812 memcpy(vol->source_rfc1001_name, Local_System_Name, 15);
2cd646a2 813 else {
12e36b2f 814 char *nodename = utsname()->nodename;
50c2f753
SF		 815 int n = strnlen(nodename, 15);
816 memset(vol->source_rfc1001_name, 0x20, 15);
817 for (i = 0; i < n; i++) {
2cd646a2
SF		 818 /* does not have to be perfect mapping since field is
819 informational, only used for servers that do not support
820 port 445 and it can be overridden at mount time */
12e36b2f 821 vol->source_rfc1001_name[i] = toupper(nodename[i]);
2cd646a2 822 }
1da177e4
LT		 823 }
824 vol->source_rfc1001_name[15] = 0;
a10faeb2
SF		 825 /* null target name indicates to use *SMBSERVR default called name
826 if we end up sending RFC1001 session initialize */
827 vol->target_rfc1001_name[0] = 0;
a001e5b5
DH		 828 vol->linux_uid = current_uid(); /* use current_euid() instead? */
829 vol->linux_gid = current_gid();
f55ed1a8
JL		 830
831 /* default to only allowing write access to owner of the mount */
832 vol->dir_mode = vol->file_mode = S_IRUGO | S_IXUGO | S_IWUSR;
1da177e4
LT		 833
834 /* vol->retry default is 0 (i.e. "soft" limited retry not hard retry) */
4b18f2a9 835 vol->rw = true;
ac67055e
JA		 836 /* default is always to request posix paths. */
837 vol->posix_paths = 1;
a0c9217f
JL		 838 /* default to using server inode numbers where available */
839 vol->server_ino = 1;
ac67055e 840
1da177e4
LT		 841 if (!options)
842 return 1;
843
50c2f753 844 if (strncmp(options, "sep=", 4) == 0) {
fb8c4b14 845 if (options[4] != 0) {
1da177e4
LT		 846 separator[0] = options[4];
847 options += 5;
848 } else {
467a8f8d 849 cFYI(1, ("Null separator not allowed"));
1da177e4
LT		 850 }
851 }
50c2f753 852
1da177e4
LT		 853 while ((data = strsep(&options, separator)) != NULL) {
854 if (!*data)
855 continue;
856 if ((value = strchr(data, '=')) != NULL)
857 *value++ = '\0';
858
50c2f753
SF		 859 /* Have to parse this before we parse for "user" */
860 if (strnicmp(data, "user_xattr", 10) == 0) {
1da177e4 861 vol->no_xattr = 0;
50c2f753 862 } else if (strnicmp(data, "nouser_xattr", 12) == 0) {
1da177e4
LT		 863 vol->no_xattr = 1;
864 } else if (strnicmp(data, "user", 4) == 0) {
4b952a9b 865 if (!value) {
1da177e4
LT		 866 printk(KERN_WARNING
867 "CIFS: invalid or missing username\n");
868 return 1; /* needs_arg; */
fb8c4b14 869 } else if (!*value) {
4b952a9b
SF		 870 /* null user, ie anonymous, authentication */
871 vol->nullauth = 1;
1da177e4
LT		 872 }
873 if (strnlen(value, 200) < 200) {
874 vol->username = value;
875 } else {
876 printk(KERN_WARNING "CIFS: username too long\n");
877 return 1;
878 }
879 } else if (strnicmp(data, "pass", 4) == 0) {
880 if (!value) {
881 vol->password = NULL;
882 continue;
fb8c4b14 883 } else if (value[0] == 0) {
1da177e4
LT		 884 /* check if string begins with double comma
885 since that would mean the password really
886 does start with a comma, and would not
887 indicate an empty string */
fb8c4b14 888 if (value[1] != separator[0]) {
1da177e4
LT		 889 vol->password = NULL;
890 continue;
891 }
892 }
893 temp_len = strlen(value);
894 /* removed password length check, NTLM passwords
895 can be arbitrarily long */
896
50c2f753 897 /* if comma in password, the string will be
1da177e4
LT		 898 prematurely null terminated. Commas in password are
899 specified across the cifs mount interface by a double
900 comma ie ,, and a comma used as in other cases ie ','
901 as a parameter delimiter/separator is single and due
902 to the strsep above is temporarily zeroed. */
903
904 /* NB: password legally can have multiple commas and
905 the only illegal character in a password is null */
906
50c2f753 907 if ((value[temp_len] == 0) &&
09d1db5c 908 (value[temp_len+1] == separator[0])) {
1da177e4
LT		 909 /* reinsert comma */
910 value[temp_len] = separator[0];
50c2f753
SF		 911 temp_len += 2; /* move after second comma */
912 while (value[temp_len] != 0) {
1da177e4 913 if (value[temp_len] == separator[0]) {
50c2f753 914 if (value[temp_len+1] ==
09d1db5c
SF		 915 separator[0]) {
916 /* skip second comma */
917 temp_len++;
50c2f753 918 } else {
1da177e4
LT		 919 /* single comma indicating start
920 of next parm */
921 break;
922 }
923 }
924 temp_len++;
925 }
fb8c4b14 926 if (value[temp_len] == 0) {
1da177e4
LT		 927 options = NULL;
928 } else {
929 value[temp_len] = 0;
930 /* point option to start of next parm */
931 options = value + temp_len + 1;
932 }
50c2f753 933 /* go from value to value + temp_len condensing
1da177e4
LT		 934 double commas to singles. Note that this ends up
935 allocating a few bytes too many, which is ok */
e915fc49 936 vol->password = kzalloc(temp_len, GFP_KERNEL);
fb8c4b14 937 if (vol->password == NULL) {
50c2f753
SF		 938 printk(KERN_WARNING "CIFS: no memory "
939 "for password\n");
433dc24f
SF		 940 return 1;
941 }
50c2f753 942 for (i = 0, j = 0; i < temp_len; i++, j++) {
1da177e4 943 vol->password[j] = value[i];
fb8c4b14 944 if (value[i] == separator[0]
09d1db5c 945 && value[i+1] == separator[0]) {
1da177e4
LT		 946 /* skip second comma */
947 i++;
948 }
949 }
950 vol->password[j] = 0;
951 } else {
e915fc49 952 vol->password = kzalloc(temp_len+1, GFP_KERNEL);
fb8c4b14 953 if (vol->password == NULL) {
50c2f753
SF		 954 printk(KERN_WARNING "CIFS: no memory "
955 "for password\n");
433dc24f
SF		 956 return 1;
957 }
1da177e4
LT		 958 strcpy(vol->password, value);
959 }
960 } else if (strnicmp(data, "ip", 2) == 0) {
961 if (!value || !*value) {
962 vol->UNCip = NULL;
963 } else if (strnlen(value, 35) < 35) {
964 vol->UNCip = value;
965 } else {
50c2f753
SF		 966 printk(KERN_WARNING "CIFS: ip address "
967 "too long\n");
1da177e4
LT		 968 return 1;
969 }
50c2f753
SF		 970 } else if (strnicmp(data, "sec", 3) == 0) {
971 if (!value || !*value) {
972 cERROR(1, ("no security value specified"));
973 continue;
974 } else if (strnicmp(value, "krb5i", 5) == 0) {
975 vol->secFlg |= CIFSSEC_MAY_KRB5 |
189acaae 976 CIFSSEC_MUST_SIGN;
bf820679 977 } else if (strnicmp(value, "krb5p", 5) == 0) {
50c2f753
SF		 978 /* vol->secFlg |= CIFSSEC_MUST_SEAL |
979 CIFSSEC_MAY_KRB5; */
980 cERROR(1, ("Krb5 cifs privacy not supported"));
bf820679
SF		 981 return 1;
982 } else if (strnicmp(value, "krb5", 4) == 0) {
750d1151 983 vol->secFlg |= CIFSSEC_MAY_KRB5;
ac683924
SF		 984#ifdef CONFIG_CIFS_EXPERIMENTAL
985 } else if (strnicmp(value, "ntlmsspi", 8) == 0) {
986 vol->secFlg |= CIFSSEC_MAY_NTLMSSP |
987 CIFSSEC_MUST_SIGN;
988 } else if (strnicmp(value, "ntlmssp", 7) == 0) {
989 vol->secFlg |= CIFSSEC_MAY_NTLMSSP;
990#endif
bf820679 991 } else if (strnicmp(value, "ntlmv2i", 7) == 0) {
750d1151 992 vol->secFlg |= CIFSSEC_MAY_NTLMV2 |
189acaae 993 CIFSSEC_MUST_SIGN;
bf820679 994 } else if (strnicmp(value, "ntlmv2", 6) == 0) {
750d1151 995 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
bf820679 996 } else if (strnicmp(value, "ntlmi", 5) == 0) {
750d1151 997 vol->secFlg |= CIFSSEC_MAY_NTLM |
189acaae 998 CIFSSEC_MUST_SIGN;
bf820679
SF		 999 } else if (strnicmp(value, "ntlm", 4) == 0) {
1000 /* ntlm is default so can be turned off too */
750d1151 1001 vol->secFlg |= CIFSSEC_MAY_NTLM;
bf820679 1002 } else if (strnicmp(value, "nontlm", 6) == 0) {
189acaae 1003 /* BB is there a better way to do this? */
750d1151 1004 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
189acaae
SF		 1005#ifdef CONFIG_CIFS_WEAK_PW_HASH
1006 } else if (strnicmp(value, "lanman", 6) == 0) {
50c2f753 1007 vol->secFlg |= CIFSSEC_MAY_LANMAN;
189acaae 1008#endif
bf820679 1009 } else if (strnicmp(value, "none", 4) == 0) {
189acaae 1010 vol->nullauth = 1;
50c2f753
SF		 1011 } else {
1012 cERROR(1, ("bad security option: %s", value));
1013 return 1;
1014 }
1da177e4
LT		 1015 } else if ((strnicmp(data, "unc", 3) == 0)
1016 || (strnicmp(data, "target", 6) == 0)
1017 || (strnicmp(data, "path", 4) == 0)) {
1018 if (!value || !*value) {
50c2f753
SF		 1019 printk(KERN_WARNING "CIFS: invalid path to "
1020 "network resource\n");
1da177e4
LT		 1021 return 1; /* needs_arg; */
1022 }
1023 if ((temp_len = strnlen(value, 300)) < 300) {
50c2f753 1024 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
4523cc30 1025 if (vol->UNC == NULL)
1da177e4 1026 return 1;
50c2f753 1027 strcpy(vol->UNC, value);
1da177e4
LT		 1028 if (strncmp(vol->UNC, "//", 2) == 0) {
1029 vol->UNC[0] = '\\';
1030 vol->UNC[1] = '\\';
50c2f753 1031 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1da177e4 1032 printk(KERN_WARNING
50c2f753
SF		 1033 "CIFS: UNC Path does not begin "
1034 "with // or \\\\ \n");
1da177e4
LT		 1035 return 1;
1036 }
1037 } else {
1038 printk(KERN_WARNING "CIFS: UNC name too long\n");
1039 return 1;
1040 }
1041 } else if ((strnicmp(data, "domain", 3) == 0)
1042 || (strnicmp(data, "workgroup", 5) == 0)) {
1043 if (!value || !*value) {
1044 printk(KERN_WARNING "CIFS: invalid domain name\n");
1045 return 1; /* needs_arg; */
1046 }
1047 /* BB are there cases in which a comma can be valid in
1048 a domain name and need special handling? */
3979877e 1049 if (strnlen(value, 256) < 256) {
1da177e4
LT		 1050 vol->domainname = value;
1051 cFYI(1, ("Domain name set"));
1052 } else {
50c2f753
SF		 1053 printk(KERN_WARNING "CIFS: domain name too "
