fs/cifs/connect.c

   1 /*
   2  *   fs/cifs/connect.c
   3  *
   4  *   Copyright (C) International Business Machines  Corp., 2002,2009
   5  *   Author(s): Steve French (sfrench@us.ibm.com)
   6  *
   7  *   This library is free software; you can redistribute it and/or modify
   8  *   it under the terms of the GNU Lesser General Public License as published
   9  *   by the Free Software Foundation; either version 2.1 of the License, or
  10  *   (at your option) any later version.
  11  *
  12  *   This library is distributed in the hope that it will be useful,
  13  *   but WITHOUT ANY WARRANTY; without even the implied warranty of
  14  *   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See
  15  *   the GNU Lesser General Public License for more details.
  16  *
  17  *   You should have received a copy of the GNU Lesser General Public License
  18  *   along with this library; if not, write to the Free Software
  19  *   Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
  20  */
  21 #include <linux/fs.h>
  22 #include <linux/net.h>
  23 #include <linux/string.h>
  24 #include <linux/list.h>
  25 #include <linux/wait.h>
  26 #include <linux/slab.h>
  27 #include <linux/pagemap.h>
  28 #include <linux/ctype.h>
  29 #include <linux/utsname.h>
  30 #include <linux/mempool.h>
  31 #include <linux/delay.h>
  32 #include <linux/completion.h>
  33 #include <linux/kthread.h>
  34 #include <linux/pagevec.h>
  35 #include <linux/freezer.h>
  36 #include <linux/namei.h>
  37 #include <asm/uaccess.h>
  38 #include <asm/processor.h>
  39 #include <linux/inet.h>
  40 #include <net/ipv6.h>
  41 #include "cifspdu.h"
  42 #include "cifsglob.h"
  43 #include "cifsproto.h"
  44 #include "cifs_unicode.h"
  45 #include "cifs_debug.h"
  46 #include "cifs_fs_sb.h"
  47 #include "ntlmssp.h"
  48 #include "nterr.h"
  49 #include "rfc1002pdu.h"
  50 #include "fscache.h"
  51
  52 #define CIFS_PORT 445
  53 #define RFC1001_PORT 139
  54
  55 /* SMB echo "timeout" -- FIXME: tunable? */
  56 #define SMB_ECHO_INTERVAL (60 * HZ)
  57
  58 extern void SMBNTencrypt(unsigned char *passwd, unsigned char *c8,
  59                          unsigned char *p24);
  60
  61 extern mempool_t *cifs_req_poolp;
  62
  63 struct smb_vol {
  64         char *username;
  65         char *password;
  66         char *domainname;
  67         char *UNC;
  68         char *UNCip;
  69         char *iocharset;  /* local code page for mapping to and from Unicode */
  70         char source_rfc1001_name[RFC1001_NAME_LEN_WITH_NULL]; /* clnt nb name */
  71         char target_rfc1001_name[RFC1001_NAME_LEN_WITH_NULL]; /* srvr nb name */
  72         uid_t cred_uid;
  73         uid_t linux_uid;
  74         gid_t linux_gid;
  75         mode_t file_mode;
  76         mode_t dir_mode;
  77         unsigned secFlg;
  78         bool retry:1;
  79         bool intr:1;
  80         bool setuids:1;
  81         bool override_uid:1;
  82         bool override_gid:1;
  83         bool dynperm:1;
  84         bool noperm:1;
  85         bool no_psx_acl:1; /* set if posix acl support should be disabled */
  86         bool cifs_acl:1;
  87         bool no_xattr:1;   /* set if xattr (EA) support should be disabled*/
  88         bool server_ino:1; /* use inode numbers from server ie UniqueId */
  89         bool direct_io:1;
  90         bool remap:1;      /* set to remap seven reserved chars in filenames */
  91         bool posix_paths:1; /* unset to not ask for posix pathnames. */
  92         bool no_linux_ext:1;
  93         bool sfu_emul:1;
  94         bool nullauth:1;   /* attempt to authenticate with null user */
  95         bool nocase:1;     /* request case insensitive filenames */
  96         bool nobrl:1;      /* disable sending byte range locks to srv */
  97         bool mand_lock:1;  /* send mandatory not posix byte range lock reqs */
  98         bool seal:1;       /* request transport encryption on share */
  99         bool nodfs:1;      /* Do not request DFS, even if available */
 100         bool local_lease:1; /* check leases only on local system, not remote */
 101         bool noblocksnd:1;
 102         bool noautotune:1;
 103         bool nostrictsync:1; /* do not force expensive SMBflush on every sync */
 104         bool fsc:1;     /* enable fscache */
 105         bool mfsymlinks:1; /* use Minshall+French Symlinks */
 106         bool multiuser:1;
 107         unsigned int rsize;
 108         unsigned int wsize;
 109         bool sockopt_tcp_nodelay:1;
 110         unsigned short int port;
 111         unsigned long actimeo; /* attribute cache timeout (jiffies) */
 112         char *prepath;
 113         struct sockaddr_storage srcaddr; /* allow binding to a local IP */
 114         struct nls_table *local_nls;
 115 };
 116
 117 /* FIXME: should these be tunable? */
 118 #define TLINK_ERROR_EXPIRE      (1 * HZ)
 119 #define TLINK_IDLE_EXPIRE       (600 * HZ)
 120
 121 static int ip_connect(struct TCP_Server_Info *server);
 122 static int generic_ip_connect(struct TCP_Server_Info *server);
 123 static void tlink_rb_insert(struct rb_root *root, struct tcon_link *new_tlink);
 124 static void cifs_prune_tlinks(struct work_struct *work);
 125
 126 /*
 127  * cifs tcp session reconnection
 128  *
 129  * mark tcp session as reconnecting so temporarily locked
 130  * mark all smb sessions as reconnecting for tcp session
 131  * reconnect tcp session
 132  * wake up waiters on reconnection? - (not needed currently)
 133  */
 134 static int
 135 cifs_reconnect(struct TCP_Server_Info *server)
 136 {
 137         int rc = 0;
 138         struct list_head *tmp, *tmp2;
 139         struct cifsSesInfo *ses;
 140         struct cifsTconInfo *tcon;
 141         struct mid_q_entry *mid_entry;
 142
 143         spin_lock(&GlobalMid_Lock);
 144         if (server->tcpStatus == CifsExiting) {
 145                 /* the demux thread will exit normally
 146                 next time through the loop */
 147                 spin_unlock(&GlobalMid_Lock);
 148                 return rc;
 149         } else
 150                 server->tcpStatus = CifsNeedReconnect;
 151         spin_unlock(&GlobalMid_Lock);
 152         server->maxBuf = 0;
 153
 154         cFYI(1, "Reconnecting tcp session");
 155
 156         /* before reconnecting the tcp session, mark the smb session (uid)
 157                 and the tid bad so they are not used until reconnected */
 158         cFYI(1, "%s: marking sessions and tcons for reconnect", __func__);
 159         spin_lock(&cifs_tcp_ses_lock);
 160         list_for_each(tmp, &server->smb_ses_list) {
 161                 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
 162                 ses->need_reconnect = true;
 163                 ses->ipc_tid = 0;
 164                 list_for_each(tmp2, &ses->tcon_list) {
 165                         tcon = list_entry(tmp2, struct cifsTconInfo, tcon_list);
 166                         tcon->need_reconnect = true;
 167                 }
 168         }
 169         spin_unlock(&cifs_tcp_ses_lock);
 170
 171         /* do not want to be sending data on a socket we are freeing */
 172         cFYI(1, "%s: tearing down socket", __func__);
 173         mutex_lock(&server->srv_mutex);
 174         if (server->ssocket) {
 175                 cFYI(1, "State: 0x%x Flags: 0x%lx", server->ssocket->state,
 176                         server->ssocket->flags);
 177                 kernel_sock_shutdown(server->ssocket, SHUT_WR);
 178                 cFYI(1, "Post shutdown state: 0x%x Flags: 0x%lx",
 179                         server->ssocket->state,
 180                         server->ssocket->flags);
 181                 sock_release(server->ssocket);
 182                 server->ssocket = NULL;
 183         }
 184         server->sequence_number = 0;
 185         server->session_estab = false;
 186         kfree(server->session_key.response);
 187         server->session_key.response = NULL;
 188         server->session_key.len = 0;
 189         server->lstrp = jiffies;
 190         mutex_unlock(&server->srv_mutex);
 191
 192         /* mark submitted MIDs for retry and issue callback */
 193         cFYI(1, "%s: issuing mid callbacks", __func__);
 194         spin_lock(&GlobalMid_Lock);
 195         list_for_each_safe(tmp, tmp2, &server->pending_mid_q) {
 196                 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
 197                 if (mid_entry->midState == MID_REQUEST_SUBMITTED)
 198                         mid_entry->midState = MID_RETRY_NEEDED;
 199                 list_del_init(&mid_entry->qhead);
 200                 mid_entry->callback(mid_entry);
 201         }
 202         spin_unlock(&GlobalMid_Lock);
 203
 204         while ((server->tcpStatus != CifsExiting) &&
 205                (server->tcpStatus != CifsGood)) {
 206                 try_to_freeze();
 207
 208                 /* we should try only the port we connected to before */
 209                 rc = generic_ip_connect(server);
 210                 if (rc) {
 211                         cFYI(1, "reconnect error %d", rc);
 212                         msleep(3000);
 213                 } else {
 214                         atomic_inc(&tcpSesReconnectCount);
 215                         spin_lock(&GlobalMid_Lock);
 216                         if (server->tcpStatus != CifsExiting)
 217                                 server->tcpStatus = CifsGood;
 218                         spin_unlock(&GlobalMid_Lock);
 219                 }
 220         }
 221
 222         return rc;
 223 }
 224
 225 /*
 226         return codes:
 227                 0       not a transact2, or all data present
 228                 >0      transact2 with that much data missing
 229                 -EINVAL = invalid transact2
 230
 231  */
 232 static int check2ndT2(struct smb_hdr *pSMB, unsigned int maxBufSize)
 233 {
 234         struct smb_t2_rsp *pSMBt;
 235         int total_data_size;
 236         int data_in_this_rsp;
 237         int remaining;
 238
 239         if (pSMB->Command != SMB_COM_TRANSACTION2)
 240                 return 0;
 241
 242         /* check for plausible wct, bcc and t2 data and parm sizes */
 243         /* check for parm and data offset going beyond end of smb */
 244         if (pSMB->WordCount != 10) { /* coalesce_t2 depends on this */
 245                 cFYI(1, "invalid transact2 word count");
 246                 return -EINVAL;
 247         }
 248
 249         pSMBt = (struct smb_t2_rsp *)pSMB;
 250
 251         total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
 252         data_in_this_rsp = le16_to_cpu(pSMBt->t2_rsp.DataCount);
 253
 254         remaining = total_data_size - data_in_this_rsp;
 255
 256         if (remaining == 0)
 257                 return 0;
 258         else if (remaining < 0) {
 259                 cFYI(1, "total data %d smaller than data in frame %d",
 260                         total_data_size, data_in_this_rsp);
 261                 return -EINVAL;
 262         } else {
 263                 cFYI(1, "missing %d bytes from transact2, check next response",
 264                         remaining);
 265                 if (total_data_size > maxBufSize) {
 266                         cERROR(1, "TotalDataSize %d is over maximum buffer %d",
 267                                 total_data_size, maxBufSize);
 268                         return -EINVAL;
 269                 }
 270                 return remaining;
 271         }
 272 }
 273
 274 static int coalesce_t2(struct smb_hdr *psecond, struct smb_hdr *pTargetSMB)
 275 {
 276         struct smb_t2_rsp *pSMB2 = (struct smb_t2_rsp *)psecond;
 277         struct smb_t2_rsp *pSMBt  = (struct smb_t2_rsp *)pTargetSMB;
 278         int total_data_size;
 279         int total_in_buf;
 280         int remaining;
 281         int total_in_buf2;
 282         char *data_area_of_target;
 283         char *data_area_of_buf2;
 284         __u16 byte_count;
 285
 286         total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
 287
 288         if (total_data_size != le16_to_cpu(pSMB2->t2_rsp.TotalDataCount)) {
 289                 cFYI(1, "total data size of primary and secondary t2 differ");
 290         }
 291
 292         total_in_buf = le16_to_cpu(pSMBt->t2_rsp.DataCount);
 293
 294         remaining = total_data_size - total_in_buf;
 295
 296         if (remaining < 0)
 297                 return -EINVAL;
 298
 299         if (remaining == 0) /* nothing to do, ignore */
 300                 return 0;
 301
 302         total_in_buf2 = le16_to_cpu(pSMB2->t2_rsp.DataCount);
 303         if (remaining < total_in_buf2) {
 304                 cFYI(1, "transact2 2nd response contains too much data");
 305         }
 306
 307         /* find end of first SMB data area */
 308         data_area_of_target = (char *)&pSMBt->hdr.Protocol +
 309                                 le16_to_cpu(pSMBt->t2_rsp.DataOffset);
 310         /* validate target area */
 311
 312         data_area_of_buf2 = (char *) &pSMB2->hdr.Protocol +
 313                                         le16_to_cpu(pSMB2->t2_rsp.DataOffset);
 314
 315         data_area_of_target += total_in_buf;
 316
 317         /* copy second buffer into end of first buffer */
 318         memcpy(data_area_of_target, data_area_of_buf2, total_in_buf2);
 319         total_in_buf += total_in_buf2;
 320         pSMBt->t2_rsp.DataCount = cpu_to_le16(total_in_buf);
 321         byte_count = le16_to_cpu(BCC_LE(pTargetSMB));
 322         byte_count += total_in_buf2;
 323         BCC_LE(pTargetSMB) = cpu_to_le16(byte_count);
 324
 325         byte_count = pTargetSMB->smb_buf_length;
 326         byte_count += total_in_buf2;
 327
 328         /* BB also add check that we are not beyond maximum buffer size */
 329
 330         pTargetSMB->smb_buf_length = byte_count;
 331
 332         if (remaining == total_in_buf2) {
 333                 cFYI(1, "found the last secondary response");
 334                 return 0; /* we are done */
 335         } else /* more responses to go */
 336                 return 1;
 337
 338 }
 339
 340 static void
 341 cifs_echo_request(struct work_struct *work)
 342 {
 343         int rc;
 344         struct TCP_Server_Info *server = container_of(work,
 345                                         struct TCP_Server_Info, echo.work);
 346
 347         /* no need to ping if we got a response recently */
 348         if (time_before(jiffies, server->lstrp + SMB_ECHO_INTERVAL - HZ))
 349                 goto requeue_echo;
 350
 351         rc = CIFSSMBEcho(server);
 352         if (rc)
 353                 cFYI(1, "Unable to send echo request to server: %s",
 354                         server->hostname);
 355
 356 requeue_echo:
 357         queue_delayed_work(system_nrt_wq, &server->echo, SMB_ECHO_INTERVAL);
 358 }
 359
 360 static int
 361 cifs_demultiplex_thread(struct TCP_Server_Info *server)
 362 {
 363         int length;
 364         unsigned int pdu_length, total_read;
 365         struct smb_hdr *smb_buffer = NULL;
 366         struct smb_hdr *bigbuf = NULL;
 367         struct smb_hdr *smallbuf = NULL;
 368         struct msghdr smb_msg;
 369         struct kvec iov;
 370         struct socket *csocket = server->ssocket;
 371         struct list_head *tmp, *tmp2;
 372         struct task_struct *task_to_wake = NULL;
 373         struct mid_q_entry *mid_entry;
 374         char temp;
 375         bool isLargeBuf = false;
 376         bool isMultiRsp;
 377         int reconnect;
 378
 379         current->flags |= PF_MEMALLOC;
 380         cFYI(1, "Demultiplex PID: %d", task_pid_nr(current));
 381
 382         length = atomic_inc_return(&tcpSesAllocCount);
 383         if (length > 1)
 384                 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
 385                                 GFP_KERNEL);
 386
 387         set_freezable();
 388         while (server->tcpStatus != CifsExiting) {
 389                 if (try_to_freeze())
 390                         continue;
 391                 if (bigbuf == NULL) {
 392                         bigbuf = cifs_buf_get();
 393                         if (!bigbuf) {
 394                                 cERROR(1, "No memory for large SMB response");
 395                                 msleep(3000);
 396                                 /* retry will check if exiting */
 397                                 continue;
 398                         }
 399                 } else if (isLargeBuf) {
 400                         /* we are reusing a dirty large buf, clear its start */
 401                         memset(bigbuf, 0, sizeof(struct smb_hdr));
 402                 }
 403
 404                 if (smallbuf == NULL) {
 405                         smallbuf = cifs_small_buf_get();
 406                         if (!smallbuf) {
 407                                 cERROR(1, "No memory for SMB response");
 408                                 msleep(1000);
 409                                 /* retry will check if exiting */
 410                                 continue;
 411                         }
 412                         /* beginning of smb buffer is cleared in our buf_get */
 413                 } else /* if existing small buf clear beginning */
 414                         memset(smallbuf, 0, sizeof(struct smb_hdr));
 415
 416                 isLargeBuf = false;
 417                 isMultiRsp = false;
 418                 smb_buffer = smallbuf;
 419                 iov.iov_base = smb_buffer;
 420                 iov.iov_len = 4;
 421                 smb_msg.msg_control = NULL;
 422                 smb_msg.msg_controllen = 0;
 423                 pdu_length = 4; /* enough to get RFC1001 header */
 424
 425 incomplete_rcv:
 426                 if (echo_retries > 0 &&
 427                     time_after(jiffies, server->lstrp +
 428                                         (echo_retries * SMB_ECHO_INTERVAL))) {
 429                         cERROR(1, "Server %s has not responded in %d seconds. "
 430                                   "Reconnecting...", server->hostname,
 431                                   (echo_retries * SMB_ECHO_INTERVAL / HZ));
 432                         cifs_reconnect(server);
 433                         csocket = server->ssocket;
 434                         wake_up(&server->response_q);
 435                         continue;
 436                 }
 437
 438                 length =
 439                     kernel_recvmsg(csocket, &smb_msg,
 440                                 &iov, 1, pdu_length, 0 /* BB other flags? */);
 441
 442                 if (server->tcpStatus == CifsExiting) {
 443                         break;
 444                 } else if (server->tcpStatus == CifsNeedReconnect) {
 445                         cFYI(1, "Reconnect after server stopped responding");
 446                         cifs_reconnect(server);
 447                         cFYI(1, "call to reconnect done");
 448                         csocket = server->ssocket;
 449                         continue;
 450                 } else if (length == -ERESTARTSYS ||
 451                            length == -EAGAIN ||
 452                            length == -EINTR) {
 453                         msleep(1); /* minimum sleep to prevent looping
 454                                 allowing socket to clear and app threads to set
 455                                 tcpStatus CifsNeedReconnect if server hung */
 456                         if (pdu_length < 4) {
 457                                 iov.iov_base = (4 - pdu_length) +
 458                                                         (char *)smb_buffer;
 459                                 iov.iov_len = pdu_length;
 460                                 smb_msg.msg_control = NULL;
