4 * Copyright (C) International Business Machines Corp., 2002,2009
5 * Author(s): Steve French (sfrench@us.ibm.com)
7 * This library is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU Lesser General Public License as published
9 * by the Free Software Foundation; either version 2.1 of the License, or
10 * (at your option) any later version.
12 * This library is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See
15 * the GNU Lesser General Public License for more details.
17 * You should have received a copy of the GNU Lesser General Public License
18 * along with this library; if not, write to the Free Software
19 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
22 #include <linux/net.h>
23 #include <linux/string.h>
24 #include <linux/list.h>
25 #include <linux/wait.h>
26 #include <linux/slab.h>
27 #include <linux/pagemap.h>
28 #include <linux/ctype.h>
29 #include <linux/utsname.h>
30 #include <linux/mempool.h>
31 #include <linux/delay.h>
32 #include <linux/completion.h>
33 #include <linux/kthread.h>
34 #include <linux/pagevec.h>
35 #include <linux/freezer.h>
36 #include <linux/namei.h>
37 #include <asm/uaccess.h>
38 #include <asm/processor.h>
39 #include <linux/inet.h>
43 #include "cifsproto.h"
44 #include "cifs_unicode.h"
45 #include "cifs_debug.h"
46 #include "cifs_fs_sb.h"
49 #include "rfc1002pdu.h"
54 #define RFC1001_PORT 139
56 extern void SMBNTencrypt(unsigned char *passwd, unsigned char *c8,
59 extern mempool_t *cifs_req_poolp;
67 char *iocharset; /* local code page for mapping to and from Unicode */
68 char source_rfc1001_name[16]; /* netbios name of client */
69 char target_rfc1001_name[16]; /* netbios name of server for Win9x/ME */
83 bool no_psx_acl:1; /* set if posix acl support should be disabled */
85 bool no_xattr:1; /* set if xattr (EA) support should be disabled*/
86 bool server_ino:1; /* use inode numbers from server ie UniqueId */
88 bool remap:1; /* set to remap seven reserved chars in filenames */
89 bool posix_paths:1; /* unset to not ask for posix pathnames. */
92 bool nullauth:1; /* attempt to authenticate with null user */
93 bool nocase:1; /* request case insensitive filenames */
94 bool nobrl:1; /* disable sending byte range locks to srv */
95 bool mand_lock:1; /* send mandatory not posix byte range lock reqs */
96 bool seal:1; /* request transport encryption on share */
97 bool nodfs:1; /* Do not request DFS, even if available */
98 bool local_lease:1; /* check leases only on local system, not remote */
101 bool nostrictsync:1; /* do not force expensive SMBflush on every sync */
102 bool fsc:1; /* enable fscache */
105 bool sockopt_tcp_nodelay:1;
106 unsigned short int port;
108 struct nls_table *local_nls;
111 static int ipv4_connect(struct TCP_Server_Info *server);
112 static int ipv6_connect(struct TCP_Server_Info *server);
115 * cifs tcp session reconnection
117 * mark tcp session as reconnecting so temporarily locked
118 * mark all smb sessions as reconnecting for tcp session
119 * reconnect tcp session
120 * wake up waiters on reconnection? - (not needed currently)
123 cifs_reconnect(struct TCP_Server_Info *server)
126 struct list_head *tmp, *tmp2;
127 struct cifsSesInfo *ses;
128 struct cifsTconInfo *tcon;
129 struct mid_q_entry *mid_entry;
131 spin_lock(&GlobalMid_Lock);
132 if (server->tcpStatus == CifsExiting) {
133 /* the demux thread will exit normally
134 next time through the loop */
135 spin_unlock(&GlobalMid_Lock);
138 server->tcpStatus = CifsNeedReconnect;
139 spin_unlock(&GlobalMid_Lock);
142 cFYI(1, "Reconnecting tcp session");
144 /* before reconnecting the tcp session, mark the smb session (uid)
145 and the tid bad so they are not used until reconnected */
146 read_lock(&cifs_tcp_ses_lock);
147 list_for_each(tmp, &server->smb_ses_list) {
148 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
149 ses->need_reconnect = true;
151 list_for_each(tmp2, &ses->tcon_list) {
152 tcon = list_entry(tmp2, struct cifsTconInfo, tcon_list);
153 tcon->need_reconnect = true;
156 read_unlock(&cifs_tcp_ses_lock);
157 /* do not want to be sending data on a socket we are freeing */
158 mutex_lock(&server->srv_mutex);
159 if (server->ssocket) {
160 cFYI(1, "State: 0x%x Flags: 0x%lx", server->ssocket->state,
161 server->ssocket->flags);
162 kernel_sock_shutdown(server->ssocket, SHUT_WR);
163 cFYI(1, "Post shutdown state: 0x%x Flags: 0x%lx",
164 server->ssocket->state,
165 server->ssocket->flags);
166 sock_release(server->ssocket);
167 server->ssocket = NULL;
170 spin_lock(&GlobalMid_Lock);
171 list_for_each(tmp, &server->pending_mid_q) {
172 mid_entry = list_entry(tmp, struct
175 if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
176 /* Mark other intransit requests as needing
177 retry so we do not immediately mark the
178 session bad again (ie after we reconnect
179 below) as they timeout too */
180 mid_entry->midState = MID_RETRY_NEEDED;
183 spin_unlock(&GlobalMid_Lock);
184 mutex_unlock(&server->srv_mutex);
186 while ((server->tcpStatus != CifsExiting) &&
187 (server->tcpStatus != CifsGood)) {
189 if (server->addr.sockAddr6.sin6_family == AF_INET6)
190 rc = ipv6_connect(server);
192 rc = ipv4_connect(server);
194 cFYI(1, "reconnect error %d", rc);
197 atomic_inc(&tcpSesReconnectCount);
198 spin_lock(&GlobalMid_Lock);
199 if (server->tcpStatus != CifsExiting)
200 server->tcpStatus = CifsGood;
201 server->sequence_number = 0;
202 spin_unlock(&GlobalMid_Lock);
203 /* atomic_set(&server->inFlight,0);*/
204 wake_up(&server->response_q);
212 0 not a transact2, or all data present
213 >0 transact2 with that much data missing
214 -EINVAL = invalid transact2
217 static int check2ndT2(struct smb_hdr *pSMB, unsigned int maxBufSize)
219 struct smb_t2_rsp *pSMBt;
221 int data_in_this_rsp;
224 if (pSMB->Command != SMB_COM_TRANSACTION2)
227 /* check for plausible wct, bcc and t2 data and parm sizes */
228 /* check for parm and data offset going beyond end of smb */
229 if (pSMB->WordCount != 10) { /* coalesce_t2 depends on this */
230 cFYI(1, "invalid transact2 word count");
234 pSMBt = (struct smb_t2_rsp *)pSMB;
236 total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
237 data_in_this_rsp = le16_to_cpu(pSMBt->t2_rsp.DataCount);
239 remaining = total_data_size - data_in_this_rsp;
243 else if (remaining < 0) {
244 cFYI(1, "total data %d smaller than data in frame %d",
245 total_data_size, data_in_this_rsp);
248 cFYI(1, "missing %d bytes from transact2, check next response",
250 if (total_data_size > maxBufSize) {
251 cERROR(1, "TotalDataSize %d is over maximum buffer %d",
252 total_data_size, maxBufSize);
259 static int coalesce_t2(struct smb_hdr *psecond, struct smb_hdr *pTargetSMB)
261 struct smb_t2_rsp *pSMB2 = (struct smb_t2_rsp *)psecond;
262 struct smb_t2_rsp *pSMBt = (struct smb_t2_rsp *)pTargetSMB;
267 char *data_area_of_target;
268 char *data_area_of_buf2;
271 total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
273 if (total_data_size != le16_to_cpu(pSMB2->t2_rsp.TotalDataCount)) {
274 cFYI(1, "total data size of primary and secondary t2 differ");
277 total_in_buf = le16_to_cpu(pSMBt->t2_rsp.DataCount);
279 remaining = total_data_size - total_in_buf;
284 if (remaining == 0) /* nothing to do, ignore */
287 total_in_buf2 = le16_to_cpu(pSMB2->t2_rsp.DataCount);
288 if (remaining < total_in_buf2) {
289 cFYI(1, "transact2 2nd response contains too much data");
292 /* find end of first SMB data area */
293 data_area_of_target = (char *)&pSMBt->hdr.Protocol +
294 le16_to_cpu(pSMBt->t2_rsp.DataOffset);
295 /* validate target area */
297 data_area_of_buf2 = (char *) &pSMB2->hdr.Protocol +
298 le16_to_cpu(pSMB2->t2_rsp.DataOffset);
300 data_area_of_target += total_in_buf;
302 /* copy second buffer into end of first buffer */
303 memcpy(data_area_of_target, data_area_of_buf2, total_in_buf2);
304 total_in_buf += total_in_buf2;
305 pSMBt->t2_rsp.DataCount = cpu_to_le16(total_in_buf);
306 byte_count = le16_to_cpu(BCC_LE(pTargetSMB));
307 byte_count += total_in_buf2;
308 BCC_LE(pTargetSMB) = cpu_to_le16(byte_count);
310 byte_count = pTargetSMB->smb_buf_length;
311 byte_count += total_in_buf2;
313 /* BB also add check that we are not beyond maximum buffer size */
315 pTargetSMB->smb_buf_length = byte_count;
317 if (remaining == total_in_buf2) {
318 cFYI(1, "found the last secondary response");
319 return 0; /* we are done */
320 } else /* more responses to go */
326 cifs_demultiplex_thread(struct TCP_Server_Info *server)
329 unsigned int pdu_length, total_read;
330 struct smb_hdr *smb_buffer = NULL;
331 struct smb_hdr *bigbuf = NULL;
332 struct smb_hdr *smallbuf = NULL;
333 struct msghdr smb_msg;
335 struct socket *csocket = server->ssocket;
336 struct list_head *tmp;
337 struct cifsSesInfo *ses;
338 struct task_struct *task_to_wake = NULL;
339 struct mid_q_entry *mid_entry;
341 bool isLargeBuf = false;
345 current->flags |= PF_MEMALLOC;
346 cFYI(1, "Demultiplex PID: %d", task_pid_nr(current));
348 length = atomic_inc_return(&tcpSesAllocCount);
350 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
354 while (server->tcpStatus != CifsExiting) {
357 if (bigbuf == NULL) {
358 bigbuf = cifs_buf_get();
360 cERROR(1, "No memory for large SMB response");
362 /* retry will check if exiting */
365 } else if (isLargeBuf) {
366 /* we are reusing a dirty large buf, clear its start */
367 memset(bigbuf, 0, sizeof(struct smb_hdr));
370 if (smallbuf == NULL) {
371 smallbuf = cifs_small_buf_get();
373 cERROR(1, "No memory for SMB response");
375 /* retry will check if exiting */
378 /* beginning of smb buffer is cleared in our buf_get */
379 } else /* if existing small buf clear beginning */
380 memset(smallbuf, 0, sizeof(struct smb_hdr));
384 smb_buffer = smallbuf;
385 iov.iov_base = smb_buffer;
387 smb_msg.msg_control = NULL;
388 smb_msg.msg_controllen = 0;
389 pdu_length = 4; /* enough to get RFC1001 header */
392 kernel_recvmsg(csocket, &smb_msg,