1054 "long\n");
1da177e4
LT		 1055 return 1;
1056 }
50c2f753
SF		 1057 } else if (strnicmp(data, "prefixpath", 10) == 0) {
1058 if (!value || !*value) {
1059 printk(KERN_WARNING
1060 "CIFS: invalid path prefix\n");
1061 return 1; /* needs_argument */
1062 }
1063 if ((temp_len = strnlen(value, 1024)) < 1024) {
4523cc30 1064 if (value[0] != '/')
2fe87f02 1065 temp_len++; /* missing leading slash */
50c2f753
SF		 1066 vol->prepath = kmalloc(temp_len+1, GFP_KERNEL);
1067 if (vol->prepath == NULL)
1068 return 1;
4523cc30 1069 if (value[0] != '/') {
2fe87f02 1070 vol->prepath[0] = '/';
50c2f753 1071 strcpy(vol->prepath+1, value);
2fe87f02 1072 } else
50c2f753
SF		 1073 strcpy(vol->prepath, value);
1074 cFYI(1, ("prefix path %s", vol->prepath));
1075 } else {
1076 printk(KERN_WARNING "CIFS: prefix too long\n");
1077 return 1;
1078 }
1da177e4
LT		 1079 } else if (strnicmp(data, "iocharset", 9) == 0) {
1080 if (!value || !*value) {
63135e08
SF		 1081 printk(KERN_WARNING "CIFS: invalid iocharset "
1082 "specified\n");
1da177e4
LT		 1083 return 1; /* needs_arg; */
1084 }
1085 if (strnlen(value, 65) < 65) {
50c2f753 1086 if (strnicmp(value, "default", 7))
1da177e4 1087 vol->iocharset = value;
50c2f753
SF		 1088 /* if iocharset not set then load_nls_default
1089 is used by caller */
1090 cFYI(1, ("iocharset set to %s", value));
1da177e4 1091 } else {
63135e08
SF		 1092 printk(KERN_WARNING "CIFS: iocharset name "
1093 "too long.\n");
1da177e4
LT		 1094 return 1;
1095 }
1096 } else if (strnicmp(data, "uid", 3) == 0) {
1097 if (value && *value) {
1098 vol->linux_uid =
1099 simple_strtoul(value, &value, 0);
4523cc30 1100 vol->override_uid = 1;
1da177e4
LT		 1101 }
1102 } else if (strnicmp(data, "gid", 3) == 0) {
1103 if (value && *value) {
1104 vol->linux_gid =
1105 simple_strtoul(value, &value, 0);
4523cc30 1106 vol->override_gid = 1;
1da177e4
LT		 1107 }
1108 } else if (strnicmp(data, "file_mode", 4) == 0) {
1109 if (value && *value) {
1110 vol->file_mode =
1111 simple_strtoul(value, &value, 0);
1112 }
1113 } else if (strnicmp(data, "dir_mode", 4) == 0) {
1114 if (value && *value) {
1115 vol->dir_mode =
1116 simple_strtoul(value, &value, 0);
1117 }
1118 } else if (strnicmp(data, "dirmode", 4) == 0) {
1119 if (value && *value) {
1120 vol->dir_mode =
1121 simple_strtoul(value, &value, 0);
1122 }
1123 } else if (strnicmp(data, "port", 4) == 0) {
1124 if (value && *value) {
1125 vol->port =
1126 simple_strtoul(value, &value, 0);
1127 }
1128 } else if (strnicmp(data, "rsize", 5) == 0) {
1129 if (value && *value) {
1130 vol->rsize =
1131 simple_strtoul(value, &value, 0);
1132 }
1133 } else if (strnicmp(data, "wsize", 5) == 0) {
1134 if (value && *value) {
1135 vol->wsize =
1136 simple_strtoul(value, &value, 0);
1137 }
1138 } else if (strnicmp(data, "sockopt", 5) == 0) {
1139 if (value && *value) {
1140 vol->sockopt =
1141 simple_strtoul(value, &value, 0);
1142 }
1143 } else if (strnicmp(data, "netbiosname", 4) == 0) {
1144 if (!value || !*value || (*value == ' ')) {
63135e08 1145 cFYI(1, ("invalid (empty) netbiosname"));
1da177e4 1146 } else {
50c2f753
SF		 1147 memset(vol->source_rfc1001_name, 0x20, 15);
1148 for (i = 0; i < 15; i++) {
1149 /* BB are there cases in which a comma can be
1da177e4
LT		 1150 valid in this workstation netbios name (and need
1151 special handling)? */
1152
1153 /* We do not uppercase netbiosname for user */
50c2f753 1154 if (value[i] == 0)
1da177e4 1155 break;
50c2f753
SF		 1156 else
1157 vol->source_rfc1001_name[i] =
1158 value[i];
1da177e4
LT		 1159 }
1160 /* The string has 16th byte zero still from
1161 set at top of the function */
50c2f753
SF		 1162 if ((i == 15) && (value[i] != 0))
1163 printk(KERN_WARNING "CIFS: netbiosname"
1164 " longer than 15 truncated.\n");
a10faeb2
SF		 1165 }
1166 } else if (strnicmp(data, "servern", 7) == 0) {
1167 /* servernetbiosname specified override *SMBSERVER */
1168 if (!value || !*value || (*value == ' ')) {
467a8f8d 1169 cFYI(1, ("empty server netbiosname specified"));
a10faeb2
SF		 1170 } else {
1171 /* last byte, type, is 0x20 for servr type */
50c2f753 1172 memset(vol->target_rfc1001_name, 0x20, 16);
a10faeb2 1173
50c2f753 1174 for (i = 0; i < 15; i++) {
a10faeb2 1175 /* BB are there cases in which a comma can be
50c2f753
SF		 1176 valid in this workstation netbios name
1177 (and need special handling)? */
a10faeb2 1178
50c2f753
SF		 1179 /* user or mount helper must uppercase
1180 the netbiosname */
1181 if (value[i] == 0)
a10faeb2
SF		 1182 break;
1183 else
50c2f753
SF		 1184 vol->target_rfc1001_name[i] =
1185 value[i];
a10faeb2
SF		 1186 }
1187 /* The string has 16th byte zero still from
1188 set at top of the function */
50c2f753
SF		 1189 if ((i == 15) && (value[i] != 0))
1190 printk(KERN_WARNING "CIFS: server net"
1191 "biosname longer than 15 truncated.\n");
1da177e4
LT		 1192 }
1193 } else if (strnicmp(data, "credentials", 4) == 0) {
1194 /* ignore */
1195 } else if (strnicmp(data, "version", 3) == 0) {
1196 /* ignore */
50c2f753 1197 } else if (strnicmp(data, "guest", 5) == 0) {
1da177e4
LT		 1198 /* ignore */
1199 } else if (strnicmp(data, "rw", 2) == 0) {
4b18f2a9 1200 vol->rw = true;
edf1ae40
SF		 1201 } else if (strnicmp(data, "noblocksend", 11) == 0) {
1202 vol->noblocksnd = 1;
1203 } else if (strnicmp(data, "noautotune", 10) == 0) {
1204 vol->noautotune = 1;
1da177e4
LT		 1205 } else if ((strnicmp(data, "suid", 4) == 0) ||
1206 (strnicmp(data, "nosuid", 6) == 0) ||
1207 (strnicmp(data, "exec", 4) == 0) ||
1208 (strnicmp(data, "noexec", 6) == 0) ||
1209 (strnicmp(data, "nodev", 5) == 0) ||
1210 (strnicmp(data, "noauto", 6) == 0) ||
1211 (strnicmp(data, "dev", 3) == 0)) {
1212 /* The mount tool or mount.cifs helper (if present)
50c2f753
SF		 1213 uses these opts to set flags, and the flags are read
1214 by the kernel vfs layer before we get here (ie
1215 before read super) so there is no point trying to
1216 parse these options again and set anything and it
1217 is ok to just ignore them */
1da177e4
LT		 1218 continue;
1219 } else if (strnicmp(data, "ro", 2) == 0) {
4b18f2a9 1220 vol->rw = false;
1da177e4
LT		 1221 } else if (strnicmp(data, "hard", 4) == 0) {
1222 vol->retry = 1;
1223 } else if (strnicmp(data, "soft", 4) == 0) {
1224 vol->retry = 0;
1225 } else if (strnicmp(data, "perm", 4) == 0) {
1226 vol->noperm = 0;
1227 } else if (strnicmp(data, "noperm", 6) == 0) {
1228 vol->noperm = 1;
6a0b4824
SF		 1229 } else if (strnicmp(data, "mapchars", 8) == 0) {
1230 vol->remap = 1;
1231 } else if (strnicmp(data, "nomapchars", 10) == 0) {
1232 vol->remap = 0;
50c2f753
SF		 1233 } else if (strnicmp(data, "sfu", 3) == 0) {
1234 vol->sfu_emul = 1;
1235 } else if (strnicmp(data, "nosfu", 5) == 0) {
1236 vol->sfu_emul = 0;
2c1b8615
SF		 1237 } else if (strnicmp(data, "nodfs", 5) == 0) {
1238 vol->nodfs = 1;
ac67055e
JA		 1239 } else if (strnicmp(data, "posixpaths", 10) == 0) {
1240 vol->posix_paths = 1;
1241 } else if (strnicmp(data, "noposixpaths", 12) == 0) {
1242 vol->posix_paths = 0;
c18c842b
SF		 1243 } else if (strnicmp(data, "nounix", 6) == 0) {
1244 vol->no_linux_ext = 1;
1245 } else if (strnicmp(data, "nolinux", 7) == 0) {
1246 vol->no_linux_ext = 1;
50c2f753 1247 } else if ((strnicmp(data, "nocase", 6) == 0) ||
a10faeb2 1248 (strnicmp(data, "ignorecase", 10) == 0)) {
50c2f753 1249 vol->nocase = 1;
c46fa8ac
SF		 1250 } else if (strnicmp(data, "brl", 3) == 0) {
1251 vol->nobrl = 0;
50c2f753 1252 } else if ((strnicmp(data, "nobrl", 5) == 0) ||
1c955187 1253 (strnicmp(data, "nolock", 6) == 0)) {
c46fa8ac 1254 vol->nobrl = 1;
d3485d37
SF		 1255 /* turn off mandatory locking in mode
1256 if remote locking is turned off since the
1257 local vfs will do advisory */
50c2f753
SF		 1258 if (vol->file_mode ==
1259 (S_IALLUGO & ~(S_ISUID | S_IXGRP)))
d3485d37 1260 vol->file_mode = S_IALLUGO;
13a6e42a
SF		 1261 } else if (strnicmp(data, "forcemandatorylock", 9) == 0) {
1262 /* will take the shorter form "forcemand" as well */
1263 /* This mount option will force use of mandatory
1264 (DOS/Windows style) byte range locks, instead of
1265 using posix advisory byte range locks, even if the
1266 Unix extensions are available and posix locks would
1267 be supported otherwise. If Unix extensions are not
1268 negotiated this has no effect since mandatory locks
1269 would be used (mandatory locks is all that those
1270 those servers support) */
1271 vol->mand_lock = 1;
1da177e4
LT		 1272 } else if (strnicmp(data, "setuids", 7) == 0) {
1273 vol->setuids = 1;
1274 } else if (strnicmp(data, "nosetuids", 9) == 0) {
1275 vol->setuids = 0;
d0a9c078
JL		 1276 } else if (strnicmp(data, "dynperm", 7) == 0) {
1277 vol->dynperm = true;
1278 } else if (strnicmp(data, "nodynperm", 9) == 0) {
1279 vol->dynperm = false;
1da177e4
LT		 1280 } else if (strnicmp(data, "nohard", 6) == 0) {
1281 vol->retry = 0;
1282 } else if (strnicmp(data, "nosoft", 6) == 0) {
1283 vol->retry = 1;
1284 } else if (strnicmp(data, "nointr", 6) == 0) {
1285 vol->intr = 0;
1286 } else if (strnicmp(data, "intr", 4) == 0) {
1287 vol->intr = 1;
be652445
SF		 1288 } else if (strnicmp(data, "nostrictsync", 12) == 0) {