 461                                 smb_msg.msg_controllen = 0;
 462                                 goto incomplete_rcv;
 463                         } else
 464                                 continue;
 465                 } else if (length <= 0) {
 466                         cFYI(1, "Reconnect after unexpected peek error %d",
 467                                 length);
 468                         cifs_reconnect(server);
 469                         csocket = server->ssocket;
 470                         wake_up(&server->response_q);
 471                         continue;
 472                 } else if (length < pdu_length) {
 473                         cFYI(1, "requested %d bytes but only got %d bytes",
 474                                   pdu_length, length);
 475                         pdu_length -= length;
 476                         msleep(1);
 477                         goto incomplete_rcv;
 478                 }
 479
 480                 /* The right amount was read from socket - 4 bytes */
 481                 /* so we can now interpret the length field */
 482
 483                 /* the first byte big endian of the length field,
 484                 is actually not part of the length but the type
 485                 with the most common, zero, as regular data */
 486                 temp = *((char *) smb_buffer);
 487
 488                 /* Note that FC 1001 length is big endian on the wire,
 489                 but we convert it here so it is always manipulated
 490                 as host byte order */
 491                 pdu_length = be32_to_cpu((__force __be32)smb_buffer->smb_buf_length);
 492                 smb_buffer->smb_buf_length = pdu_length;
 493
 494                 cFYI(1, "rfc1002 length 0x%x", pdu_length+4);
 495
 496                 if (temp == (char) RFC1002_SESSION_KEEP_ALIVE) {
 497                         continue;
 498                 } else if (temp == (char)RFC1002_POSITIVE_SESSION_RESPONSE) {
 499                         cFYI(1, "Good RFC 1002 session rsp");
 500                         continue;
 501                 } else if (temp == (char)RFC1002_NEGATIVE_SESSION_RESPONSE) {
 502                         /* we get this from Windows 98 instead of
 503                            an error on SMB negprot response */
 504                         cFYI(1, "Negative RFC1002 Session Response Error 0x%x)",
 505                                 pdu_length);
 506                         /* give server a second to clean up  */
 507                         msleep(1000);
 508                         /* always try 445 first on reconnect since we get NACK
 509                          * on some if we ever connected to port 139 (the NACK
 510                          * is since we do not begin with RFC1001 session
 511                          * initialize frame)
 512                          */
 513                         cifs_set_port((struct sockaddr *)
 514                                         &server->dstaddr, CIFS_PORT);
 515                         cifs_reconnect(server);
 516                         csocket = server->ssocket;
 517                         wake_up(&server->response_q);
 518                         continue;
 519                 } else if (temp != (char) 0) {
 520                         cERROR(1, "Unknown RFC 1002 frame");
 521                         cifs_dump_mem(" Received Data: ", (char *)smb_buffer,
 522                                       length);
 523                         cifs_reconnect(server);
 524                         csocket = server->ssocket;
 525                         continue;
 526                 }
 527
 528                 /* else we have an SMB response */
 529                 if ((pdu_length > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE - 4) ||
 530                             (pdu_length < sizeof(struct smb_hdr) - 1 - 4)) {
 531                         cERROR(1, "Invalid size SMB length %d pdu_length %d",
 532                                         length, pdu_length+4);
 533                         cifs_reconnect(server);
 534                         csocket = server->ssocket;
 535                         wake_up(&server->response_q);
 536                         continue;
 537                 }
 538
 539                 /* else length ok */
 540                 reconnect = 0;
 541
 542                 if (pdu_length > MAX_CIFS_SMALL_BUFFER_SIZE - 4) {
 543                         isLargeBuf = true;
 544                         memcpy(bigbuf, smallbuf, 4);
 545                         smb_buffer = bigbuf;
 546                 }
 547                 length = 0;
 548                 iov.iov_base = 4 + (char *)smb_buffer;
 549                 iov.iov_len = pdu_length;
 550                 for (total_read = 0; total_read < pdu_length;
 551                      total_read += length) {
 552                         length = kernel_recvmsg(csocket, &smb_msg, &iov, 1,
 553                                                 pdu_length - total_read, 0);
 554                         if (server->tcpStatus == CifsExiting) {
 555                                 /* then will exit */
 556                                 reconnect = 2;
 557                                 break;
 558                         } else if (server->tcpStatus == CifsNeedReconnect) {
 559                                 cifs_reconnect(server);
 560                                 csocket = server->ssocket;
 561                                 /* Reconnect wakes up rspns q */
 562                                 /* Now we will reread sock */
 563                                 reconnect = 1;
 564                                 break;
 565                         } else if (length == -ERESTARTSYS ||
 566                                    length == -EAGAIN ||
 567                                    length == -EINTR) {
 568                                 msleep(1); /* minimum sleep to prevent looping,
 569                                               allowing socket to clear and app
 570                                               threads to set tcpStatus
 571                                               CifsNeedReconnect if server hung*/
 572                                 length = 0;
 573                                 continue;
 574                         } else if (length <= 0) {
 575                                 cERROR(1, "Received no data, expecting %d",
 576                                               pdu_length - total_read);
 577                                 cifs_reconnect(server);
 578                                 csocket = server->ssocket;
 579                                 reconnect = 1;
 580                                 break;
 581                         }
 582                 }
 583                 if (reconnect == 2)
 584                         break;
 585                 else if (reconnect == 1)
 586                         continue;
 587
 588                 length += 4; /* account for rfc1002 hdr */
 589
 590
 591                 dump_smb(smb_buffer, length);
 592                 if (checkSMB(smb_buffer, smb_buffer->Mid, total_read+4)) {
 593                         cifs_dump_mem("Bad SMB: ", smb_buffer, 48);
 594                         continue;
 595                 }
 596
 597                 mid_entry = NULL;
 598                 server->lstrp = jiffies;
 599
 600                 spin_lock(&GlobalMid_Lock);
 601                 list_for_each_safe(tmp, tmp2, &server->pending_mid_q) {
 602                         mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
 603
 604                         if ((mid_entry->mid == smb_buffer->Mid) &&
 605                             (mid_entry->midState == MID_REQUEST_SUBMITTED) &&
 606                             (mid_entry->command == smb_buffer->Command)) {
 607                                 if (check2ndT2(smb_buffer,server->maxBuf) > 0) {
 608                                         /* We have a multipart transact2 resp */
 609                                         isMultiRsp = true;
 610                                         if (mid_entry->resp_buf) {
 611                                                 /* merge response - fix up 1st*/
 612                                                 if (coalesce_t2(smb_buffer,
 613                                                         mid_entry->resp_buf)) {
 614                                                         mid_entry->multiRsp =
 615                                                                  true;
 616                                                         break;
 617                                                 } else {
 618                                                         /* all parts received */
 619                                                         mid_entry->multiEnd =
 620                                                                  true;
 621                                                         goto multi_t2_fnd;
 622                                                 }
 623                                         } else {
 624                                                 if (!isLargeBuf) {
 625                                                         cERROR(1, "1st trans2 resp needs bigbuf");
 626                                         /* BB maybe we can fix this up,  switch
 627                                            to already allocated large buffer? */
 628                                                 } else {
 629                                                         /* Have first buffer */
 630                                                         mid_entry->resp_buf =
 631                                                                  smb_buffer;
 632                                                         mid_entry->largeBuf =
 633                                                                  true;
 634                                                         bigbuf = NULL;
 635                                                 }
 636                                         }
 637                                         break;
 638                                 }
 639                                 mid_entry->resp_buf = smb_buffer;
 640                                 mid_entry->largeBuf = isLargeBuf;
 641 multi_t2_fnd:
 642                                 mid_entry->midState = MID_RESPONSE_RECEIVED;
 643                                 list_del_init(&mid_entry->qhead);
 644                                 mid_entry->callback(mid_entry);
 645 #ifdef CONFIG_CIFS_STATS2
 646                                 mid_entry->when_received = jiffies;
 647 #endif
 648                                 break;
 649                         }
 650                         mid_entry = NULL;
 651                 }
 652                 spin_unlock(&GlobalMid_Lock);
 653
 654                 if (mid_entry != NULL) {
 655                         /* Was previous buf put in mpx struct for multi-rsp? */
 656                         if (!isMultiRsp) {
 657                                 /* smb buffer will be freed by user thread */
 658                                 if (isLargeBuf)
 659                                         bigbuf = NULL;
 660                                 else
 661                                         smallbuf = NULL;
 662                         }
 663                 } else if (!is_valid_oplock_break(smb_buffer, server) &&
 664                            !isMultiRsp) {
 665                         cERROR(1, "No task to wake, unknown frame received! "
 666                                    "NumMids %d", atomic_read(&midCount));
 667                         cifs_dump_mem("Received Data is: ", (char *)smb_buffer,
 668                                       sizeof(struct smb_hdr));
 669 #ifdef CONFIG_CIFS_DEBUG2
 670                         cifs_dump_detail(smb_buffer);
 671                         cifs_dump_mids(server);
 672 #endif /* CIFS_DEBUG2 */
 673
 674                 }
 675         } /* end while !EXITING */
 676
 677         /* take it off the list, if it's not already */
 678         spin_lock(&cifs_tcp_ses_lock);
 679         list_del_init(&server->tcp_ses_list);
 680         spin_unlock(&cifs_tcp_ses_lock);
 681
 682         spin_lock(&GlobalMid_Lock);
 683         server->tcpStatus = CifsExiting;
 684         spin_unlock(&GlobalMid_Lock);
 685         wake_up_all(&server->response_q);
 686
 687         /* check if we have blocked requests that need to free */
 688         /* Note that cifs_max_pending is normally 50, but
 689         can be set at module install time to as little as two */
 690         spin_lock(&GlobalMid_Lock);
 691         if (atomic_read(&server->inFlight) >= cifs_max_pending)
 692                 atomic_set(&server->inFlight, cifs_max_pending - 1);
 693         /* We do not want to set the max_pending too low or we
 694         could end up with the counter going negative */
 695         spin_unlock(&GlobalMid_Lock);
 696         /* Although there should not be any requests blocked on
 697         this queue it can not hurt to be paranoid and try to wake up requests
 698         that may haven been blocked when more than 50 at time were on the wire
 699         to the same server - they now will see the session is in exit state
 700         and get out of SendReceive.  */
 701         wake_up_all(&server->request_q);
 702         /* give those requests time to exit */
 703         msleep(125);
 704
 705         if (server->ssocket) {
 706                 sock_release(csocket);
 707                 server->ssocket = NULL;
 708         }
 709         /* buffer usuallly freed in free_mid - need to free it here on exit */
 710         cifs_buf_release(bigbuf);
 711         if (smallbuf) /* no sense logging a debug message if NULL */
 712                 cifs_small_buf_release(smallbuf);
 713
 714         if (!list_empty(&server->pending_mid_q)) {
 715                 spin_lock(&GlobalMid_Lock);
 716                 list_for_each_safe(tmp, tmp2, &server->pending_mid_q) {
 717                         mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
 718                         cFYI(1, "Clearing Mid 0x%x - issuing callback",
 719                                          mid_entry->mid);
 720                         list_del_init(&mid_entry->qhead);
 721                         mid_entry->callback(mid_entry);
 722                 }
 723                 spin_unlock(&GlobalMid_Lock);
 724                 /* 1/8th of sec is more than enough time for them to exit */
 725                 msleep(125);
 726         }
 727
 728         if (!list_empty(&server->pending_mid_q)) {
 729                 /* mpx threads have not exited yet give them
 730                 at least the smb send timeout time for long ops */
 731                 /* due to delays on oplock break requests, we need
 732                 to wait at least 45 seconds before giving up
 733                 on a request getting a response and going ahead
 734                 and killing cifsd */
 735                 cFYI(1, "Wait for exit from demultiplex thread");
 736                 msleep(46000);
 737                 /* if threads still have not exited they are probably never
 738                 coming home not much else we can do but free the memory */
 739         }
 740
 741         kfree(server->hostname);
 742         task_to_wake = xchg(&server->tsk, NULL);
 743         kfree(server);
 744
 745         length = atomic_dec_return(&tcpSesAllocCount);
 746         if (length  > 0)
 747                 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
 748                                 GFP_KERNEL);
 749
 750         /* if server->tsk was NULL then wait for a signal before exiting */
 751         if (!task_to_wake) {
 752                 set_current_state(TASK_INTERRUPTIBLE);
 753                 while (!signal_pending(current)) {
 754                         schedule();
 755                         set_current_state(TASK_INTERRUPTIBLE);
 756                 }
 757                 set_current_state(TASK_RUNNING);
 758         }
 759
 760         module_put_and_exit(0);
 761 }
 762
 763 /* extract the host portion of the UNC string */
 764 static char *
 765 extract_hostname(const char *unc)
 766 {
 767         const char *src;
 768         char *dst, *delim;
 769         unsigned int len;
 770
 771         /* skip double chars at beginning of string */
 772         /* BB: check validity of these bytes? */
 773         src = unc + 2;
 774
 775         /* delimiter between hostname and sharename is always '\\' now */
 776         delim = strchr(src, '\\');
 777         if (!delim)
 778                 return ERR_PTR(-EINVAL);
 779
 780         len = delim - src;
 781         dst = kmalloc((len + 1), GFP_KERNEL);
 782         if (dst == NULL)
 783                 return ERR_PTR(-ENOMEM);
 784
 785         memcpy(dst, src, len);
 786         dst[len] = '\0';
 787
 788         return dst;
 789 }
 790
 791 static int
 792 cifs_parse_mount_options(char *options, const char *devname,
 793                          struct smb_vol *vol)
 794 {
 795         char *value;
 796         char *data;
 797         unsigned int  temp_len, i, j;
 798         char separator[2];
 799         short int override_uid = -1;
 800         short int override_gid = -1;
 801         bool uid_specified = false;
 802         bool gid_specified = false;
 803         char *nodename = utsname()->nodename;
 804
 805         separator[0] = ',';
 806         separator[1] = 0;
 807
 808         /*
 809          * does not have to be perfect mapping since field is
 810          * informational, only used for servers that do not support
 811          * port 445 and it can be overridden at mount time
 812          */
 813         memset(vol->source_rfc1001_name, 0x20, RFC1001_NAME_LEN);
 814         for (i = 0; i < strnlen(nodename, RFC1001_NAME_LEN); i++)
 815                 vol->source_rfc1001_name[i] = toupper(nodename[i]);
 816
 817         vol->source_rfc1001_name[RFC1001_NAME_LEN] = 0;
 818         /* null target name indicates to use *SMBSERVR default called name
 819            if we end up sending RFC1001 session initialize */
 820         vol->target_rfc1001_name[0] = 0;
 821         vol->cred_uid = current_uid();
 822         vol->linux_uid = current_uid();
 823         vol->linux_gid = current_gid();
 824
 825         /* default to only allowing write access to owner of the mount */
 826         vol->dir_mode = vol->file_mode = S_IRUGO | S_IXUGO | S_IWUSR;
 827
 828         /* vol->retry default is 0 (i.e. "soft" limited retry not hard retry) */
 829         /* default is always to request posix paths. */
 830         vol->posix_paths = 1;
 831         /* default to using server inode numbers where available */
 832         vol->server_ino = 1;
 833
 834         vol->actimeo = CIFS_DEF_ACTIMEO;
 835
 836         if (!options)
 837                 return 1;
 838
 839         if (strncmp(options, "sep=", 4) == 0) {
 840                 if (options[4] != 0) {
 841                         separator[0] = options[4];
 842                         options += 5;
 843                 } else {
 844                         cFYI(1, "Null separator not allowed");
 845                 }
 846         }
 847
 848         while ((data = strsep(&options, separator)) != NULL) {
 849                 if (!*data)
 850                         continue;
 851                 if ((value = strchr(data, '=')) != NULL)
 852                         *value++ = '\0';
 853
 854                 /* Have to parse this before we parse for "user" */
 855                 if (strnicmp(data, "user_xattr", 10) == 0) {