393 &iov, 1, pdu_length, 0 /* BB other flags? */);
395 if (server->tcpStatus == CifsExiting) {
397 } else if (server->tcpStatus == CifsNeedReconnect) {
398 cFYI(1, "Reconnect after server stopped responding");
399 cifs_reconnect(server);
400 cFYI(1, "call to reconnect done");
401 csocket = server->ssocket;
403 } else if ((length == -ERESTARTSYS) || (length == -EAGAIN)) {
404 msleep(1); /* minimum sleep to prevent looping
405 allowing socket to clear and app threads to set
406 tcpStatus CifsNeedReconnect if server hung */
407 if (pdu_length < 4) {
408 iov.iov_base = (4 - pdu_length) +
410 iov.iov_len = pdu_length;
411 smb_msg.msg_control = NULL;
412 smb_msg.msg_controllen = 0;
416 } else if (length <= 0) {
417 if (server->tcpStatus == CifsNew) {
418 cFYI(1, "tcp session abend after SMBnegprot");
419 /* some servers kill the TCP session rather than
420 returning an SMB negprot error, in which
421 case reconnecting here is not going to help,
422 and so simply return error to mount */
425 if (!try_to_freeze() && (length == -EINTR)) {
426 cFYI(1, "cifsd thread killed");
429 cFYI(1, "Reconnect after unexpected peek error %d",
431 cifs_reconnect(server);
432 csocket = server->ssocket;
433 wake_up(&server->response_q);
435 } else if (length < pdu_length) {
436 cFYI(1, "requested %d bytes but only got %d bytes",
438 pdu_length -= length;
443 /* The right amount was read from socket - 4 bytes */
444 /* so we can now interpret the length field */
446 /* the first byte big endian of the length field,
447 is actually not part of the length but the type
448 with the most common, zero, as regular data */
449 temp = *((char *) smb_buffer);
451 /* Note that FC 1001 length is big endian on the wire,
452 but we convert it here so it is always manipulated
453 as host byte order */
454 pdu_length = be32_to_cpu((__force __be32)smb_buffer->smb_buf_length);
455 smb_buffer->smb_buf_length = pdu_length;
457 cFYI(1, "rfc1002 length 0x%x", pdu_length+4);
459 if (temp == (char) RFC1002_SESSION_KEEP_ALIVE) {
461 } else if (temp == (char)RFC1002_POSITIVE_SESSION_RESPONSE) {
462 cFYI(1, "Good RFC 1002 session rsp");
464 } else if (temp == (char)RFC1002_NEGATIVE_SESSION_RESPONSE) {
465 /* we get this from Windows 98 instead of
466 an error on SMB negprot response */
467 cFYI(1, "Negative RFC1002 Session Response Error 0x%x)",
469 if (server->tcpStatus == CifsNew) {
470 /* if nack on negprot (rather than
471 ret of smb negprot error) reconnecting
472 not going to help, ret error to mount */
475 /* give server a second to
476 clean up before reconnect attempt */
478 /* always try 445 first on reconnect
479 since we get NACK on some if we ever
480 connected to port 139 (the NACK is
481 since we do not begin with RFC1001
482 session initialize frame) */
483 server->addr.sockAddr.sin_port =
485 cifs_reconnect(server);
486 csocket = server->ssocket;
487 wake_up(&server->response_q);
490 } else if (temp != (char) 0) {
491 cERROR(1, "Unknown RFC 1002 frame");
492 cifs_dump_mem(" Received Data: ", (char *)smb_buffer,
494 cifs_reconnect(server);
495 csocket = server->ssocket;
499 /* else we have an SMB response */
500 if ((pdu_length > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE - 4) ||
501 (pdu_length < sizeof(struct smb_hdr) - 1 - 4)) {
502 cERROR(1, "Invalid size SMB length %d pdu_length %d",
503 length, pdu_length+4);
504 cifs_reconnect(server);
505 csocket = server->ssocket;
506 wake_up(&server->response_q);
513 if (pdu_length > MAX_CIFS_SMALL_BUFFER_SIZE - 4) {
515 memcpy(bigbuf, smallbuf, 4);
519 iov.iov_base = 4 + (char *)smb_buffer;
520 iov.iov_len = pdu_length;
521 for (total_read = 0; total_read < pdu_length;
522 total_read += length) {
523 length = kernel_recvmsg(csocket, &smb_msg, &iov, 1,
524 pdu_length - total_read, 0);
525 if ((server->tcpStatus == CifsExiting) ||
526 (length == -EINTR)) {
530 } else if (server->tcpStatus == CifsNeedReconnect) {
531 cifs_reconnect(server);
532 csocket = server->ssocket;
533 /* Reconnect wakes up rspns q */
534 /* Now we will reread sock */
537 } else if ((length == -ERESTARTSYS) ||
538 (length == -EAGAIN)) {
539 msleep(1); /* minimum sleep to prevent looping,
540 allowing socket to clear and app
541 threads to set tcpStatus
542 CifsNeedReconnect if server hung*/
545 } else if (length <= 0) {
546 cERROR(1, "Received no data, expecting %d",
547 pdu_length - total_read);
548 cifs_reconnect(server);
549 csocket = server->ssocket;
556 else if (reconnect == 1)
559 length += 4; /* account for rfc1002 hdr */
562 dump_smb(smb_buffer, length);
563 if (checkSMB(smb_buffer, smb_buffer->Mid, total_read+4)) {
564 cifs_dump_mem("Bad SMB: ", smb_buffer, 48);
570 spin_lock(&GlobalMid_Lock);
571 list_for_each(tmp, &server->pending_mid_q) {
572 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
574 if ((mid_entry->mid == smb_buffer->Mid) &&
575 (mid_entry->midState == MID_REQUEST_SUBMITTED) &&
576 (mid_entry->command == smb_buffer->Command)) {
577 if (check2ndT2(smb_buffer,server->maxBuf) > 0) {
578 /* We have a multipart transact2 resp */
580 if (mid_entry->resp_buf) {
581 /* merge response - fix up 1st*/
582 if (coalesce_t2(smb_buffer,
583 mid_entry->resp_buf)) {
584 mid_entry->multiRsp =
588 /* all parts received */
589 mid_entry->multiEnd =
595 cERROR(1, "1st trans2 resp needs bigbuf");
596 /* BB maybe we can fix this up, switch
597 to already allocated large buffer? */
599 /* Have first buffer */
600 mid_entry->resp_buf =
602 mid_entry->largeBuf =
609 mid_entry->resp_buf = smb_buffer;
610 mid_entry->largeBuf = isLargeBuf;
612 task_to_wake = mid_entry->tsk;
613 mid_entry->midState = MID_RESPONSE_RECEIVED;
614 #ifdef CONFIG_CIFS_STATS2
615 mid_entry->when_received = jiffies;
617 /* so we do not time out requests to server
618 which is still responding (since server could
619 be busy but not dead) */
620 server->lstrp = jiffies;
624 spin_unlock(&GlobalMid_Lock);
626 /* Was previous buf put in mpx struct for multi-rsp? */
628 /* smb buffer will be freed by user thread */
634 wake_up_process(task_to_wake);
635 } else if (!is_valid_oplock_break(smb_buffer, server) &&
637 cERROR(1, "No task to wake, unknown frame received! "
638 "NumMids %d", midCount.counter);
639 cifs_dump_mem("Received Data is: ", (char *)smb_buffer,
640 sizeof(struct smb_hdr));
641 #ifdef CONFIG_CIFS_DEBUG2
642 cifs_dump_detail(smb_buffer);
643 cifs_dump_mids(server);
644 #endif /* CIFS_DEBUG2 */
647 } /* end while !EXITING */
649 /* take it off the list, if it's not already */
650 write_lock(&cifs_tcp_ses_lock);
651 list_del_init(&server->tcp_ses_list);
652 write_unlock(&cifs_tcp_ses_lock);
654 spin_lock(&GlobalMid_Lock);
655 server->tcpStatus = CifsExiting;
656 spin_unlock(&GlobalMid_Lock);
657 wake_up_all(&server->response_q);
659 /* check if we have blocked requests that need to free */
660 /* Note that cifs_max_pending is normally 50, but
661 can be set at module install time to as little as two */
662 spin_lock(&GlobalMid_Lock);
663 if (atomic_read(&server->inFlight) >= cifs_max_pending)
664 atomic_set(&server->inFlight, cifs_max_pending - 1);
665 /* We do not want to set the max_pending too low or we
666 could end up with the counter going negative */
667 spin_unlock(&GlobalMid_Lock);
668 /* Although there should not be any requests blocked on
669 this queue it can not hurt to be paranoid and try to wake up requests
670 that may haven been blocked when more than 50 at time were on the wire
671 to the same server - they now will see the session is in exit state
672 and get out of SendReceive. */
673 wake_up_all(&server->request_q);
674 /* give those requests time to exit */
677 if (server->ssocket) {
678 sock_release(csocket);
679 server->ssocket = NULL;
681 /* buffer usuallly freed in free_mid - need to free it here on exit */
682 cifs_buf_release(bigbuf);
683 if (smallbuf) /* no sense logging a debug message if NULL */
684 cifs_small_buf_release(smallbuf);
687 * BB: we shouldn't have to do any of this. It shouldn't be
688 * possible to exit from the thread with active SMB sessions
690 read_lock(&cifs_tcp_ses_lock);
691 if (list_empty(&server->pending_mid_q)) {
692 /* loop through server session structures attached to this and
694 list_for_each(tmp, &server->smb_ses_list) {
695 ses = list_entry(tmp, struct cifsSesInfo,
697 ses->status = CifsExiting;
700 read_unlock(&cifs_tcp_ses_lock);
702 /* although we can not zero the server struct pointer yet,
703 since there are active requests which may depnd on them,
704 mark the corresponding SMB sessions as exiting too */
705 list_for_each(tmp, &server->smb_ses_list) {
706 ses = list_entry(tmp, struct cifsSesInfo,
708 ses->status = CifsExiting;
711 spin_lock(&GlobalMid_Lock);
712 list_for_each(tmp, &server->pending_mid_q) {
713 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
714 if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
715 cFYI(1, "Clearing Mid 0x%x - waking up ",
717 task_to_wake = mid_entry->tsk;
719 wake_up_process(task_to_wake);
722 spin_unlock(&GlobalMid_Lock);
723 read_unlock(&cifs_tcp_ses_lock);
724 /* 1/8th of sec is more than enough time for them to exit */
728 if (!list_empty(&server->pending_mid_q)) {
729 /* mpx threads have not exited yet give them
730 at least the smb send timeout time for long ops */
731 /* due to delays on oplock break requests, we need
732 to wait at least 45 seconds before giving up
733 on a request getting a response and going ahead
735 cFYI(1, "Wait for exit from demultiplex thread");
737 /* if threads still have not exited they are probably never
738 coming home not much else we can do but free the memory */
741 /* last chance to mark ses pointers invalid
742 if there are any pointing to this (e.g
743 if a crazy root user tried to kill cifsd
744 kernel thread explicitly this might happen) */
745 /* BB: This shouldn't be necessary, see above */
746 read_lock(&cifs_tcp_ses_lock);