1289 vol->nostrictsync = 1;
1290 } else if (strnicmp(data, "strictsync", 10) == 0) {
1291 vol->nostrictsync = 0;
50c2f753 1292 } else if (strnicmp(data, "serverino", 7) == 0) {
1da177e4 1293 vol->server_ino = 1;
50c2f753 1294 } else if (strnicmp(data, "noserverino", 9) == 0) {
1da177e4 1295 vol->server_ino = 0;
50c2f753 1296 } else if (strnicmp(data, "cifsacl", 7) == 0) {
0a4b92c0
SF		 1297 vol->cifs_acl = 1;
1298 } else if (strnicmp(data, "nocifsacl", 9) == 0) {
1299 vol->cifs_acl = 0;
50c2f753 1300 } else if (strnicmp(data, "acl", 3) == 0) {
1da177e4 1301 vol->no_psx_acl = 0;
50c2f753 1302 } else if (strnicmp(data, "noacl", 5) == 0) {
1da177e4 1303 vol->no_psx_acl = 1;
84210e91
SF		 1304#ifdef CONFIG_CIFS_EXPERIMENTAL
1305 } else if (strnicmp(data, "locallease", 6) == 0) {
1306 vol->local_lease = 1;
1307#endif
50c2f753 1308 } else if (strnicmp(data, "sign", 4) == 0) {
750d1151 1309 vol->secFlg |= CIFSSEC_MUST_SIGN;
95b1cb90
SF		 1310 } else if (strnicmp(data, "seal", 4) == 0) {
1311 /* we do not do the following in secFlags because seal
1312 is a per tree connection (mount) not a per socket
1313 or per-smb connection option in the protocol */
1314 /* vol->secFlg |= CIFSSEC_MUST_SEAL; */
1315 vol->seal = 1;
50c2f753 1316 } else if (strnicmp(data, "direct", 6) == 0) {
1da177e4 1317 vol->direct_io = 1;
50c2f753 1318 } else if (strnicmp(data, "forcedirectio", 13) == 0) {
1da177e4 1319 vol->direct_io = 1;
50c2f753 1320 } else if (strnicmp(data, "in6_addr", 8) == 0) {
1da177e4
LT		 1321 if (!value || !*value) {
1322 vol->in6_addr = NULL;
1323 } else if (strnlen(value, 49) == 48) {
1324 vol->in6_addr = value;
1325 } else {
50c2f753
SF		 1326 printk(KERN_WARNING "CIFS: ip v6 address not "
1327 "48 characters long\n");
1da177e4
LT		 1328 return 1;
1329 }
1330 } else if (strnicmp(data, "noac", 4) == 0) {
50c2f753
SF		 1331 printk(KERN_WARNING "CIFS: Mount option noac not "
1332 "supported. Instead set "
1333 "/proc/fs/cifs/LookupCacheEnabled to 0\n");
1da177e4 1334 } else
50c2f753
SF		 1335 printk(KERN_WARNING "CIFS: Unknown mount option %s\n",
1336 data);
1da177e4
LT		 1337 }
1338 if (vol->UNC == NULL) {
4523cc30 1339 if (devname == NULL) {
50c2f753
SF		 1340 printk(KERN_WARNING "CIFS: Missing UNC name for mount "
1341 "target\n");
1da177e4
LT		 1342 return 1;
1343 }
1344 if ((temp_len = strnlen(devname, 300)) < 300) {
50c2f753 1345 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
4523cc30 1346 if (vol->UNC == NULL)
1da177e4 1347 return 1;
50c2f753 1348 strcpy(vol->UNC, devname);
1da177e4
LT		 1349 if (strncmp(vol->UNC, "//", 2) == 0) {
1350 vol->UNC[0] = '\\';
1351 vol->UNC[1] = '\\';
1352 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
50c2f753
SF		 1353 printk(KERN_WARNING "CIFS: UNC Path does not "
1354 "begin with // or \\\\ \n");
1da177e4
LT		 1355 return 1;
1356 }
7c5e628f
IM		 1357 value = strpbrk(vol->UNC+2, "/\\");
1358 if (value)
1359 *value = '\\';
1da177e4
LT		 1360 } else {
1361 printk(KERN_WARNING "CIFS: UNC name too long\n");
1362 return 1;
1363 }
1364 }
fb8c4b14 1365 if (vol->UNCip == NULL)
1da177e4
LT		 1366 vol->UNCip = &vol->UNC[2];
1367
1368 return 0;
1369}
1370
e7ddee90 1371static struct TCP_Server_Info *
a9ac49d3 1372cifs_find_tcp_session(struct sockaddr_storage *addr)
1da177e4
LT		 1373{
1374 struct list_head *tmp;
e7ddee90
JL		 1375 struct TCP_Server_Info *server;
1376 struct sockaddr_in *addr4 = (struct sockaddr_in *) addr;
1377 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *) addr;
1378
1379 write_lock(&cifs_tcp_ses_lock);
1380 list_for_each(tmp, &cifs_tcp_ses_list) {
1381 server = list_entry(tmp, struct TCP_Server_Info,
1382 tcp_ses_list);
e7ddee90
JL		 1383 /*
1384 * the demux thread can exit on its own while still in CifsNew
1385 * so don't accept any sockets in that state. Since the
1386 * tcpStatus never changes back to CifsNew it's safe to check
1387 * for this without a lock.
1388 */
1389 if (server->tcpStatus == CifsNew)
1b20d672 1390 continue;
1da177e4 1391
a9ac49d3 1392 if (addr->ss_family == AF_INET &&
e7ddee90
JL		 1393 (addr4->sin_addr.s_addr !=
1394 server->addr.sockAddr.sin_addr.s_addr))
1395 continue;
a9ac49d3 1396 else if (addr->ss_family == AF_INET6 &&
0e2bedaa
SF		 1397 !ipv6_addr_equal(&server->addr.sockAddr6.sin6_addr,
1398 &addr6->sin6_addr))
1b20d672
CG		 1399 continue;
1400
e7ddee90
JL		 1401 ++server->srv_count;
1402 write_unlock(&cifs_tcp_ses_lock);
d82c2df5 1403 cFYI(1, ("Existing tcp session with server found"));
e7ddee90 1404 return server;
1da177e4 1405 }
e7ddee90 1406 write_unlock(&cifs_tcp_ses_lock);
1da177e4
LT		 1407 return NULL;
1408}
1b20d672 1409
14fbf50d 1410static void
e7ddee90 1411cifs_put_tcp_session(struct TCP_Server_Info *server)
1da177e4 1412{
e7ddee90 1413 struct task_struct *task;
1b20d672 1414
e7ddee90
JL		 1415 write_lock(&cifs_tcp_ses_lock);
1416 if (--server->srv_count > 0) {
1417 write_unlock(&cifs_tcp_ses_lock);
1418 return;
1da177e4 1419 }
1b20d672 1420
e7ddee90
JL		 1421 list_del_init(&server->tcp_ses_list);
1422 write_unlock(&cifs_tcp_ses_lock);
dea570e0 1423
e7ddee90
JL		 1424 spin_lock(&GlobalMid_Lock);
1425 server->tcpStatus = CifsExiting;
1426 spin_unlock(&GlobalMid_Lock);
dea570e0 1427
e7ddee90
JL		 1428 task = xchg(&server->tsk, NULL);
1429 if (task)
1430 force_sig(SIGKILL, task);
1da177e4
LT		 1431}
1432
63c038c2
JL		 1433static struct TCP_Server_Info *
1434cifs_get_tcp_session(struct smb_vol *volume_info)
1435{
1436 struct TCP_Server_Info *tcp_ses = NULL;
a9ac49d3 1437 struct sockaddr_storage addr;
63c038c2
JL		 1438 struct sockaddr_in *sin_server = (struct sockaddr_in *) &addr;
1439 struct sockaddr_in6 *sin_server6 = (struct sockaddr_in6 *) &addr;
1440 int rc;
1441
a9ac49d3 1442 memset(&addr, 0, sizeof(struct sockaddr_storage));
63c038c2
JL		 1443
1444 if (volume_info->UNCip && volume_info->UNC) {
1445 rc = cifs_inet_pton(AF_INET, volume_info->UNCip,
1446 &sin_server->sin_addr.s_addr);
1447
1448 if (rc <= 0) {
1449 /* not ipv4 address, try ipv6 */
1450 rc = cifs_inet_pton(AF_INET6, volume_info->UNCip,
1451 &sin_server6->sin6_addr.in6_u);
1452 if (rc > 0)
a9ac49d3 1453 addr.ss_family = AF_INET6;
63c038c2 1454 } else {
a9ac49d3 1455 addr.ss_family = AF_INET;
63c038c2
JL		 1456 }
1457
1458 if (rc <= 0) {
1459 /* we failed translating address */
1460 rc = -EINVAL;
1461 goto out_err;
1462 }
1463
1464 cFYI(1, ("UNC: %s ip: %s", volume_info->UNC,
1465 volume_info->UNCip));
1466 } else if (volume_info->UNCip) {
1467 /* BB using ip addr as tcp_ses name to connect to the
1468 DFS root below */
1469 cERROR(1, ("Connecting to DFS root not implemented yet"));
1470 rc = -EINVAL;
1471 goto out_err;
1472 } else /* which tcp_sess DFS root would we conect to */ {
1473 cERROR(1,
1474 ("CIFS mount error: No UNC path (e.g. -o "
1475 "unc=//192.168.1.100/public) specified"));
1476 rc = -EINVAL;
1477 goto out_err;
1478 }
1479
1480 /* see if we already have a matching tcp_ses */
1481 tcp_ses = cifs_find_tcp_session(&addr);
1482 if (tcp_ses)
1483 return tcp_ses;
1484
1485 tcp_ses = kzalloc(sizeof(struct TCP_Server_Info), GFP_KERNEL);
1486 if (!tcp_ses) {
1487 rc = -ENOMEM;
1488 goto out_err;
1489 }
1490
1491 tcp_ses->hostname = extract_hostname(volume_info->UNC);
1492 if (IS_ERR(tcp_ses->hostname)) {
1493 rc = PTR_ERR(tcp_ses->hostname);
1494 goto out_err;
1495 }
1496
1497 tcp_ses->noblocksnd = volume_info->noblocksnd;
1498 tcp_ses->noautotune = volume_info->noautotune;
1499 atomic_set(&tcp_ses->inFlight, 0);
1500 init_waitqueue_head(&tcp_ses->response_q);
1501 init_waitqueue_head(&tcp_ses->request_q);
1502 INIT_LIST_HEAD(&tcp_ses->pending_mid_q);
1503 mutex_init(&tcp_ses->srv_mutex);
1504 memcpy(tcp_ses->workstation_RFC1001_name,
1505 volume_info->source_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1506 memcpy(tcp_ses->server_RFC1001_name,
1507 volume_info->target_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1508 tcp_ses->sequence_number = 0;
1509 INIT_LIST_HEAD(&tcp_ses->tcp_ses_list);
1510 INIT_LIST_HEAD(&tcp_ses->smb_ses_list);
1511
1512 /*
1513 * at this point we are the only ones with the pointer
1514 * to the struct since the kernel thread not created yet
1515 * no need to spinlock this init of tcpStatus or srv_count
1516 */
1517 tcp_ses->tcpStatus = CifsNew;
1518 ++tcp_ses->srv_count;
1519
a9ac49d3 1520 if (addr.ss_family == AF_INET6) {
63c038c2
JL		 1521 cFYI(1, ("attempting ipv6 connect"));
1522 /* BB should we allow ipv6 on port 139? */
1523 /* other OS never observed in Wild doing 139 with v6 */
1524 memcpy(&tcp_ses->addr.sockAddr6, sin_server6,
1525 sizeof(struct sockaddr_in6));
1526 sin_server6->sin6_port = htons(volume_info->port);
d5c5605c 1527 rc = ipv6_connect(tcp_ses);
63c038c2
JL		 1528 } else {
1529 memcpy(&tcp_ses->addr.sockAddr, sin_server,
1530 sizeof(struct sockaddr_in));
1531 sin_server->sin_port = htons(volume_info->port);
bcf4b106 1532 rc = ipv4_connect(tcp_ses);
63c038c2
JL		 1533 }
1534 if (rc < 0) {
1535 cERROR(1, ("Error connecting to socket. Aborting operation"));
1536 goto out_err;
1537 }
1538
1539 /*
1540 * since we're in a cifs function already, we know that
1541 * this will succeed. No need for try_module_get().