 856                         vol->no_xattr = 0;
 857                 } else if (strnicmp(data, "nouser_xattr", 12) == 0) {
 858                         vol->no_xattr = 1;
 859                 } else if (strnicmp(data, "user", 4) == 0) {
 860                         if (!value) {
 861                                 printk(KERN_WARNING
 862                                        "CIFS: invalid or missing username\n");
 863                                 return 1;       /* needs_arg; */
 864                         } else if (!*value) {
 865                                 /* null user, ie anonymous, authentication */
 866                                 vol->nullauth = 1;
 867                         }
 868                         if (strnlen(value, 200) < 200) {
 869                                 vol->username = value;
 870                         } else {
 871                                 printk(KERN_WARNING "CIFS: username too long\n");
 872                                 return 1;
 873                         }
 874                 } else if (strnicmp(data, "pass", 4) == 0) {
 875                         if (!value) {
 876                                 vol->password = NULL;
 877                                 continue;
 878                         } else if (value[0] == 0) {
 879                                 /* check if string begins with double comma
 880                                    since that would mean the password really
 881                                    does start with a comma, and would not
 882                                    indicate an empty string */
 883                                 if (value[1] != separator[0]) {
 884                                         vol->password = NULL;
 885                                         continue;
 886                                 }
 887                         }
 888                         temp_len = strlen(value);
 889                         /* removed password length check, NTLM passwords
 890                                 can be arbitrarily long */
 891
 892                         /* if comma in password, the string will be
 893                         prematurely null terminated.  Commas in password are
 894                         specified across the cifs mount interface by a double
 895                         comma ie ,, and a comma used as in other cases ie ','
 896                         as a parameter delimiter/separator is single and due
 897                         to the strsep above is temporarily zeroed. */
 898
 899                         /* NB: password legally can have multiple commas and
 900                         the only illegal character in a password is null */
 901
 902                         if ((value[temp_len] == 0) &&
 903                             (value[temp_len+1] == separator[0])) {
 904                                 /* reinsert comma */
 905                                 value[temp_len] = separator[0];
 906                                 temp_len += 2;  /* move after second comma */
 907                                 while (value[temp_len] != 0)  {
 908                                         if (value[temp_len] == separator[0]) {
 909                                                 if (value[temp_len+1] ==
 910                                                      separator[0]) {
 911                                                 /* skip second comma */
 912                                                         temp_len++;
 913                                                 } else {
 914                                                 /* single comma indicating start
 915                                                          of next parm */
 916                                                         break;
 917                                                 }
 918                                         }
 919                                         temp_len++;
 920                                 }
 921                                 if (value[temp_len] == 0) {
 922                                         options = NULL;
 923                                 } else {
 924                                         value[temp_len] = 0;
 925                                         /* point option to start of next parm */
 926                                         options = value + temp_len + 1;
 927                                 }
 928                                 /* go from value to value + temp_len condensing
 929                                 double commas to singles. Note that this ends up
 930                                 allocating a few bytes too many, which is ok */
 931                                 vol->password = kzalloc(temp_len, GFP_KERNEL);
 932                                 if (vol->password == NULL) {
 933                                         printk(KERN_WARNING "CIFS: no memory "
 934                                                             "for password\n");
 935                                         return 1;
 936                                 }
 937                                 for (i = 0, j = 0; i < temp_len; i++, j++) {
 938                                         vol->password[j] = value[i];
 939                                         if (value[i] == separator[0]
 940                                                 && value[i+1] == separator[0]) {
 941                                                 /* skip second comma */
 942                                                 i++;
 943                                         }
 944                                 }
 945                                 vol->password[j] = 0;
 946                         } else {
 947                                 vol->password = kzalloc(temp_len+1, GFP_KERNEL);
 948                                 if (vol->password == NULL) {
 949                                         printk(KERN_WARNING "CIFS: no memory "
 950                                                             "for password\n");
 951                                         return 1;
 952                                 }
 953                                 strcpy(vol->password, value);
 954                         }
 955                 } else if (!strnicmp(data, "ip", 2) ||
 956                            !strnicmp(data, "addr", 4)) {
 957                         if (!value || !*value) {
 958                                 vol->UNCip = NULL;
 959                         } else if (strnlen(value, INET6_ADDRSTRLEN) <
 960                                                         INET6_ADDRSTRLEN) {
 961                                 vol->UNCip = value;
 962                         } else {
 963                                 printk(KERN_WARNING "CIFS: ip address "
 964                                                     "too long\n");
 965                                 return 1;
 966                         }
 967                 } else if (strnicmp(data, "sec", 3) == 0) {
 968                         if (!value || !*value) {
 969                                 cERROR(1, "no security value specified");
 970                                 continue;
 971                         } else if (strnicmp(value, "krb5i", 5) == 0) {
 972                                 vol->secFlg |= CIFSSEC_MAY_KRB5 |
 973                                         CIFSSEC_MUST_SIGN;
 974                         } else if (strnicmp(value, "krb5p", 5) == 0) {
 975                                 /* vol->secFlg |= CIFSSEC_MUST_SEAL |
 976                                         CIFSSEC_MAY_KRB5; */
 977                                 cERROR(1, "Krb5 cifs privacy not supported");
 978                                 return 1;
 979                         } else if (strnicmp(value, "krb5", 4) == 0) {
 980                                 vol->secFlg |= CIFSSEC_MAY_KRB5;
 981                         } else if (strnicmp(value, "ntlmsspi", 8) == 0) {
 982                                 vol->secFlg |= CIFSSEC_MAY_NTLMSSP |
 983                                         CIFSSEC_MUST_SIGN;
 984                         } else if (strnicmp(value, "ntlmssp", 7) == 0) {
 985                                 vol->secFlg |= CIFSSEC_MAY_NTLMSSP;
 986                         } else if (strnicmp(value, "ntlmv2i", 7) == 0) {
 987                                 vol->secFlg |= CIFSSEC_MAY_NTLMV2 |
 988                                         CIFSSEC_MUST_SIGN;
 989                         } else if (strnicmp(value, "ntlmv2", 6) == 0) {
 990                                 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
 991                         } else if (strnicmp(value, "ntlmi", 5) == 0) {
 992                                 vol->secFlg |= CIFSSEC_MAY_NTLM |
 993                                         CIFSSEC_MUST_SIGN;
 994                         } else if (strnicmp(value, "ntlm", 4) == 0) {
 995                                 /* ntlm is default so can be turned off too */
 996                                 vol->secFlg |= CIFSSEC_MAY_NTLM;
 997                         } else if (strnicmp(value, "nontlm", 6) == 0) {
 998                                 /* BB is there a better way to do this? */
 999                                 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
1000 #ifdef CONFIG_CIFS_WEAK_PW_HASH
1001                         } else if (strnicmp(value, "lanman", 6) == 0) {
1002                                 vol->secFlg |= CIFSSEC_MAY_LANMAN;
1003 #endif
1004                         } else if (strnicmp(value, "none", 4) == 0) {
1005                                 vol->nullauth = 1;
1006                         } else {
1007                                 cERROR(1, "bad security option: %s", value);
1008                                 return 1;
1009                         }
1010                 } else if ((strnicmp(data, "unc", 3) == 0)
1011                            || (strnicmp(data, "target", 6) == 0)
1012                            || (strnicmp(data, "path", 4) == 0)) {
1013                         if (!value || !*value) {
1014                                 printk(KERN_WARNING "CIFS: invalid path to "
1015                                                     "network resource\n");
1016                                 return 1;       /* needs_arg; */
1017                         }
1018                         if ((temp_len = strnlen(value, 300)) < 300) {
1019                                 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1020                                 if (vol->UNC == NULL)
1021                                         return 1;
1022                                 strcpy(vol->UNC, value);
1023                                 if (strncmp(vol->UNC, "//", 2) == 0) {
1024                                         vol->UNC[0] = '\\';
1025                                         vol->UNC[1] = '\\';
1026                                 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1027                                         printk(KERN_WARNING
1028                                                "CIFS: UNC Path does not begin "
1029                                                "with // or \\\\ \n");
1030                                         return 1;
1031                                 }
1032                         } else {
1033                                 printk(KERN_WARNING "CIFS: UNC name too long\n");
1034                                 return 1;
1035                         }
1036                 } else if ((strnicmp(data, "domain", 3) == 0)
1037                            || (strnicmp(data, "workgroup", 5) == 0)) {
1038                         if (!value || !*value) {
1039                                 printk(KERN_WARNING "CIFS: invalid domain name\n");
1040                                 return 1;       /* needs_arg; */
1041                         }
1042                         /* BB are there cases in which a comma can be valid in
1043                         a domain name and need special handling? */
1044                         if (strnlen(value, 256) < 256) {
1045                                 vol->domainname = value;
1046                                 cFYI(1, "Domain name set");
1047                         } else {
1048                                 printk(KERN_WARNING "CIFS: domain name too "
1049                                                     "long\n");
1050                                 return 1;
1051                         }
1052                 } else if (strnicmp(data, "srcaddr", 7) == 0) {
1053                         vol->srcaddr.ss_family = AF_UNSPEC;
1054
1055                         if (!value || !*value) {
1056                                 printk(KERN_WARNING "CIFS: srcaddr value"
1057                                        " not specified.\n");
1058                                 return 1;       /* needs_arg; */
1059                         }
1060                         i = cifs_convert_address((struct sockaddr *)&vol->srcaddr,
1061                                                  value, strlen(value));
1062                         if (i == 0) {
1063                                 printk(KERN_WARNING "CIFS:  Could not parse"
1064                                        " srcaddr: %s\n",
1065                                        value);
1066                                 return 1;
1067                         }
1068                 } else if (strnicmp(data, "prefixpath", 10) == 0) {
1069                         if (!value || !*value) {
1070                                 printk(KERN_WARNING
1071                                         "CIFS: invalid path prefix\n");
1072                                 return 1;       /* needs_argument */
1073                         }
1074                         if ((temp_len = strnlen(value, 1024)) < 1024) {
1075                                 if (value[0] != '/')
1076                                         temp_len++;  /* missing leading slash */
1077                                 vol->prepath = kmalloc(temp_len+1, GFP_KERNEL);
1078                                 if (vol->prepath == NULL)
1079                                         return 1;
1080                                 if (value[0] != '/') {
1081                                         vol->prepath[0] = '/';
1082                                         strcpy(vol->prepath+1, value);
1083                                 } else
1084                                         strcpy(vol->prepath, value);
1085                                 cFYI(1, "prefix path %s", vol->prepath);
1086                         } else {
1087                                 printk(KERN_WARNING "CIFS: prefix too long\n");
1088                                 return 1;
1089                         }
1090                 } else if (strnicmp(data, "iocharset", 9) == 0) {
1091                         if (!value || !*value) {
1092                                 printk(KERN_WARNING "CIFS: invalid iocharset "
1093                                                     "specified\n");
1094                                 return 1;       /* needs_arg; */
1095                         }
1096                         if (strnlen(value, 65) < 65) {
1097                                 if (strnicmp(value, "default", 7))
1098                                         vol->iocharset = value;
1099                                 /* if iocharset not set then load_nls_default
1100                                    is used by caller */
1101                                 cFYI(1, "iocharset set to %s", value);
1102                         } else {
1103                                 printk(KERN_WARNING "CIFS: iocharset name "
1104                                                     "too long.\n");
1105                                 return 1;
1106                         }
1107                 } else if (!strnicmp(data, "uid", 3) && value && *value) {
1108                         vol->linux_uid = simple_strtoul(value, &value, 0);
1109                         uid_specified = true;
1110                 } else if (!strnicmp(data, "cruid", 5) && value && *value) {
1111                         vol->cred_uid = simple_strtoul(value, &value, 0);
1112                 } else if (!strnicmp(data, "forceuid", 8)) {
1113                         override_uid = 1;
1114                 } else if (!strnicmp(data, "noforceuid", 10)) {
1115                         override_uid = 0;
1116                 } else if (!strnicmp(data, "gid", 3) && value && *value) {
1117                         vol->linux_gid = simple_strtoul(value, &value, 0);
1118                         gid_specified = true;
1119                 } else if (!strnicmp(data, "forcegid", 8)) {
1120                         override_gid = 1;
1121                 } else if (!strnicmp(data, "noforcegid", 10)) {
1122                         override_gid = 0;
1123                 } else if (strnicmp(data, "file_mode", 4) == 0) {
1124                         if (value && *value) {
1125                                 vol->file_mode =
1126                                         simple_strtoul(value, &value, 0);
1127                         }
1128                 } else if (strnicmp(data, "dir_mode", 4) == 0) {
1129                         if (value && *value) {
1130                                 vol->dir_mode =
1131                                         simple_strtoul(value, &value, 0);
1132                         }
1133                 } else if (strnicmp(data, "dirmode", 4) == 0) {
1134                         if (value && *value) {
1135                                 vol->dir_mode =
1136                                         simple_strtoul(value, &value, 0);
1137                         }
1138                 } else if (strnicmp(data, "port", 4) == 0) {
1139                         if (value && *value) {
1140                                 vol->port =
1141                                         simple_strtoul(value, &value, 0);
1142                         }
1143                 } else if (strnicmp(data, "rsize", 5) == 0) {
1144                         if (value && *value) {
1145                                 vol->rsize =
1146                                         simple_strtoul(value, &value, 0);
1147                         }
1148                 } else if (strnicmp(data, "wsize", 5) == 0) {
1149                         if (value && *value) {
1150                                 vol->wsize =
1151                                         simple_strtoul(value, &value, 0);
1152                         }
1153                 } else if (strnicmp(data, "sockopt", 5) == 0) {
1154                         if (!value || !*value) {
1155                                 cERROR(1, "no socket option specified");
1156                                 continue;
1157                         } else if (strnicmp(value, "TCP_NODELAY", 11) == 0) {
1158                                 vol->sockopt_tcp_nodelay = 1;
1159                         }
1160                 } else if (strnicmp(data, "netbiosname", 4) == 0) {
1161                         if (!value || !*value || (*value == ' ')) {
1162                                 cFYI(1, "invalid (empty) netbiosname");
1163                         } else {
1164                                 memset(vol->source_rfc1001_name, 0x20,
1165                                         RFC1001_NAME_LEN);
1166                                 /*
1167                                  * FIXME: are there cases in which a comma can
1168                                  * be valid in workstation netbios name (and
1169                                  * need special handling)?