747 list_for_each(tmp, &server->smb_ses_list) {
748 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
751 read_unlock(&cifs_tcp_ses_lock);
753 kfree(server->hostname);
754 task_to_wake = xchg(&server->tsk, NULL);
757 length = atomic_dec_return(&tcpSesAllocCount);
759 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
762 /* if server->tsk was NULL then wait for a signal before exiting */
764 set_current_state(TASK_INTERRUPTIBLE);
765 while (!signal_pending(current)) {
767 set_current_state(TASK_INTERRUPTIBLE);
769 set_current_state(TASK_RUNNING);
772 module_put_and_exit(0);
775 /* extract the host portion of the UNC string */
777 extract_hostname(const char *unc)
783 /* skip double chars at beginning of string */
784 /* BB: check validity of these bytes? */
787 /* delimiter between hostname and sharename is always '\\' now */
788 delim = strchr(src, '\\');
790 return ERR_PTR(-EINVAL);
793 dst = kmalloc((len + 1), GFP_KERNEL);
795 return ERR_PTR(-ENOMEM);
797 memcpy(dst, src, len);
804 cifs_parse_mount_options(char *options, const char *devname,
809 unsigned int temp_len, i, j;
811 short int override_uid = -1;
812 short int override_gid = -1;
813 bool uid_specified = false;
814 bool gid_specified = false;
819 if (Local_System_Name[0] != 0)
820 memcpy(vol->source_rfc1001_name, Local_System_Name, 15);
822 char *nodename = utsname()->nodename;
823 int n = strnlen(nodename, 15);
824 memset(vol->source_rfc1001_name, 0x20, 15);
825 for (i = 0; i < n; i++) {
826 /* does not have to be perfect mapping since field is
827 informational, only used for servers that do not support
828 port 445 and it can be overridden at mount time */
829 vol->source_rfc1001_name[i] = toupper(nodename[i]);
832 vol->source_rfc1001_name[15] = 0;
833 /* null target name indicates to use *SMBSERVR default called name
834 if we end up sending RFC1001 session initialize */
835 vol->target_rfc1001_name[0] = 0;
836 vol->cred_uid = current_uid();
837 vol->linux_uid = current_uid();
838 vol->linux_gid = current_gid();
840 /* default to only allowing write access to owner of the mount */
841 vol->dir_mode = vol->file_mode = S_IRUGO | S_IXUGO | S_IWUSR;
843 /* vol->retry default is 0 (i.e. "soft" limited retry not hard retry) */
844 /* default is always to request posix paths. */
845 vol->posix_paths = 1;
846 /* default to using server inode numbers where available */
852 if (strncmp(options, "sep=", 4) == 0) {
853 if (options[4] != 0) {
854 separator[0] = options[4];
857 cFYI(1, "Null separator not allowed");
861 while ((data = strsep(&options, separator)) != NULL) {
864 if ((value = strchr(data, '=')) != NULL)
867 /* Have to parse this before we parse for "user" */
868 if (strnicmp(data, "user_xattr", 10) == 0) {
870 } else if (strnicmp(data, "nouser_xattr", 12) == 0) {
872 } else if (strnicmp(data, "user", 4) == 0) {
875 "CIFS: invalid or missing username\n");
876 return 1; /* needs_arg; */
877 } else if (!*value) {
878 /* null user, ie anonymous, authentication */
881 if (strnlen(value, 200) < 200) {
882 vol->username = value;
884 printk(KERN_WARNING "CIFS: username too long\n");
887 } else if (strnicmp(data, "pass", 4) == 0) {
889 vol->password = NULL;
891 } else if (value[0] == 0) {
892 /* check if string begins with double comma
893 since that would mean the password really
894 does start with a comma, and would not
895 indicate an empty string */
896 if (value[1] != separator[0]) {
897 vol->password = NULL;
901 temp_len = strlen(value);
902 /* removed password length check, NTLM passwords
903 can be arbitrarily long */
905 /* if comma in password, the string will be
906 prematurely null terminated. Commas in password are
907 specified across the cifs mount interface by a double
908 comma ie ,, and a comma used as in other cases ie ','
909 as a parameter delimiter/separator is single and due
910 to the strsep above is temporarily zeroed. */
912 /* NB: password legally can have multiple commas and
913 the only illegal character in a password is null */
915 if ((value[temp_len] == 0) &&
916 (value[temp_len+1] == separator[0])) {
918 value[temp_len] = separator[0];
919 temp_len += 2; /* move after second comma */
920 while (value[temp_len] != 0) {
921 if (value[temp_len] == separator[0]) {
922 if (value[temp_len+1] ==
924 /* skip second comma */
927 /* single comma indicating start
934 if (value[temp_len] == 0) {
938 /* point option to start of next parm */
939 options = value + temp_len + 1;
941 /* go from value to value + temp_len condensing
942 double commas to singles. Note that this ends up
943 allocating a few bytes too many, which is ok */
944 vol->password = kzalloc(temp_len, GFP_KERNEL);
945 if (vol->password == NULL) {
946 printk(KERN_WARNING "CIFS: no memory "
950 for (i = 0, j = 0; i < temp_len; i++, j++) {
951 vol->password[j] = value[i];
952 if (value[i] == separator[0]
953 && value[i+1] == separator[0]) {
954 /* skip second comma */
958 vol->password[j] = 0;
960 vol->password = kzalloc(temp_len+1, GFP_KERNEL);
961 if (vol->password == NULL) {
962 printk(KERN_WARNING "CIFS: no memory "
966 strcpy(vol->password, value);
968 } else if (!strnicmp(data, "ip", 2) ||
969 !strnicmp(data, "addr", 4)) {
970 if (!value || !*value) {
972 } else if (strnlen(value, INET6_ADDRSTRLEN) <
976 printk(KERN_WARNING "CIFS: ip address "
980 } else if (strnicmp(data, "sec", 3) == 0) {
981 if (!value || !*value) {
982 cERROR(1, "no security value specified");
984 } else if (strnicmp(value, "krb5i", 5) == 0) {
985 vol->secFlg |= CIFSSEC_MAY_KRB5 |
987 } else if (strnicmp(value, "krb5p", 5) == 0) {
988 /* vol->secFlg |= CIFSSEC_MUST_SEAL |
990 cERROR(1, "Krb5 cifs privacy not supported");
992 } else if (strnicmp(value, "krb5", 4) == 0) {
993 vol->secFlg |= CIFSSEC_MAY_KRB5;
994 #ifdef CONFIG_CIFS_EXPERIMENTAL
995 } else if (strnicmp(value, "ntlmsspi", 8) == 0) {
996 vol->secFlg |= CIFSSEC_MAY_NTLMSSP |
998 } else if (strnicmp(value, "ntlmssp", 7) == 0) {
999 vol->secFlg |= CIFSSEC_MAY_NTLMSSP;
1001 } else if (strnicmp(value, "ntlmv2i", 7) == 0) {
1002 vol->secFlg |= CIFSSEC_MAY_NTLMV2 |
1004 } else if (strnicmp(value, "ntlmv2", 6) == 0) {
1005 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
1006 } else if (strnicmp(value, "ntlmi", 5) == 0) {
1007 vol->secFlg |= CIFSSEC_MAY_NTLM |
1009 } else if (strnicmp(value, "ntlm", 4) == 0) {
1010 /* ntlm is default so can be turned off too */
1011 vol->secFlg |= CIFSSEC_MAY_NTLM;
1012 } else if (strnicmp(value, "nontlm", 6) == 0) {
1013 /* BB is there a better way to do this? */
1014 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
1015 #ifdef CONFIG_CIFS_WEAK_PW_HASH
1016 } else if (strnicmp(value, "lanman", 6) == 0) {
1017 vol->secFlg |= CIFSSEC_MAY_LANMAN;
1019 } else if (strnicmp(value, "none", 4) == 0) {
1022 cERROR(1, "bad security option: %s", value);
1025 } else if ((strnicmp(data, "unc", 3) == 0)
1026 || (strnicmp(data, "target", 6) == 0)
1027 || (strnicmp(data, "path", 4) == 0)) {
1028 if (!value || !*value) {
1029 printk(KERN_WARNING "CIFS: invalid path to "
1030 "network resource\n");
1031 return 1; /* needs_arg; */
1033 if ((temp_len = strnlen(value, 300)) < 300) {
1034 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1035 if (vol->UNC == NULL)
1037 strcpy(vol->UNC, value);
1038 if (strncmp(vol->UNC, "//", 2) == 0) {
1041 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1043 "CIFS: UNC Path does not begin "
1044 "with // or \\\\ \n");
1048 printk(KERN_WARNING "CIFS: UNC name too long\n");
1051 } else if ((strnicmp(data, "domain", 3) == 0)
1052 || (strnicmp(data, "workgroup", 5) == 0)) {
1053 if (!value || !*value) {
1054 printk(KERN_WARNING "CIFS: invalid domain name\n");
1055 return 1; /* needs_arg; */
1057 /* BB are there cases in which a comma can be valid in
1058 a domain name and need special handling? */
1059 if (strnlen(value, 256) < 256) {
1060 vol->domainname = value;
1061 cFYI(1, "Domain name set");
1063 printk(KERN_WARNING "CIFS: domain name too "
1067 } else if (strnicmp(data, "prefixpath", 10) == 0) {
1068 if (!value || !*value) {
1070 "CIFS: invalid path prefix\n");
1071 return 1; /* needs_argument */
1073 if ((temp_len = strnlen(value, 1024)) < 1024) {
1074 if (value[0] != '/')
1075 temp_len++; /* missing leading slash */
1076 vol->prepath = kmalloc(temp_len+1, GFP_KERNEL);
1077 if (vol->prepath == NULL)
1079 if (value[0] != '/') {
1080 vol->prepath[0] = '/';
1081 strcpy(vol->prepath+1, value);
1083 strcpy(vol->prepath, value);
1084 cFYI(1, "prefix path %s", vol->prepath);
1086 printk(KERN_WARNING "CIFS: prefix too long\n");
1089 } else if (strnicmp(data, "iocharset", 9) == 0) {
1090 if (!value || !*value) {
1091 printk(KERN_WARNING "CIFS: invalid iocharset "
1093 return 1; /* needs_arg; */
1095 if (strnlen(value, 65) < 65) {
1096 if (strnicmp(value, "default", 7))
1097 vol->iocharset = value;
1098 /* if iocharset not set then load_nls_default
1099 is used by caller */
1100 cFYI(1, "iocharset set to %s", value);
1102 printk(KERN_WARNING "CIFS: iocharset name "
1106 } else if (!strnicmp(data, "uid", 3) && value && *value) {
1107 vol->linux_uid = simple_strtoul(value, &value, 0);
1108 uid_specified = true;
1109 } else if (!strnicmp(data, "forceuid", 8)) {
1111 } else if (!strnicmp(data, "noforceuid", 10)) {
1113 } else if (!strnicmp(data, "gid", 3) && value && *value) {
1114 vol->linux_gid = simple_strtoul(value, &value, 0);
1115 gid_specified = true;
1116 } else if (!strnicmp(data, "forcegid", 8)) {
1118 } else if (!strnicmp(data, "noforcegid", 10)) {
1120 } else if (strnicmp(data, "file_mode", 4) == 0) {
1121 if (value && *value) {
1123 simple_strtoul(value, &value, 0);
1125 } else if (strnicmp(data, "dir_mode", 4) == 0) {
1126 if (value && *value) {
1128 simple_strtoul(value, &value, 0);
1130 } else if (strnicmp(data, "dirmode", 4) == 0) {
1131 if (value && *value) {
1133 simple_strtoul(value, &value, 0);
