fs/cifs/connect.c

   1 /*
   2  *   fs/cifs/connect.c
   3  *
   4  *   Copyright (C) International Business Machines  Corp., 2002,2009
   5  *   Author(s): Steve French (sfrench@us.ibm.com)
   6  *
   7  *   This library is free software; you can redistribute it and/or modify
   8  *   it under the terms of the GNU Lesser General Public License as published
   9  *   by the Free Software Foundation; either version 2.1 of the License, or
  10  *   (at your option) any later version.
  11  *
  12  *   This library is distributed in the hope that it will be useful,
  13  *   but WITHOUT ANY WARRANTY; without even the implied warranty of
  14  *   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See
  15  *   the GNU Lesser General Public License for more details.
  16  *
  17  *   You should have received a copy of the GNU Lesser General Public License
  18  *   along with this library; if not, write to the Free Software
  19  *   Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
  20  */
  21 #include <linux/fs.h>
  22 #include <linux/net.h>
  23 #include <linux/string.h>
  24 #include <linux/list.h>
  25 #include <linux/wait.h>
  26 #include <linux/slab.h>
  27 #include <linux/pagemap.h>
  28 #include <linux/ctype.h>
  29 #include <linux/utsname.h>
  30 #include <linux/mempool.h>
  31 #include <linux/delay.h>
  32 #include <linux/completion.h>
  33 #include <linux/kthread.h>
  34 #include <linux/pagevec.h>
  35 #include <linux/freezer.h>
  36 #include <linux/namei.h>
  37 #include <asm/uaccess.h>
  38 #include <asm/processor.h>
  39 #include <linux/inet.h>
  40 #include <net/ipv6.h>
  41 #include "cifspdu.h"
  42 #include "cifsglob.h"
  43 #include "cifsproto.h"
  44 #include "cifs_unicode.h"
  45 #include "cifs_debug.h"
  46 #include "cifs_fs_sb.h"
  47 #include "ntlmssp.h"
  48 #include "nterr.h"
  49 #include "rfc1002pdu.h"
  50 #include "fscache.h"
  51
  52 #define CIFS_PORT 445
  53 #define RFC1001_PORT 139
  54
  55 extern void SMBNTencrypt(unsigned char *passwd, unsigned char *c8,
  56                          unsigned char *p24);
  57
  58 extern mempool_t *cifs_req_poolp;
  59
  60 struct smb_vol {
  61         char *username;
  62         char *password;
  63         char *domainname;
  64         char *UNC;
  65         char *UNCip;
  66         char *iocharset;  /* local code page for mapping to and from Unicode */
  67         char source_rfc1001_name[RFC1001_NAME_LEN_WITH_NULL]; /* clnt nb name */
  68         char target_rfc1001_name[RFC1001_NAME_LEN_WITH_NULL]; /* srvr nb name */
  69         uid_t cred_uid;
  70         uid_t linux_uid;
  71         gid_t linux_gid;
  72         mode_t file_mode;
  73         mode_t dir_mode;
  74         unsigned secFlg;
  75         bool retry:1;
  76         bool intr:1;
  77         bool setuids:1;
  78         bool override_uid:1;
  79         bool override_gid:1;
  80         bool dynperm:1;
  81         bool noperm:1;
  82         bool no_psx_acl:1; /* set if posix acl support should be disabled */
  83         bool cifs_acl:1;
  84         bool no_xattr:1;   /* set if xattr (EA) support should be disabled*/
  85         bool server_ino:1; /* use inode numbers from server ie UniqueId */
  86         bool direct_io:1;
  87         bool remap:1;      /* set to remap seven reserved chars in filenames */
  88         bool posix_paths:1; /* unset to not ask for posix pathnames. */
  89         bool no_linux_ext:1;
  90         bool sfu_emul:1;
  91         bool nullauth:1;   /* attempt to authenticate with null user */
  92         bool nocase:1;     /* request case insensitive filenames */
  93         bool nobrl:1;      /* disable sending byte range locks to srv */
  94         bool mand_lock:1;  /* send mandatory not posix byte range lock reqs */
  95         bool seal:1;       /* request transport encryption on share */
  96         bool nodfs:1;      /* Do not request DFS, even if available */
  97         bool local_lease:1; /* check leases only on local system, not remote */
  98         bool noblocksnd:1;
  99         bool noautotune:1;
 100         bool nostrictsync:1; /* do not force expensive SMBflush on every sync */
 101         bool fsc:1;     /* enable fscache */
 102         bool mfsymlinks:1; /* use Minshall+French Symlinks */
 103         bool multiuser:1;
 104         unsigned int rsize;
 105         unsigned int wsize;
 106         bool sockopt_tcp_nodelay:1;
 107         unsigned short int port;
 108         unsigned long actimeo; /* attribute cache timeout (jiffies) */
 109         char *prepath;
 110         struct sockaddr_storage srcaddr; /* allow binding to a local IP */
 111         struct nls_table *local_nls;
 112 };
 113