1170                                  */
1171                                 for (i = 0; i < RFC1001_NAME_LEN; i++) {
1172                                         /* don't ucase netbiosname for user */
1173                                         if (value[i] == 0)
1174                                                 break;
1175                                         vol->source_rfc1001_name[i] = value[i];
1176                                 }
1177                                 /* The string has 16th byte zero still from
1178                                 set at top of the function  */
1179                                 if (i == RFC1001_NAME_LEN && value[i] != 0)
1180                                         printk(KERN_WARNING "CIFS: netbiosname"
1181                                                 " longer than 15 truncated.\n");
1182                         }
1183                 } else if (strnicmp(data, "servern", 7) == 0) {
1184                         /* servernetbiosname specified override *SMBSERVER */
1185                         if (!value || !*value || (*value == ' ')) {
1186                                 cFYI(1, "empty server netbiosname specified");
1187                         } else {
1188                                 /* last byte, type, is 0x20 for servr type */
1189                                 memset(vol->target_rfc1001_name, 0x20,
1190                                         RFC1001_NAME_LEN_WITH_NULL);
1191
1192                                 for (i = 0; i < 15; i++) {
1193                                 /* BB are there cases in which a comma can be
1194                                    valid in this workstation netbios name
1195                                    (and need special handling)? */
1196
1197                                 /* user or mount helper must uppercase
1198                                    the netbiosname */
1199                                         if (value[i] == 0)
1200                                                 break;
1201                                         else
1202                                                 vol->target_rfc1001_name[i] =
1203                                                                 value[i];
1204                                 }
1205                                 /* The string has 16th byte zero still from
1206                                    set at top of the function  */
1207                                 if (i == RFC1001_NAME_LEN && value[i] != 0)
1208                                         printk(KERN_WARNING "CIFS: server net"
1209                                         "biosname longer than 15 truncated.\n");
1210                         }
1211                 } else if (strnicmp(data, "actimeo", 7) == 0) {
1212                         if (value && *value) {
1213                                 vol->actimeo = HZ * simple_strtoul(value,
1214                                                                    &value, 0);
1215                                 if (vol->actimeo > CIFS_MAX_ACTIMEO) {
1216                                         cERROR(1, "CIFS: attribute cache"
1217                                                         "timeout too large");
1218                                         return 1;
1219                                 }
1220                         }
1221                 } else if (strnicmp(data, "credentials", 4) == 0) {
1222                         /* ignore */
1223                 } else if (strnicmp(data, "version", 3) == 0) {
1224                         /* ignore */
1225                 } else if (strnicmp(data, "guest", 5) == 0) {
1226                         /* ignore */
1227                 } else if (strnicmp(data, "rw", 2) == 0) {
1228                         /* ignore */
1229                 } else if (strnicmp(data, "ro", 2) == 0) {
1230                         /* ignore */
1231                 } else if (strnicmp(data, "noblocksend", 11) == 0) {
1232                         vol->noblocksnd = 1;
1233                 } else if (strnicmp(data, "noautotune", 10) == 0) {
1234                         vol->noautotune = 1;
1235                 } else if ((strnicmp(data, "suid", 4) == 0) ||
1236                                    (strnicmp(data, "nosuid", 6) == 0) ||
1237                                    (strnicmp(data, "exec", 4) == 0) ||
1238                                    (strnicmp(data, "noexec", 6) == 0) ||
1239                                    (strnicmp(data, "nodev", 5) == 0) ||
1240                                    (strnicmp(data, "noauto", 6) == 0) ||
1241                                    (strnicmp(data, "dev", 3) == 0)) {
1242                         /*  The mount tool or mount.cifs helper (if present)
1243                             uses these opts to set flags, and the flags are read
1244                             by the kernel vfs layer before we get here (ie
1245                             before read super) so there is no point trying to
1246                             parse these options again and set anything and it
1247                             is ok to just ignore them */
1248                         continue;
1249                 } else if (strnicmp(data, "hard", 4) == 0) {
1250                         vol->retry = 1;
1251                 } else if (strnicmp(data, "soft", 4) == 0) {
1252                         vol->retry = 0;
1253                 } else if (strnicmp(data, "perm", 4) == 0) {
1254                         vol->noperm = 0;
1255                 } else if (strnicmp(data, "noperm", 6) == 0) {
1256                         vol->noperm = 1;
1257                 } else if (strnicmp(data, "mapchars", 8) == 0) {
1258                         vol->remap = 1;
1259                 } else if (strnicmp(data, "nomapchars", 10) == 0) {
1260                         vol->remap = 0;
1261                 } else if (strnicmp(data, "sfu", 3) == 0) {
1262                         vol->sfu_emul = 1;
1263                 } else if (strnicmp(data, "nosfu", 5) == 0) {
1264                         vol->sfu_emul = 0;
1265                 } else if (strnicmp(data, "nodfs", 5) == 0) {
1266                         vol->nodfs = 1;
1267                 } else if (strnicmp(data, "posixpaths", 10) == 0) {
1268                         vol->posix_paths = 1;
1269                 } else if (strnicmp(data, "noposixpaths", 12) == 0) {
1270                         vol->posix_paths = 0;
1271                 } else if (strnicmp(data, "nounix", 6) == 0) {
1272                         vol->no_linux_ext = 1;
1273                 } else if (strnicmp(data, "nolinux", 7) == 0) {
1274                         vol->no_linux_ext = 1;
1275                 } else if ((strnicmp(data, "nocase", 6) == 0) ||
1276                            (strnicmp(data, "ignorecase", 10)  == 0)) {
1277                         vol->nocase = 1;
1278                 } else if (strnicmp(data, "mand", 4) == 0) {
1279                         /* ignore */
1280                 } else if (strnicmp(data, "nomand", 6) == 0) {
1281                         /* ignore */
1282                 } else if (strnicmp(data, "_netdev", 7) == 0) {
1283                         /* ignore */
1284                 } else if (strnicmp(data, "brl", 3) == 0) {
1285                         vol->nobrl =  0;
1286                 } else if ((strnicmp(data, "nobrl", 5) == 0) ||
1287                            (strnicmp(data, "nolock", 6) == 0)) {
1288                         vol->nobrl =  1;
1289                         /* turn off mandatory locking in mode
1290                         if remote locking is turned off since the
1291                         local vfs will do advisory */
1292                         if (vol->file_mode ==
1293                                 (S_IALLUGO & ~(S_ISUID | S_IXGRP)))
1294                                 vol->file_mode = S_IALLUGO;
1295                 } else if (strnicmp(data, "forcemandatorylock", 9) == 0) {
1296                         /* will take the shorter form "forcemand" as well */
1297                         /* This mount option will force use of mandatory
1298                           (DOS/Windows style) byte range locks, instead of
1299                           using posix advisory byte range locks, even if the
1300                           Unix extensions are available and posix locks would
1301                           be supported otherwise. If Unix extensions are not
1302                           negotiated this has no effect since mandatory locks
1303                           would be used (mandatory locks is all that those
1304                           those servers support) */
1305                         vol->mand_lock = 1;
1306                 } else if (strnicmp(data, "setuids", 7) == 0) {
1307                         vol->setuids = 1;
1308                 } else if (strnicmp(data, "nosetuids", 9) == 0) {
1309                         vol->setuids = 0;
1310                 } else if (strnicmp(data, "dynperm", 7) == 0) {
1311                         vol->dynperm = true;
1312                 } else if (strnicmp(data, "nodynperm", 9) == 0) {
1313                         vol->dynperm = false;
1314                 } else if (strnicmp(data, "nohard", 6) == 0) {
1315                         vol->retry = 0;
1316                 } else if (strnicmp(data, "nosoft", 6) == 0) {
1317                         vol->retry = 1;
1318                 } else if (strnicmp(data, "nointr", 6) == 0) {
1319                         vol->intr = 0;
1320                 } else if (strnicmp(data, "intr", 4) == 0) {
1321                         vol->intr = 1;
1322                 } else if (strnicmp(data, "nostrictsync", 12) == 0) {
1323                         vol->nostrictsync = 1;
1324                 } else if (strnicmp(data, "strictsync", 10) == 0) {
1325                         vol->nostrictsync = 0;
1326                 } else if (strnicmp(data, "serverino", 7) == 0) {
1327                         vol->server_ino = 1;
1328                 } else if (strnicmp(data, "noserverino", 9) == 0) {
1329                         vol->server_ino = 0;
1330                 } else if (strnicmp(data, "cifsacl", 7) == 0) {
1331                         vol->cifs_acl = 1;
1332                 } else if (strnicmp(data, "nocifsacl", 9) == 0) {
1333                         vol->cifs_acl = 0;
1334                 } else if (strnicmp(data, "acl", 3) == 0) {
1335                         vol->no_psx_acl = 0;
1336                 } else if (strnicmp(data, "noacl", 5) == 0) {
1337                         vol->no_psx_acl = 1;
1338                 } else if (strnicmp(data, "locallease", 6) == 0) {
1339                         vol->local_lease = 1;
1340                 } else if (strnicmp(data, "sign", 4) == 0) {
1341                         vol->secFlg |= CIFSSEC_MUST_SIGN;
1342                 } else if (strnicmp(data, "seal", 4) == 0) {
1343                         /* we do not do the following in secFlags because seal
1344                            is a per tree connection (mount) not a per socket
1345                            or per-smb connection option in the protocol */
1346                         /* vol->secFlg |= CIFSSEC_MUST_SEAL; */
1347                         vol->seal = 1;
1348                 } else if (strnicmp(data, "direct", 6) == 0) {
1349                         vol->direct_io = 1;
1350                 } else if (strnicmp(data, "forcedirectio", 13) == 0) {
1351                         vol->direct_io = 1;
1352                 } else if (strnicmp(data, "noac", 4) == 0) {
1353                         printk(KERN_WARNING "CIFS: Mount option noac not "
1354                                 "supported. Instead set "
1355                                 "/proc/fs/cifs/LookupCacheEnabled to 0\n");
1356                 } else if (strnicmp(data, "fsc", 3) == 0) {
1357 #ifndef CONFIG_CIFS_FSCACHE
1358                         cERROR(1, "FS-Cache support needs CONFIG_CIFS_FSCACHE"
1359                                   "kernel config option set");
1360                         return 1;
1361 #endif
1362                         vol->fsc = true;
1363                 } else if (strnicmp(data, "mfsymlinks", 10) == 0) {
1364                         vol->mfsymlinks = true;
1365                 } else if (strnicmp(data, "multiuser", 8) == 0) {
1366                         vol->multiuser = true;
1367                 } else
1368                         printk(KERN_WARNING "CIFS: Unknown mount option %s\n",
1369                                                 data);
1370         }
1371         if (vol->UNC == NULL) {
1372                 if (devname == NULL) {
1373                         printk(KERN_WARNING "CIFS: Missing UNC name for mount "
1374                                                 "target\n");
1375                         return 1;
1376                 }
1377                 if ((temp_len = strnlen(devname, 300)) < 300) {
1378                         vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1379                         if (vol->UNC == NULL)
1380                                 return 1;
1381                         strcpy(vol->UNC, devname);
1382                         if (strncmp(vol->UNC, "//", 2) == 0) {
1383                                 vol->UNC[0] = '\\';
1384                                 vol->UNC[1] = '\\';
1385                         } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1386                                 printk(KERN_WARNING "CIFS: UNC Path does not "
1387                                                     "begin with // or \\\\ \n");
1388                                 return 1;
1389                         }
1390                         value = strpbrk(vol->UNC+2, "/\\");
1391                         if (value)
1392                                 *value = '\\';
1393                 } else {
1394                         printk(KERN_WARNING "CIFS: UNC name too long\n");
1395                         return 1;
1396                 }
1397         }
1398
1399         if (vol->multiuser && !(vol->secFlg & CIFSSEC_MAY_KRB5)) {
1400                 cERROR(1, "Multiuser mounts currently require krb5 "
1401                           "authentication!");
1402                 return 1;
1403         }
1404
1405         if (vol->UNCip == NULL)
1406                 vol->UNCip = &vol->UNC[2];
1407
1408         if (uid_specified)
1409                 vol->override_uid = override_uid;
1410         else if (override_uid == 1)
1411                 printk(KERN_NOTICE "CIFS: ignoring forceuid mount option "
1412                                    "specified with no uid= option.\n");
1413
1414         if (gid_specified)
1415                 vol->override_gid = override_gid;
1416         else if (override_gid == 1)
1417                 printk(KERN_NOTICE "CIFS: ignoring forcegid mount option "
1418                                    "specified with no gid= option.\n");
1419
1420         return 0;
1421 }
1422
1423 /** Returns true if srcaddr isn't specified and rhs isn't
1424  * specified, or if srcaddr is specified and
1425  * matches the IP address of the rhs argument.
1426  */
1427 static bool
1428 srcip_matches(struct sockaddr *srcaddr, struct sockaddr *rhs)
1429 {
1430         switch (srcaddr->sa_family) {
1431         case AF_UNSPEC:
1432                 return (rhs->sa_family == AF_UNSPEC);
1433         case AF_INET: {
1434                 struct sockaddr_in *saddr4 = (struct sockaddr_in *)srcaddr;
1435                 struct sockaddr_in *vaddr4 = (struct sockaddr_in *)rhs;
1436                 return (saddr4->sin_addr.s_addr == vaddr4->sin_addr.s_addr);
1437         }
1438         case AF_INET6: {
1439                 struct sockaddr_in6 *saddr6 = (struct sockaddr_in6 *)srcaddr;
1440                 struct sockaddr_in6 *vaddr6 = (struct sockaddr_in6 *)&rhs;
1441                 return ipv6_addr_equal(&saddr6->sin6_addr, &vaddr6->sin6_addr);
1442         }
1443         default:
1444                 WARN_ON(1);
1445                 return false; /* don't expect to be here */
1446         }
1447 }
1448
1449 /*
1450  * If no port is specified in addr structure, we try to match with 445 port
1451  * and if it fails - with 139 ports. It should be called only if address
1452  * families of server and addr are equal.
1453  */
1454 static bool
1455 match_port(struct TCP_Server_Info *server, struct sockaddr *addr)
1456 {
1457         unsigned short int port, *sport;
1458
1459         switch (addr->sa_family) {
1460         case AF_INET:
1461                 sport = &((struct sockaddr_in *) &server->dstaddr)->sin_port;
1462                 port = ((struct sockaddr_in *) addr)->sin_port;
1463                 break;
1464         case AF_INET6:
1465                 sport = &((struct sockaddr_in6 *) &server->dstaddr)->sin6_port;
1466                 port = ((struct sockaddr_in6 *) addr)->sin6_port;
1467                 break;
1468         default:
1469                 WARN_ON(1);
1470                 return false;
1471         }
1472
1473         if (!port) {
1474                 port = htons(CIFS_PORT);
1475                 if (port == *sport)
1476                         return true;
1477
1478                 port = htons(RFC1001_PORT);
1479         }
1480
1481         return port == *sport;
1482 }
1483
1484 static bool
1485 match_address(struct TCP_Server_Info *server, struct sockaddr *addr,
1486               struct sockaddr *srcaddr)
1487 {
1488         switch (addr->sa_family) {
1489         case AF_INET: {
1490                 struct sockaddr_in *addr4 = (struct sockaddr_in *)addr;
1491                 struct sockaddr_in *srv_addr4 =
1492                                         (struct sockaddr_in *)&server->dstaddr;
1493
1494                 if (addr4->sin_addr.s_addr != srv_addr4->sin_addr.s_addr)
1495                         return false;
1496                 break;
1497         }
1498         case AF_INET6: {
1499                 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)addr;
1500                 struct sockaddr_in6 *srv_addr6 =
1501                                         (struct sockaddr_in6 *)&server->dstaddr;
1502
1503                 if (!ipv6_addr_equal(&addr6->sin6_addr,
1504                                      &srv_addr6->sin6_addr))
1505                         return false;
1506                 if (addr6->sin6_scope_id != srv_addr6->sin6_scope_id)
1507                         return false;
1508                 break;
1509         }
1510         default:
1511                 WARN_ON(1);
1512                 return false; /* don't expect to be here */
1513         }
1514
1515         if (!srcip_matches(srcaddr, (struct sockaddr *)&server->srcaddr))
1516                 return false;
1517
1518         return true;
1519 }
1520
1521 static bool
1522 match_security(struct TCP_Server_Info *server, struct smb_vol *vol)
1523 {
1524         unsigned int secFlags;
1525
1526         if (vol->secFlg & (~(CIFSSEC_MUST_SIGN | CIFSSEC_MUST_SEAL)))
1527                 secFlags = vol->secFlg;
1528         else
1529                 secFlags = global_secflags | vol->secFlg;
1530
1531         switch (server->secType) {
1532         case LANMAN:
1533                 if (!(secFlags & (CIFSSEC_MAY_LANMAN|CIFSSEC_MAY_PLNTXT)))
1534                         return false;
1535                 break;
1536         case NTLMv2:
1537                 if (!(secFlags & CIFSSEC_MAY_NTLMV2))
1538                         return false;
1539                 break;
1540         case NTLM:
1541                 if (!(secFlags & CIFSSEC_MAY_NTLM))
1542                         return false;
1543                 break;
1544         case Kerberos:
1545                 if (!(secFlags & CIFSSEC_MAY_KRB5))
1546                         return false;
1547                 break;
1548         case RawNTLMSSP:
1549                 if (!(secFlags & CIFSSEC_MAY_NTLMSSP))
1550                         return false;
1551                 break;
1552         default:
1553                 /* shouldn't happen */
1554                 return false;
1555         }
1556
1557         /* now check if signing mode is acceptible */
1558         if ((secFlags & CIFSSEC_MAY_SIGN) == 0 &&
1559             (server->secMode & SECMODE_SIGN_REQUIRED))
1560                         return false;
1561         else if (((secFlags & CIFSSEC_MUST_SIGN) == CIFSSEC_MUST_SIGN) &&
1562                  (server->secMode &
1563                   (SECMODE_SIGN_ENABLED|SECMODE_SIGN_REQUIRED)) == 0)
1564                         return false;
1565
1566         return true;
1567 }
1568
1569 static struct TCP_Server_Info *
1570 cifs_find_tcp_session(struct sockaddr *addr, struct smb_vol *vol)
1571 {
1572         struct TCP_Server_Info *server;
1573
1574         spin_lock(&cifs_tcp_ses_lock);
1575         list_for_each_entry(server, &cifs_tcp_ses_list, tcp_ses_list) {
1576                 if (!match_address(server, addr,
1577                                    (struct sockaddr *)&vol->srcaddr))
1578                         continue;
1579
1580                 if (!match_port(server, addr))
1581                         continue;
1582
1583                 if (!match_security(server, vol))
1584                         continue;
1585
1586                 ++server->srv_count;
1587                 spin_unlock(&cifs_tcp_ses_lock);
1588                 cFYI(1, "Existing tcp session with server found");
1589                 return server;
1590         }
1591         spin_unlock(&cifs_tcp_ses_lock);
1592         return NULL;
1593 }
1594
1595 static void
1596 cifs_put_tcp_session(struct TCP_Server_Info *server)
1597 {
1598         struct task_struct *task;
1599
1600         spin_lock(&cifs_tcp_ses_lock);
1601         if (--server->srv_count > 0) {
1602                 spin_unlock(&cifs_tcp_ses_lock);
1603                 return;
1604         }
1605
1606         list_del_init(&server->tcp_ses_list);
1607         spin_unlock(&cifs_tcp_ses_lock);
1608
1609         cancel_delayed_work_sync(&server->echo);
1610
1611         spin_lock(&GlobalMid_Lock);
1612         server->tcpStatus = CifsExiting;
1613         spin_unlock(&GlobalMid_Lock);
1614
1615         cifs_crypto_shash_release(server);
1616         cifs_fscache_release_client_cookie(server);
1617
1618         kfree(server->session_key.response);
1619         server->session_key.response = NULL;
1620         server->session_key.len = 0;
1621
1622         task = xchg(&server->tsk, NULL);
1623         if (task)
1624                 force_sig(SIGKILL, task);
1625 }
1626
1627 static struct TCP_Server_Info *
1628 cifs_get_tcp_session(struct smb_vol *volume_info)
1629 {
1630         struct TCP_Server_Info *tcp_ses = NULL;
1631         struct sockaddr_storage addr;
1632         struct sockaddr_in *sin_server = (struct sockaddr_in *) &addr;
1633         struct sockaddr_in6 *sin_server6 = (struct sockaddr_in6 *) &addr;
1634         int rc;
1635
1636         memset(&addr, 0, sizeof(struct sockaddr_storage));
1637
1638         cFYI(1, "UNC: %s ip: %s", volume_info->UNC, volume_info->UNCip);
1639
1640         if (volume_info->UNCip && volume_info->UNC) {
1641                 rc = cifs_fill_sockaddr((struct sockaddr *)&addr,
1642                                         volume_info->UNCip,
1643                                         strlen(volume_info->UNCip),
1644                                         volume_info->port);
1645                 if (!rc) {
1646                         /* we failed translating address */
1647                         rc = -EINVAL;
1648                         goto out_err;
1649                 }
1650         } else if (volume_info->UNCip) {
1651                 /* BB using ip addr as tcp_ses name to connect to the
1652                    DFS root below */
1653                 cERROR(1, "Connecting to DFS root not implemented yet");
1654                 rc = -EINVAL;
1655                 goto out_err;
1656         } else /* which tcp_sess DFS root would we conect to */ {
1657                 cERROR(1, "CIFS mount error: No UNC path (e.g. -o "
1658                         "unc=//192.168.1.100/public) specified");
1659                 rc = -EINVAL;
1660                 goto out_err;
1661         }
1662
1663         /* see if we already have a matching tcp_ses */
1664         tcp_ses = cifs_find_tcp_session((struct sockaddr *)&addr, volume_info);
1665         if (tcp_ses)
1666                 return tcp_ses;
1667
1668         tcp_ses = kzalloc(sizeof(struct TCP_Server_Info), GFP_KERNEL);
1669         if (!tcp_ses) {
1670                 rc = -ENOMEM;
1671                 goto out_err;
1672         }
1673
1674         rc = cifs_crypto_shash_allocate(tcp_ses);
1675         if (rc) {
1676                 cERROR(1, "could not setup hash structures rc %d", rc);
1677                 goto out_err;
1678         }
1679
1680         tcp_ses->hostname = extract_hostname(volume_info->UNC);
1681         if (IS_ERR(tcp_ses->hostname)) {
1682                 rc = PTR_ERR(tcp_ses->hostname);
1683                 goto out_err_crypto_release;
1684         }
1685
1686         tcp_ses->noblocksnd = volume_info->noblocksnd;
1687         tcp_ses->noautotune = volume_info->noautotune;
1688         tcp_ses->tcp_nodelay = volume_info->sockopt_tcp_nodelay;
1689         atomic_set(&tcp_ses->inFlight, 0);
1690         init_waitqueue_head(&tcp_ses->response_q);
1691         init_waitqueue_head(&tcp_ses->request_q);
1692         INIT_LIST_HEAD(&tcp_ses->pending_mid_q);
1693         mutex_init(&tcp_ses->srv_mutex);
1694         memcpy(tcp_ses->workstation_RFC1001_name,
1695                 volume_info->source_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1696         memcpy(tcp_ses->server_RFC1001_name,
1697                 volume_info->target_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1698         tcp_ses->session_estab = false;
1699         tcp_ses->sequence_number = 0;
1700         tcp_ses->lstrp = jiffies;
1701         INIT_LIST_HEAD(&tcp_ses->tcp_ses_list);
1702         INIT_LIST_HEAD(&tcp_ses->smb_ses_list);
1703         INIT_DELAYED_WORK(&tcp_ses->echo, cifs_echo_request);
1704
1705         /*
1706          * at this point we are the only ones with the pointer
1707          * to the struct since the kernel thread not created yet
1708          * no need to spinlock this init of tcpStatus or srv_count
1709          */
1710         tcp_ses->tcpStatus = CifsNew;
1711         memcpy(&tcp_ses->srcaddr, &volume_info->srcaddr,
1712                sizeof(tcp_ses->srcaddr));
1713         ++tcp_ses->srv_count;
1714
1715         if (addr.ss_family == AF_INET6) {
1716                 cFYI(1, "attempting ipv6 connect");
1717                 /* BB should we allow ipv6 on port 139? */
1718                 /* other OS never observed in Wild doing 139 with v6 */
1719                 memcpy(&tcp_ses->dstaddr, sin_server6,
1720                        sizeof(struct sockaddr_in6));
1721         } else
1722                 memcpy(&tcp_ses->dstaddr, sin_server,
1723                        sizeof(struct sockaddr_in));
1724
1725         rc = ip_connect(tcp_ses);
1726         if (rc < 0) {
1727                 cERROR(1, "Error connecting to socket. Aborting operation");
1728                 goto out_err_crypto_release;
1729         }
1730
1731         /*
1732          * since we're in a cifs function already, we know that
1733          * this will succeed. No need for try_module_get().