1135 } else if (strnicmp(data, "port", 4) == 0) {
1136 if (value && *value) {
1138 simple_strtoul(value, &value, 0);
1140 } else if (strnicmp(data, "rsize", 5) == 0) {
1141 if (value && *value) {
1143 simple_strtoul(value, &value, 0);
1145 } else if (strnicmp(data, "wsize", 5) == 0) {
1146 if (value && *value) {
1148 simple_strtoul(value, &value, 0);
1150 } else if (strnicmp(data, "sockopt", 5) == 0) {
1151 if (!value || !*value) {
1152 cERROR(1, "no socket option specified");
1154 } else if (strnicmp(value, "TCP_NODELAY", 11) == 0) {
1155 vol->sockopt_tcp_nodelay = 1;
1157 } else if (strnicmp(data, "netbiosname", 4) == 0) {
1158 if (!value || !*value || (*value == ' ')) {
1159 cFYI(1, "invalid (empty) netbiosname");
1161 memset(vol->source_rfc1001_name, 0x20, 15);
1162 for (i = 0; i < 15; i++) {
1163 /* BB are there cases in which a comma can be
1164 valid in this workstation netbios name (and need
1165 special handling)? */
1167 /* We do not uppercase netbiosname for user */
1171 vol->source_rfc1001_name[i] =
1174 /* The string has 16th byte zero still from
1175 set at top of the function */
1176 if ((i == 15) && (value[i] != 0))
1177 printk(KERN_WARNING "CIFS: netbiosname"
1178 " longer than 15 truncated.\n");
1180 } else if (strnicmp(data, "servern", 7) == 0) {
1181 /* servernetbiosname specified override *SMBSERVER */
1182 if (!value || !*value || (*value == ' ')) {
1183 cFYI(1, "empty server netbiosname specified");
1185 /* last byte, type, is 0x20 for servr type */
1186 memset(vol->target_rfc1001_name, 0x20, 16);
1188 for (i = 0; i < 15; i++) {
1189 /* BB are there cases in which a comma can be
1190 valid in this workstation netbios name
1191 (and need special handling)? */
1193 /* user or mount helper must uppercase
1198 vol->target_rfc1001_name[i] =
1201 /* The string has 16th byte zero still from
1202 set at top of the function */
1203 if ((i == 15) && (value[i] != 0))
1204 printk(KERN_WARNING "CIFS: server net"
1205 "biosname longer than 15 truncated.\n");
1207 } else if (strnicmp(data, "credentials", 4) == 0) {
1209 } else if (strnicmp(data, "version", 3) == 0) {
1211 } else if (strnicmp(data, "guest", 5) == 0) {
1213 } else if (strnicmp(data, "rw", 2) == 0) {
1215 } else if (strnicmp(data, "ro", 2) == 0) {
1217 } else if (strnicmp(data, "noblocksend", 11) == 0) {
1218 vol->noblocksnd = 1;
1219 } else if (strnicmp(data, "noautotune", 10) == 0) {
1220 vol->noautotune = 1;
1221 } else if ((strnicmp(data, "suid", 4) == 0) ||
1222 (strnicmp(data, "nosuid", 6) == 0) ||
1223 (strnicmp(data, "exec", 4) == 0) ||
1224 (strnicmp(data, "noexec", 6) == 0) ||
1225 (strnicmp(data, "nodev", 5) == 0) ||
1226 (strnicmp(data, "noauto", 6) == 0) ||
1227 (strnicmp(data, "dev", 3) == 0)) {
1228 /* The mount tool or mount.cifs helper (if present)
1229 uses these opts to set flags, and the flags are read
1230 by the kernel vfs layer before we get here (ie
1231 before read super) so there is no point trying to
1232 parse these options again and set anything and it
1233 is ok to just ignore them */
1235 } else if (strnicmp(data, "hard", 4) == 0) {
1237 } else if (strnicmp(data, "soft", 4) == 0) {
1239 } else if (strnicmp(data, "perm", 4) == 0) {
1241 } else if (strnicmp(data, "noperm", 6) == 0) {
1243 } else if (strnicmp(data, "mapchars", 8) == 0) {
1245 } else if (strnicmp(data, "nomapchars", 10) == 0) {
1247 } else if (strnicmp(data, "sfu", 3) == 0) {
1249 } else if (strnicmp(data, "nosfu", 5) == 0) {
1251 } else if (strnicmp(data, "nodfs", 5) == 0) {
1253 } else if (strnicmp(data, "posixpaths", 10) == 0) {
1254 vol->posix_paths = 1;
1255 } else if (strnicmp(data, "noposixpaths", 12) == 0) {
1256 vol->posix_paths = 0;
1257 } else if (strnicmp(data, "nounix", 6) == 0) {
1258 vol->no_linux_ext = 1;
1259 } else if (strnicmp(data, "nolinux", 7) == 0) {
1260 vol->no_linux_ext = 1;
1261 } else if ((strnicmp(data, "nocase", 6) == 0) ||
1262 (strnicmp(data, "ignorecase", 10) == 0)) {
1264 } else if (strnicmp(data, "mand", 4) == 0) {
1266 } else if (strnicmp(data, "nomand", 6) == 0) {
1268 } else if (strnicmp(data, "_netdev", 7) == 0) {
1270 } else if (strnicmp(data, "brl", 3) == 0) {
1272 } else if ((strnicmp(data, "nobrl", 5) == 0) ||
1273 (strnicmp(data, "nolock", 6) == 0)) {
1275 /* turn off mandatory locking in mode
1276 if remote locking is turned off since the
1277 local vfs will do advisory */
1278 if (vol->file_mode ==
1279 (S_IALLUGO & ~(S_ISUID | S_IXGRP)))
1280 vol->file_mode = S_IALLUGO;
1281 } else if (strnicmp(data, "forcemandatorylock", 9) == 0) {
1282 /* will take the shorter form "forcemand" as well */
1283 /* This mount option will force use of mandatory
1284 (DOS/Windows style) byte range locks, instead of
1285 using posix advisory byte range locks, even if the
1286 Unix extensions are available and posix locks would
1287 be supported otherwise. If Unix extensions are not
1288 negotiated this has no effect since mandatory locks
1289 would be used (mandatory locks is all that those
1290 those servers support) */
1292 } else if (strnicmp(data, "setuids", 7) == 0) {
1294 } else if (strnicmp(data, "nosetuids", 9) == 0) {
1296 } else if (strnicmp(data, "dynperm", 7) == 0) {
1297 vol->dynperm = true;
1298 } else if (strnicmp(data, "nodynperm", 9) == 0) {
1299 vol->dynperm = false;
1300 } else if (strnicmp(data, "nohard", 6) == 0) {
1302 } else if (strnicmp(data, "nosoft", 6) == 0) {
1304 } else if (strnicmp(data, "nointr", 6) == 0) {
1306 } else if (strnicmp(data, "intr", 4) == 0) {
1308 } else if (strnicmp(data, "nostrictsync", 12) == 0) {
1309 vol->nostrictsync = 1;
1310 } else if (strnicmp(data, "strictsync", 10) == 0) {
1311 vol->nostrictsync = 0;
1312 } else if (strnicmp(data, "serverino", 7) == 0) {
1313 vol->server_ino = 1;
1314 } else if (strnicmp(data, "noserverino", 9) == 0) {
1315 vol->server_ino = 0;
1316 } else if (strnicmp(data, "cifsacl", 7) == 0) {
1318 } else if (strnicmp(data, "nocifsacl", 9) == 0) {
1320 } else if (strnicmp(data, "acl", 3) == 0) {
1321 vol->no_psx_acl = 0;
1322 } else if (strnicmp(data, "noacl", 5) == 0) {
1323 vol->no_psx_acl = 1;
1324 #ifdef CONFIG_CIFS_EXPERIMENTAL
1325 } else if (strnicmp(data, "locallease", 6) == 0) {
1326 vol->local_lease = 1;
1328 } else if (strnicmp(data, "sign", 4) == 0) {
1329 vol->secFlg |= CIFSSEC_MUST_SIGN;
1330 } else if (strnicmp(data, "seal", 4) == 0) {
1331 /* we do not do the following in secFlags because seal
1332 is a per tree connection (mount) not a per socket
1333 or per-smb connection option in the protocol */
1334 /* vol->secFlg |= CIFSSEC_MUST_SEAL; */
1336 } else if (strnicmp(data, "direct", 6) == 0) {
1338 } else if (strnicmp(data, "forcedirectio", 13) == 0) {
1340 } else if (strnicmp(data, "noac", 4) == 0) {
1341 printk(KERN_WARNING "CIFS: Mount option noac not "
1342 "supported. Instead set "
1343 "/proc/fs/cifs/LookupCacheEnabled to 0\n");
1344 } else if (strnicmp(data, "fsc", 3) == 0) {
1347 printk(KERN_WARNING "CIFS: Unknown mount option %s\n",
1350 if (vol->UNC == NULL) {
1351 if (devname == NULL) {
1352 printk(KERN_WARNING "CIFS: Missing UNC name for mount "
1356 if ((temp_len = strnlen(devname, 300)) < 300) {
1357 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1358 if (vol->UNC == NULL)
1360 strcpy(vol->UNC, devname);
1361 if (strncmp(vol->UNC, "//", 2) == 0) {
1364 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1365 printk(KERN_WARNING "CIFS: UNC Path does not "
1366 "begin with // or \\\\ \n");
1369 value = strpbrk(vol->UNC+2, "/\\");
1373 printk(KERN_WARNING "CIFS: UNC name too long\n");
1377 if (vol->UNCip == NULL)
1378 vol->UNCip = &vol->UNC[2];
1381 vol->override_uid = override_uid;
1382 else if (override_uid == 1)
1383 printk(KERN_NOTICE "CIFS: ignoring forceuid mount option "
1384 "specified with no uid= option.\n");
1387 vol->override_gid = override_gid;
1388 else if (override_gid == 1)
1389 printk(KERN_NOTICE "CIFS: ignoring forcegid mount option "
1390 "specified with no gid= option.\n");
1396 match_address(struct TCP_Server_Info *server, struct sockaddr *addr)
1398 struct sockaddr_in *addr4 = (struct sockaddr_in *)addr;
1399 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)addr;
1401 switch (addr->sa_family) {
1403 if (addr4->sin_addr.s_addr !=
1404 server->addr.sockAddr.sin_addr.s_addr)
1406 if (addr4->sin_port &&
1407 addr4->sin_port != server->addr.sockAddr.sin_port)
1411 if (!ipv6_addr_equal(&addr6->sin6_addr,
1412 &server->addr.sockAddr6.sin6_addr))
1414 if (addr6->sin6_scope_id !=
1415 server->addr.sockAddr6.sin6_scope_id)
1417 if (addr6->sin6_port &&
1418 addr6->sin6_port != server->addr.sockAddr6.sin6_port)
1427 match_security(struct TCP_Server_Info *server, struct smb_vol *vol)
1429 unsigned int secFlags;
1431 if (vol->secFlg & (~(CIFSSEC_MUST_SIGN | CIFSSEC_MUST_SEAL)))
1432 secFlags = vol->secFlg;
1434 secFlags = global_secflags | vol->secFlg;
1436 switch (server->secType) {
1438 if (!(secFlags & (CIFSSEC_MAY_LANMAN|CIFSSEC_MAY_PLNTXT)))
1442 if (!(secFlags & CIFSSEC_MAY_NTLMV2))
1446 if (!(secFlags & CIFSSEC_MAY_NTLM))
1450 if (!(secFlags & CIFSSEC_MAY_KRB5))
1454 if (!(secFlags & CIFSSEC_MAY_NTLMSSP))
1458 /* shouldn't happen */
1462 /* now check if signing mode is acceptible */
1463 if ((secFlags & CIFSSEC_MAY_SIGN) == 0 &&
1464 (server->secMode & SECMODE_SIGN_REQUIRED))
1466 else if (((secFlags & CIFSSEC_MUST_SIGN) == CIFSSEC_MUST_SIGN) &&
1468 (SECMODE_SIGN_ENABLED|SECMODE_SIGN_REQUIRED)) == 0)
1474 static struct TCP_Server_Info *
1475 cifs_find_tcp_session(struct sockaddr *addr, struct smb_vol *vol)
1477 struct TCP_Server_Info *server;
1479 write_lock(&cifs_tcp_ses_lock);
1480 list_for_each_entry(server, &cifs_tcp_ses_list, tcp_ses_list) {
1482 * the demux thread can exit on its own while still in CifsNew
1483 * so don't accept any sockets in that state. Since the
1484 * tcpStatus never changes back to CifsNew it's safe to check
1485 * for this without a lock.