1542 */
1543 __module_get(THIS_MODULE);
1544 tcp_ses->tsk = kthread_run((void *)(void *)cifs_demultiplex_thread,
1545 tcp_ses, "cifsd");
1546 if (IS_ERR(tcp_ses->tsk)) {
1547 rc = PTR_ERR(tcp_ses->tsk);
1548 cERROR(1, ("error %d create cifsd thread", rc));
1549 module_put(THIS_MODULE);
1550 goto out_err;
1551 }
1552
1553 /* thread spawned, put it on the list */
1554 write_lock(&cifs_tcp_ses_lock);
1555 list_add(&tcp_ses->tcp_ses_list, &cifs_tcp_ses_list);
1556 write_unlock(&cifs_tcp_ses_lock);
1557
1558 return tcp_ses;
1559
1560out_err:
1561 if (tcp_ses) {
1562 kfree(tcp_ses->hostname);
1563 if (tcp_ses->ssocket)
1564 sock_release(tcp_ses->ssocket);
1565 kfree(tcp_ses);
1566 }
1567 return ERR_PTR(rc);
1568}
1569
14fbf50d
JL		 1570static struct cifsSesInfo *
1571cifs_find_smb_ses(struct TCP_Server_Info *server, char *username)
1da177e4
LT		 1572{
1573 struct list_head *tmp;
14fbf50d 1574 struct cifsSesInfo *ses;
dea570e0 1575
14fbf50d
JL		 1576 write_lock(&cifs_tcp_ses_lock);
1577 list_for_each(tmp, &server->smb_ses_list) {
1578 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
1579 if (strncmp(ses->userName, username, MAX_USERNAME_SIZE))
dea570e0
SF		 1580 continue;
1581
14fbf50d
JL		 1582 ++ses->ses_count;
1583 write_unlock(&cifs_tcp_ses_lock);
1584 return ses;
1585 }
1586 write_unlock(&cifs_tcp_ses_lock);
1587 return NULL;
1588}
dea570e0 1589
14fbf50d
JL		 1590static void
1591cifs_put_smb_ses(struct cifsSesInfo *ses)
1592{
1593 int xid;
1594 struct TCP_Server_Info *server = ses->server;
dea570e0 1595
14fbf50d
JL		 1596 write_lock(&cifs_tcp_ses_lock);
1597 if (--ses->ses_count > 0) {
1598 write_unlock(&cifs_tcp_ses_lock);
1599 return;
1600 }
dea570e0 1601
14fbf50d
JL		 1602 list_del_init(&ses->smb_ses_list);
1603 write_unlock(&cifs_tcp_ses_lock);
dea570e0 1604
14fbf50d
JL		 1605 if (ses->status == CifsGood) {
1606 xid = GetXid();
1607 CIFSSMBLogoff(xid, ses);
1608 _FreeXid(xid);
1609 }
1610 sesInfoFree(ses);
1611 cifs_put_tcp_session(server);
1612}
dea570e0 1613
f1987b44
JL		 1614static struct cifsTconInfo *
1615cifs_find_tcon(struct cifsSesInfo *ses, const char *unc)
1616{
1617 struct list_head *tmp;
1618 struct cifsTconInfo *tcon;
1619
1620 write_lock(&cifs_tcp_ses_lock);
1621 list_for_each(tmp, &ses->tcon_list) {
1622 tcon = list_entry(tmp, struct cifsTconInfo, tcon_list);
1623 if (tcon->tidStatus == CifsExiting)
1624 continue;
1625 if (strncmp(tcon->treeName, unc, MAX_TREE_SIZE))
dea570e0
SF		 1626 continue;
1627
f1987b44
JL		 1628 ++tcon->tc_count;
1629 write_unlock(&cifs_tcp_ses_lock);
dea570e0 1630 return tcon;
1da177e4 1631 }
f1987b44 1632 write_unlock(&cifs_tcp_ses_lock);
1da177e4
LT		 1633 return NULL;
1634}
1635
f1987b44
JL		 1636static void
1637cifs_put_tcon(struct cifsTconInfo *tcon)
1638{
1639 int xid;
1640 struct cifsSesInfo *ses = tcon->ses;
1641
1642 write_lock(&cifs_tcp_ses_lock);
1643 if (--tcon->tc_count > 0) {
1644 write_unlock(&cifs_tcp_ses_lock);
1645 return;
1646 }
1647
1648 list_del_init(&tcon->tcon_list);
1649 write_unlock(&cifs_tcp_ses_lock);
1650
1651 xid = GetXid();
1652 CIFSSMBTDis(xid, tcon);
1653 _FreeXid(xid);
1654
1655 DeleteTconOplockQEntries(tcon);
1656 tconInfoFree(tcon);
1657 cifs_put_smb_ses(ses);
1658}
1659
1da177e4 1660int
50c2f753
SF		 1661get_dfs_path(int xid, struct cifsSesInfo *pSesInfo, const char *old_path,
1662 const struct nls_table *nls_codepage, unsigned int *pnum_referrals,
366781c1 1663 struct dfs_info3_param **preferrals, int remap)
1da177e4
LT		 1664{
1665 char *temp_unc;
1666 int rc = 0;
1667
1668 *pnum_referrals = 0;
366781c1 1669 *preferrals = NULL;
1da177e4
LT		 1670
1671 if (pSesInfo->ipc_tid == 0) {
1672 temp_unc = kmalloc(2 /* for slashes */ +
50c2f753
SF		 1673 strnlen(pSesInfo->serverName,
1674 SERVER_NAME_LEN_WITH_NULL * 2)
1da177e4
LT		 1675 + 1 + 4 /* slash IPC$ */ + 2,
1676 GFP_KERNEL);
1677 if (temp_unc == NULL)
1678 return -ENOMEM;
1679 temp_unc[0] = '\\';
1680 temp_unc[1] = '\\';
1681 strcpy(temp_unc + 2, pSesInfo->serverName);
1682 strcpy(temp_unc + 2 + strlen(pSesInfo->serverName), "\\IPC$");
1683 rc = CIFSTCon(xid, pSesInfo, temp_unc, NULL, nls_codepage);
1684 cFYI(1,
50c2f753 1685 ("CIFS Tcon rc = %d ipc_tid = %d", rc, pSesInfo->ipc_tid));
1da177e4
LT		 1686 kfree(temp_unc);
1687 }
1688 if (rc == 0)
c2cf07d5 1689 rc = CIFSGetDFSRefer(xid, pSesInfo, old_path, preferrals,
737b758c 1690 pnum_referrals, nls_codepage, remap);
366781c1
SF		 1691 /* BB map targetUNCs to dfs_info3 structures, here or
1692 in CIFSGetDFSRefer BB */
1da177e4
LT		 1693
1694 return rc;
1695}
1696
09e50d55
JL		 1697#ifdef CONFIG_DEBUG_LOCK_ALLOC
1698static struct lock_class_key cifs_key[2];
1699static struct lock_class_key cifs_slock_key[2];
1700
1701static inline void
1702cifs_reclassify_socket4(struct socket *sock)
1703{
1704 struct sock *sk = sock->sk;
1705 BUG_ON(sock_owned_by_user(sk));
1706 sock_lock_init_class_and_name(sk, "slock-AF_INET-CIFS",
1707 &cifs_slock_key[0], "sk_lock-AF_INET-CIFS", &cifs_key[0]);
1708}
1709
1710static inline void
1711cifs_reclassify_socket6(struct socket *sock)
1712{
1713 struct sock *sk = sock->sk;
1714 BUG_ON(sock_owned_by_user(sk));
1715 sock_lock_init_class_and_name(sk, "slock-AF_INET6-CIFS",
1716 &cifs_slock_key[1], "sk_lock-AF_INET6-CIFS", &cifs_key[1]);
1717}
1718#else
1719static inline void
1720cifs_reclassify_socket4(struct socket *sock)
1721{
1722}
1723
1724static inline void
1725cifs_reclassify_socket6(struct socket *sock)
1726{
1727}
1728#endif
1729
1da177e4 1730/* See RFC1001 section 14 on representation of Netbios names */
50c2f753 1731static void rfc1002mangle(char *target, char *source, unsigned int length)
1da177e4 1732{
50c2f753 1733 unsigned int i, j;
1da177e4 1734
50c2f753 1735 for (i = 0, j = 0; i < (length); i++) {
1da177e4
LT		 1736 /* mask a nibble at a time and encode */
1737 target[j] = 'A' + (0x0F & (source[i] >> 4));
1738 target[j+1] = 'A' + (0x0F & source[i]);
50c2f753 1739 j += 2;
1da177e4
LT		 1740 }
1741
1742}
1743
1744
1745static int
bcf4b106 1746ipv4_connect(struct TCP_Server_Info *server)
1da177e4
LT		 1747{
1748 int rc = 0;
bcf4b106 1749 bool connected = false;
1da177e4 1750 __be16 orig_port = 0;
bcf4b106 1751 struct socket *socket = server->ssocket;
1da177e4 1752
bcf4b106 1753 if (socket == NULL) {
50c2f753 1754 rc = sock_create_kern(PF_INET, SOCK_STREAM,
bcf4b106 1755 IPPROTO_TCP, &socket);
1da177e4 1756 if (rc < 0) {
50c2f753 1757 cERROR(1, ("Error %d creating socket", rc));
1da177e4 1758 return rc;
1da177e4 1759 }
bcf4b106
JL		 1760
1761 /* BB other socket options to set KEEPALIVE, NODELAY? */
1762 cFYI(1, ("Socket created"));
1763 server->ssocket = socket;
1764 socket->sk->sk_allocation = GFP_NOFS;
1765 cifs_reclassify_socket4(socket);
1da177e4
LT		 1766 }
1767
bcf4b106
JL		 1768 /* user overrode default port */
1769 if (server->addr.sockAddr.sin_port) {
1770 rc = socket->ops->connect(socket, (struct sockaddr *)
1771 &server->addr.sockAddr,
1772 sizeof(struct sockaddr_in), 0);
1da177e4 1773 if (rc >= 0)
bcf4b106 1774 connected = true;
50c2f753 1775 }
1da177e4 1776
fb8c4b14 1777 if (!connected) {
50c2f753 1778 /* save original port so we can retry user specified port
1da177e4 1779 later if fall back ports fail this time */
bcf4b106 1780 orig_port = server->addr.sockAddr.sin_port;
1da177e4
LT		 1781
1782 /* do not retry on the same port we just failed on */
bcf4b106
JL		 1783 if (server->addr.sockAddr.sin_port != htons(CIFS_PORT)) {
1784 server->addr.sockAddr.sin_port = htons(CIFS_PORT);
1785 rc = socket->ops->connect(socket,
1786 (struct sockaddr *)
1787 &server->addr.sockAddr,
1788 sizeof(struct sockaddr_in), 0);
1da177e4 1789 if (rc >= 0)
bcf4b106 1790 connected = true;
1da177e4
LT		 1791 }
1792 }
1793 if (!connected) {
bcf4b106
JL		 1794 server->addr.sockAddr.sin_port = htons(RFC1001_PORT);
1795 rc = socket->ops->connect(socket, (struct sockaddr *)
1796 &server->addr.sockAddr,
6345a3a8 1797 sizeof(struct sockaddr_in), 0);
50c2f753 1798 if (rc >= 0)
bcf4b106 1799 connected = true;
1da177e4
LT		 1800 }
1801
1802 /* give up here - unless we want to retry on different
1803 protocol families some day */
1804 if (!connected) {
fb8c4b14 1805 if (orig_port)
bcf4b106 1806 server->addr.sockAddr.sin_port = orig_port;
50c2f753 1807 cFYI(1, ("Error %d connecting to server via ipv4", rc));
bcf4b106
JL		 1808 sock_release(socket);
1809 server->ssocket = NULL;
1da177e4
LT		 1810 return rc;
1811 }
bcf4b106
JL		 1812
1813
1814 /*
1815 * Eventually check for other socket options to change from
1816 * the default. sock_setsockopt not used because it expects
1817 * user space buffer
1818 */
1819 socket->sk->sk_rcvtimeo = 7 * HZ;
da505c38 1820 socket->sk->sk_sndtimeo = 5 * HZ;
edf1ae40 1821
b387eaeb 1822 /* make the bufsizes depend on wsize/rsize and max requests */
bcf4b106
JL		 1823 if (server->noautotune) {
1824 if (socket->sk->sk_sndbuf < (200 * 1024))
1825 socket->sk->sk_sndbuf = 200 * 1024;
1826 if (socket->sk->sk_rcvbuf < (140 * 1024))
1827 socket->sk->sk_rcvbuf = 140 * 1024;
edf1ae40 1828 }
1da177e4 1829
bcf4b106
JL		 1830 cFYI(1, ("sndbuf %d rcvbuf %d rcvtimeo 0x%lx",
1831 socket->sk->sk_sndbuf,
1832 socket->sk->sk_rcvbuf, socket->sk->sk_rcvtimeo));
1833
1da177e4 1834 /* send RFC1001 sessinit */
bcf4b106 1835 if (server->addr.sockAddr.sin_port == htons(RFC1001_PORT)) {
1da177e4 1836 /* some servers require RFC1001 sessinit before sending
50c2f753 1837 negprot - BB check reconnection in case where second
1da177e4 1838 sessinit is sent but no second negprot */
50c2f753
SF		 1839 struct rfc1002_session_packet *ses_init_buf;
1840 struct smb_hdr *smb_buf;
1841 ses_init_buf = kzalloc(sizeof(struct rfc1002_session_packet),
1842 GFP_KERNEL);
fb8c4b14 1843 if (ses_init_buf) {
1da177e4 1844 ses_init_buf->trailer.session_req.called_len = 32;
bcf4b106
JL		 1845 if (server->server_RFC1001_name &&
1846 server->server_RFC1001_name[0] != 0)
8ecaf67a
JL		 1847 rfc1002mangle(ses_init_buf->trailer.