 114 /* FIXME: should these be tunable? */
 115 #define TLINK_ERROR_EXPIRE      (1 * HZ)
 116 #define TLINK_IDLE_EXPIRE       (600 * HZ)
 117
 118 static int ip_connect(struct TCP_Server_Info *server);
 119 static int generic_ip_connect(struct TCP_Server_Info *server);
 120 static void tlink_rb_insert(struct rb_root *root, struct tcon_link *new_tlink);
 121 static void cifs_prune_tlinks(struct work_struct *work);
 122
 123 /*
 124  * cifs tcp session reconnection
 125  *
 126  * mark tcp session as reconnecting so temporarily locked
 127  * mark all smb sessions as reconnecting for tcp session
 128  * reconnect tcp session
 129  * wake up waiters on reconnection? - (not needed currently)
 130  */
 131 static int
 132 cifs_reconnect(struct TCP_Server_Info *server)
 133 {
 134         int rc = 0;
 135         struct list_head *tmp, *tmp2;
 136         struct cifsSesInfo *ses;
 137         struct cifsTconInfo *tcon;
 138         struct mid_q_entry *mid_entry;
 139
 140         spin_lock(&GlobalMid_Lock);
 141         if (server->tcpStatus == CifsExiting) {
 142                 /* the demux thread will exit normally
 143                 next time through the loop */
 144                 spin_unlock(&GlobalMid_Lock);
 145                 return rc;
 146         } else
 147                 server->tcpStatus = CifsNeedReconnect;
 148         spin_unlock(&GlobalMid_Lock);
 149         server->maxBuf = 0;
 150
 151         cFYI(1, "Reconnecting tcp session");
 152
 153         /* before reconnecting the tcp session, mark the smb session (uid)
 154                 and the tid bad so they are not used until reconnected */
 155         spin_lock(&cifs_tcp_ses_lock);
 156         list_for_each(tmp, &server->smb_ses_list) {
 157                 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
 158                 ses->need_reconnect = true;
 159                 ses->ipc_tid = 0;
 160                 list_for_each(tmp2, &ses->tcon_list) {
 161                         tcon = list_entry(tmp2, struct cifsTconInfo, tcon_list);
 162                         tcon->need_reconnect = true;
 163                 }
 164         }
 165         spin_unlock(&cifs_tcp_ses_lock);
 166         /* do not want to be sending data on a socket we are freeing */
 167         mutex_lock(&server->srv_mutex);
 168         if (server->ssocket) {
 169                 cFYI(1, "State: 0x%x Flags: 0x%lx", server->ssocket->state,
 170                         server->ssocket->flags);
 171                 kernel_sock_shutdown(server->ssocket, SHUT_WR);
 172                 cFYI(1, "Post shutdown state: 0x%x Flags: 0x%lx",
 173                         server->ssocket->state,
 174                         server->ssocket->flags);
 175                 sock_release(server->ssocket);
 176                 server->ssocket = NULL;
 177         }
 178         server->sequence_number = 0;
 179         server->session_estab = false;
 180         kfree(server->session_key.response);
 181         server->session_key.response = NULL;
 182         server->session_key.len = 0;
 183
 184         spin_lock(&GlobalMid_Lock);
 185         list_for_each(tmp, &server->pending_mid_q) {
 186                 mid_entry = list_entry(tmp, struct
 187                                         mid_q_entry,
 188                                         qhead);
 189                 if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
 190                                 /* Mark other intransit requests as needing
 191                                    retry so we do not immediately mark the
 192                                    session bad again (ie after we reconnect
 193                                    below) as they timeout too */
 194                         mid_entry->midState = MID_RETRY_NEEDED;
 195                 }
 196         }
 197         spin_unlock(&GlobalMid_Lock);
 198         mutex_unlock(&server->srv_mutex);
 199
 200         while ((server->tcpStatus != CifsExiting) &&
 201                (server->tcpStatus != CifsGood)) {
 202                 try_to_freeze();
 203
 204                 /* we should try only the port we connected to before */
 205                 rc = generic_ip_connect(server);
 206                 if (rc) {
 207                         cFYI(1, "reconnect error %d", rc);
 208                         msleep(3000);
 209                 } else {
 210                         atomic_inc(&tcpSesReconnectCount);
 211                         spin_lock(&GlobalMid_Lock);
 212                         if (server->tcpStatus != CifsExiting)
 213                                 server->tcpStatus = CifsGood;
 214                         spin_unlock(&GlobalMid_Lock);