1487 if (server->tcpStatus == CifsNew)
1490 if (!match_address(server, addr))
1493 if (!match_security(server, vol))
1496 ++server->srv_count;
1497 write_unlock(&cifs_tcp_ses_lock);
1498 cFYI(1, "Existing tcp session with server found");
1501 write_unlock(&cifs_tcp_ses_lock);
1506 cifs_put_tcp_session(struct TCP_Server_Info *server)
1508 struct task_struct *task;
1510 write_lock(&cifs_tcp_ses_lock);
1511 if (--server->srv_count > 0) {
1512 write_unlock(&cifs_tcp_ses_lock);
1516 list_del_init(&server->tcp_ses_list);
1517 write_unlock(&cifs_tcp_ses_lock);
1519 spin_lock(&GlobalMid_Lock);
1520 server->tcpStatus = CifsExiting;
1521 spin_unlock(&GlobalMid_Lock);
1523 cifs_fscache_release_client_cookie(server);
1525 task = xchg(&server->tsk, NULL);
1527 force_sig(SIGKILL, task);
1530 static struct TCP_Server_Info *
1531 cifs_get_tcp_session(struct smb_vol *volume_info)
1533 struct TCP_Server_Info *tcp_ses = NULL;
1534 struct sockaddr_storage addr;
1535 struct sockaddr_in *sin_server = (struct sockaddr_in *) &addr;
1536 struct sockaddr_in6 *sin_server6 = (struct sockaddr_in6 *) &addr;
1539 memset(&addr, 0, sizeof(struct sockaddr_storage));
1541 cFYI(1, "UNC: %s ip: %s", volume_info->UNC, volume_info->UNCip);
1543 if (volume_info->UNCip && volume_info->UNC) {
1544 rc = cifs_fill_sockaddr((struct sockaddr *)&addr,
1546 strlen(volume_info->UNCip),
1549 /* we failed translating address */
1553 } else if (volume_info->UNCip) {
1554 /* BB using ip addr as tcp_ses name to connect to the
1556 cERROR(1, "Connecting to DFS root not implemented yet");
1559 } else /* which tcp_sess DFS root would we conect to */ {
1560 cERROR(1, "CIFS mount error: No UNC path (e.g. -o "
1561 "unc=//192.168.1.100/public) specified");
1566 /* see if we already have a matching tcp_ses */
1567 tcp_ses = cifs_find_tcp_session((struct sockaddr *)&addr, volume_info);
1571 tcp_ses = kzalloc(sizeof(struct TCP_Server_Info), GFP_KERNEL);
1577 tcp_ses->hostname = extract_hostname(volume_info->UNC);
1578 if (IS_ERR(tcp_ses->hostname)) {
1579 rc = PTR_ERR(tcp_ses->hostname);
1583 tcp_ses->noblocksnd = volume_info->noblocksnd;
1584 tcp_ses->noautotune = volume_info->noautotune;
1585 tcp_ses->tcp_nodelay = volume_info->sockopt_tcp_nodelay;
1586 atomic_set(&tcp_ses->inFlight, 0);
1587 init_waitqueue_head(&tcp_ses->response_q);
1588 init_waitqueue_head(&tcp_ses->request_q);
1589 INIT_LIST_HEAD(&tcp_ses->pending_mid_q);
1590 mutex_init(&tcp_ses->srv_mutex);
1591 memcpy(tcp_ses->workstation_RFC1001_name,
1592 volume_info->source_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1593 memcpy(tcp_ses->server_RFC1001_name,
1594 volume_info->target_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1595 tcp_ses->sequence_number = 0;
1596 INIT_LIST_HEAD(&tcp_ses->tcp_ses_list);
1597 INIT_LIST_HEAD(&tcp_ses->smb_ses_list);
1600 * at this point we are the only ones with the pointer
1601 * to the struct since the kernel thread not created yet
1602 * no need to spinlock this init of tcpStatus or srv_count
1604 tcp_ses->tcpStatus = CifsNew;
1605 ++tcp_ses->srv_count;
1607 if (addr.ss_family == AF_INET6) {
1608 cFYI(1, "attempting ipv6 connect");
1609 /* BB should we allow ipv6 on port 139? */
1610 /* other OS never observed in Wild doing 139 with v6 */
1611 memcpy(&tcp_ses->addr.sockAddr6, sin_server6,
1612 sizeof(struct sockaddr_in6));
1613 rc = ipv6_connect(tcp_ses);
1615 memcpy(&tcp_ses->addr.sockAddr, sin_server,
1616 sizeof(struct sockaddr_in));
1617 rc = ipv4_connect(tcp_ses);
1620 cERROR(1, "Error connecting to socket. Aborting operation");
1625 * since we're in a cifs function already, we know that
1626 * this will succeed. No need for try_module_get().
1628 __module_get(THIS_MODULE);
1629 tcp_ses->tsk = kthread_run((void *)(void *)cifs_demultiplex_thread,
1631 if (IS_ERR(tcp_ses->tsk)) {
1632 rc = PTR_ERR(tcp_ses->tsk);
1633 cERROR(1, "error %d create cifsd thread", rc);
1634 module_put(THIS_MODULE);
1638 /* thread spawned, put it on the list */
1639 write_lock(&cifs_tcp_ses_lock);
1640 list_add(&tcp_ses->tcp_ses_list, &cifs_tcp_ses_list);
1641 write_unlock(&cifs_tcp_ses_lock);
1643 cifs_fscache_get_client_cookie(tcp_ses);
1649 if (!IS_ERR(tcp_ses->hostname))
1650 kfree(tcp_ses->hostname);
1651 if (tcp_ses->ssocket)
1652 sock_release(tcp_ses->ssocket);
1658 static struct cifsSesInfo *
1659 cifs_find_smb_ses(struct TCP_Server_Info *server, struct smb_vol *vol)
1661 struct cifsSesInfo *ses;
1663 write_lock(&cifs_tcp_ses_lock);
1664 list_for_each_entry(ses, &server->smb_ses_list, smb_ses_list) {
1665 switch (server->secType) {
1667 if (vol->cred_uid != ses->cred_uid)
1671 /* anything else takes username/password */
1672 if (strncmp(ses->userName, vol->username,
1675 if (strlen(vol->username) != 0 &&
1676 strncmp(ses->password,
1677 vol->password ? vol->password : "",
1682 write_unlock(&cifs_tcp_ses_lock);
1685 write_unlock(&cifs_tcp_ses_lock);
1690 cifs_put_smb_ses(struct cifsSesInfo *ses)
1693 struct TCP_Server_Info *server = ses->server;
1695 cFYI(1, "%s: ses_count=%d\n", __func__, ses->ses_count);
1696 write_lock(&cifs_tcp_ses_lock);
1697 if (--ses->ses_count > 0) {
1698 write_unlock(&cifs_tcp_ses_lock);
1702 list_del_init(&ses->smb_ses_list);
1703 write_unlock(&cifs_tcp_ses_lock);
1705 if (ses->status == CifsGood) {
1707 CIFSSMBLogoff(xid, ses);
1711 cifs_put_tcp_session(server);
1714 static struct cifsSesInfo *
1715 cifs_get_smb_ses(struct TCP_Server_Info *server, struct smb_vol *volume_info)
1717 int rc = -ENOMEM, xid;
1718 struct cifsSesInfo *ses;
1722 ses = cifs_find_smb_ses(server, volume_info);
1724 cFYI(1, "Existing smb sess found (status=%d)", ses->status);
1726 /* existing SMB ses has a server reference already */
1727 cifs_put_tcp_session(server);
1729 mutex_lock(&ses->session_mutex);
1730 rc = cifs_negotiate_protocol(xid, ses);
1732 mutex_unlock(&ses->session_mutex);
1733 /* problem -- put our ses reference */
1734 cifs_put_smb_ses(ses);
1738 if (ses->need_reconnect) {
1739 cFYI(1, "Session needs reconnect");
1740 rc = cifs_setup_session(xid, ses,
1741 volume_info->local_nls);
1743 mutex_unlock(&ses->session_mutex);
1744 /* problem -- put our reference */
1745 cifs_put_smb_ses(ses);
1750 mutex_unlock(&ses->session_mutex);
1755 cFYI(1, "Existing smb sess not found");
1756 ses = sesInfoAlloc();
1760 /* new SMB session uses our server ref */
1761 ses->server = server;
1762 if (server->addr.sockAddr6.sin6_family == AF_INET6)
1763 sprintf(ses->serverName, "%pI6",
1764 &server->addr.sockAddr6.sin6_addr);
1766 sprintf(ses->serverName, "%pI4",
1767 &server->addr.sockAddr.sin_addr.s_addr);
1769 if (volume_info->username)
1770 strncpy(ses->userName, volume_info->username,
1773 /* volume_info->password freed at unmount */
1774 if (volume_info->password) {
1775 ses->password = kstrdup(volume_info->password, GFP_KERNEL);
1779 if (volume_info->domainname) {
1780 int len = strlen(volume_info->domainname);
1781 ses->domainName = kmalloc(len + 1, GFP_KERNEL);
1782 if (ses->domainName)
1783 strcpy(ses->domainName, volume_info->domainname);
1785 ses->cred_uid = volume_info->cred_uid;
1786 ses->linux_uid = volume_info->linux_uid;
1787 ses->overrideSecFlg = volume_info->secFlg;
1789 mutex_lock(&ses->session_mutex);
1790 rc = cifs_negotiate_protocol(xid, ses);
1792 rc = cifs_setup_session(xid, ses, volume_info->local_nls);
1793 mutex_unlock(&ses->session_mutex);
1797 /* success, put it on the list */
1798 write_lock(&cifs_tcp_ses_lock);
1799 list_add(&ses->smb_ses_list, &server->smb_ses_list);
1800 write_unlock(&cifs_tcp_ses_lock);
1811 static struct cifsTconInfo *
1812 cifs_find_tcon(struct cifsSesInfo *ses, const char *unc)
1814 struct list_head *tmp;
1815 struct cifsTconInfo *tcon;
1817 write_lock(&cifs_tcp_ses_lock);
1818 list_for_each(tmp, &ses->tcon_list) {
1819 tcon = list_entry(tmp, struct cifsTconInfo, tcon_list);
1820 if (tcon->tidStatus == CifsExiting)
1822 if (strncmp(tcon->treeName, unc, MAX_TREE_SIZE))
1826 write_unlock(&cifs_tcp_ses_lock);
1829 write_unlock(&cifs_tcp_ses_lock);
1834 cifs_put_tcon(struct cifsTconInfo *tcon)
1837 struct cifsSesInfo *ses = tcon->ses;
1839 cFYI(1, "%s: tc_count=%d\n", __func__, tcon->tc_count);
1840 write_lock(&cifs_tcp_ses_lock);
1841 if (--tcon->tc_count > 0) {
1842 write_unlock(&cifs_tcp_ses_lock);
1846 list_del_init(&tcon->tcon_list);
1847 write_unlock(&cifs_tcp_ses_lock);
1850 CIFSSMBTDis(xid, tcon);
1853 cifs_fscache_release_super_cookie(tcon);
1855 cifs_put_smb_ses(ses);
1858 static struct cifsTconInfo *
1859 cifs_get_tcon(struct cifsSesInfo *ses, struct smb_vol *volume_info)
1862 struct cifsTconInfo *tcon;
1864 tcon = cifs_find_tcon(ses, volume_info->UNC);
1866 cFYI(1, "Found match on UNC path");
1867 /* existing tcon already has a reference */
1868 cifs_put_smb_ses(ses);
1869 if (tcon->seal != volume_info->seal)
1870 cERROR(1, "transport encryption setting "
1871 "conflicts with existing tid");
1875 tcon = tconInfoAlloc();
1882 if (volume_info->password) {
1883 tcon->password = kstrdup(volume_info->password, GFP_KERNEL);
1884 if (!tcon->password) {
1890 if (strchr(volume_info->UNC + 3, '\\') == NULL
1891 && strchr(volume_info->UNC + 3, '/') == NULL) {
1892 cERROR(1, "Missing share name");
1897 /* BB Do we need to wrap session_mutex around
1898 * this TCon call and Unix SetFS as
1899 * we do on SessSetup and reconnect? */
1901 rc = CIFSTCon(xid, ses, volume_info->UNC, tcon, volume_info->local_nls);
1903 cFYI(1, "CIFS Tcon rc = %d", rc);
1907 if (volume_info->nodfs) {
1908 tcon->Flags &= ~SMB_SHARE_IS_IN_DFS;
1909 cFYI(1, "DFS disabled (%d)", tcon->Flags);