1848 session_req.called_name,
bcf4b106 1849 server->server_RFC1001_name,
8ecaf67a 1850 RFC1001_NAME_LEN_WITH_NULL);
bcf4b106 1851 else
8ecaf67a
JL		 1852 rfc1002mangle(ses_init_buf->trailer.
1853 session_req.called_name,
1854 DEFAULT_CIFS_CALLED_NAME,
1855 RFC1001_NAME_LEN_WITH_NULL);
a10faeb2 1856
1da177e4 1857 ses_init_buf->trailer.session_req.calling_len = 32;
bcf4b106 1858
1da177e4
LT		 1859 /* calling name ends in null (byte 16) from old smb
1860 convention. */
bcf4b106
JL		 1861 if (server->workstation_RFC1001_name &&
1862 server->workstation_RFC1001_name[0] != 0)
8ecaf67a
JL		 1863 rfc1002mangle(ses_init_buf->trailer.
1864 session_req.calling_name,
bcf4b106 1865 server->workstation_RFC1001_name,
8ecaf67a 1866 RFC1001_NAME_LEN_WITH_NULL);
bcf4b106 1867 else
8ecaf67a
JL		 1868 rfc1002mangle(ses_init_buf->trailer.
1869 session_req.calling_name,
1870 "LINUX_CIFS_CLNT",
1871 RFC1001_NAME_LEN_WITH_NULL);
bcf4b106 1872
1da177e4
LT		 1873 ses_init_buf->trailer.session_req.scope1 = 0;
1874 ses_init_buf->trailer.session_req.scope2 = 0;
1875 smb_buf = (struct smb_hdr *)ses_init_buf;
1876 /* sizeof RFC1002_SESSION_REQUEST with no scope */
1877 smb_buf->smb_buf_length = 0x81000044;
0496e02d 1878 rc = smb_send(server, smb_buf, 0x44);
1da177e4 1879 kfree(ses_init_buf);
50c2f753 1880 msleep(1); /* RFC1001 layer in at least one server
083d3a2c
SF		 1881 requires very short break before negprot
1882 presumably because not expecting negprot
1883 to follow so fast. This is a simple
50c2f753 1884 solution that works without
083d3a2c
SF		 1885 complicating the code and causes no
1886 significant slowing down on mount
1887 for everyone else */
1da177e4 1888 }
50c2f753 1889 /* else the negprot may still work without this
1da177e4 1890 even though malloc failed */
50c2f753 1891
1da177e4 1892 }
50c2f753 1893
1da177e4
LT		 1894 return rc;
1895}
1896
1897static int
d5c5605c 1898ipv6_connect(struct TCP_Server_Info *server)
1da177e4
LT		 1899{
1900 int rc = 0;
d5c5605c 1901 bool connected = false;
1da177e4 1902 __be16 orig_port = 0;
d5c5605c 1903 struct socket *socket = server->ssocket;
1da177e4 1904
d5c5605c 1905 if (socket == NULL) {
50c2f753 1906 rc = sock_create_kern(PF_INET6, SOCK_STREAM,
d5c5605c 1907 IPPROTO_TCP, &socket);
1da177e4 1908 if (rc < 0) {
50c2f753 1909 cERROR(1, ("Error %d creating ipv6 socket", rc));
d5c5605c 1910 socket = NULL;
1da177e4 1911 return rc;
1da177e4 1912 }
1da177e4 1913
d5c5605c
JL		 1914 /* BB other socket options to set KEEPALIVE, NODELAY? */
1915 cFYI(1, ("ipv6 Socket created"));
1916 server->ssocket = socket;
1917 socket->sk->sk_allocation = GFP_NOFS;
1918 cifs_reclassify_socket6(socket);
1919 }
1da177e4 1920
d5c5605c
JL		 1921 /* user overrode default port */
1922 if (server->addr.sockAddr6.sin6_port) {
1923 rc = socket->ops->connect(socket,
1924 (struct sockaddr *) &server->addr.sockAddr6,
6345a3a8 1925 sizeof(struct sockaddr_in6), 0);
1da177e4 1926 if (rc >= 0)
d5c5605c 1927 connected = true;
50c2f753 1928 }
1da177e4 1929
fb8c4b14 1930 if (!connected) {
50c2f753 1931 /* save original port so we can retry user specified port
1da177e4
LT		 1932 later if fall back ports fail this time */
1933
d5c5605c 1934 orig_port = server->addr.sockAddr6.sin6_port;
1da177e4 1935 /* do not retry on the same port we just failed on */
d5c5605c
JL		 1936 if (server->addr.sockAddr6.sin6_port != htons(CIFS_PORT)) {
1937 server->addr.sockAddr6.sin6_port = htons(CIFS_PORT);
1938 rc = socket->ops->connect(socket, (struct sockaddr *)
1939 &server->addr.sockAddr6,
6345a3a8 1940 sizeof(struct sockaddr_in6), 0);
1da177e4 1941 if (rc >= 0)
d5c5605c 1942 connected = true;
1da177e4
LT		 1943 }
1944 }
1945 if (!connected) {
d5c5605c
JL		 1946 server->addr.sockAddr6.sin6_port = htons(RFC1001_PORT);
1947 rc = socket->ops->connect(socket, (struct sockaddr *)
1948 &server->addr.sockAddr6,
1949 sizeof(struct sockaddr_in6), 0);
50c2f753 1950 if (rc >= 0)
d5c5605c 1951 connected = true;
1da177e4
LT		 1952 }
1953
1954 /* give up here - unless we want to retry on different
1955 protocol families some day */
1956 if (!connected) {
fb8c4b14 1957 if (orig_port)
d5c5605c 1958 server->addr.sockAddr6.sin6_port = orig_port;
50c2f753 1959 cFYI(1, ("Error %d connecting to server via ipv6", rc));
d5c5605c
JL		 1960 sock_release(socket);
1961 server->ssocket = NULL;
1da177e4
LT		 1962 return rc;
1963 }
edf1ae40 1964
d5c5605c
JL		 1965 /*
1966 * Eventually check for other socket options to change from
1967 * the default. sock_setsockopt not used because it expects
1968 * user space buffer
1969 */
1970 socket->sk->sk_rcvtimeo = 7 * HZ;
da505c38 1971 socket->sk->sk_sndtimeo = 5 * HZ;
d5c5605c 1972 server->ssocket = socket;
50c2f753 1973
1da177e4
LT		 1974 return rc;
1975}
1976
50c2f753
SF		 1977void reset_cifs_unix_caps(int xid, struct cifsTconInfo *tcon,
1978 struct super_block *sb, struct smb_vol *vol_info)
8af18971
SF		 1979{
1980 /* if we are reconnecting then should we check to see if
1981 * any requested capabilities changed locally e.g. via
1982 * remount but we can not do much about it here
1983 * if they have (even if we could detect it by the following)
1984 * Perhaps we could add a backpointer to array of sb from tcon
1985 * or if we change to make all sb to same share the same
1986 * sb as NFS - then we only have one backpointer to sb.
1987 * What if we wanted to mount the server share twice once with
1988 * and once without posixacls or posix paths? */
1989 __u64 saved_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
50c2f753 1990
c18c842b
SF		 1991 if (vol_info && vol_info->no_linux_ext) {
1992 tcon->fsUnixInfo.Capability = 0;
1993 tcon->unix_ext = 0; /* Unix Extensions disabled */
1994 cFYI(1, ("Linux protocol extensions disabled"));
1995 return;
1996 } else if (vol_info)
1997 tcon->unix_ext = 1; /* Unix Extensions supported */
1998
1999 if (tcon->unix_ext == 0) {
2000 cFYI(1, ("Unix extensions disabled so not set on reconnect"));
2001 return;
2002 }
50c2f753 2003
fb8c4b14 2004 if (!CIFSSMBQFSUnixInfo(xid, tcon)) {
8af18971 2005 __u64 cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
50c2f753 2006
8af18971
SF		 2007 /* check for reconnect case in which we do not
2008 want to change the mount behavior if we can avoid it */
fb8c4b14 2009 if (vol_info == NULL) {
50c2f753 2010 /* turn off POSIX ACL and PATHNAMES if not set
8af18971
SF		 2011 originally at mount time */
2012 if ((saved_cap & CIFS_UNIX_POSIX_ACL_CAP) == 0)
2013 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
11b6d645
IM		 2014 if ((saved_cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2015 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2016 cERROR(1, ("POSIXPATH support change"));
8af18971 2017 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
11b6d645
IM		 2018 } else if ((cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2019 cERROR(1, ("possible reconnect error"));
2020 cERROR(1,
2021 ("server disabled POSIX path support"));
2022 }
8af18971 2023 }
50c2f753 2024
8af18971 2025 cap &= CIFS_UNIX_CAP_MASK;
75865f8c 2026 if (vol_info && vol_info->no_psx_acl)
8af18971 2027 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
75865f8c 2028 else if (CIFS_UNIX_POSIX_ACL_CAP & cap) {
fb8c4b14
SF		 2029 cFYI(1, ("negotiated posix acl support"));
2030 if (sb)
8af18971
SF		 2031 sb->s_flags |= MS_POSIXACL;
2032 }
2033
75865f8c 2034 if (vol_info && vol_info->posix_paths == 0)
8af18971 2035 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
75865f8c 2036 else if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) {
fb8c4b14 2037 cFYI(1, ("negotiate posix pathnames"));
75865f8c 2038 if (sb)
50c2f753 2039 CIFS_SB(sb)->mnt_cifs_flags |=
8af18971
SF		 2040 CIFS_MOUNT_POSIX_PATHS;
2041 }
50c2f753 2042
984acfe1
SF		 2043 /* We might be setting the path sep back to a different
2044 form if we are reconnecting and the server switched its
50c2f753 2045 posix path capability for this share */
75865f8c 2046 if (sb && (CIFS_SB(sb)->prepathlen > 0))
984acfe1 2047 CIFS_SB(sb)->prepath[0] = CIFS_DIR_SEP(CIFS_SB(sb));
75865f8c
SF		 2048
2049 if (sb && (CIFS_SB(sb)->rsize > 127 * 1024)) {
2050 if ((cap & CIFS_UNIX_LARGE_READ_CAP) == 0) {
2051 CIFS_SB(sb)->rsize = 127 * 1024;
90c81e0b
SF		 2052 cFYI(DBG2,
2053 ("larger reads not supported by srv"));
75865f8c
SF		 2054 }
2055 }
50c2f753
SF		 2056
2057
2058 cFYI(1, ("Negotiate caps 0x%x", (int)cap));
8af18971 2059#ifdef CONFIG_CIFS_DEBUG2
75865f8c 2060 if (cap & CIFS_UNIX_FCNTL_CAP)
fb8c4b14 2061 cFYI(1, ("FCNTL cap"));
75865f8c 2062 if (cap & CIFS_UNIX_EXTATTR_CAP)
fb8c4b14 2063 cFYI(1, ("EXTATTR cap"));
75865f8c 2064 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
fb8c4b14 2065 cFYI(1, ("POSIX path cap"));
75865f8c 2066 if (cap & CIFS_UNIX_XATTR_CAP)
fb8c4b14 2067 cFYI(1, ("XATTR cap"));
75865f8c 2068 if (cap & CIFS_UNIX_POSIX_ACL_CAP)
fb8c4b14 2069 cFYI(1, ("POSIX ACL cap"));
75865f8c 2070 if (cap & CIFS_UNIX_LARGE_READ_CAP)
fb8c4b14 2071 cFYI(1, ("very large read cap"));
75865f8c 2072 if (cap & CIFS_UNIX_LARGE_WRITE_CAP)
fb8c4b14 2073 cFYI(1, ("very large write cap"));
8af18971
SF		 2074#endif /* CIFS_DEBUG2 */
2075 if (CIFSSMBSetFSUnixInfo(xid, tcon, cap)) {
442aa310 2076 if (vol_info == NULL) {
5a44b319 2077 cFYI(1, ("resetting capabilities failed"));
442aa310 2078 } else
5a44b319
SF		 2079 cERROR(1, ("Negotiating Unix capabilities "
2080 "with the server failed. Consider "
2081 "mounting with the Unix Extensions\n"
2082 "disabled, if problems are found, "
2083 "by specifying the nounix mount "
2224f4e5 2084 "option."));
5a44b319 2085
8af18971
SF		 2086 }
2087 }
2088}
2089
03a143c9
SF		 2090static void
2091convert_delimiter(char *path, char delim)
2092{
2093 int i;
c2d68ea6 2094 char old_delim;
03a143c9
SF		 2095
2096 if (path == NULL)
2097 return;
2098
582d21e5 2099 if (delim == '/')
c2d68ea6
SF		 2100 old_delim = '\\';
2101 else
2102 old_delim = '/';
2103
03a143c9 2104 for (i = 0; path[i] != '\0'; i++) {
c2d68ea6 2105 if (path[i] == old_delim)
03a143c9
SF		 2106 path[i] = delim;
2107 }
2108}
2109
3b795210
SF		 2110static void setup_cifs_sb(struct smb_vol *pvolume_info,
2111 struct cifs_sb_info *cifs_sb)
b1c8d2b4 2112{
3b795210
SF		 2113 if (pvolume_info->rsize > CIFSMaxBufSize) {
2114 cERROR(1, ("rsize %d too large, using MaxBufSize",
2115 pvolume_info->rsize));
2116 cifs_sb->rsize = CIFSMaxBufSize;
2117 } else if ((pvolume_info->rsize) &&
2118 (pvolume_info->rsize <= CIFSMaxBufSize))
2119 cifs_sb->rsize = pvolume_info->rsize;
2120 else /* default */
2121 cifs_sb->rsize = CIFSMaxBufSize;
2122
2123 if (pvolume_info->wsize > PAGEVEC_SIZE * PAGE_CACHE_SIZE) {
2124 cERROR(1, ("wsize %d too large, using 4096 instead",
2125 pvolume_info->wsize));
2126 cifs_sb->wsize = 4096;
2127 } else if (pvolume_info->wsize)
2128 cifs_sb->wsize = pvolume_info->wsize;
2129 else
2130 cifs_sb->wsize = min_t(const int,
2131 PAGEVEC_SIZE * PAGE_CACHE_SIZE,
2132 127*1024);
2133 /* old default of CIFSMaxBufSize was too small now
2134 that SMB Write2 can send multiple pages in kvec.