1734          */
1735         __module_get(THIS_MODULE);
1736         tcp_ses->tsk = kthread_run((void *)(void *)cifs_demultiplex_thread,
1737                                   tcp_ses, "cifsd");
1738         if (IS_ERR(tcp_ses->tsk)) {
1739                 rc = PTR_ERR(tcp_ses->tsk);
1740                 cERROR(1, "error %d create cifsd thread", rc);
1741                 module_put(THIS_MODULE);
1742                 goto out_err_crypto_release;
1743         }
1744
1745         /* thread spawned, put it on the list */
1746         spin_lock(&cifs_tcp_ses_lock);
1747         list_add(&tcp_ses->tcp_ses_list, &cifs_tcp_ses_list);
1748         spin_unlock(&cifs_tcp_ses_lock);
1749
1750         cifs_fscache_get_client_cookie(tcp_ses);
1751
1752         /* queue echo request delayed work */
1753         queue_delayed_work(system_nrt_wq, &tcp_ses->echo, SMB_ECHO_INTERVAL);
1754
1755         return tcp_ses;
1756
1757 out_err_crypto_release:
1758         cifs_crypto_shash_release(tcp_ses);
1759
1760 out_err:
1761         if (tcp_ses) {
1762                 if (!IS_ERR(tcp_ses->hostname))
1763                         kfree(tcp_ses->hostname);
1764                 if (tcp_ses->ssocket)
1765                         sock_release(tcp_ses->ssocket);
1766                 kfree(tcp_ses);
1767         }
1768         return ERR_PTR(rc);
1769 }
1770
1771 static struct cifsSesInfo *
1772 cifs_find_smb_ses(struct TCP_Server_Info *server, struct smb_vol *vol)
1773 {
1774         struct cifsSesInfo *ses;
1775
1776         spin_lock(&cifs_tcp_ses_lock);
1777         list_for_each_entry(ses, &server->smb_ses_list, smb_ses_list) {
1778                 switch (server->secType) {
1779                 case Kerberos:
1780                         if (vol->cred_uid != ses->cred_uid)
1781                                 continue;
1782                         break;
1783                 default:
1784                         /* anything else takes username/password */
1785                         if (strncmp(ses->userName, vol->username,
1786                                     MAX_USERNAME_SIZE))
1787                                 continue;
1788                         if (strlen(vol->username) != 0 &&
1789                             ses->password != NULL &&
1790                             strncmp(ses->password,
1791                                     vol->password ? vol->password : "",
1792                                     MAX_PASSWORD_SIZE))
1793                                 continue;
1794                 }
1795                 ++ses->ses_count;
1796                 spin_unlock(&cifs_tcp_ses_lock);
1797                 return ses;
1798         }
1799         spin_unlock(&cifs_tcp_ses_lock);
1800         return NULL;
1801 }
1802
1803 static void
1804 cifs_put_smb_ses(struct cifsSesInfo *ses)
1805 {
1806         int xid;
1807         struct TCP_Server_Info *server = ses->server;
1808
1809         cFYI(1, "%s: ses_count=%d\n", __func__, ses->ses_count);
1810         spin_lock(&cifs_tcp_ses_lock);
1811         if (--ses->ses_count > 0) {
1812                 spin_unlock(&cifs_tcp_ses_lock);
1813                 return;
1814         }
1815
1816         list_del_init(&ses->smb_ses_list);
1817         spin_unlock(&cifs_tcp_ses_lock);
1818
1819         if (ses->status == CifsGood) {
1820                 xid = GetXid();
1821                 CIFSSMBLogoff(xid, ses);
1822                 _FreeXid(xid);
1823         }
1824         sesInfoFree(ses);
1825         cifs_put_tcp_session(server);
1826 }
1827
1828 static struct cifsSesInfo *
1829 cifs_get_smb_ses(struct TCP_Server_Info *server, struct smb_vol *volume_info)
1830 {
1831         int rc = -ENOMEM, xid;
1832         struct cifsSesInfo *ses;
1833         struct sockaddr_in *addr = (struct sockaddr_in *)&server->dstaddr;
1834         struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)&server->dstaddr;
1835
1836         xid = GetXid();
1837
1838         ses = cifs_find_smb_ses(server, volume_info);
1839         if (ses) {
1840                 cFYI(1, "Existing smb sess found (status=%d)", ses->status);
1841
1842                 mutex_lock(&ses->session_mutex);
1843                 rc = cifs_negotiate_protocol(xid, ses);
1844                 if (rc) {
1845                         mutex_unlock(&ses->session_mutex);
1846                         /* problem -- put our ses reference */
1847                         cifs_put_smb_ses(ses);
1848                         FreeXid(xid);
1849                         return ERR_PTR(rc);
1850                 }
1851                 if (ses->need_reconnect) {
1852                         cFYI(1, "Session needs reconnect");
1853                         rc = cifs_setup_session(xid, ses,
1854                                                 volume_info->local_nls);
1855                         if (rc) {
1856                                 mutex_unlock(&ses->session_mutex);
1857                                 /* problem -- put our reference */
1858                                 cifs_put_smb_ses(ses);
1859                                 FreeXid(xid);
1860                                 return ERR_PTR(rc);
1861                         }
1862                 }
1863                 mutex_unlock(&ses->session_mutex);
1864
1865                 /* existing SMB ses has a server reference already */
1866                 cifs_put_tcp_session(server);
1867                 FreeXid(xid);
1868                 return ses;
1869         }
1870
1871         cFYI(1, "Existing smb sess not found");
1872         ses = sesInfoAlloc();
1873         if (ses == NULL)
1874                 goto get_ses_fail;
1875
1876         /* new SMB session uses our server ref */
1877         ses->server = server;
1878         if (server->dstaddr.ss_family == AF_INET6)
1879                 sprintf(ses->serverName, "%pI6", &addr6->sin6_addr);
1880         else
1881                 sprintf(ses->serverName, "%pI4", &addr->sin_addr);
1882
1883         if (volume_info->username)
1884                 strncpy(ses->userName, volume_info->username,
1885                         MAX_USERNAME_SIZE);
1886
1887         /* volume_info->password freed at unmount */
1888         if (volume_info->password) {
1889                 ses->password = kstrdup(volume_info->password, GFP_KERNEL);
1890                 if (!ses->password)
1891                         goto get_ses_fail;
1892         }
1893         if (volume_info->domainname) {
1894                 ses->domainName = kstrdup(volume_info->domainname, GFP_KERNEL);
1895                 if (!ses->domainName)
1896                         goto get_ses_fail;
1897         }
1898         ses->cred_uid = volume_info->cred_uid;
1899         ses->linux_uid = volume_info->linux_uid;
1900         ses->overrideSecFlg = volume_info->secFlg;
1901
1902         mutex_lock(&ses->session_mutex);
1903         rc = cifs_negotiate_protocol(xid, ses);
1904         if (!rc)
1905                 rc = cifs_setup_session(xid, ses, volume_info->local_nls);
1906         mutex_unlock(&ses->session_mutex);
1907         if (rc)
1908                 goto get_ses_fail;
1909
1910         /* success, put it on the list */
1911         spin_lock(&cifs_tcp_ses_lock);
1912         list_add(&ses->smb_ses_list, &server->smb_ses_list);
1913         spin_unlock(&cifs_tcp_ses_lock);
1914
1915         FreeXid(xid);
1916         return ses;
1917
1918 get_ses_fail:
1919         sesInfoFree(ses);
1920         FreeXid(xid);
1921         return ERR_PTR(rc);
1922 }
1923
1924 static struct cifsTconInfo *
1925 cifs_find_tcon(struct cifsSesInfo *ses, const char *unc)
1926 {
1927         struct list_head *tmp;
1928         struct cifsTconInfo *tcon;
1929
1930         spin_lock(&cifs_tcp_ses_lock);
1931         list_for_each(tmp, &ses->tcon_list) {
1932                 tcon = list_entry(tmp, struct cifsTconInfo, tcon_list);
1933                 if (tcon->tidStatus == CifsExiting)
1934                         continue;
1935                 if (strncmp(tcon->treeName, unc, MAX_TREE_SIZE))
1936                         continue;
1937
1938                 ++tcon->tc_count;
1939                 spin_unlock(&cifs_tcp_ses_lock);
1940                 return tcon;
1941         }
1942         spin_unlock(&cifs_tcp_ses_lock);
1943         return NULL;
1944 }
1945
1946 static void
1947 cifs_put_tcon(struct cifsTconInfo *tcon)
1948 {
1949         int xid;
1950         struct cifsSesInfo *ses = tcon->ses;
1951
1952         cFYI(1, "%s: tc_count=%d\n", __func__, tcon->tc_count);
1953         spin_lock(&cifs_tcp_ses_lock);
1954         if (--tcon->tc_count > 0) {
1955                 spin_unlock(&cifs_tcp_ses_lock);
1956                 return;
1957         }
1958
1959         list_del_init(&tcon->tcon_list);
1960         spin_unlock(&cifs_tcp_ses_lock);
1961
1962         xid = GetXid();
1963         CIFSSMBTDis(xid, tcon);
1964         _FreeXid(xid);
1965
1966         cifs_fscache_release_super_cookie(tcon);
1967         tconInfoFree(tcon);
1968         cifs_put_smb_ses(ses);
1969 }
1970
1971 static struct cifsTconInfo *
1972 cifs_get_tcon(struct cifsSesInfo *ses, struct smb_vol *volume_info)
1973 {
1974         int rc, xid;
1975         struct cifsTconInfo *tcon;
1976
1977         tcon = cifs_find_tcon(ses, volume_info->UNC);
1978         if (tcon) {
1979                 cFYI(1, "Found match on UNC path");
1980                 /* existing tcon already has a reference */
1981                 cifs_put_smb_ses(ses);
1982                 if (tcon->seal != volume_info->seal)
1983                         cERROR(1, "transport encryption setting "
1984                                    "conflicts with existing tid");
1985                 return tcon;
1986         }
1987
1988         tcon = tconInfoAlloc();
1989         if (tcon == NULL) {
1990                 rc = -ENOMEM;
1991                 goto out_fail;
1992         }
1993
1994         tcon->ses = ses;
1995         if (volume_info->password) {
1996                 tcon->password = kstrdup(volume_info->password, GFP_KERNEL);
1997                 if (!tcon->password) {
1998                         rc = -ENOMEM;
1999                         goto out_fail;
2000                 }
2001         }
2002
2003         if (strchr(volume_info->UNC + 3, '\\') == NULL
2004             && strchr(volume_info->UNC + 3, '/') == NULL) {
2005                 cERROR(1, "Missing share name");
2006                 rc = -ENODEV;
2007                 goto out_fail;
2008         }
2009
2010         /* BB Do we need to wrap session_mutex around
2011          * this TCon call and Unix SetFS as
2012          * we do on SessSetup and reconnect? */
2013         xid = GetXid();
2014         rc = CIFSTCon(xid, ses, volume_info->UNC, tcon, volume_info->local_nls);
2015         FreeXid(xid);
2016         cFYI(1, "CIFS Tcon rc = %d", rc);
2017         if (rc)
2018                 goto out_fail;
2019
2020         if (volume_info->nodfs) {
2021                 tcon->Flags &= ~SMB_SHARE_IS_IN_DFS;
2022                 cFYI(1, "DFS disabled (%d)", tcon->Flags);
2023         }
2024         tcon->seal = volume_info->seal;
2025         /* we can have only one retry value for a connection
2026            to a share so for resources mounted more than once
2027            to the same server share the last value passed in
2028            for the retry flag is used */
2029         tcon->retry = volume_info->retry;
2030         tcon->nocase = volume_info->nocase;
2031         tcon->local_lease = volume_info->local_lease;
2032
2033         spin_lock(&cifs_tcp_ses_lock);
2034         list_add(&tcon->tcon_list, &ses->tcon_list);
2035         spin_unlock(&cifs_tcp_ses_lock);
2036
2037         cifs_fscache_get_super_cookie(tcon);
2038
2039         return tcon;
2040
2041 out_fail:
2042         tconInfoFree(tcon);
2043         return ERR_PTR(rc);
2044 }
2045
2046 void
2047 cifs_put_tlink(struct tcon_link *tlink)
2048 {
2049         if (!tlink || IS_ERR(tlink))
2050                 return;
2051
2052         if (!atomic_dec_and_test(&tlink->tl_count) ||
2053             test_bit(TCON_LINK_IN_TREE, &tlink->tl_flags)) {
2054                 tlink->tl_time = jiffies;
2055                 return;
2056         }
2057
2058         if (!IS_ERR(tlink_tcon(tlink)))
2059                 cifs_put_tcon(tlink_tcon(tlink));
2060         kfree(tlink);
2061         return;
2062 }
2063
2064 int
2065 get_dfs_path(int xid, struct cifsSesInfo *pSesInfo, const char *old_path,
2066              const struct nls_table *nls_codepage, unsigned int *pnum_referrals,
2067              struct dfs_info3_param **preferrals, int remap)
2068 {
2069         char *temp_unc;
2070         int rc = 0;
2071
2072         *pnum_referrals = 0;
2073         *preferrals = NULL;
2074
2075         if (pSesInfo->ipc_tid == 0) {
2076                 temp_unc = kmalloc(2 /* for slashes */ +
2077                         strnlen(pSesInfo->serverName,
2078                                 SERVER_NAME_LEN_WITH_NULL * 2)
2079                                  + 1 + 4 /* slash IPC$ */  + 2,
2080                                 GFP_KERNEL);
2081                 if (temp_unc == NULL)
2082                         return -ENOMEM;
2083                 temp_unc[0] = '\\';
2084                 temp_unc[1] = '\\';
2085                 strcpy(temp_unc + 2, pSesInfo->serverName);
2086                 strcpy(temp_unc + 2 + strlen(pSesInfo->serverName), "\\IPC$");
2087                 rc = CIFSTCon(xid, pSesInfo, temp_unc, NULL, nls_codepage);
2088                 cFYI(1, "CIFS Tcon rc = %d ipc_tid = %d", rc, pSesInfo->ipc_tid);
2089                 kfree(temp_unc);
2090         }
2091         if (rc == 0)
2092                 rc = CIFSGetDFSRefer(xid, pSesInfo, old_path, preferrals,
2093                                      pnum_referrals, nls_codepage, remap);
2094         /* BB map targetUNCs to dfs_info3 structures, here or
2095                 in CIFSGetDFSRefer BB */
2096
2097         return rc;
2098 }
2099
2100 #ifdef CONFIG_DEBUG_LOCK_ALLOC
2101 static struct lock_class_key cifs_key[2];
2102 static struct lock_class_key cifs_slock_key[2];
2103
2104 static inline void
2105 cifs_reclassify_socket4(struct socket *sock)
2106 {
2107         struct sock *sk = sock->sk;
2108         BUG_ON(sock_owned_by_user(sk));
2109         sock_lock_init_class_and_name(sk, "slock-AF_INET-CIFS",
2110                 &cifs_slock_key[0], "sk_lock-AF_INET-CIFS", &cifs_key[0]);
2111 }
2112
2113 static inline void
2114 cifs_reclassify_socket6(struct socket *sock)
2115 {
2116         struct sock *sk = sock->sk;
2117         BUG_ON(sock_owned_by_user(sk));
2118         sock_lock_init_class_and_name(sk, "slock-AF_INET6-CIFS",
2119                 &cifs_slock_key[1], "sk_lock-AF_INET6-CIFS", &cifs_key[1]);
2120 }
2121 #else
2122 static inline void
2123 cifs_reclassify_socket4(struct socket *sock)
2124 {
2125 }
2126
2127 static inline void
2128 cifs_reclassify_socket6(struct socket *sock)
2129 {
2130 }
2131 #endif
2132
2133 /* See RFC1001 section 14 on representation of Netbios names */
2134 static void rfc1002mangle(char *target, char *source, unsigned int length)
2135 {
2136         unsigned int i, j;
2137
2138         for (i = 0, j = 0; i < (length); i++) {
2139                 /* mask a nibble at a time and encode */
2140                 target[j] = 'A' + (0x0F & (source[i] >> 4));
2141                 target[j+1] = 'A' + (0x0F & source[i]);
2142                 j += 2;
2143         }
2144
2145 }
2146
2147 static int
2148 bind_socket(struct TCP_Server_Info *server)
2149 {
2150         int rc = 0;
2151         if (server->srcaddr.ss_family != AF_UNSPEC) {
2152                 /* Bind to the specified local IP address */
2153                 struct socket *socket = server->ssocket;
2154                 rc = socket->ops->bind(socket,
2155                                        (struct sockaddr *) &server->srcaddr,
2156                                        sizeof(server->srcaddr));
2157                 if (rc < 0) {
2158                         struct sockaddr_in *saddr4;
2159                         struct sockaddr_in6 *saddr6;
2160                         saddr4 = (struct sockaddr_in *)&server->srcaddr;
2161                         saddr6 = (struct sockaddr_in6 *)&server->srcaddr;
2162                         if (saddr6->sin6_family == AF_INET6)
2163                                 cERROR(1, "cifs: "
2164                                        "Failed to bind to: %pI6c, error: %d\n",
2165                                        &saddr6->sin6_addr, rc);
2166                         else
2167                                 cERROR(1, "cifs: "
2168                                        "Failed to bind to: %pI4, error: %d\n",
2169                                        &saddr4->sin_addr.s_addr, rc);
2170                 }
2171         }
2172         return rc;
2173 }
2174
2175 static int
2176 ip_rfc1001_connect(struct TCP_Server_Info *server)
2177 {
2178         int rc = 0;
2179         /*
2180          * some servers require RFC1001 sessinit before sending
2181          * negprot - BB check reconnection in case where second
2182          * sessinit is sent but no second negprot
2183          */
2184         struct rfc1002_session_packet *ses_init_buf;
2185         struct smb_hdr *smb_buf;
2186         ses_init_buf = kzalloc(sizeof(struct rfc1002_session_packet),
2187                                GFP_KERNEL);
2188         if (ses_init_buf) {
2189                 ses_init_buf->trailer.session_req.called_len = 32;
2190
2191                 if (server->server_RFC1001_name &&
2192                     server->server_RFC1001_name[0] != 0)
2193                         rfc1002mangle(ses_init_buf->trailer.