1911 tcon->seal = volume_info->seal;
1912 /* we can have only one retry value for a connection
1913 to a share so for resources mounted more than once
1914 to the same server share the last value passed in
1915 for the retry flag is used */
1916 tcon->retry = volume_info->retry;
1917 tcon->nocase = volume_info->nocase;
1918 tcon->local_lease = volume_info->local_lease;
1920 write_lock(&cifs_tcp_ses_lock);
1921 list_add(&tcon->tcon_list, &ses->tcon_list);
1922 write_unlock(&cifs_tcp_ses_lock);
1924 cifs_fscache_get_super_cookie(tcon);
1935 get_dfs_path(int xid, struct cifsSesInfo *pSesInfo, const char *old_path,
1936 const struct nls_table *nls_codepage, unsigned int *pnum_referrals,
1937 struct dfs_info3_param **preferrals, int remap)
1942 *pnum_referrals = 0;
1945 if (pSesInfo->ipc_tid == 0) {
1946 temp_unc = kmalloc(2 /* for slashes */ +
1947 strnlen(pSesInfo->serverName,
1948 SERVER_NAME_LEN_WITH_NULL * 2)
1949 + 1 + 4 /* slash IPC$ */ + 2,
1951 if (temp_unc == NULL)
1955 strcpy(temp_unc + 2, pSesInfo->serverName);
1956 strcpy(temp_unc + 2 + strlen(pSesInfo->serverName), "\\IPC$");
1957 rc = CIFSTCon(xid, pSesInfo, temp_unc, NULL, nls_codepage);
1958 cFYI(1, "CIFS Tcon rc = %d ipc_tid = %d", rc, pSesInfo->ipc_tid);
1962 rc = CIFSGetDFSRefer(xid, pSesInfo, old_path, preferrals,
1963 pnum_referrals, nls_codepage, remap);
1964 /* BB map targetUNCs to dfs_info3 structures, here or
1965 in CIFSGetDFSRefer BB */
1970 #ifdef CONFIG_DEBUG_LOCK_ALLOC
1971 static struct lock_class_key cifs_key[2];
1972 static struct lock_class_key cifs_slock_key[2];
1975 cifs_reclassify_socket4(struct socket *sock)
1977 struct sock *sk = sock->sk;
1978 BUG_ON(sock_owned_by_user(sk));
1979 sock_lock_init_class_and_name(sk, "slock-AF_INET-CIFS",
1980 &cifs_slock_key[0], "sk_lock-AF_INET-CIFS", &cifs_key[0]);
1984 cifs_reclassify_socket6(struct socket *sock)
1986 struct sock *sk = sock->sk;
1987 BUG_ON(sock_owned_by_user(sk));
1988 sock_lock_init_class_and_name(sk, "slock-AF_INET6-CIFS",
1989 &cifs_slock_key[1], "sk_lock-AF_INET6-CIFS", &cifs_key[1]);
1993 cifs_reclassify_socket4(struct socket *sock)
1998 cifs_reclassify_socket6(struct socket *sock)
2003 /* See RFC1001 section 14 on representation of Netbios names */
2004 static void rfc1002mangle(char *target, char *source, unsigned int length)
2008 for (i = 0, j = 0; i < (length); i++) {
2009 /* mask a nibble at a time and encode */
2010 target[j] = 'A' + (0x0F & (source[i] >> 4));
2011 target[j+1] = 'A' + (0x0F & source[i]);
2019 ipv4_connect(struct TCP_Server_Info *server)
2023 bool connected = false;
2024 __be16 orig_port = 0;
2025 struct socket *socket = server->ssocket;
2027 if (socket == NULL) {
2028 rc = sock_create_kern(PF_INET, SOCK_STREAM,
2029 IPPROTO_TCP, &socket);
2031 cERROR(1, "Error %d creating socket", rc);
2035 /* BB other socket options to set KEEPALIVE, NODELAY? */
2036 cFYI(1, "Socket created");
2037 server->ssocket = socket;
2038 socket->sk->sk_allocation = GFP_NOFS;
2039 cifs_reclassify_socket4(socket);
2042 /* user overrode default port */
2043 if (server->addr.sockAddr.sin_port) {
2044 rc = socket->ops->connect(socket, (struct sockaddr *)
2045 &server->addr.sockAddr,
2046 sizeof(struct sockaddr_in), 0);
2052 /* save original port so we can retry user specified port
2053 later if fall back ports fail this time */
2054 orig_port = server->addr.sockAddr.sin_port;
2056 /* do not retry on the same port we just failed on */
2057 if (server->addr.sockAddr.sin_port != htons(CIFS_PORT)) {
2058 server->addr.sockAddr.sin_port = htons(CIFS_PORT);
2059 rc = socket->ops->connect(socket,
2061 &server->addr.sockAddr,
2062 sizeof(struct sockaddr_in), 0);
2068 server->addr.sockAddr.sin_port = htons(RFC1001_PORT);
2069 rc = socket->ops->connect(socket, (struct sockaddr *)
2070 &server->addr.sockAddr,
2071 sizeof(struct sockaddr_in), 0);
2076 /* give up here - unless we want to retry on different
2077 protocol families some day */
2080 server->addr.sockAddr.sin_port = orig_port;
2081 cFYI(1, "Error %d connecting to server via ipv4", rc);
2082 sock_release(socket);
2083 server->ssocket = NULL;
2089 * Eventually check for other socket options to change from
2090 * the default. sock_setsockopt not used because it expects
2093 socket->sk->sk_rcvtimeo = 7 * HZ;
2094 socket->sk->sk_sndtimeo = 5 * HZ;
2096 /* make the bufsizes depend on wsize/rsize and max requests */
2097 if (server->noautotune) {
2098 if (socket->sk->sk_sndbuf < (200 * 1024))
2099 socket->sk->sk_sndbuf = 200 * 1024;
2100 if (socket->sk->sk_rcvbuf < (140 * 1024))
2101 socket->sk->sk_rcvbuf = 140 * 1024;
2104 if (server->tcp_nodelay) {
2106 rc = kernel_setsockopt(socket, SOL_TCP, TCP_NODELAY,
2107 (char *)&val, sizeof(val));
2109 cFYI(1, "set TCP_NODELAY socket option error %d", rc);
2112 cFYI(1, "sndbuf %d rcvbuf %d rcvtimeo 0x%lx",
2113 socket->sk->sk_sndbuf,
2114 socket->sk->sk_rcvbuf, socket->sk->sk_rcvtimeo);
2116 /* send RFC1001 sessinit */
2117 if (server->addr.sockAddr.sin_port == htons(RFC1001_PORT)) {
2118 /* some servers require RFC1001 sessinit before sending
2119 negprot - BB check reconnection in case where second
2120 sessinit is sent but no second negprot */
2121 struct rfc1002_session_packet *ses_init_buf;
2122 struct smb_hdr *smb_buf;
2123 ses_init_buf = kzalloc(sizeof(struct rfc1002_session_packet),
2126 ses_init_buf->trailer.session_req.called_len = 32;
2127 if (server->server_RFC1001_name &&
2128 server->server_RFC1001_name[0] != 0)
2129 rfc1002mangle(ses_init_buf->trailer.
2130 session_req.called_name,
2131 server->server_RFC1001_name,
2132 RFC1001_NAME_LEN_WITH_NULL);
2134 rfc1002mangle(ses_init_buf->trailer.
2135 session_req.called_name,
2136 DEFAULT_CIFS_CALLED_NAME,
2137 RFC1001_NAME_LEN_WITH_NULL);
2139 ses_init_buf->trailer.session_req.calling_len = 32;
2141 /* calling name ends in null (byte 16) from old smb
2143 if (server->workstation_RFC1001_name &&
2144 server->workstation_RFC1001_name[0] != 0)
2145 rfc1002mangle(ses_init_buf->trailer.
2146 session_req.calling_name,
2147 server->workstation_RFC1001_name,
2148 RFC1001_NAME_LEN_WITH_NULL);
2150 rfc1002mangle(ses_init_buf->trailer.
2151 session_req.calling_name,
2153 RFC1001_NAME_LEN_WITH_NULL);
2155 ses_init_buf->trailer.session_req.scope1 = 0;
2156 ses_init_buf->trailer.session_req.scope2 = 0;
2157 smb_buf = (struct smb_hdr *)ses_init_buf;
2158 /* sizeof RFC1002_SESSION_REQUEST with no scope */
2159 smb_buf->smb_buf_length = 0x81000044;
2160 rc = smb_send(server, smb_buf, 0x44);
2161 kfree(ses_init_buf);
2162 msleep(1); /* RFC1001 layer in at least one server
2163 requires very short break before negprot
2164 presumably because not expecting negprot
2165 to follow so fast. This is a simple
2166 solution that works without
2167 complicating the code and causes no
2168 significant slowing down on mount
2169 for everyone else */
2171 /* else the negprot may still work without this
2172 even though malloc failed */
2180 ipv6_connect(struct TCP_Server_Info *server)
2184 bool connected = false;
2185 __be16 orig_port = 0;
2186 struct socket *socket = server->ssocket;
2188 if (socket == NULL) {
2189 rc = sock_create_kern(PF_INET6, SOCK_STREAM,
2190 IPPROTO_TCP, &socket);
2192 cERROR(1, "Error %d creating ipv6 socket", rc);
2197 /* BB other socket options to set KEEPALIVE, NODELAY? */
2198 cFYI(1, "ipv6 Socket created");
2199 server->ssocket = socket;
2200 socket->sk->sk_allocation = GFP_NOFS;
2201 cifs_reclassify_socket6(socket);
2204 /* user overrode default port */
2205 if (server->addr.sockAddr6.sin6_port) {
2206 rc = socket->ops->connect(socket,
2207 (struct sockaddr *) &server->addr.sockAddr6,
2208 sizeof(struct sockaddr_in6), 0);
2214 /* save original port so we can retry user specified port
2215 later if fall back ports fail this time */
2217 orig_port = server->addr.sockAddr6.sin6_port;
2218 /* do not retry on the same port we just failed on */
2219 if (server->addr.sockAddr6.sin6_port != htons(CIFS_PORT)) {
2220 server->addr.sockAddr6.sin6_port = htons(CIFS_PORT);
2221 rc = socket->ops->connect(socket, (struct sockaddr *)
2222 &server->addr.sockAddr6,
2223 sizeof(struct sockaddr_in6), 0);
2229 server->addr.sockAddr6.sin6_port = htons(RFC1001_PORT);
2230 rc = socket->ops->connect(socket, (struct sockaddr *)
2231 &server->addr.sockAddr6,
2232 sizeof(struct sockaddr_in6), 0);
2237 /* give up here - unless we want to retry on different
2238 protocol families some day */
2241 server->addr.sockAddr6.sin6_port = orig_port;
2242 cFYI(1, "Error %d connecting to server via ipv6", rc);
2243 sock_release(socket);
2244 server->ssocket = NULL;
2249 * Eventually check for other socket options to change from
2250 * the default. sock_setsockopt not used because it expects
2253 socket->sk->sk_rcvtimeo = 7 * HZ;
2254 socket->sk->sk_sndtimeo = 5 * HZ;
2256 if (server->tcp_nodelay) {
2258 rc = kernel_setsockopt(socket, SOL_TCP, TCP_NODELAY,
2259 (char *)&val, sizeof(val));
2261 cFYI(1, "set TCP_NODELAY socket option error %d", rc);
2264 server->ssocket = socket;
2269 void reset_cifs_unix_caps(int xid, struct cifsTconInfo *tcon,
2270 struct super_block *sb, struct smb_vol *vol_info)
2272 /* if we are reconnecting then should we check to see if
2273 * any requested capabilities changed locally e.g. via
2274 * remount but we can not do much about it here
2275 * if they have (even if we could detect it by the following)
2276 * Perhaps we could add a backpointer to array of sb from tcon
2277 * or if we change to make all sb to same share the same
2278 * sb as NFS - then we only have one backpointer to sb.