2135 RFC1001 does not describe what happens when frame
2136 bigger than 128K is sent so use that as max in
2137 conjunction with 52K kvec constraint on arch with 4K
2138 page size */
2139
2140 if (cifs_sb->rsize < 2048) {
2141 cifs_sb->rsize = 2048;
2142 /* Windows ME may prefer this */
2143 cFYI(1, ("readsize set to minimum: 2048"));
2144 }
2145 /* calculate prepath */
2146 cifs_sb->prepath = pvolume_info->prepath;
2147 if (cifs_sb->prepath) {
2148 cifs_sb->prepathlen = strlen(cifs_sb->prepath);
2149 /* we can not convert the / to \ in the path
2150 separators in the prefixpath yet because we do not
2151 know (until reset_cifs_unix_caps is called later)
2152 whether POSIX PATH CAP is available. We normalize
2153 the / to \ after reset_cifs_unix_caps is called */
2154 pvolume_info->prepath = NULL;
2155 } else
2156 cifs_sb->prepathlen = 0;
2157 cifs_sb->mnt_uid = pvolume_info->linux_uid;
2158 cifs_sb->mnt_gid = pvolume_info->linux_gid;
2159 cifs_sb->mnt_file_mode = pvolume_info->file_mode;
2160 cifs_sb->mnt_dir_mode = pvolume_info->dir_mode;
2161 cFYI(1, ("file mode: 0x%x dir mode: 0x%x",
2162 cifs_sb->mnt_file_mode, cifs_sb->mnt_dir_mode));
2163
2164 if (pvolume_info->noperm)
2165 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_PERM;
2166 if (pvolume_info->setuids)
2167 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SET_UID;
2168 if (pvolume_info->server_ino)
2169 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SERVER_INUM;
2170 if (pvolume_info->remap)
2171 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MAP_SPECIAL_CHR;
2172 if (pvolume_info->no_xattr)
2173 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_XATTR;
2174 if (pvolume_info->sfu_emul)
2175 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_UNX_EMUL;
2176 if (pvolume_info->nobrl)
2177 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_BRL;
be652445 2178 if (pvolume_info->nostrictsync)
4717bed6 2179 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOSSYNC;
13a6e42a
SF		 2180 if (pvolume_info->mand_lock)
2181 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOPOSIXBRL;
3b795210
SF		 2182 if (pvolume_info->cifs_acl)
2183 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_ACL;
2184 if (pvolume_info->override_uid)
2185 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_UID;
2186 if (pvolume_info->override_gid)
2187 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_GID;
2188 if (pvolume_info->dynperm)
2189 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DYNPERM;
2190 if (pvolume_info->direct_io) {
2191 cFYI(1, ("mounting share using direct i/o"));
2192 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DIRECT_IO;
2193 }
2194
2195 if ((pvolume_info->cifs_acl) && (pvolume_info->dynperm))
2196 cERROR(1, ("mount option dynperm ignored if cifsacl "
2197 "mount option supported"));
b1c8d2b4
JL		 2198}
2199
e4cce94c
IM		 2200static int
2201is_path_accessible(int xid, struct cifsTconInfo *tcon,
2202 struct cifs_sb_info *cifs_sb, const char *full_path)
2203{
2204 int rc;
2205 __u64 inode_num;
2206 FILE_ALL_INFO *pfile_info;
2207
2208 rc = CIFSGetSrvInodeNumber(xid, tcon, full_path, &inode_num,
2209 cifs_sb->local_nls,
2210 cifs_sb->mnt_cifs_flags &
2211 CIFS_MOUNT_MAP_SPECIAL_CHR);
2212 if (rc != -EOPNOTSUPP)
2213 return rc;
2214
2215 pfile_info = kmalloc(sizeof(FILE_ALL_INFO), GFP_KERNEL);
2216 if (pfile_info == NULL)
2217 return -ENOMEM;
2218
2219 rc = CIFSSMBQPathInfo(xid, tcon, full_path, pfile_info,
2220 0 /* not legacy */, cifs_sb->local_nls,
2221 cifs_sb->mnt_cifs_flags &
2222 CIFS_MOUNT_MAP_SPECIAL_CHR);
2223 kfree(pfile_info);
2224 return rc;
2225}
2226
1bfe73c2
IM		 2227static void
2228cleanup_volume_info(struct smb_vol **pvolume_info)
2229{
2230 struct smb_vol *volume_info;
2231
2232 if (!pvolume_info && !*pvolume_info)
2233 return;
2234
2235 volume_info = *pvolume_info;
2236 kzfree(volume_info->password);
2237 kfree(volume_info->UNC);
2238 kfree(volume_info->prepath);
2239 kfree(volume_info);
2240 *pvolume_info = NULL;
2241 return;
2242}
2243
2d6d589d 2244#ifdef CONFIG_CIFS_DFS_UPCALL
1bfe73c2
IM		 2245/* build_path_to_root returns full path to root when
2246 * we do not have an exiting connection (tcon) */
2247static char *
2248build_unc_path_to_root(const struct smb_vol *volume_info,
2249 const struct cifs_sb_info *cifs_sb)
2250{
2251 char *full_path;
2252
2253 int unc_len = strnlen(volume_info->UNC, MAX_TREE_SIZE + 1);
2254 full_path = kmalloc(unc_len + cifs_sb->prepathlen + 1, GFP_KERNEL);
2255 if (full_path == NULL)
2256 return ERR_PTR(-ENOMEM);
2257
2258 strncpy(full_path, volume_info->UNC, unc_len);
2259 if (cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) {
2260 int i;
2261 for (i = 0; i < unc_len; i++) {
2262 if (full_path[i] == '\\')
2263 full_path[i] = '/';
2264 }
2265 }
2266
2267 if (cifs_sb->prepathlen)
2268 strncpy(full_path + unc_len, cifs_sb->prepath,
2269 cifs_sb->prepathlen);
2270
2271 full_path[unc_len + cifs_sb->prepathlen] = 0; /* add trailing null */
2272 return full_path;
2273}
2d6d589d 2274#endif
1bfe73c2 2275
1da177e4
LT		 2276int
2277cifs_mount(struct super_block *sb, struct cifs_sb_info *cifs_sb,
1bfe73c2 2278 char *mount_data_global, const char *devname)
1da177e4
LT		 2279{
2280 int rc = 0;
2281 int xid;
7586b765 2282 struct smb_vol *volume_info;
1da177e4 2283 struct cifsSesInfo *pSesInfo = NULL;
1da177e4
LT		 2284 struct cifsTconInfo *tcon = NULL;
2285 struct TCP_Server_Info *srvTcp = NULL;
e4cce94c 2286 char *full_path;
2d6d589d
SF		 2287 char *mount_data = mount_data_global;
2288#ifdef CONFIG_CIFS_DFS_UPCALL
1bfe73c2
IM		 2289 struct dfs_info3_param *referrals = NULL;
2290 unsigned int num_referrals = 0;
5c2503a8 2291 int referral_walks_count = 0;
1bfe73c2 2292try_mount_again:
2d6d589d 2293#endif
1bfe73c2 2294 full_path = NULL;
1da177e4
LT		 2295
2296 xid = GetXid();
2297
7586b765
JL		 2298 volume_info = kzalloc(sizeof(struct smb_vol), GFP_KERNEL);
2299 if (!volume_info) {
2300 rc = -ENOMEM;
2301 goto out;
2302 }
50c2f753 2303
7586b765 2304 if (cifs_parse_mount_options(mount_data, devname, volume_info)) {
70fe7dc0
JL		 2305 rc = -EINVAL;
2306 goto out;
1da177e4
LT		 2307 }
2308
7586b765 2309 if (volume_info->nullauth) {
fb8c4b14 2310 cFYI(1, ("null user"));
7586b765
JL		 2311 volume_info->username = "";
2312 } else if (volume_info->username) {
1da177e4 2313 /* BB fixme parse for domain name here */
7586b765 2314 cFYI(1, ("Username: %s", volume_info->username));
1da177e4 2315 } else {
bf820679 2316 cifserror("No username specified");
50c2f753
SF		 2317 /* In userspace mount helper we can get user name from alternate
2318 locations such as env variables and files on disk */
70fe7dc0
JL		 2319 rc = -EINVAL;
2320 goto out;
1da177e4
LT		 2321 }
2322
1da177e4
LT		 2323
2324 /* this is needed for ASCII cp to Unicode converts */
7586b765 2325 if (volume_info->iocharset == NULL) {
1da177e4
LT		 2326 cifs_sb->local_nls = load_nls_default();
2327 /* load_nls_default can not return null */
2328 } else {
7586b765 2329 cifs_sb->local_nls = load_nls(volume_info->iocharset);
fb8c4b14 2330 if (cifs_sb->local_nls == NULL) {
50c2f753 2331 cERROR(1, ("CIFS mount error: iocharset %s not found",
7586b765 2332 volume_info->iocharset));
70fe7dc0
JL		 2333 rc = -ELIBACC;
2334 goto out;
1da177e4
LT		 2335 }
2336 }
2337
63c038c2 2338 /* get a reference to a tcp session */
7586b765 2339 srvTcp = cifs_get_tcp_session(volume_info);
63c038c2
JL		 2340 if (IS_ERR(srvTcp)) {
2341 rc = PTR_ERR(srvTcp);
2342 goto out;
1da177e4
LT		 2343 }
2344
7586b765 2345 pSesInfo = cifs_find_smb_ses(srvTcp, volume_info->username);