2194                                       session_req.called_name,
2195                                       server->server_RFC1001_name,
2196                                       RFC1001_NAME_LEN_WITH_NULL);
2197                 else
2198                         rfc1002mangle(ses_init_buf->trailer.
2199                                       session_req.called_name,
2200                                       DEFAULT_CIFS_CALLED_NAME,
2201                                       RFC1001_NAME_LEN_WITH_NULL);
2202
2203                 ses_init_buf->trailer.session_req.calling_len = 32;
2204
2205                 /*
2206                  * calling name ends in null (byte 16) from old smb
2207                  * convention.
2208                  */
2209                 if (server->workstation_RFC1001_name &&
2210                     server->workstation_RFC1001_name[0] != 0)
2211                         rfc1002mangle(ses_init_buf->trailer.
2212                                       session_req.calling_name,
2213                                       server->workstation_RFC1001_name,
2214                                       RFC1001_NAME_LEN_WITH_NULL);
2215                 else
2216                         rfc1002mangle(ses_init_buf->trailer.
2217                                       session_req.calling_name,
2218                                       "LINUX_CIFS_CLNT",
2219                                       RFC1001_NAME_LEN_WITH_NULL);
2220
2221                 ses_init_buf->trailer.session_req.scope1 = 0;
2222                 ses_init_buf->trailer.session_req.scope2 = 0;
2223                 smb_buf = (struct smb_hdr *)ses_init_buf;
2224
2225                 /* sizeof RFC1002_SESSION_REQUEST with no scope */
2226                 smb_buf->smb_buf_length = 0x81000044;
2227                 rc = smb_send(server, smb_buf, 0x44);
2228                 kfree(ses_init_buf);
2229                 /*
2230                  * RFC1001 layer in at least one server
2231                  * requires very short break before negprot
2232                  * presumably because not expecting negprot
2233                  * to follow so fast.  This is a simple
2234                  * solution that works without
2235                  * complicating the code and causes no
2236                  * significant slowing down on mount
2237                  * for everyone else
2238                  */
2239                 usleep_range(1000, 2000);
2240         }
2241         /*
2242          * else the negprot may still work without this
2243          * even though malloc failed
2244          */
2245
2246         return rc;
2247 }
2248
2249 static int
2250 generic_ip_connect(struct TCP_Server_Info *server)
2251 {
2252         int rc = 0;
2253         unsigned short int sport;
2254         int slen, sfamily;
2255         struct socket *socket = server->ssocket;
2256         struct sockaddr *saddr;
2257
2258         saddr = (struct sockaddr *) &server->dstaddr;
2259
2260         if (server->dstaddr.ss_family == AF_INET6) {
2261                 sport = ((struct sockaddr_in6 *) saddr)->sin6_port;
2262                 slen = sizeof(struct sockaddr_in6);
2263                 sfamily = AF_INET6;
2264         } else {
2265                 sport = ((struct sockaddr_in *) saddr)->sin_port;
2266                 slen = sizeof(struct sockaddr_in);
2267                 sfamily = AF_INET;
2268         }
2269
2270         if (socket == NULL) {
2271                 rc = sock_create_kern(sfamily, SOCK_STREAM,
2272                                       IPPROTO_TCP, &socket);
2273                 if (rc < 0) {
2274                         cERROR(1, "Error %d creating socket", rc);
2275                         server->ssocket = NULL;
2276                         return rc;
2277                 }
2278
2279                 /* BB other socket options to set KEEPALIVE, NODELAY? */
2280                 cFYI(1, "Socket created");
2281                 server->ssocket = socket;
2282                 socket->sk->sk_allocation = GFP_NOFS;
2283                 if (sfamily == AF_INET6)
2284                         cifs_reclassify_socket6(socket);
2285                 else
2286                         cifs_reclassify_socket4(socket);
2287         }
2288
2289         rc = bind_socket(server);
2290         if (rc < 0)
2291                 return rc;
2292
2293         rc = socket->ops->connect(socket, saddr, slen, 0);
2294         if (rc < 0) {
2295                 cFYI(1, "Error %d connecting to server", rc);
2296                 sock_release(socket);
2297                 server->ssocket = NULL;
2298                 return rc;
2299         }
2300
2301         /*
2302          * Eventually check for other socket options to change from
2303          * the default. sock_setsockopt not used because it expects
2304          * user space buffer
2305          */
2306         socket->sk->sk_rcvtimeo = 7 * HZ;
2307         socket->sk->sk_sndtimeo = 5 * HZ;
2308
2309         /* make the bufsizes depend on wsize/rsize and max requests */
2310         if (server->noautotune) {
2311                 if (socket->sk->sk_sndbuf < (200 * 1024))
2312                         socket->sk->sk_sndbuf = 200 * 1024;
2313                 if (socket->sk->sk_rcvbuf < (140 * 1024))
2314                         socket->sk->sk_rcvbuf = 140 * 1024;
2315         }
2316
2317         if (server->tcp_nodelay) {
2318                 int val = 1;
2319                 rc = kernel_setsockopt(socket, SOL_TCP, TCP_NODELAY,
2320                                 (char *)&val, sizeof(val));
2321                 if (rc)
2322                         cFYI(1, "set TCP_NODELAY socket option error %d", rc);
2323         }
2324
2325          cFYI(1, "sndbuf %d rcvbuf %d rcvtimeo 0x%lx",
2326                  socket->sk->sk_sndbuf,
2327                  socket->sk->sk_rcvbuf, socket->sk->sk_rcvtimeo);
2328
2329         if (sport == htons(RFC1001_PORT))
2330                 rc = ip_rfc1001_connect(server);
2331
2332         return rc;
2333 }
2334
2335 static int
2336 ip_connect(struct TCP_Server_Info *server)
2337 {
2338         unsigned short int *sport;
2339         struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)&server->dstaddr;
2340         struct sockaddr_in *addr = (struct sockaddr_in *)&server->dstaddr;
2341
2342         if (server->dstaddr.ss_family == AF_INET6)
2343                 sport = &addr6->sin6_port;
2344         else
2345                 sport = &addr->sin_port;
2346
2347         if (*sport == 0) {
2348                 int rc;
2349
2350                 /* try with 445 port at first */
2351                 *sport = htons(CIFS_PORT);
2352
2353                 rc = generic_ip_connect(server);
2354                 if (rc >= 0)
2355                         return rc;
2356
2357                 /* if it failed, try with 139 port */
2358                 *sport = htons(RFC1001_PORT);
2359         }
2360
2361         return generic_ip_connect(server);
2362 }
2363
2364 void reset_cifs_unix_caps(int xid, struct cifsTconInfo *tcon,
2365                           struct super_block *sb, struct smb_vol *vol_info)
2366 {
2367         /* if we are reconnecting then should we check to see if
2368          * any requested capabilities changed locally e.g. via
2369          * remount but we can not do much about it here
2370          * if they have (even if we could detect it by the following)
2371          * Perhaps we could add a backpointer to array of sb from tcon
2372          * or if we change to make all sb to same share the same
2373          * sb as NFS - then we only have one backpointer to sb.
2374          * What if we wanted to mount the server share twice once with
2375          * and once without posixacls or posix paths? */
2376         __u64 saved_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2377
2378         if (vol_info && vol_info->no_linux_ext) {
2379                 tcon->fsUnixInfo.Capability = 0;
2380                 tcon->unix_ext = 0; /* Unix Extensions disabled */
2381                 cFYI(1, "Linux protocol extensions disabled");
2382                 return;
2383         } else if (vol_info)
2384                 tcon->unix_ext = 1; /* Unix Extensions supported */
2385
2386         if (tcon->unix_ext == 0) {
2387                 cFYI(1, "Unix extensions disabled so not set on reconnect");
2388                 return;
2389         }
2390
2391         if (!CIFSSMBQFSUnixInfo(xid, tcon)) {
2392                 __u64 cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2393
2394                 /* check for reconnect case in which we do not
2395                    want to change the mount behavior if we can avoid it */
2396                 if (vol_info == NULL) {
2397                         /* turn off POSIX ACL and PATHNAMES if not set
2398                            originally at mount time */
2399                         if ((saved_cap & CIFS_UNIX_POSIX_ACL_CAP) == 0)
2400                                 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2401                         if ((saved_cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2402                                 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2403                                         cERROR(1, "POSIXPATH support change");
2404                                 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2405                         } else if ((cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2406                                 cERROR(1, "possible reconnect error");
2407                                 cERROR(1, "server disabled POSIX path support");
2408                         }
2409                 }
2410
2411                 cap &= CIFS_UNIX_CAP_MASK;
2412                 if (vol_info && vol_info->no_psx_acl)
2413                         cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2414                 else if (CIFS_UNIX_POSIX_ACL_CAP & cap) {
2415                         cFYI(1, "negotiated posix acl support");
2416                         if (sb)
2417                                 sb->s_flags |= MS_POSIXACL;
2418                 }
2419
2420                 if (vol_info && vol_info->posix_paths == 0)
2421                         cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2422                 else if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) {
2423                         cFYI(1, "negotiate posix pathnames");
2424                         if (sb)
2425                                 CIFS_SB(sb)->mnt_cifs_flags |=
2426                                         CIFS_MOUNT_POSIX_PATHS;
2427                 }
2428
2429                 /* We might be setting the path sep back to a different
2430                 form if we are reconnecting and the server switched its
2431                 posix path capability for this share */
2432                 if (sb && (CIFS_SB(sb)->prepathlen > 0))
2433                         CIFS_SB(sb)->prepath[0] = CIFS_DIR_SEP(CIFS_SB(sb));
2434
2435                 if (sb && (CIFS_SB(sb)->rsize > 127 * 1024)) {
2436                         if ((cap & CIFS_UNIX_LARGE_READ_CAP) == 0) {
2437                                 CIFS_SB(sb)->rsize = 127 * 1024;
2438                                 cFYI(DBG2, "larger reads not supported by srv");
2439                         }
2440                 }
2441
2442
2443                 cFYI(1, "Negotiate caps 0x%x", (int)cap);
2444 #ifdef CONFIG_CIFS_DEBUG2
2445                 if (cap & CIFS_UNIX_FCNTL_CAP)
2446                         cFYI(1, "FCNTL cap");
2447                 if (cap & CIFS_UNIX_EXTATTR_CAP)
2448                         cFYI(1, "EXTATTR cap");
2449                 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2450                         cFYI(1, "POSIX path cap");
2451                 if (cap & CIFS_UNIX_XATTR_CAP)
2452                         cFYI(1, "XATTR cap");
2453                 if (cap & CIFS_UNIX_POSIX_ACL_CAP)
2454                         cFYI(1, "POSIX ACL cap");
2455                 if (cap & CIFS_UNIX_LARGE_READ_CAP)
2456                         cFYI(1, "very large read cap");
2457                 if (cap & CIFS_UNIX_LARGE_WRITE_CAP)
2458                         cFYI(1, "very large write cap");
2459 #endif /* CIFS_DEBUG2 */
2460                 if (CIFSSMBSetFSUnixInfo(xid, tcon, cap)) {
2461                         if (vol_info == NULL) {
2462                                 cFYI(1, "resetting capabilities failed");
2463                         } else
2464                                 cERROR(1, "Negotiating Unix capabilities "
2465                                            "with the server failed.  Consider "
2466                                            "mounting with the Unix Extensions\n"
2467                                            "disabled, if problems are found, "
2468                                            "by specifying the nounix mount "
2469                                            "option.");
2470
2471                 }
2472         }
2473 }
2474
2475 static void
2476 convert_delimiter(char *path, char delim)
2477 {
2478         int i;
2479         char old_delim;
2480
2481         if (path == NULL)
2482                 return;
2483
2484         if (delim == '/')
2485                 old_delim = '\\';
2486         else
2487                 old_delim = '/';
2488
2489         for (i = 0; path[i] != '\0'; i++) {
2490                 if (path[i] == old_delim)
2491                         path[i] = delim;
2492         }
2493 }
2494
2495 static void setup_cifs_sb(struct smb_vol *pvolume_info,
2496                           struct cifs_sb_info *cifs_sb)
2497 {
2498         INIT_DELAYED_WORK(&cifs_sb->prune_tlinks, cifs_prune_tlinks);
2499
2500         if (pvolume_info->rsize > CIFSMaxBufSize) {
2501                 cERROR(1, "rsize %d too large, using MaxBufSize",
2502                         pvolume_info->rsize);
2503                 cifs_sb->rsize = CIFSMaxBufSize;
2504         } else if ((pvolume_info->rsize) &&
2505                         (pvolume_info->rsize <= CIFSMaxBufSize))
2506                 cifs_sb->rsize = pvolume_info->rsize;
2507         else /* default */
2508                 cifs_sb->rsize = CIFSMaxBufSize;
2509
2510         if (pvolume_info->wsize > PAGEVEC_SIZE * PAGE_CACHE_SIZE) {
2511                 cERROR(1, "wsize %d too large, using 4096 instead",
2512                           pvolume_info->wsize);
2513                 cifs_sb->wsize = 4096;
2514         } else if (pvolume_info->wsize)
2515                 cifs_sb->wsize = pvolume_info->wsize;
2516         else
2517                 cifs_sb->wsize = min_t(const int,
2518                                         PAGEVEC_SIZE * PAGE_CACHE_SIZE,
2519                                         127*1024);
2520                 /* old default of CIFSMaxBufSize was too small now
2521                    that SMB Write2 can send multiple pages in kvec.