2279 * What if we wanted to mount the server share twice once with
2280 * and once without posixacls or posix paths? */
2281 __u64 saved_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2283 if (vol_info && vol_info->no_linux_ext) {
2284 tcon->fsUnixInfo.Capability = 0;
2285 tcon->unix_ext = 0; /* Unix Extensions disabled */
2286 cFYI(1, "Linux protocol extensions disabled");
2288 } else if (vol_info)
2289 tcon->unix_ext = 1; /* Unix Extensions supported */
2291 if (tcon->unix_ext == 0) {
2292 cFYI(1, "Unix extensions disabled so not set on reconnect");
2296 if (!CIFSSMBQFSUnixInfo(xid, tcon)) {
2297 __u64 cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2299 /* check for reconnect case in which we do not
2300 want to change the mount behavior if we can avoid it */
2301 if (vol_info == NULL) {
2302 /* turn off POSIX ACL and PATHNAMES if not set
2303 originally at mount time */
2304 if ((saved_cap & CIFS_UNIX_POSIX_ACL_CAP) == 0)
2305 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2306 if ((saved_cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2307 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2308 cERROR(1, "POSIXPATH support change");
2309 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2310 } else if ((cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2311 cERROR(1, "possible reconnect error");
2312 cERROR(1, "server disabled POSIX path support");
2316 cap &= CIFS_UNIX_CAP_MASK;
2317 if (vol_info && vol_info->no_psx_acl)
2318 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2319 else if (CIFS_UNIX_POSIX_ACL_CAP & cap) {
2320 cFYI(1, "negotiated posix acl support");
2322 sb->s_flags |= MS_POSIXACL;
2325 if (vol_info && vol_info->posix_paths == 0)
2326 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2327 else if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) {
2328 cFYI(1, "negotiate posix pathnames");
2330 CIFS_SB(sb)->mnt_cifs_flags |=
2331 CIFS_MOUNT_POSIX_PATHS;
2334 /* We might be setting the path sep back to a different
2335 form if we are reconnecting and the server switched its
2336 posix path capability for this share */
2337 if (sb && (CIFS_SB(sb)->prepathlen > 0))
2338 CIFS_SB(sb)->prepath[0] = CIFS_DIR_SEP(CIFS_SB(sb));
2340 if (sb && (CIFS_SB(sb)->rsize > 127 * 1024)) {
2341 if ((cap & CIFS_UNIX_LARGE_READ_CAP) == 0) {
2342 CIFS_SB(sb)->rsize = 127 * 1024;
2343 cFYI(DBG2, "larger reads not supported by srv");
2348 cFYI(1, "Negotiate caps 0x%x", (int)cap);
2349 #ifdef CONFIG_CIFS_DEBUG2
2350 if (cap & CIFS_UNIX_FCNTL_CAP)
2351 cFYI(1, "FCNTL cap");
2352 if (cap & CIFS_UNIX_EXTATTR_CAP)
2353 cFYI(1, "EXTATTR cap");
2354 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2355 cFYI(1, "POSIX path cap");
2356 if (cap & CIFS_UNIX_XATTR_CAP)
2357 cFYI(1, "XATTR cap");
2358 if (cap & CIFS_UNIX_POSIX_ACL_CAP)
2359 cFYI(1, "POSIX ACL cap");
2360 if (cap & CIFS_UNIX_LARGE_READ_CAP)
2361 cFYI(1, "very large read cap");
2362 if (cap & CIFS_UNIX_LARGE_WRITE_CAP)
2363 cFYI(1, "very large write cap");
2364 #endif /* CIFS_DEBUG2 */
2365 if (CIFSSMBSetFSUnixInfo(xid, tcon, cap)) {
2366 if (vol_info == NULL) {
2367 cFYI(1, "resetting capabilities failed");
2369 cERROR(1, "Negotiating Unix capabilities "
2370 "with the server failed. Consider "
2371 "mounting with the Unix Extensions\n"
2372 "disabled, if problems are found, "
2373 "by specifying the nounix mount "
2381 convert_delimiter(char *path, char delim)
2394 for (i = 0; path[i] != '\0'; i++) {
2395 if (path[i] == old_delim)
2400 static void setup_cifs_sb(struct smb_vol *pvolume_info,
2401 struct cifs_sb_info *cifs_sb)
2403 if (pvolume_info->rsize > CIFSMaxBufSize) {
2404 cERROR(1, "rsize %d too large, using MaxBufSize",
2405 pvolume_info->rsize);
2406 cifs_sb->rsize = CIFSMaxBufSize;
2407 } else if ((pvolume_info->rsize) &&
2408 (pvolume_info->rsize <= CIFSMaxBufSize))
2409 cifs_sb->rsize = pvolume_info->rsize;
2411 cifs_sb->rsize = CIFSMaxBufSize;
2413 if (pvolume_info->wsize > PAGEVEC_SIZE * PAGE_CACHE_SIZE) {
2414 cERROR(1, "wsize %d too large, using 4096 instead",
2415 pvolume_info->wsize);
2416 cifs_sb->wsize = 4096;
2417 } else if (pvolume_info->wsize)
2418 cifs_sb->wsize = pvolume_info->wsize;
2420 cifs_sb->wsize = min_t(const int,
2421 PAGEVEC_SIZE * PAGE_CACHE_SIZE,
2423 /* old default of CIFSMaxBufSize was too small now
2424 that SMB Write2 can send multiple pages in kvec.
2425 RFC1001 does not describe what happens when frame
2426 bigger than 128K is sent so use that as max in
2427 conjunction with 52K kvec constraint on arch with 4K
2430 if (cifs_sb->rsize < 2048) {
2431 cifs_sb->rsize = 2048;
2432 /* Windows ME may prefer this */
2433 cFYI(1, "readsize set to minimum: 2048");
2435 /* calculate prepath */
2436 cifs_sb->prepath = pvolume_info->prepath;
2437 if (cifs_sb->prepath) {
2438 cifs_sb->prepathlen = strlen(cifs_sb->prepath);
2439 /* we can not convert the / to \ in the path
2440 separators in the prefixpath yet because we do not
2441 know (until reset_cifs_unix_caps is called later)
2442 whether POSIX PATH CAP is available. We normalize
2443 the / to \ after reset_cifs_unix_caps is called */
2444 pvolume_info->prepath = NULL;
2446 cifs_sb->prepathlen = 0;
2447 cifs_sb->mnt_uid = pvolume_info->linux_uid;
2448 cifs_sb->mnt_gid = pvolume_info->linux_gid;
2449 cifs_sb->mnt_file_mode = pvolume_info->file_mode;
2450 cifs_sb->mnt_dir_mode = pvolume_info->dir_mode;
2451 cFYI(1, "file mode: 0x%x dir mode: 0x%x",
2452 cifs_sb->mnt_file_mode, cifs_sb->mnt_dir_mode);
2454 if (pvolume_info->noperm)
2455 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_PERM;
2456 if (pvolume_info->setuids)
2457 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SET_UID;
2458 if (pvolume_info->server_ino)
2459 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SERVER_INUM;
2460 if (pvolume_info->remap)
2461 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MAP_SPECIAL_CHR;
2462 if (pvolume_info->no_xattr)
2463 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_XATTR;
2464 if (pvolume_info->sfu_emul)
2465 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_UNX_EMUL;
2466 if (pvolume_info->nobrl)
2467 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_BRL;
2468 if (pvolume_info->nostrictsync)
2469 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOSSYNC;
2470 if (pvolume_info->mand_lock)
2471 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOPOSIXBRL;
2472 if (pvolume_info->cifs_acl)
2473 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_ACL;
2474 if (pvolume_info->override_uid)
2475 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_UID;
2476 if (pvolume_info->override_gid)
2477 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_GID;
2478 if (pvolume_info->dynperm)
2479 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DYNPERM;
2480 if (pvolume_info->fsc)
2481 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_FSCACHE;
2482 if (pvolume_info->direct_io) {
2483 cFYI(1, "mounting share using direct i/o");
2484 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DIRECT_IO;
2487 if ((pvolume_info->cifs_acl) && (pvolume_info->dynperm))
2488 cERROR(1, "mount option dynperm ignored if cifsacl "
2489 "mount option supported");
2493 is_path_accessible(int xid, struct cifsTconInfo *tcon,
2494 struct cifs_sb_info *cifs_sb, const char *full_path)
2497 FILE_ALL_INFO *pfile_info;
2499 pfile_info = kmalloc(sizeof(FILE_ALL_INFO), GFP_KERNEL);
2500 if (pfile_info == NULL)
2503 rc = CIFSSMBQPathInfo(xid, tcon, full_path, pfile_info,
2504 0 /* not legacy */, cifs_sb->local_nls,
2505 cifs_sb->mnt_cifs_flags &
2506 CIFS_MOUNT_MAP_SPECIAL_CHR);
2512 cleanup_volume_info(struct smb_vol **pvolume_info)
2514 struct smb_vol *volume_info;
2516 if (!pvolume_info || !*pvolume_info)
2519 volume_info = *pvolume_info;
2520 kzfree(volume_info->password);
2521 kfree(volume_info->UNC);
2522 kfree(volume_info->prepath);
2524 *pvolume_info = NULL;
2528 #ifdef CONFIG_CIFS_DFS_UPCALL
2529 /* build_path_to_root returns full path to root when
2530 * we do not have an exiting connection (tcon) */
2532 build_unc_path_to_root(const struct smb_vol *volume_info,
2533 const struct cifs_sb_info *cifs_sb)
2537 int unc_len = strnlen(volume_info->UNC, MAX_TREE_SIZE + 1);
2538 full_path = kmalloc(unc_len + cifs_sb->prepathlen + 1, GFP_KERNEL);
2539 if (full_path == NULL)
2540 return ERR_PTR(-ENOMEM);
2542 strncpy(full_path, volume_info->UNC, unc_len);
2543 if (cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) {
2545 for (i = 0; i < unc_len; i++) {
2546 if (full_path[i] == '\\')
2551 if (cifs_sb->prepathlen)
2552 strncpy(full_path + unc_len, cifs_sb->prepath,
2553 cifs_sb->prepathlen);
2555 full_path[unc_len + cifs_sb->prepathlen] = 0; /* add trailing null */
2561 cifs_mount(struct super_block *sb, struct cifs_sb_info *cifs_sb,
2562 char *mount_data_global, const char *devname)
2566 struct smb_vol *volume_info;
2567 struct cifsSesInfo *pSesInfo;
2568 struct cifsTconInfo *tcon;
2569 struct TCP_Server_Info *srvTcp;
2571 char *mount_data = mount_data_global;
2572 #ifdef CONFIG_CIFS_DFS_UPCALL
2573 struct dfs_info3_param *referrals = NULL;
2574 unsigned int num_referrals = 0;
2575 int referral_walks_count = 0;
2586 volume_info = kzalloc(sizeof(struct smb_vol), GFP_KERNEL);
2592 if (cifs_parse_mount_options(mount_data, devname, volume_info)) {
2597 if (volume_info->nullauth) {
2598 cFYI(1, "null user");
2599 volume_info->username = "";
2600 } else if (volume_info->username) {
2601 /* BB fixme parse for domain name here */
2602 cFYI(1, "Username: %s", volume_info->username);
2604 cifserror("No username specified");
2605 /* In userspace mount helper we can get user name from alternate
2606 locations such as env variables and files on disk */
2611 /* this is needed for ASCII cp to Unicode converts */
2612 if (volume_info->iocharset == NULL) {
2613 /* load_nls_default cannot return null */
2614 volume_info->local_nls = load_nls_default();
2616 volume_info->local_nls = load_nls(volume_info->iocharset);
2617 if (volume_info->local_nls == NULL) {
2618 cERROR(1, "CIFS mount error: iocharset %s not found",
2619 volume_info->iocharset);
2624 cifs_sb->local_nls = volume_info->local_nls;
2626 /* get a reference to a tcp session */
2627 srvTcp = cifs_get_tcp_session(volume_info);
2628 if (IS_ERR(srvTcp)) {
2629 rc = PTR_ERR(srvTcp);
2633 /* get a reference to a SMB session */
2634 pSesInfo = cifs_get_smb_ses(srvTcp, volume_info);
2635 if (IS_ERR(pSesInfo)) {
2636 rc = PTR_ERR(pSesInfo);
2638 goto mount_fail_check;
2641 setup_cifs_sb(volume_info, cifs_sb);
2642 if (pSesInfo->capabilities & CAP_LARGE_FILES)
2643 sb->s_maxbytes = MAX_LFS_FILESIZE;
2645 sb->s_maxbytes = MAX_NON_LFS;
2647 /* BB FIXME fix time_gran to be larger for LANMAN sessions */
2648 sb->s_time_gran = 100;
2650 /* search for existing tcon to this server share */
2651 tcon = cifs_get_tcon(pSesInfo, volume_info);
2655 goto remote_path_check;
2658 cifs_sb->tcon = tcon;
2660 /* do not care if following two calls succeed - informational */
2662 CIFSSMBQFSDeviceInfo(xid, tcon);
2663 CIFSSMBQFSAttributeInfo(xid, tcon);
2666 /* tell server which Unix caps we support */
2667 if (tcon->ses->capabilities & CAP_UNIX)
2668 /* reset of caps checks mount to see if unix extensions
2669 disabled for just this mount */
2670 reset_cifs_unix_caps(xid, tcon, sb, volume_info);
2672 tcon->unix_ext = 0; /* server does not support them */
2674 /* convert forward to back slashes in prepath here if needed */
2675 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2676 convert_delimiter(cifs_sb->prepath, CIFS_DIR_SEP(cifs_sb));
2678 if ((tcon->unix_ext == 0) && (cifs_sb->rsize > (1024 * 127))) {
2679 cifs_sb->rsize = 1024 * 127;
2680 cFYI(DBG2, "no very large read support, rsize now 127K");
2682 if (!(tcon->ses->capabilities & CAP_LARGE_WRITE_X))
2683 cifs_sb->wsize = min(cifs_sb->wsize,
2684 (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2685 if (!(tcon->ses->capabilities & CAP_LARGE_READ_X))
2686 cifs_sb->rsize = min(cifs_sb->rsize,
2687 (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2690 /* check if a whole path (including prepath) is not remote */
2691 if (!rc && cifs_sb->prepathlen && tcon) {
2692 /* build_path_to_root works only when we have a valid tcon */
2693 full_path = cifs_build_path_to_root(cifs_sb);
2694 if (full_path == NULL) {
2696 goto mount_fail_check;
2698 rc = is_path_accessible(xid, tcon, cifs_sb, full_path);
2699 if (rc != -EREMOTE) {
2701 goto mount_fail_check;
2706 /* get referral if needed */
2707 if (rc == -EREMOTE) {
2708 #ifdef CONFIG_CIFS_DFS_UPCALL
2709 if (referral_walks_count > MAX_NESTED_LINKS) {
2711 * BB: when we implement proper loop detection,
2712 * we will remove this check. But now we need it
2713 * to prevent an indefinite loop if 'DFS tree' is
2714 * misconfigured (i.e. has loops).