14fbf50d 2346 if (pSesInfo) {
1d9a8852
JL		 2347 cFYI(1, ("Existing smb sess found (status=%d)",
2348 pSesInfo->status));
14fbf50d
JL		 2349 /*
2350 * The existing SMB session already has a reference to srvTcp,
2351 * so we can put back the extra one we got before
2352 */
2353 cifs_put_tcp_session(srvTcp);
2354
88e7d705 2355 down(&pSesInfo->sesSem);
3b795210 2356 if (pSesInfo->need_reconnect) {
1d9a8852 2357 cFYI(1, ("Session needs reconnect"));
1d9a8852
JL		 2358 rc = cifs_setup_session(xid, pSesInfo,
2359 cifs_sb->local_nls);
1d9a8852 2360 }
88e7d705 2361 up(&pSesInfo->sesSem);
1da177e4 2362 } else if (!rc) {
bf820679 2363 cFYI(1, ("Existing smb sess not found"));
1da177e4 2364 pSesInfo = sesInfoAlloc();
14fbf50d 2365 if (pSesInfo == NULL) {
1da177e4 2366 rc = -ENOMEM;
14fbf50d 2367 goto mount_fail_check;
1da177e4
LT		 2368 }
2369
14fbf50d
JL		 2370 /* new SMB session uses our srvTcp ref */
2371 pSesInfo->server = srvTcp;
63c038c2 2372 if (srvTcp->addr.sockAddr6.sin6_family == AF_INET6)
0191b625
LT		 2373 sprintf(pSesInfo->serverName, "%pI6",
2374 &srvTcp->addr.sockAddr6.sin6_addr);
8ecaf67a 2375 else
0191b625
LT		 2376 sprintf(pSesInfo->serverName, "%pI4",
2377 &srvTcp->addr.sockAddr.sin_addr.s_addr);
14fbf50d
JL		 2378
2379 write_lock(&cifs_tcp_ses_lock);
2380 list_add(&pSesInfo->smb_ses_list, &srvTcp->smb_ses_list);
2381 write_unlock(&cifs_tcp_ses_lock);
2382
7586b765
JL		 2383 /* volume_info->password freed at unmount */
2384 if (volume_info->password) {
00e485b0
JL		 2385 pSesInfo->password = kstrdup(volume_info->password,
2386 GFP_KERNEL);
2387 if (!pSesInfo->password) {
2388 rc = -ENOMEM;
2389 goto mount_fail_check;
2390 }
14fbf50d 2391 }
7586b765
JL		 2392 if (volume_info->username)
2393 strncpy(pSesInfo->userName, volume_info->username,
14fbf50d 2394 MAX_USERNAME_SIZE);
7586b765
JL		 2395 if (volume_info->domainname) {
2396 int len = strlen(volume_info->domainname);
14fbf50d
JL		 2397 pSesInfo->domainName = kmalloc(len + 1, GFP_KERNEL);
2398 if (pSesInfo->domainName)
2399 strcpy(pSesInfo->domainName,
7586b765 2400 volume_info->domainname);
70fe7dc0 2401 }
7586b765
JL		 2402 pSesInfo->linux_uid = volume_info->linux_uid;
2403 pSesInfo->overrideSecFlg = volume_info->secFlg;
14fbf50d 2404 down(&pSesInfo->sesSem);
1da177e4 2405
14fbf50d
JL		 2406 /* BB FIXME need to pass vol->secFlgs BB */
2407 rc = cifs_setup_session(xid, pSesInfo,
2408 cifs_sb->local_nls);
2409 up(&pSesInfo->sesSem);
1da177e4 2410 }
50c2f753 2411
1da177e4
LT		 2412 /* search for existing tcon to this server share */
2413 if (!rc) {
7586b765 2414 setup_cifs_sb(volume_info, cifs_sb);
1da177e4 2415
7586b765 2416 tcon = cifs_find_tcon(pSesInfo, volume_info->UNC);
1da177e4 2417 if (tcon) {
bf820679 2418 cFYI(1, ("Found match on UNC path"));
f1987b44
JL		 2419 /* existing tcon already has a reference */
2420 cifs_put_smb_ses(pSesInfo);
7586b765 2421 if (tcon->seal != volume_info->seal)
95b1cb90
SF		 2422 cERROR(1, ("transport encryption setting "
2423 "conflicts with existing tid"));
1da177e4
LT		 2424 } else {
2425 tcon = tconInfoAlloc();
3b795210 2426 if (tcon == NULL) {
1da177e4 2427 rc = -ENOMEM;
3b795210
SF		 2428 goto mount_fail_check;
2429 }
00e485b0 2430
ab3f9929 2431 tcon->ses = pSesInfo;
00e485b0
JL		 2432 if (volume_info->password) {
2433 tcon->password = kstrdup(volume_info->password,
2434 GFP_KERNEL);
2435 if (!tcon->password) {
2436 rc = -ENOMEM;
2437 goto mount_fail_check;
2438 }
2439 }
3b795210 2440
7586b765
JL		 2441 if ((strchr(volume_info->UNC + 3, '\\') == NULL)
2442 && (strchr(volume_info->UNC + 3, '/') == NULL)) {
1bfe73c2 2443 cERROR(1, ("Missing share name"));
3b795210
SF		 2444 rc = -ENODEV;
2445 goto mount_fail_check;
2446 } else {
2447 /* BB Do we need to wrap sesSem around
2448 * this TCon call and Unix SetFS as
2449 * we do on SessSetup and reconnect? */
7586b765 2450 rc = CIFSTCon(xid, pSesInfo, volume_info->UNC,
3b795210
SF		 2451 tcon, cifs_sb->local_nls);
2452 cFYI(1, ("CIFS Tcon rc = %d", rc));
7586b765 2453 if (volume_info->nodfs) {
3b795210
SF		 2454 tcon->Flags &= ~SMB_SHARE_IS_IN_DFS;
2455 cFYI(1, ("DFS disabled (%d)",
2456 tcon->Flags));
1da177e4
LT		 2457 }
2458 }
14fbf50d 2459 if (rc)
1bfe73c2 2460 goto remote_path_check;
7586b765 2461 tcon->seal = volume_info->seal;
f1987b44
JL		 2462 write_lock(&cifs_tcp_ses_lock);
2463 list_add(&tcon->tcon_list, &pSesInfo->tcon_list);
2464 write_unlock(&cifs_tcp_ses_lock);
1da177e4 2465 }
3b795210
SF		 2466
2467 /* we can have only one retry value for a connection
2468 to a share so for resources mounted more than once
2469 to the same server share the last value passed in
2470 for the retry flag is used */
7586b765
JL		 2471 tcon->retry = volume_info->retry;
2472 tcon->nocase = volume_info->nocase;
2473 tcon->local_lease = volume_info->local_lease;
1da177e4 2474 }
4523cc30 2475 if (pSesInfo) {
1da177e4
LT		 2476 if (pSesInfo->capabilities & CAP_LARGE_FILES) {
2477 sb->s_maxbytes = (u64) 1 << 63;
2478 } else
2479 sb->s_maxbytes = (u64) 1 << 31; /* 2 GB */
2480 }
2481
8af18971 2482 /* BB FIXME fix time_gran to be larger for LANMAN sessions */
1da177e4
LT		 2483 sb->s_time_gran = 100;
2484
1bfe73c2
IM		 2485 if (rc)
2486 goto remote_path_check;
2487
d82c2df5 2488 cifs_sb->tcon = tcon;
c18c842b 2489
d82c2df5
SF		 2490 /* do not care if following two calls succeed - informational */
2491 if (!tcon->ipc) {
2492 CIFSSMBQFSDeviceInfo(xid, tcon);
2493 CIFSSMBQFSAttributeInfo(xid, tcon);
2494 }
03a143c9 2495
d82c2df5
SF		 2496 /* tell server which Unix caps we support */
2497 if (tcon->ses->capabilities & CAP_UNIX)
2498 /* reset of caps checks mount to see if unix extensions
2499 disabled for just this mount */
7586b765 2500 reset_cifs_unix_caps(xid, tcon, sb, volume_info);
d82c2df5
SF		 2501 else
2502 tcon->unix_ext = 0; /* server does not support them */
c18c842b 2503
d82c2df5
SF		 2504 /* convert forward to back slashes in prepath here if needed */
2505 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2506 convert_delimiter(cifs_sb->prepath, CIFS_DIR_SEP(cifs_sb));
03a143c9 2507
d82c2df5
SF		 2508 if ((tcon->unix_ext == 0) && (cifs_sb->rsize > (1024 * 127))) {
2509 cifs_sb->rsize = 1024 * 127;
2510 cFYI(DBG2, ("no very large read support, rsize now 127K"));
1da177e4 2511 }
d82c2df5
SF		 2512 if (!(tcon->ses->capabilities & CAP_LARGE_WRITE_X))
2513 cifs_sb->wsize = min(cifs_sb->wsize,
2514 (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2515 if (!(tcon->ses->capabilities & CAP_LARGE_READ_X))
2516 cifs_sb->rsize = min(cifs_sb->rsize,
2517 (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
1da177e4 2518
1bfe73c2
IM		 2519remote_path_check:
2520 /* check if a whole path (including prepath) is not remote */
2521 if (!rc && cifs_sb->prepathlen && tcon) {
e4cce94c
IM		 2522 /* build_path_to_root works only when we have a valid tcon */
2523 full_path = cifs_build_path_to_root(cifs_sb);
2524 if (full_path == NULL) {
2525 rc = -ENOMEM;
2526 goto mount_fail_check;
2527 }
2528 rc = is_path_accessible(xid, tcon, cifs_sb, full_path);
1bfe73c2 2529 if (rc != -EREMOTE) {
e4cce94c
IM		 2530 kfree(full_path);
2531 goto mount_fail_check;
2532 }
2533 kfree(full_path);
2534 }
2535
1bfe73c2
IM		 2536 /* get referral if needed */
2537 if (rc == -EREMOTE) {
d036f50f 2538#ifdef CONFIG_CIFS_DFS_UPCALL
5c2503a8
IM		 2539 if (referral_walks_count > MAX_NESTED_LINKS) {
2540 /*
2541 * BB: when we implement proper loop detection,
2542 * we will remove this check. But now we need it
2543 * to prevent an indefinite loop if 'DFS tree' is
2544 * misconfigured (i.e. has loops).