2522                    RFC1001 does not describe what happens when frame
2523                    bigger than 128K is sent so use that as max in
2524                    conjunction with 52K kvec constraint on arch with 4K
2525                    page size  */
2526
2527         if (cifs_sb->rsize < 2048) {
2528                 cifs_sb->rsize = 2048;
2529                 /* Windows ME may prefer this */
2530                 cFYI(1, "readsize set to minimum: 2048");
2531         }
2532         /* calculate prepath */
2533         cifs_sb->prepath = pvolume_info->prepath;
2534         if (cifs_sb->prepath) {
2535                 cifs_sb->prepathlen = strlen(cifs_sb->prepath);
2536                 /* we can not convert the / to \ in the path
2537                 separators in the prefixpath yet because we do not
2538                 know (until reset_cifs_unix_caps is called later)
2539                 whether POSIX PATH CAP is available. We normalize
2540                 the / to \ after reset_cifs_unix_caps is called */
2541                 pvolume_info->prepath = NULL;
2542         } else
2543                 cifs_sb->prepathlen = 0;
2544         cifs_sb->mnt_uid = pvolume_info->linux_uid;
2545         cifs_sb->mnt_gid = pvolume_info->linux_gid;
2546         cifs_sb->mnt_file_mode = pvolume_info->file_mode;
2547         cifs_sb->mnt_dir_mode = pvolume_info->dir_mode;
2548         cFYI(1, "file mode: 0x%x  dir mode: 0x%x",
2549                 cifs_sb->mnt_file_mode, cifs_sb->mnt_dir_mode);
2550
2551         cifs_sb->actimeo = pvolume_info->actimeo;
2552
2553         if (pvolume_info->noperm)
2554                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_PERM;
2555         if (pvolume_info->setuids)
2556                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SET_UID;
2557         if (pvolume_info->server_ino)
2558                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SERVER_INUM;
2559         if (pvolume_info->remap)
2560                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MAP_SPECIAL_CHR;
2561         if (pvolume_info->no_xattr)
2562                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_XATTR;
2563         if (pvolume_info->sfu_emul)
2564                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_UNX_EMUL;
2565         if (pvolume_info->nobrl)
2566                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_BRL;
2567         if (pvolume_info->nostrictsync)
2568                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOSSYNC;
2569         if (pvolume_info->mand_lock)
2570                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOPOSIXBRL;
2571         if (pvolume_info->cifs_acl)
2572                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_ACL;
2573         if (pvolume_info->override_uid)
2574                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_UID;
2575         if (pvolume_info->override_gid)
2576                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_GID;
2577         if (pvolume_info->dynperm)
2578                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DYNPERM;
2579         if (pvolume_info->fsc)
2580                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_FSCACHE;
2581         if (pvolume_info->multiuser)
2582                 cifs_sb->mnt_cifs_flags |= (CIFS_MOUNT_MULTIUSER |
2583                                             CIFS_MOUNT_NO_PERM);
2584         if (pvolume_info->direct_io) {
2585                 cFYI(1, "mounting share using direct i/o");
2586                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DIRECT_IO;
2587         }
2588         if (pvolume_info->mfsymlinks) {
2589                 if (pvolume_info->sfu_emul) {
2590                         cERROR(1,  "mount option mfsymlinks ignored if sfu "
2591                                    "mount option is used");
2592                 } else {
2593                         cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MF_SYMLINKS;
2594                 }
2595         }
2596
2597         if ((pvolume_info->cifs_acl) && (pvolume_info->dynperm))
2598                 cERROR(1, "mount option dynperm ignored if cifsacl "
2599                            "mount option supported");
2600 }
2601
2602 static int
2603 is_path_accessible(int xid, struct cifsTconInfo *tcon,
2604                    struct cifs_sb_info *cifs_sb, const char *full_path)
2605 {
2606         int rc;
2607         FILE_ALL_INFO *pfile_info;
2608
2609         pfile_info = kmalloc(sizeof(FILE_ALL_INFO), GFP_KERNEL);
2610         if (pfile_info == NULL)
2611                 return -ENOMEM;
2612
2613         rc = CIFSSMBQPathInfo(xid, tcon, full_path, pfile_info,
2614                               0 /* not legacy */, cifs_sb->local_nls,
2615                               cifs_sb->mnt_cifs_flags &
2616                                 CIFS_MOUNT_MAP_SPECIAL_CHR);
2617         kfree(pfile_info);
2618         return rc;
2619 }
2620
2621 static void
2622 cleanup_volume_info(struct smb_vol **pvolume_info)
2623 {
2624         struct smb_vol *volume_info;
2625
2626         if (!pvolume_info || !*pvolume_info)
2627                 return;
2628
2629         volume_info = *pvolume_info;
2630         kzfree(volume_info->password);
2631         kfree(volume_info->UNC);
2632         kfree(volume_info->prepath);
2633         kfree(volume_info);
2634         *pvolume_info = NULL;
2635         return;
2636 }
2637
2638 #ifdef CONFIG_CIFS_DFS_UPCALL
2639 /* build_path_to_root returns full path to root when
2640  * we do not have an exiting connection (tcon) */
2641 static char *
2642 build_unc_path_to_root(const struct smb_vol *volume_info,
2643                 const struct cifs_sb_info *cifs_sb)
2644 {
2645         char *full_path;
2646
2647         int unc_len = strnlen(volume_info->UNC, MAX_TREE_SIZE + 1);
2648         full_path = kmalloc(unc_len + cifs_sb->prepathlen + 1, GFP_KERNEL);
2649         if (full_path == NULL)
2650                 return ERR_PTR(-ENOMEM);
2651
2652         strncpy(full_path, volume_info->UNC, unc_len);
2653         if (cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) {
2654                 int i;
2655                 for (i = 0; i < unc_len; i++) {
2656                         if (full_path[i] == '\\')
2657                                 full_path[i] = '/';
2658                 }
2659         }
2660
2661         if (cifs_sb->prepathlen)
2662                 strncpy(full_path + unc_len, cifs_sb->prepath,
2663                                 cifs_sb->prepathlen);
2664
2665         full_path[unc_len + cifs_sb->prepathlen] = 0; /* add trailing null */
2666         return full_path;
2667 }
2668 #endif
2669
2670 int
2671 cifs_mount(struct super_block *sb, struct cifs_sb_info *cifs_sb,
2672                 char *mount_data_global, const char *devname)
2673 {
2674         int rc;
2675         int xid;
2676         struct smb_vol *volume_info;
2677         struct cifsSesInfo *pSesInfo;
2678         struct cifsTconInfo *tcon;
2679         struct TCP_Server_Info *srvTcp;
2680         char   *full_path;
2681         char *mount_data = mount_data_global;
2682         struct tcon_link *tlink;
2683 #ifdef CONFIG_CIFS_DFS_UPCALL
2684         struct dfs_info3_param *referrals = NULL;
2685         unsigned int num_referrals = 0;
2686         int referral_walks_count = 0;
2687 try_mount_again:
2688 #endif
2689         rc = 0;
2690         tcon = NULL;
2691         pSesInfo = NULL;
2692         srvTcp = NULL;
2693         full_path = NULL;
2694         tlink = NULL;
2695
2696         xid = GetXid();
2697
2698         volume_info = kzalloc(sizeof(struct smb_vol), GFP_KERNEL);
2699         if (!volume_info) {
2700                 rc = -ENOMEM;
2701                 goto out;
2702         }
2703
2704         if (cifs_parse_mount_options(mount_data, devname, volume_info)) {
2705                 rc = -EINVAL;
2706                 goto out;
2707         }
2708
2709         if (volume_info->nullauth) {
2710                 cFYI(1, "null user");
2711                 volume_info->username = "";
2712         } else if (volume_info->username) {
2713                 /* BB fixme parse for domain name here */
2714                 cFYI(1, "Username: %s", volume_info->username);
2715         } else {
2716                 cifserror("No username specified");
2717         /* In userspace mount helper we can get user name from alternate
2718            locations such as env variables and files on disk */
2719                 rc = -EINVAL;
2720                 goto out;
2721         }
2722
2723         /* this is needed for ASCII cp to Unicode converts */
2724         if (volume_info->iocharset == NULL) {
2725                 /* load_nls_default cannot return null */
2726                 volume_info->local_nls = load_nls_default();
2727         } else {
2728                 volume_info->local_nls = load_nls(volume_info->iocharset);
2729                 if (volume_info->local_nls == NULL) {
2730                         cERROR(1, "CIFS mount error: iocharset %s not found",
2731                                  volume_info->iocharset);
2732                         rc = -ELIBACC;
2733                         goto out;
2734                 }
2735         }
2736         cifs_sb->local_nls = volume_info->local_nls;
2737
2738         /* get a reference to a tcp session */
2739         srvTcp = cifs_get_tcp_session(volume_info);
2740         if (IS_ERR(srvTcp)) {
2741                 rc = PTR_ERR(srvTcp);
2742                 goto out;
2743         }
2744
2745         /* get a reference to a SMB session */
2746         pSesInfo = cifs_get_smb_ses(srvTcp, volume_info);
2747         if (IS_ERR(pSesInfo)) {
2748                 rc = PTR_ERR(pSesInfo);
2749                 pSesInfo = NULL;
2750                 goto mount_fail_check;
2751         }
2752
2753         setup_cifs_sb(volume_info, cifs_sb);
2754         if (pSesInfo->capabilities & CAP_LARGE_FILES)
2755                 sb->s_maxbytes = MAX_LFS_FILESIZE;
2756         else
2757                 sb->s_maxbytes = MAX_NON_LFS;
2758
2759         /* BB FIXME fix time_gran to be larger for LANMAN sessions */
2760         sb->s_time_gran = 100;
2761
2762         /* search for existing tcon to this server share */
2763         tcon = cifs_get_tcon(pSesInfo, volume_info);
2764         if (IS_ERR(tcon)) {
2765                 rc = PTR_ERR(tcon);
2766                 tcon = NULL;
2767                 goto remote_path_check;
2768         }
2769
2770         /* do not care if following two calls succeed - informational */
2771         if (!tcon->ipc) {
2772                 CIFSSMBQFSDeviceInfo(xid, tcon);
2773                 CIFSSMBQFSAttributeInfo(xid, tcon);
2774         }
2775
2776         /* tell server which Unix caps we support */
2777         if (tcon->ses->capabilities & CAP_UNIX)
2778                 /* reset of caps checks mount to see if unix extensions
2779                    disabled for just this mount */
2780                 reset_cifs_unix_caps(xid, tcon, sb, volume_info);
2781         else
2782                 tcon->unix_ext = 0; /* server does not support them */
2783
2784         /* convert forward to back slashes in prepath here if needed */
2785         if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2786                 convert_delimiter(cifs_sb->prepath, CIFS_DIR_SEP(cifs_sb));
2787
2788         if ((tcon->unix_ext == 0) && (cifs_sb->rsize > (1024 * 127))) {
2789                 cifs_sb->rsize = 1024 * 127;
2790                 cFYI(DBG2, "no very large read support, rsize now 127K");
2791         }
2792         if (!(tcon->ses->capabilities & CAP_LARGE_WRITE_X))
2793                 cifs_sb->wsize = min(cifs_sb->wsize,
2794                                (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2795         if (!(tcon->ses->capabilities & CAP_LARGE_READ_X))
2796                 cifs_sb->rsize = min(cifs_sb->rsize,
2797                                (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2798
2799 remote_path_check:
2800         /* check if a whole path (including prepath) is not remote */
2801         if (!rc && cifs_sb->prepathlen && tcon) {
2802                 /* build_path_to_root works only when we have a valid tcon */
2803                 full_path = cifs_build_path_to_root(cifs_sb, tcon);
2804                 if (full_path == NULL) {
2805                         rc = -ENOMEM;
2806                         goto mount_fail_check;
2807                 }
2808                 rc = is_path_accessible(xid, tcon, cifs_sb, full_path);
2809                 if (rc != 0 && rc != -EREMOTE) {
2810                         kfree(full_path);
2811                         goto mount_fail_check;
2812                 }
2813                 kfree(full_path);
2814         }
2815
2816         /* get referral if needed */
2817         if (rc == -EREMOTE) {
2818 #ifdef CONFIG_CIFS_DFS_UPCALL
2819                 if (referral_walks_count > MAX_NESTED_LINKS) {
2820                         /*
2821                          * BB: when we implement proper loop detection,
2822                          *     we will remove this check. But now we need it
2823                          *     to prevent an indefinite loop if 'DFS tree' is
2824                          *     misconfigured (i.e. has loops).
2825                          */
2826                         rc = -ELOOP;
2827                         goto mount_fail_check;
2828                 }
2829                 /* convert forward to back slashes in prepath here if needed */
2830                 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2831                         convert_delimiter(cifs_sb->prepath,
2832                                         CIFS_DIR_SEP(cifs_sb));
2833                 full_path = build_unc_path_to_root(volume_info, cifs_sb);
2834                 if (IS_ERR(full_path)) {
2835                         rc = PTR_ERR(full_path);
2836                         goto mount_fail_check;
2837                 }
2838
2839                 cFYI(1, "Getting referral for: %s", full_path);
2840                 rc = get_dfs_path(xid, pSesInfo , full_path + 1,
2841                         cifs_sb->local_nls, &num_referrals, &referrals,
2842                         cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
2843                 if (!rc && num_referrals > 0) {
2844                         char *fake_devname = NULL;
2845
2846                         if (mount_data != mount_data_global)
2847                                 kfree(mount_data);
2848
2849                         mount_data = cifs_compose_mount_options(
2850                                         cifs_sb->mountdata, full_path + 1,
2851                                         referrals, &fake_devname);
2852
2853                         free_dfs_info_array(referrals, num_referrals);
2854                         kfree(fake_devname);
2855                         kfree(full_path);
2856
2857                         if (IS_ERR(mount_data)) {
2858                                 rc = PTR_ERR(mount_data);
2859                                 mount_data = NULL;
2860                                 goto mount_fail_check;
2861                         }
2862
2863                         if (tcon)
2864                                 cifs_put_tcon(tcon);
2865                         else if (pSesInfo)
2866                                 cifs_put_smb_ses(pSesInfo);
2867
2868                         cleanup_volume_info(&volume_info);
2869                         referral_walks_count++;
2870                         FreeXid(xid);
2871                         goto try_mount_again;
2872                 }
2873 #else /* No DFS support, return error on mount */
2874                 rc = -EOPNOTSUPP;
2875 #endif
2876         }
2877
2878         if (rc)
2879                 goto mount_fail_check;
2880
2881         /* now, hang the tcon off of the superblock */
2882         tlink = kzalloc(sizeof *tlink, GFP_KERNEL);
2883         if (tlink == NULL) {
2884                 rc = -ENOMEM;
2885                 goto mount_fail_check;
2886         }
2887
2888         tlink->tl_uid = pSesInfo->linux_uid;
2889         tlink->tl_tcon = tcon;
2890         tlink->tl_time = jiffies;
2891         set_bit(TCON_LINK_MASTER, &tlink->tl_flags);
2892         set_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
2893
2894         cifs_sb->master_tlink = tlink;
2895         spin_lock(&cifs_sb->tlink_tree_lock);
2896         tlink_rb_insert(&cifs_sb->tlink_tree, tlink);
2897         spin_unlock(&cifs_sb->tlink_tree_lock);
2898
2899         queue_delayed_work(system_nrt_wq, &cifs_sb->prune_tlinks,
2900                                 TLINK_IDLE_EXPIRE);
2901
2902 mount_fail_check:
2903         /* on error free sesinfo and tcon struct if needed */
2904         if (rc) {
2905                 if (mount_data != mount_data_global)
2906                         kfree(mount_data);
2907                 /* If find_unc succeeded then rc == 0 so we can not end */
2908                 /* up accidently freeing someone elses tcon struct */
2909                 if (tcon)
2910                         cifs_put_tcon(tcon);
2911                 else if (pSesInfo)
2912                         cifs_put_smb_ses(pSesInfo);
2913                 else
2914                         cifs_put_tcp_session(srvTcp);
2915                 goto out;
2916         }
2917
2918         /* volume_info->password is freed above when existing session found
2919         (in which case it is not needed anymore) but when new sesion is created
2920         the password ptr is put in the new session structure (in which case the
2921         password will be freed at unmount time) */
2922 out:
2923         /* zero out password before freeing */
2924         cleanup_volume_info(&volume_info);
2925         FreeXid(xid);
2926         return rc;
2927 }
2928
2929 int
2930 CIFSTCon(unsigned int xid, struct cifsSesInfo *ses,
2931          const char *tree, struct cifsTconInfo *tcon,
2932          const struct nls_table *nls_codepage)
2933 {
2934         struct smb_hdr *smb_buffer;
2935         struct smb_hdr *smb_buffer_response;
2936         TCONX_REQ *pSMB;
2937         TCONX_RSP *pSMBr;
2938         unsigned char *bcc_ptr;
2939         int rc = 0;
2940         int length, bytes_left;
2941         __u16 count;
2942
2943         if (ses == NULL)
2944                 return -EIO;
2945
2946         smb_buffer = cifs_buf_get();
2947         if (smb_buffer == NULL)
2948                 return -ENOMEM;
2949
2950         smb_buffer_response = smb_buffer;
2951
2952         header_assemble(smb_buffer, SMB_COM_TREE_CONNECT_ANDX,
2953                         NULL /*no tid */ , 4 /*wct */ );
2954
2955         smb_buffer->Mid = GetNextMid(ses->server);
2956         smb_buffer->Uid = ses->Suid;
2957         pSMB = (TCONX_REQ *) smb_buffer;
2958         pSMBr = (TCONX_RSP *) smb_buffer_response;
2959
2960         pSMB->AndXCommand = 0xFF;
2961         pSMB->Flags = cpu_to_le16(TCON_EXTENDED_SECINFO);
2962         bcc_ptr = &pSMB->Password[0];
2963         if ((ses->server->secMode) & SECMODE_USER) {
2964                 pSMB->PasswordLength = cpu_to_le16(1);  /* minimum */
2965                 *bcc_ptr = 0; /* password is null byte */
2966                 bcc_ptr++;              /* skip password */