 215         /*              atomic_set(&server->inFlight,0);*/
 216                         wake_up(&server->response_q);
 217                 }
 218         }
 219         return rc;
 220 }
 221
 222 /*
 223         return codes:
 224                 0       not a transact2, or all data present
 225                 >0      transact2 with that much data missing
 226                 -EINVAL = invalid transact2
 227
 228  */
 229 static int check2ndT2(struct smb_hdr *pSMB, unsigned int maxBufSize)
 230 {
 231         struct smb_t2_rsp *pSMBt;
 232         int total_data_size;
 233         int data_in_this_rsp;
 234         int remaining;
 235
 236         if (pSMB->Command != SMB_COM_TRANSACTION2)
 237                 return 0;
 238
 239         /* check for plausible wct, bcc and t2 data and parm sizes */
 240         /* check for parm and data offset going beyond end of smb */
 241         if (pSMB->WordCount != 10) { /* coalesce_t2 depends on this */
 242                 cFYI(1, "invalid transact2 word count");
 243                 return -EINVAL;
 244         }
 245
 246         pSMBt = (struct smb_t2_rsp *)pSMB;
 247
 248         total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
 249         data_in_this_rsp = le16_to_cpu(pSMBt->t2_rsp.DataCount);
 250
 251         remaining = total_data_size - data_in_this_rsp;
 252
 253         if (remaining == 0)
 254                 return 0;
 255         else if (remaining < 0) {
 256                 cFYI(1, "total data %d smaller than data in frame %d",
 257                         total_data_size, data_in_this_rsp);
 258                 return -EINVAL;
 259         } else {
 260                 cFYI(1, "missing %d bytes from transact2, check next response",
 261                         remaining);
 262                 if (total_data_size > maxBufSize) {
 263                         cERROR(1, "TotalDataSize %d is over maximum buffer %d",
 264                                 total_data_size, maxBufSize);
 265                         return -EINVAL;
 266                 }
 267                 return remaining;
 268         }
 269 }
 270
 271 static int coalesce_t2(struct smb_hdr *psecond, struct smb_hdr *pTargetSMB)
 272 {
 273         struct smb_t2_rsp *pSMB2 = (struct smb_t2_rsp *)psecond;
 274         struct smb_t2_rsp *pSMBt  = (struct smb_t2_rsp *)pTargetSMB;
 275         int total_data_size;
 276         int total_in_buf;
 277         int remaining;
 278         int total_in_buf2;
 279         char *data_area_of_target;
 280         char *data_area_of_buf2;
 281         __u16 byte_count;
 282
 283         total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
 284
 285         if (total_data_size != le16_to_cpu(pSMB2->t2_rsp.TotalDataCount)) {
 286                 cFYI(1, "total data size of primary and secondary t2 differ");
 287         }
 288
 289         total_in_buf = le16_to_cpu(pSMBt->t2_rsp.DataCount);
 290
 291         remaining = total_data_size - total_in_buf;
 292
 293         if (remaining < 0)
 294                 return -EINVAL;
 295
 296         if (remaining == 0) /* nothing to do, ignore */
 297                 return 0;
 298
 299         total_in_buf2 = le16_to_cpu(pSMB2->t2_rsp.DataCount);
 300         if (remaining < total_in_buf2) {
 301                 cFYI(1, "transact2 2nd response contains too much data");
 302         }
 303
 304         /* find end of first SMB data area */
 305         data_area_of_target = (char *)&pSMBt->hdr.Protocol +
 306                                 le16_to_cpu(pSMBt->t2_rsp.DataOffset);
 307         /* validate target area */
 308
 309         data_area_of_buf2 = (char *) &pSMB2->hdr.Protocol +
 310                                         le16_to_cpu(pSMB2->t2_rsp.DataOffset);
 311
 312         data_area_of_target += total_in_buf;
 313
 314         /* copy second buffer into end of first buffer */
 315         memcpy(data_area_of_target, data_area_of_buf2, total_in_buf2);
 316         total_in_buf += total_in_buf2;
 317         pSMBt->t2_rsp.DataCount = cpu_to_le16(total_in_buf);
 318         byte_count = le16_to_cpu(BCC_LE(pTargetSMB));
 319         byte_count += total_in_buf2;
 320         BCC_LE(pTargetSMB) = cpu_to_le16(byte_count);
 321
 322         byte_count = pTargetSMB->smb_buf_length;
 323         byte_count += total_in_buf2;
 324
 325         /* BB also add check that we are not beyond maximum buffer size */
 326
 327         pTargetSMB->smb_buf_length = byte_count;
 328
 329         if (remaining == total_in_buf2) {
 330                 cFYI(1, "found the last secondary response");
 331                 return 0; /* we are done */
 332         } else /* more responses to go */