2717 goto mount_fail_check;
2719 /* convert forward to back slashes in prepath here if needed */
2720 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2721 convert_delimiter(cifs_sb->prepath,
2722 CIFS_DIR_SEP(cifs_sb));
2723 full_path = build_unc_path_to_root(volume_info, cifs_sb);
2724 if (IS_ERR(full_path)) {
2725 rc = PTR_ERR(full_path);
2726 goto mount_fail_check;
2729 cFYI(1, "Getting referral for: %s", full_path);
2730 rc = get_dfs_path(xid, pSesInfo , full_path + 1,
2731 cifs_sb->local_nls, &num_referrals, &referrals,
2732 cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
2733 if (!rc && num_referrals > 0) {
2734 char *fake_devname = NULL;
2736 if (mount_data != mount_data_global)
2739 mount_data = cifs_compose_mount_options(
2740 cifs_sb->mountdata, full_path + 1,
2741 referrals, &fake_devname);
2743 free_dfs_info_array(referrals, num_referrals);
2744 kfree(fake_devname);
2747 if (IS_ERR(mount_data)) {
2748 rc = PTR_ERR(mount_data);
2750 goto mount_fail_check;
2754 cifs_put_tcon(tcon);
2756 cifs_put_smb_ses(pSesInfo);
2758 cleanup_volume_info(&volume_info);
2759 referral_walks_count++;
2761 goto try_mount_again;
2763 #else /* No DFS support, return error on mount */
2769 /* on error free sesinfo and tcon struct if needed */
2771 if (mount_data != mount_data_global)
2773 /* If find_unc succeeded then rc == 0 so we can not end */
2774 /* up accidently freeing someone elses tcon struct */
2776 cifs_put_tcon(tcon);
2778 cifs_put_smb_ses(pSesInfo);
2780 cifs_put_tcp_session(srvTcp);
2784 /* volume_info->password is freed above when existing session found
2785 (in which case it is not needed anymore) but when new sesion is created
2786 the password ptr is put in the new session structure (in which case the
2787 password will be freed at unmount time) */
2789 /* zero out password before freeing */
2790 cleanup_volume_info(&volume_info);
2796 CIFSTCon(unsigned int xid, struct cifsSesInfo *ses,
2797 const char *tree, struct cifsTconInfo *tcon,
2798 const struct nls_table *nls_codepage)
2800 struct smb_hdr *smb_buffer;
2801 struct smb_hdr *smb_buffer_response;
2804 unsigned char *bcc_ptr;
2806 int length, bytes_left;
2812 smb_buffer = cifs_buf_get();
2813 if (smb_buffer == NULL)
2816 smb_buffer_response = smb_buffer;
2818 header_assemble(smb_buffer, SMB_COM_TREE_CONNECT_ANDX,
2819 NULL /*no tid */ , 4 /*wct */ );
2821 smb_buffer->Mid = GetNextMid(ses->server);
2822 smb_buffer->Uid = ses->Suid;
2823 pSMB = (TCONX_REQ *) smb_buffer;
2824 pSMBr = (TCONX_RSP *) smb_buffer_response;
2826 pSMB->AndXCommand = 0xFF;
2827 pSMB->Flags = cpu_to_le16(TCON_EXTENDED_SECINFO);
2828 bcc_ptr = &pSMB->Password[0];
2829 if ((ses->server->secMode) & SECMODE_USER) {
2830 pSMB->PasswordLength = cpu_to_le16(1); /* minimum */
2831 *bcc_ptr = 0; /* password is null byte */
2832 bcc_ptr++; /* skip password */
2833 /* already aligned so no need to do it below */
2835 pSMB->PasswordLength = cpu_to_le16(CIFS_SESS_KEY_SIZE);
2836 /* BB FIXME add code to fail this if NTLMv2 or Kerberos
2837 specified as required (when that support is added to
2838 the vfs in the future) as only NTLM or the much
2839 weaker LANMAN (which we do not send by default) is accepted
2840 by Samba (not sure whether other servers allow
2841 NTLMv2 password here) */
2842 #ifdef CONFIG_CIFS_WEAK_PW_HASH
2843 if ((global_secflags & CIFSSEC_MAY_LANMAN) &&
2844 (ses->server->secType == LANMAN))
2845 calc_lanman_hash(tcon->password, ses->server->cryptKey,
2846 ses->server->secMode &
2847 SECMODE_PW_ENCRYPT ? true : false,
2850 #endif /* CIFS_WEAK_PW_HASH */
2851 SMBNTencrypt(tcon->password, ses->server->cryptKey,
2854 bcc_ptr += CIFS_SESS_KEY_SIZE;
2855 if (ses->capabilities & CAP_UNICODE) {
2856 /* must align unicode strings */
2857 *bcc_ptr = 0; /* null byte password */
2862 if (ses->server->secMode &
2863 (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
2864 smb_buffer->Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
2866 if (ses->capabilities & CAP_STATUS32) {
2867 smb_buffer->Flags2 |= SMBFLG2_ERR_STATUS;
2869 if (ses->capabilities & CAP_DFS) {
2870 smb_buffer->Flags2 |= SMBFLG2_DFS;
2872 if (ses->capabilities & CAP_UNICODE) {
2873 smb_buffer->Flags2 |= SMBFLG2_UNICODE;
2875 cifs_strtoUCS((__le16 *) bcc_ptr, tree,
2876 6 /* max utf8 char length in bytes */ *
2877 (/* server len*/ + 256 /* share len */), nls_codepage);
2878 bcc_ptr += 2 * length; /* convert num 16 bit words to bytes */
2879 bcc_ptr += 2; /* skip trailing null */
2880 } else { /* ASCII */
2881 strcpy(bcc_ptr, tree);
2882 bcc_ptr += strlen(tree) + 1;
2884 strcpy(bcc_ptr, "?????");
2885 bcc_ptr += strlen("?????");
2887 count = bcc_ptr - &pSMB->Password[0];
2888 pSMB->hdr.smb_buf_length += count;
2889 pSMB->ByteCount = cpu_to_le16(count);
2891 rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response, &length,
2894 /* above now done in SendReceive */
2895 if ((rc == 0) && (tcon != NULL)) {
2898 tcon->tidStatus = CifsGood;
2899 tcon->need_reconnect = false;
2900 tcon->tid = smb_buffer_response->Tid;
2901 bcc_ptr = pByteArea(smb_buffer_response);
2902 bytes_left = BCC(smb_buffer_response);
2903 length = strnlen(bcc_ptr, bytes_left - 2);
2904 if (smb_buffer->Flags2 & SMBFLG2_UNICODE)
2910 /* skip service field (NB: this field is always ASCII) */
2912 if ((bcc_ptr[0] == 'I') && (bcc_ptr[1] == 'P') &&
2913 (bcc_ptr[2] == 'C')) {
2914 cFYI(1, "IPC connection");
2917 } else if (length == 2) {
2918 if ((bcc_ptr[0] == 'A') && (bcc_ptr[1] == ':')) {
2919 /* the most common case */
2920 cFYI(1, "disk share connection");
2923 bcc_ptr += length + 1;
2924 bytes_left -= (length + 1);
2925 strncpy(tcon->treeName, tree, MAX_TREE_SIZE);
2927 /* mostly informational -- no need to fail on error here */
2928 kfree(tcon->nativeFileSystem);
2929 tcon->nativeFileSystem = cifs_strndup_from_ucs(bcc_ptr,
2930 bytes_left, is_unicode,
2933 cFYI(1, "nativeFileSystem=%s", tcon->nativeFileSystem);
2935 if ((smb_buffer_response->WordCount == 3) ||
2936 (smb_buffer_response->WordCount == 7))
2937 /* field is in same location */
2938 tcon->Flags = le16_to_cpu(pSMBr->OptionalSupport);
2941 cFYI(1, "Tcon flags: 0x%x ", tcon->Flags);
2942 } else if ((rc == 0) && tcon == NULL) {
2943 /* all we need to save for IPC$ connection */
2944 ses->ipc_tid = smb_buffer_response->Tid;
2947 cifs_buf_release(smb_buffer);
2952 cifs_umount(struct super_block *sb, struct cifs_sb_info *cifs_sb)
2958 cifs_put_tcon(cifs_sb->tcon);
2960 cifs_sb->tcon = NULL;
2961 tmp = cifs_sb->prepath;
2962 cifs_sb->prepathlen = 0;
2963 cifs_sb->prepath = NULL;
2969 int cifs_negotiate_protocol(unsigned int xid, struct cifsSesInfo *ses)
2972 struct TCP_Server_Info *server = ses->server;
2974 /* only send once per connect */
2975 if (server->maxBuf != 0)
2978 rc = CIFSSMBNegotiate(xid, ses);
2979 if (rc == -EAGAIN) {
2980 /* retry only once on 1st time connection */
2981 rc = CIFSSMBNegotiate(xid, ses);
2986 spin_lock(&GlobalMid_Lock);
2987 if (server->tcpStatus != CifsExiting)
2988 server->tcpStatus = CifsGood;
2991 spin_unlock(&GlobalMid_Lock);
2999 int cifs_setup_session(unsigned int xid, struct cifsSesInfo *ses,
3000 struct nls_table *nls_info)
3003 struct TCP_Server_Info *server = ses->server;
3006 ses->capabilities = server->capabilities;
3007 if (linuxExtEnabled == 0)
3008 ses->capabilities &= (~CAP_UNIX);
3010 cFYI(1, "Security Mode: 0x%x Capabilities: 0x%x TimeAdjust: %d",
3011 server->secMode, server->capabilities, server->timeAdj);
3013 rc = CIFS_SessSetup(xid, ses, nls_info);
3015 cERROR(1, "Send error in SessSetup = %d", rc);
3017 cFYI(1, "CIFS Session Established successfully");
3018 spin_lock(&GlobalMid_Lock);
3019 ses->status = CifsGood;
3020 ses->need_reconnect = false;
3021 spin_unlock(&GlobalMid_Lock);