2967                 /* already aligned so no need to do it below */
2968         } else {
2969                 pSMB->PasswordLength = cpu_to_le16(CIFS_AUTH_RESP_SIZE);
2970                 /* BB FIXME add code to fail this if NTLMv2 or Kerberos
2971                    specified as required (when that support is added to
2972                    the vfs in the future) as only NTLM or the much
2973                    weaker LANMAN (which we do not send by default) is accepted
2974                    by Samba (not sure whether other servers allow
2975                    NTLMv2 password here) */
2976 #ifdef CONFIG_CIFS_WEAK_PW_HASH
2977                 if ((global_secflags & CIFSSEC_MAY_LANMAN) &&
2978                     (ses->server->secType == LANMAN))
2979                         calc_lanman_hash(tcon->password, ses->server->cryptkey,
2980                                          ses->server->secMode &
2981                                             SECMODE_PW_ENCRYPT ? true : false,
2982                                          bcc_ptr);
2983                 else
2984 #endif /* CIFS_WEAK_PW_HASH */
2985                 SMBNTencrypt(tcon->password, ses->server->cryptkey, bcc_ptr);
2986
2987                 bcc_ptr += CIFS_AUTH_RESP_SIZE;
2988                 if (ses->capabilities & CAP_UNICODE) {
2989                         /* must align unicode strings */
2990                         *bcc_ptr = 0; /* null byte password */
2991                         bcc_ptr++;
2992                 }
2993         }
2994
2995         if (ses->server->secMode &
2996                         (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
2997                 smb_buffer->Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
2998
2999         if (ses->capabilities & CAP_STATUS32) {
3000                 smb_buffer->Flags2 |= SMBFLG2_ERR_STATUS;
3001         }
3002         if (ses->capabilities & CAP_DFS) {
3003                 smb_buffer->Flags2 |= SMBFLG2_DFS;
3004         }
3005         if (ses->capabilities & CAP_UNICODE) {
3006                 smb_buffer->Flags2 |= SMBFLG2_UNICODE;
3007                 length =
3008                     cifs_strtoUCS((__le16 *) bcc_ptr, tree,
3009                         6 /* max utf8 char length in bytes */ *
3010                         (/* server len*/ + 256 /* share len */), nls_codepage);
3011                 bcc_ptr += 2 * length;  /* convert num 16 bit words to bytes */
3012                 bcc_ptr += 2;   /* skip trailing null */
3013         } else {                /* ASCII */
3014                 strcpy(bcc_ptr, tree);
3015                 bcc_ptr += strlen(tree) + 1;
3016         }
3017         strcpy(bcc_ptr, "?????");
3018         bcc_ptr += strlen("?????");
3019         bcc_ptr += 1;
3020         count = bcc_ptr - &pSMB->Password[0];
3021         pSMB->hdr.smb_buf_length += count;
3022         pSMB->ByteCount = cpu_to_le16(count);
3023
3024         rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response, &length,
3025                          0);
3026
3027         /* above now done in SendReceive */
3028         if ((rc == 0) && (tcon != NULL)) {
3029                 bool is_unicode;
3030
3031                 tcon->tidStatus = CifsGood;
3032                 tcon->need_reconnect = false;
3033                 tcon->tid = smb_buffer_response->Tid;
3034                 bcc_ptr = pByteArea(smb_buffer_response);
3035                 bytes_left = BCC(smb_buffer_response);
3036                 length = strnlen(bcc_ptr, bytes_left - 2);
3037                 if (smb_buffer->Flags2 & SMBFLG2_UNICODE)
3038                         is_unicode = true;
3039                 else
3040                         is_unicode = false;
3041
3042
3043                 /* skip service field (NB: this field is always ASCII) */
3044                 if (length == 3) {
3045                         if ((bcc_ptr[0] == 'I') && (bcc_ptr[1] == 'P') &&
3046                             (bcc_ptr[2] == 'C')) {
3047                                 cFYI(1, "IPC connection");
3048                                 tcon->ipc = 1;
3049                         }
3050                 } else if (length == 2) {
3051                         if ((bcc_ptr[0] == 'A') && (bcc_ptr[1] == ':')) {
3052                                 /* the most common case */
3053                                 cFYI(1, "disk share connection");
3054                         }
3055                 }
3056                 bcc_ptr += length + 1;
3057                 bytes_left -= (length + 1);
3058                 strncpy(tcon->treeName, tree, MAX_TREE_SIZE);
3059
3060                 /* mostly informational -- no need to fail on error here */
3061                 kfree(tcon->nativeFileSystem);
3062                 tcon->nativeFileSystem = cifs_strndup_from_ucs(bcc_ptr,
3063                                                       bytes_left, is_unicode,
3064                                                       nls_codepage);
3065
3066                 cFYI(1, "nativeFileSystem=%s", tcon->nativeFileSystem);
3067
3068                 if ((smb_buffer_response->WordCount == 3) ||
3069                          (smb_buffer_response->WordCount == 7))
3070                         /* field is in same location */
3071                         tcon->Flags = le16_to_cpu(pSMBr->OptionalSupport);
3072                 else
3073                         tcon->Flags = 0;
3074                 cFYI(1, "Tcon flags: 0x%x ", tcon->Flags);
3075         } else if ((rc == 0) && tcon == NULL) {
3076                 /* all we need to save for IPC$ connection */
3077                 ses->ipc_tid = smb_buffer_response->Tid;
3078         }
3079
3080         cifs_buf_release(smb_buffer);
3081         return rc;
3082 }
3083
3084 int
3085 cifs_umount(struct super_block *sb, struct cifs_sb_info *cifs_sb)
3086 {
3087         struct rb_root *root = &cifs_sb->tlink_tree;
3088         struct rb_node *node;
3089         struct tcon_link *tlink;
3090         char *tmp;
3091
3092         cancel_delayed_work_sync(&cifs_sb->prune_tlinks);
3093
3094         spin_lock(&cifs_sb->tlink_tree_lock);
3095         while ((node = rb_first(root))) {
3096                 tlink = rb_entry(node, struct tcon_link, tl_rbnode);
3097                 cifs_get_tlink(tlink);
3098                 clear_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3099                 rb_erase(node, root);
3100
3101                 spin_unlock(&cifs_sb->tlink_tree_lock);
3102                 cifs_put_tlink(tlink);
3103                 spin_lock(&cifs_sb->tlink_tree_lock);
3104         }
3105         spin_unlock(&cifs_sb->tlink_tree_lock);
3106
3107         tmp = cifs_sb->prepath;
3108         cifs_sb->prepathlen = 0;
3109         cifs_sb->prepath = NULL;
3110         kfree(tmp);
3111
3112         return 0;
3113 }
3114
3115 int cifs_negotiate_protocol(unsigned int xid, struct cifsSesInfo *ses)
3116 {
3117         int rc = 0;
3118         struct TCP_Server_Info *server = ses->server;
3119
3120         /* only send once per connect */
3121         if (server->maxBuf != 0)
3122                 return 0;
3123
3124         rc = CIFSSMBNegotiate(xid, ses);
3125         if (rc == -EAGAIN) {
3126                 /* retry only once on 1st time connection */
3127                 rc = CIFSSMBNegotiate(xid, ses);
3128                 if (rc == -EAGAIN)
3129                         rc = -EHOSTDOWN;
3130         }
3131         if (rc == 0) {
3132                 spin_lock(&GlobalMid_Lock);
3133                 if (server->tcpStatus != CifsExiting)
3134                         server->tcpStatus = CifsGood;
3135                 else
3136                         rc = -EHOSTDOWN;
3137                 spin_unlock(&GlobalMid_Lock);
3138
3139         }
3140
3141         return rc;
3142 }
3143
3144
3145 int cifs_setup_session(unsigned int xid, struct cifsSesInfo *ses,
3146                         struct nls_table *nls_info)
3147 {
3148         int rc = 0;
3149         struct TCP_Server_Info *server = ses->server;
3150
3151         ses->flags = 0;
3152         ses->capabilities = server->capabilities;
3153         if (linuxExtEnabled == 0)
3154                 ses->capabilities &= (~CAP_UNIX);
3155
3156         cFYI(1, "Security Mode: 0x%x Capabilities: 0x%x TimeAdjust: %d",
3157                  server->secMode, server->capabilities, server->timeAdj);
3158
3159         rc = CIFS_SessSetup(xid, ses, nls_info);
3160         if (rc) {
3161                 cERROR(1, "Send error in SessSetup = %d", rc);
3162         } else {
3163                 mutex_lock(&ses->server->srv_mutex);
3164                 if (!server->session_estab) {
3165                         server->session_key.response = ses->auth_key.response;
3166                         server->session_key.len = ses->auth_key.len;
3167                         server->sequence_number = 0x2;
3168                         server->session_estab = true;
3169                         ses->auth_key.response = NULL;
3170                 }
3171                 mutex_unlock(&server->srv_mutex);
3172
3173                 cFYI(1, "CIFS Session Established successfully");
3174                 spin_lock(&GlobalMid_Lock);
3175                 ses->status = CifsGood;
3176                 ses->need_reconnect = false;
3177                 spin_unlock(&GlobalMid_Lock);
3178         }
3179
3180         kfree(ses->auth_key.response);
3181         ses->auth_key.response = NULL;
3182         ses->auth_key.len = 0;
3183         kfree(ses->ntlmssp);
3184         ses->ntlmssp = NULL;
3185
3186         return rc;
3187 }
3188
3189 static struct cifsTconInfo *
3190 cifs_construct_tcon(struct cifs_sb_info *cifs_sb, uid_t fsuid)
3191 {
3192         struct cifsTconInfo *master_tcon = cifs_sb_master_tcon(cifs_sb);
3193         struct cifsSesInfo *ses;
3194         struct cifsTconInfo *tcon = NULL;
3195         struct smb_vol *vol_info;
3196         char username[MAX_USERNAME_SIZE + 1];
3197
3198         vol_info = kzalloc(sizeof(*vol_info), GFP_KERNEL);
3199         if (vol_info == NULL) {
3200                 tcon = ERR_PTR(-ENOMEM);
3201                 goto out;
3202         }
3203
3204         snprintf(username, MAX_USERNAME_SIZE, "krb50x%x", fsuid);
3205         vol_info->username = username;
3206         vol_info->local_nls = cifs_sb->local_nls;
3207         vol_info->linux_uid = fsuid;
3208         vol_info->cred_uid = fsuid;
3209         vol_info->UNC = master_tcon->treeName;
3210         vol_info->retry = master_tcon->retry;
3211         vol_info->nocase = master_tcon->nocase;
3212         vol_info->local_lease = master_tcon->local_lease;
3213         vol_info->no_linux_ext = !master_tcon->unix_ext;
3214
3215         /* FIXME: allow for other secFlg settings */
3216         vol_info->secFlg = CIFSSEC_MUST_KRB5;
3217
3218         /* get a reference for the same TCP session */
3219         spin_lock(&cifs_tcp_ses_lock);
3220         ++master_tcon->ses->server->srv_count;
3221         spin_unlock(&cifs_tcp_ses_lock);
3222
3223         ses = cifs_get_smb_ses(master_tcon->ses->server, vol_info);
3224         if (IS_ERR(ses)) {
3225                 tcon = (struct cifsTconInfo *)ses;
3226                 cifs_put_tcp_session(master_tcon->ses->server);
3227                 goto out;
3228         }
3229
3230         tcon = cifs_get_tcon(ses, vol_info);
3231         if (IS_ERR(tcon)) {
3232                 cifs_put_smb_ses(ses);
3233                 goto out;
3234         }
3235
3236         if (ses->capabilities & CAP_UNIX)
3237                 reset_cifs_unix_caps(0, tcon, NULL, vol_info);
3238 out:
3239         kfree(vol_info);
3240
3241         return tcon;
3242 }
3243
3244 static inline struct tcon_link *
3245 cifs_sb_master_tlink(struct cifs_sb_info *cifs_sb)
3246 {
3247         return cifs_sb->master_tlink;
3248 }
3249
3250 struct cifsTconInfo *
3251 cifs_sb_master_tcon(struct cifs_sb_info *cifs_sb)
3252 {
3253         return tlink_tcon(cifs_sb_master_tlink(cifs_sb));
3254 }
3255
3256 static int
3257 cifs_sb_tcon_pending_wait(void *unused)
3258 {
3259         schedule();
3260         return signal_pending(current) ? -ERESTARTSYS : 0;
3261 }
3262
3263 /* find and return a tlink with given uid */
3264 static struct tcon_link *
3265 tlink_rb_search(struct rb_root *root, uid_t uid)
3266 {
3267         struct rb_node *node = root->rb_node;
3268         struct tcon_link *tlink;
3269
3270         while (node) {
3271                 tlink = rb_entry(node, struct tcon_link, tl_rbnode);
3272
3273                 if (tlink->tl_uid > uid)
3274                         node = node->rb_left;
3275                 else if (tlink->tl_uid < uid)
3276                         node = node->rb_right;
3277                 else
3278                         return tlink;
3279         }
3280         return NULL;
3281 }
3282
3283 /* insert a tcon_link into the tree */
3284 static void
3285 tlink_rb_insert(struct rb_root *root, struct tcon_link *new_tlink)
3286 {
3287         struct rb_node **new = &(root->rb_node), *parent = NULL;
3288         struct tcon_link *tlink;
3289
3290         while (*new) {
3291                 tlink = rb_entry(*new, struct tcon_link, tl_rbnode);
3292                 parent = *new;
3293
3294                 if (tlink->tl_uid > new_tlink->tl_uid)
3295                         new = &((*new)->rb_left);
3296                 else
3297                         new = &((*new)->rb_right);
3298         }
3299
3300         rb_link_node(&new_tlink->tl_rbnode, parent, new);
3301         rb_insert_color(&new_tlink->tl_rbnode, root);
3302 }
3303
3304 /*
3305  * Find or construct an appropriate tcon given a cifs_sb and the fsuid of the
3306  * current task.
3307  *
3308  * If the superblock doesn't refer to a multiuser mount, then just return
3309  * the master tcon for the mount.
3310  *
3311  * First, search the rbtree for an existing tcon for this fsuid. If one
3312  * exists, then check to see if it's pending construction. If it is then wait
3313  * for construction to complete. Once it's no longer pending, check to see if
3314  * it failed and either return an error or retry construction, depending on
3315  * the timeout.
3316  *
3317  * If one doesn't exist then insert a new tcon_link struct into the tree and
3318  * try to construct a new one.
3319  */
3320 struct tcon_link *
3321 cifs_sb_tlink(struct cifs_sb_info *cifs_sb)
3322 {
3323         int ret;
3324         uid_t fsuid = current_fsuid();
3325         struct tcon_link *tlink, *newtlink;
3326
3327         if (!(cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MULTIUSER))
3328                 return cifs_get_tlink(cifs_sb_master_tlink(cifs_sb));
3329
3330         spin_lock(&cifs_sb->tlink_tree_lock);
3331         tlink = tlink_rb_search(&cifs_sb->tlink_tree, fsuid);
3332         if (tlink)
3333                 cifs_get_tlink(tlink);
3334         spin_unlock(&cifs_sb->tlink_tree_lock);
3335
3336         if (tlink == NULL) {
3337                 newtlink = kzalloc(sizeof(*tlink), GFP_KERNEL);
3338                 if (newtlink == NULL)
3339                         return ERR_PTR(-ENOMEM);
3340                 newtlink->tl_uid = fsuid;
3341                 newtlink->tl_tcon = ERR_PTR(-EACCES);
3342                 set_bit(TCON_LINK_PENDING, &newtlink->tl_flags);
3343                 set_bit(TCON_LINK_IN_TREE, &newtlink->tl_flags);
3344                 cifs_get_tlink(newtlink);
3345
3346                 spin_lock(&cifs_sb->tlink_tree_lock);
3347                 /* was one inserted after previous search? */
3348                 tlink = tlink_rb_search(&cifs_sb->tlink_tree, fsuid);
3349                 if (tlink) {
3350                         cifs_get_tlink(tlink);
3351                         spin_unlock(&cifs_sb->tlink_tree_lock);
3352                         kfree(newtlink);
3353                         goto wait_for_construction;
3354                 }
3355                 tlink = newtlink;
3356                 tlink_rb_insert(&cifs_sb->tlink_tree, tlink);
3357                 spin_unlock(&cifs_sb->tlink_tree_lock);
3358         } else {
3359 wait_for_construction:
3360                 ret = wait_on_bit(&tlink->tl_flags, TCON_LINK_PENDING,
3361                                   cifs_sb_tcon_pending_wait,
3362                                   TASK_INTERRUPTIBLE);
3363                 if (ret) {
3364                         cifs_put_tlink(tlink);
3365                         return ERR_PTR(ret);
3366                 }
3367
3368                 /* if it's good, return it */
3369                 if (!IS_ERR(tlink->tl_tcon))
3370                         return tlink;
3371
3372                 /* return error if we tried this already recently */
3373                 if (time_before(jiffies, tlink->tl_time + TLINK_ERROR_EXPIRE)) {
3374                         cifs_put_tlink(tlink);
3375                         return ERR_PTR(-EACCES);
3376                 }
3377
3378                 if (test_and_set_bit(TCON_LINK_PENDING, &tlink->tl_flags))
3379                         goto wait_for_construction;
3380         }
3381
3382         tlink->tl_tcon = cifs_construct_tcon(cifs_sb, fsuid);
3383         clear_bit(TCON_LINK_PENDING, &tlink->tl_flags);
3384         wake_up_bit(&tlink->tl_flags, TCON_LINK_PENDING);
3385
3386         if (IS_ERR(tlink->tl_tcon)) {
3387                 cifs_put_tlink(tlink);
3388                 return ERR_PTR(-EACCES);
3389         }
3390
3391         return tlink;
3392 }
3393
3394 /*
3395  * periodic workqueue job that scans tcon_tree for a superblock and closes
3396  * out tcons.
3397  */
3398 static void
3399 cifs_prune_tlinks(struct work_struct *work)
3400 {
3401         struct cifs_sb_info *cifs_sb = container_of(work, struct cifs_sb_info,
3402                                                     prune_tlinks.work);
3403         struct rb_root *root = &cifs_sb->tlink_tree;
3404         struct rb_node *node = rb_first(root);
3405         struct rb_node *tmp;
3406         struct tcon_link *tlink;
3407
3408         /*
3409          * Because we drop the spinlock in the loop in order to put the tlink
3410          * it's not guarded against removal of links from the tree. The only
3411          * places that remove entries from the tree are this function and
3412          * umounts. Because this function is non-reentrant and is canceled
3413          * before umount can proceed, this is safe.
3414          */
3415         spin_lock(&cifs_sb->tlink_tree_lock);
3416         node = rb_first(root);
3417         while (node != NULL) {
3418                 tmp = node;
3419                 node = rb_next(tmp);
3420                 tlink = rb_entry(tmp, struct tcon_link, tl_rbnode);
3421
3422                 if (test_bit(TCON_LINK_MASTER, &tlink->tl_flags) ||
3423                     atomic_read(&tlink->tl_count) != 0 ||
3424                     time_after(tlink->tl_time + TLINK_IDLE_EXPIRE, jiffies))
3425                         continue;
3426
3427                 cifs_get_tlink(tlink);
3428                 clear_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3429                 rb_erase(tmp, root);
3430
3431                 spin_unlock(&cifs_sb->tlink_tree_lock);
3432                 cifs_put_tlink(tlink);
3433                 spin_lock(&cifs_sb->tlink_tree_lock);
3434         }
3435         spin_unlock(&cifs_sb->tlink_tree_lock);
3436
3437         queue_delayed_work(system_nrt_wq, &cifs_sb->prune_tlinks,
3438                                 TLINK_IDLE_EXPIRE);
3439 }