 333                 return 1;
 334
 335 }
 336
 337 static int
 338 cifs_demultiplex_thread(struct TCP_Server_Info *server)
 339 {
 340         int length;
 341         unsigned int pdu_length, total_read;
 342         struct smb_hdr *smb_buffer = NULL;
 343         struct smb_hdr *bigbuf = NULL;
 344         struct smb_hdr *smallbuf = NULL;
 345         struct msghdr smb_msg;
 346         struct kvec iov;
 347         struct socket *csocket = server->ssocket;
 348         struct list_head *tmp;
 349         struct cifsSesInfo *ses;
 350         struct task_struct *task_to_wake = NULL;
 351         struct mid_q_entry *mid_entry;
 352         char temp;
 353         bool isLargeBuf = false;
 354         bool isMultiRsp;
 355         int reconnect;
 356
 357         current->flags |= PF_MEMALLOC;
 358         cFYI(1, "Demultiplex PID: %d", task_pid_nr(current));
 359
 360         length = atomic_inc_return(&tcpSesAllocCount);
 361         if (length > 1)
 362                 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
 363                                 GFP_KERNEL);
 364
 365         set_freezable();
 366         while (server->tcpStatus != CifsExiting) {
 367                 if (try_to_freeze())
 368                         continue;
 369                 if (bigbuf == NULL) {
 370                         bigbuf = cifs_buf_get();
 371                         if (!bigbuf) {
 372                                 cERROR(1, "No memory for large SMB response");
 373                                 msleep(3000);
 374                                 /* retry will check if exiting */
 375                                 continue;
 376                         }
 377                 } else if (isLargeBuf) {
 378                         /* we are reusing a dirty large buf, clear its start */
 379                         memset(bigbuf, 0, sizeof(struct smb_hdr));
 380                 }
 381
 382                 if (smallbuf == NULL) {
 383                         smallbuf = cifs_small_buf_get();
 384                         if (!smallbuf) {
 385                                 cERROR(1, "No memory for SMB response");
 386                                 msleep(1000);
 387                                 /* retry will check if exiting */
 388                                 continue;
 389                         }
 390                         /* beginning of smb buffer is cleared in our buf_get */
 391                 } else /* if existing small buf clear beginning */
 392                         memset(smallbuf, 0, sizeof(struct smb_hdr));
 393
 394                 isLargeBuf = false;
 395                 isMultiRsp = false;
 396                 smb_buffer = smallbuf;
 397                 iov.iov_base = smb_buffer;
 398                 iov.iov_len = 4;
 399                 smb_msg.msg_control = NULL;
 400                 smb_msg.msg_controllen = 0;
 401                 pdu_length = 4; /* enough to get RFC1001 header */
 402 incomplete_rcv:
 403                 length =
 404                     kernel_recvmsg(csocket, &smb_msg,
 405                                 &iov, 1, pdu_length, 0 /* BB other flags? */);
 406
 407                 if (server->tcpStatus == CifsExiting) {
 408                         break;
 409                 } else if (server->tcpStatus == CifsNeedReconnect) {
 410                         cFYI(1, "Reconnect after server stopped responding");
 411                         cifs_reconnect(server);
 412                         cFYI(1, "call to reconnect done");
 413                         csocket = server->ssocket;
 414                         continue;
 415                 } else if (length == -ERESTARTSYS ||
 416                            length == -EAGAIN ||
 417                            length == -EINTR) {
 418                         msleep(1); /* minimum sleep to prevent looping
 419                                 allowing socket to clear and app threads to set
 420                                 tcpStatus CifsNeedReconnect if server hung */
 421                         if (pdu_length < 4) {
 422                                 iov.iov_base = (4 - pdu_length) +
 423                                                         (char *)smb_buffer;
 424                                 iov.iov_len = pdu_length;
 425                                 smb_msg.msg_control = NULL;
 426                                 smb_msg.msg_controllen = 0;
 427                                 goto incomplete_rcv;
 428                         } else
 429                                 continue;
 430                 } else if (length <= 0) {
 431                         cFYI(1, "Reconnect after unexpected peek error %d",