2545 */
2546 rc = -ELOOP;
2547 goto mount_fail_check;
2548 }
1bfe73c2
IM		 2549 /* convert forward to back slashes in prepath here if needed */
2550 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2551 convert_delimiter(cifs_sb->prepath,
2552 CIFS_DIR_SEP(cifs_sb));
2553 full_path = build_unc_path_to_root(volume_info, cifs_sb);
2554 if (IS_ERR(full_path)) {
2555 rc = PTR_ERR(full_path);
2556 goto mount_fail_check;
2557 }
2558
2559 cFYI(1, ("Getting referral for: %s", full_path));
2560 rc = get_dfs_path(xid, pSesInfo , full_path + 1,
2561 cifs_sb->local_nls, &num_referrals, &referrals,
2562 cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
2563 if (!rc && num_referrals > 0) {
2564 char *fake_devname = NULL;
2565
2566 if (mount_data != mount_data_global)
2567 kfree(mount_data);
2568 mount_data = cifs_compose_mount_options(
2569 cifs_sb->mountdata, full_path + 1,
2570 referrals, &fake_devname);
2571 kfree(fake_devname);
2572 free_dfs_info_array(referrals, num_referrals);
2573
2574 if (tcon)
2575 cifs_put_tcon(tcon);
2576 else if (pSesInfo)
2577 cifs_put_smb_ses(pSesInfo);
2578
2579 cleanup_volume_info(&volume_info);
2580 FreeXid(xid);
2581 kfree(full_path);
5c2503a8 2582 referral_walks_count++;
1bfe73c2
IM		 2583 goto try_mount_again;
2584 }
d036f50f
SF		 2585#else /* No DFS support, return error on mount */
2586 rc = -EOPNOTSUPP;
2587#endif
1bfe73c2
IM		 2588 }
2589
2590mount_fail_check:
2591 /* on error free sesinfo and tcon struct if needed */
2592 if (rc) {
2593 if (mount_data != mount_data_global)
2594 kfree(mount_data);
2595 /* If find_unc succeeded then rc == 0 so we can not end */
2596 /* up accidently freeing someone elses tcon struct */
2597 if (tcon)
2598 cifs_put_tcon(tcon);
2599 else if (pSesInfo)
2600 cifs_put_smb_ses(pSesInfo);
2601 else
2602 cifs_put_tcp_session(srvTcp);
2603 goto out;
2604 }
2605
7586b765 2606 /* volume_info->password is freed above when existing session found
1da177e4
LT		 2607 (in which case it is not needed anymore) but when new sesion is created
2608 the password ptr is put in the new session structure (in which case the
2609 password will be freed at unmount time) */
70fe7dc0
JL		 2610out:
2611 /* zero out password before freeing */
1bfe73c2 2612 cleanup_volume_info(&volume_info);
1da177e4
LT		 2613 FreeXid(xid);
2614 return rc;
2615}
2616
1da177e4
LT		 2617int
2618CIFSTCon(unsigned int xid, struct cifsSesInfo *ses,
2619 const char *tree, struct cifsTconInfo *tcon,
2620 const struct nls_table *nls_codepage)
2621{
2622 struct smb_hdr *smb_buffer;
2623 struct smb_hdr *smb_buffer_response;
2624 TCONX_REQ *pSMB;
2625 TCONX_RSP *pSMBr;
2626 unsigned char *bcc_ptr;
2627 int rc = 0;
cc20c031 2628 int length, bytes_left;
1da177e4
LT		 2629 __u16 count;
2630
2631 if (ses == NULL)
2632 return -EIO;
2633
2634 smb_buffer = cifs_buf_get();
2635 if (smb_buffer == NULL) {
2636 return -ENOMEM;
2637 }
2638 smb_buffer_response = smb_buffer;
2639
2640 header_assemble(smb_buffer, SMB_COM_TREE_CONNECT_ANDX,
2641 NULL /*no tid */ , 4 /*wct */ );
1982c344
SF		 2642
2643 smb_buffer->Mid = GetNextMid(ses->server);
1da177e4
LT		 2644 smb_buffer->Uid = ses->Suid;
2645 pSMB = (TCONX_REQ *) smb_buffer;
2646 pSMBr = (TCONX_RSP *) smb_buffer_response;
2647
2648 pSMB->AndXCommand = 0xFF;
2649 pSMB->Flags = cpu_to_le16(TCON_EXTENDED_SECINFO);
1da177e4 2650 bcc_ptr = &pSMB->Password[0];
fb8c4b14 2651 if ((ses->server->secMode) & SECMODE_USER) {
eeac8047 2652 pSMB->PasswordLength = cpu_to_le16(1); /* minimum */
7c7b25bc 2653 *bcc_ptr = 0; /* password is null byte */
eeac8047 2654 bcc_ptr++; /* skip password */
7c7b25bc 2655 /* already aligned so no need to do it below */
eeac8047 2656 } else {
7c7b25bc 2657 pSMB->PasswordLength = cpu_to_le16(CIFS_SESS_KEY_SIZE);
eeac8047
SF		 2658 /* BB FIXME add code to fail this if NTLMv2 or Kerberos
2659 specified as required (when that support is added to
2660 the vfs in the future) as only NTLM or the much
7c7b25bc 2661 weaker LANMAN (which we do not send by default) is accepted
eeac8047
SF		 2662 by Samba (not sure whether other servers allow
2663 NTLMv2 password here) */
7c7b25bc 2664#ifdef CONFIG_CIFS_WEAK_PW_HASH
50c2f753 2665 if ((extended_security & CIFSSEC_MAY_LANMAN) &&
00e485b0
JL		 2666 (ses->server->secType == LANMAN))
2667 calc_lanman_hash(tcon->password, ses->server->cryptKey,
4e53a3fb
JL		 2668 ses->server->secMode &
2669 SECMODE_PW_ENCRYPT ? true : false,
2670 bcc_ptr);
7c7b25bc
SF		 2671 else
2672#endif /* CIFS_WEAK_PW_HASH */
00e485b0 2673 SMBNTencrypt(tcon->password, ses->server->cryptKey,
eeac8047
SF		 2674 bcc_ptr);
2675
7c7b25bc 2676 bcc_ptr += CIFS_SESS_KEY_SIZE;
fb8c4b14 2677 if (ses->capabilities & CAP_UNICODE) {
7c7b25bc
SF		 2678 /* must align unicode strings */
2679 *bcc_ptr = 0; /* null byte password */
2680 bcc_ptr++;
2681 }
eeac8047 2682 }
1da177e4 2683
50c2f753 2684 if (ses->server->secMode &
a878fb22 2685 (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
1da177e4
LT		 2686 smb_buffer->Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
2687
2688 if (ses->capabilities & CAP_STATUS32) {
2689 smb_buffer->Flags2 |= SMBFLG2_ERR_STATUS;
2690 }
2691 if (ses->capabilities & CAP_DFS) {
2692 smb_buffer->Flags2 |= SMBFLG2_DFS;
2693 }
2694 if (ses->capabilities & CAP_UNICODE) {
2695 smb_buffer->Flags2 |= SMBFLG2_UNICODE;
2696 length =
50c2f753
SF		 2697 cifs_strtoUCS((__le16 *) bcc_ptr, tree,
2698 6 /* max utf8 char length in bytes */ *
a878fb22
SF		 2699 (/* server len*/ + 256 /* share len */), nls_codepage);
2700 bcc_ptr += 2 * length; /* convert num 16 bit words to bytes */
1da177e4
LT		 2701 bcc_ptr += 2; /* skip trailing null */
2702 } else { /* ASCII */
1da177e4
LT		 2703 strcpy(bcc_ptr, tree);
2704 bcc_ptr += strlen(tree) + 1;
2705 }
2706 strcpy(bcc_ptr, "?????");
2707 bcc_ptr += strlen("?????");
2708 bcc_ptr += 1;
2709 count = bcc_ptr - &pSMB->Password[0];
2710 pSMB->hdr.smb_buf_length += count;
2711 pSMB->ByteCount = cpu_to_le16(count);
2712
133672ef
SF		 2713 rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response, &length,
2714 CIFS_STD_OP);
1da177e4 2715
1da177e4
LT		 2716 /* above now done in SendReceive */
2717 if ((rc == 0) && (tcon != NULL)) {
0e0d2cf3
SF		 2718 bool is_unicode;
2719
1da177e4 2720 tcon->tidStatus = CifsGood;
3b795210 2721 tcon->need_reconnect = false;
1da177e4
LT		 2722 tcon->tid = smb_buffer_response->Tid;
2723 bcc_ptr = pByteArea(smb_buffer_response);
cc20c031
JL		 2724 bytes_left = BCC(smb_buffer_response);
2725 length = strnlen(bcc_ptr, bytes_left - 2);
0e0d2cf3
SF		 2726 if (smb_buffer->Flags2 & SMBFLG2_UNICODE)
2727 is_unicode = true;
2728 else
2729 is_unicode = false;
2730
cc20c031 2731
50c2f753 2732 /* skip service field (NB: this field is always ASCII) */
7f8ed420
SF		 2733 if (length == 3) {
2734 if ((bcc_ptr[0] == 'I') && (bcc_ptr[1] == 'P') &&
2735 (bcc_ptr[2] == 'C')) {
2736 cFYI(1, ("IPC connection"));
2737 tcon->ipc = 1;
2738 }
2739 } else if (length == 2) {
2740 if ((bcc_ptr[0] == 'A') && (bcc_ptr[1] == ':')) {
2741 /* the most common case */
2742 cFYI(1, ("disk share connection"));
2743 }
2744 }
50c2f753 2745 bcc_ptr += length + 1;
cc20c031 2746 bytes_left -= (length + 1);
1da177e4 2747 strncpy(tcon->treeName, tree, MAX_TREE_SIZE);
cc20c031
JL		 2748
2749 /* mostly informational -- no need to fail on error here */
d185cda7 2750 tcon->nativeFileSystem = cifs_strndup_from_ucs(bcc_ptr,
0e0d2cf3 2751 bytes_left, is_unicode,
cc20c031
JL		 2752 nls_codepage);
2753
2754 cFYI(1, ("nativeFileSystem=%s", tcon->nativeFileSystem));
2755
fb8c4b14 2756 if ((smb_buffer_response->WordCount == 3) ||
1a4e15a0
SF		 2757 (smb_buffer_response->WordCount == 7))
2758 /* field is in same location */
3979877e
SF		 2759 tcon->Flags = le16_to_cpu(pSMBr->OptionalSupport);
2760 else
2761 tcon->Flags = 0;
1da177e4
LT		 2762 cFYI(1, ("Tcon flags: 0x%x ", tcon->Flags));
2763 } else if ((rc == 0) && tcon == NULL) {
50c2f753 2764 /* all we need to save for IPC$ connection */
1da177e4
LT		 2765 ses->ipc_tid = smb_buffer_response->Tid;
2766 }
2767
a8a11d39 2768 cifs_buf_release(smb_buffer);
1da177e4
LT		 2769 return rc;
2770}
2771
2772int
2773cifs_umount(struct super_block *sb, struct cifs_sb_info *cifs_sb)
2774{
2775 int rc = 0;
50c2f753 2776 char *tmp;
1da177e4 2777
f1987b44
JL		 2778 if (cifs_sb->tcon)
2779 cifs_put_tcon(cifs_sb->tcon);
50c2f753 2780
1da177e4 2781 cifs_sb->tcon = NULL;
2fe87f02
SF		 2782 tmp = cifs_sb->prepath;
2783 cifs_sb->prepathlen = 0;
2784 cifs_sb->prepath = NULL;
2785 kfree(tmp);
1da177e4 2786
88e7d705 2787 return rc;
50c2f753 2788}
1da177e4
LT		 2789
2790int cifs_setup_session(unsigned int xid, struct cifsSesInfo *pSesInfo,
50c2f753 2791 struct nls_table *nls_info)
1da177e4
LT		 2792{
2793 int rc = 0;
ad009ac9 2794 int first_time = 0;
cb7691b6 2795 struct TCP_Server_Info *server = pSesInfo->server;
1da177e4
LT		 2796
2797 /* what if server changes its buffer size after dropping the session? */
cb7691b6 2798 if (server->maxBuf == 0) /* no need to send on reconnect */ {
1da177e4 2799 rc = CIFSSMBNegotiate(xid, pSesInfo);
cb7691b6
JL		 2800 if (rc == -EAGAIN) {
2801 /* retry only once on 1st time connection */
1da177e4 2802 rc = CIFSSMBNegotiate(xid, pSesInfo);
50c2f753 2803 if (rc == -EAGAIN)
1da177e4
LT		 2804 rc = -EHOSTDOWN;
2805 }
fb8c4b14 2806 if (rc == 0) {
1da177e4 2807 spin_lock(&GlobalMid_Lock);
cb7691b6
JL		 2808 if (server->tcpStatus != CifsExiting)
2809 server->tcpStatus = CifsGood;
1da177e4
LT		 2810 else
2811 rc = -EHOSTDOWN;
2812 spin_unlock(&GlobalMid_Lock);
2813
2814 }
ad009ac9 2815 first_time = 1;
1da177e4 2816 }
26b994fa
SF		 2817
2818 if (rc)
2819 goto ss_err_exit;
2820
2821 pSesInfo->flags = 0;
cb7691b6 2822 pSesInfo->capabilities = server->capabilities;
26b994fa
SF		 2823 if (linuxExtEnabled == 0)
2824 pSesInfo->capabilities &= (~CAP_UNIX);
20418acd 2825
26b994fa 2826 cFYI(1, ("Security Mode: 0x%x Capabilities: 0x%x TimeAdjust: %d",
cb7691b6
JL		 2827 server->secMode, server->capabilities, server->timeAdj));
2828
20418acd 2829 rc = CIFS_SessSetup(xid, pSesInfo, first_time, nls_info);
26b994fa
SF		 2830 if (rc) {
2831 cERROR(1, ("Send error in SessSetup = %d", rc));
2832 } else {
2833 cFYI(1, ("CIFS Session Established successfully"));
20418acd
SF		 2834 spin_lock(&GlobalMid_Lock);
2835 pSesInfo->status = CifsGood;
2836 pSesInfo->need_reconnect = false;
2837 spin_unlock(&GlobalMid_Lock);
1da177e4 2838 }
26b994fa 2839
1da177e4
LT		 2840ss_err_exit:
2841 return rc;
2842}
2843
Clone of davem's net-next-2.6 tree