 432                                 length);
 433                         cifs_reconnect(server);
 434                         csocket = server->ssocket;
 435                         wake_up(&server->response_q);
 436                         continue;
 437                 } else if (length < pdu_length) {
 438                         cFYI(1, "requested %d bytes but only got %d bytes",
 439                                   pdu_length, length);
 440                         pdu_length -= length;
 441                         msleep(1);
 442                         goto incomplete_rcv;
 443                 }
 444
 445                 /* The right amount was read from socket - 4 bytes */
 446                 /* so we can now interpret the length field */
 447
 448                 /* the first byte big endian of the length field,
 449                 is actually not part of the length but the type
 450                 with the most common, zero, as regular data */
 451                 temp = *((char *) smb_buffer);
 452
 453                 /* Note that FC 1001 length is big endian on the wire,
 454                 but we convert it here so it is always manipulated
 455                 as host byte order */
 456                 pdu_length = be32_to_cpu((__force __be32)smb_buffer->smb_buf_length);
 457                 smb_buffer->smb_buf_length = pdu_length;
 458
 459                 cFYI(1, "rfc1002 length 0x%x", pdu_length+4);
 460
 461                 if (temp == (char) RFC1002_SESSION_KEEP_ALIVE) {
 462                         continue;
 463                 } else if (temp == (char)RFC1002_POSITIVE_SESSION_RESPONSE) {
 464                         cFYI(1, "Good RFC 1002 session rsp");
 465                         continue;
 466                 } else if (temp == (char)RFC1002_NEGATIVE_SESSION_RESPONSE) {
 467                         /* we get this from Windows 98 instead of
 468                            an error on SMB negprot response */
 469                         cFYI(1, "Negative RFC1002 Session Response Error 0x%x)",
 470                                 pdu_length);
 471                         /* give server a second to clean up  */
 472                         msleep(1000);
 473                         /* always try 445 first on reconnect since we get NACK
 474                          * on some if we ever connected to port 139 (the NACK
 475                          * is since we do not begin with RFC1001 session
 476                          * initialize frame)
 477                          */
 478                         cifs_set_port((struct sockaddr *)
 479                                         &server->dstaddr, CIFS_PORT);
 480                         cifs_reconnect(server);
 481                         csocket = server->ssocket;
 482                         wake_up(&server->response_q);
 483                         continue;
 484                 } else if (temp != (char) 0) {
 485                         cERROR(1, "Unknown RFC 1002 frame");
 486                         cifs_dump_mem(" Received Data: ", (char *)smb_buffer,
 487                                       length);
 488                         cifs_reconnect(server);
 489                         csocket = server->ssocket;
 490                         continue;
 491                 }
 492
 493                 /* else we have an SMB response */
 494                 if ((pdu_length > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE - 4) ||
 495                             (pdu_length < sizeof(struct smb_hdr) - 1 - 4)) {
 496                         cERROR(1, "Invalid size SMB length %d pdu_length %d",
 497                                         length, pdu_length+4);
 498                         cifs_reconnect(server);
 499                         csocket = server->ssocket;
 500                         wake_up(&server->response_q);
 501                         continue;
 502                 }
 503
 504                 /* else length ok */
 505                 reconnect = 0;
 506
 507                 if (pdu_length > MAX_CIFS_SMALL_BUFFER_SIZE - 4) {
 508                         isLargeBuf = true;
 509                         memcpy(bigbuf, smallbuf, 4);
 510                         smb_buffer = bigbuf;
 511                 }
 512                 length = 0;
 513                 iov.iov_base = 4 + (char *)smb_buffer;
 514                 iov.iov_len = pdu_length;
 515                 for (total_read = 0; total_read < pdu_length;
 516                      total_read += length) {
 517                         length = kernel_recvmsg(csocket, &smb_msg, &iov, 1,
 518                                                 pdu_length - total_read, 0);
 519                         if (server->tcpStatus == CifsExiting) {
 520                                 /* then will exit */
 521                                 reconnect = 2;
 522                                 break;
 523                         } else if (server->tcpStatus == CifsNeedReconnect) {
 524                                 cifs_reconnect(server);
 525                                 csocket = server->ssocket;
 526                                 /* Reconnect wakes up rspns q */
 527                                 /* Now we will reread sock */
 528                                 reconnect = 1;
 529                                 break;
 530                         } else if (length == -ERESTARTSYS ||
 531                                    length == -EAGAIN ||
 532                                    length == -EINTR) {
 533                                 msleep(1); /* minimum sleep to prevent looping,
 534                                               allowing socket to clear and app
 535                                               threads to set tcpStatus
 536                                               CifsNeedReconnect if server hung*/
 537                                 length = 0;
 538                                 continue;
 539                         } else if (length <= 0) {
 540                                 cERROR(1, "Received no data, expecting %d",
 541                                               pdu_length - total_read);
 542                                 cifs_reconnect(server);
 543                                 csocket = server->ssocket;
 544                                 reconnect = 1;
 545                                 break;
 546                         }
 547                 }
 548                 if (reconnect == 2)
 549                         break;
 550                 else if (reconnect == 1)
 551                         continue;
 552
 553                 length += 4; /* account for rfc1002 hdr */
 554
 555
 556                 dump_smb(smb_buffer, length);
 557                 if (checkSMB(smb_buffer, smb_buffer->Mid, total_read+4)) {
 558                         cifs_dump_mem("Bad SMB: ", smb_buffer, 48);
 559                         continue;
 560                 }
 561
 562
 563                 task_to_wake = NULL;
 564                 spin_lock(&GlobalMid_Lock);
 565                 list_for_each(tmp, &server->pending_mid_q) {
 566                         mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
 567
 568                         if ((mid_entry->mid == smb_buffer->Mid) &&
 569                             (mid_entry->midState == MID_REQUEST_SUBMITTED) &&
 570                             (mid_entry->command == smb_buffer->Command)) {
 571                                 if (check2ndT2(smb_buffer,server->maxBuf) > 0) {
 572                                         /* We have a multipart transact2 resp */
 573                                         isMultiRsp = true;
 574                                         if (mid_entry->resp_buf) {
 575                                                 /* merge response - fix up 1st*/
 576                                                 if (coalesce_t2(smb_buffer,
 577                                                         mid_entry->resp_buf)) {
 578                                                         mid_entry->multiRsp =
 579                                                                  true;
 580                                                         break;
 581                                                 } else {
 582                                                         /* all parts received */
 583                                                         mid_entry->multiEnd =
 584                                                                  true;
 585                                                         goto multi_t2_fnd;
 586                                                 }
 587                                         } else {
 588                                                 if (!isLargeBuf) {
 589                                                         cERROR(1, "1st trans2 resp needs bigbuf");
 590                                         /* BB maybe we can fix this up,  switch
 591                                            to already allocated large buffer? */
 592                                                 } else {
 593                                                         /* Have first buffer */
 594                                                         mid_entry->resp_buf =
 595                                                                  smb_buffer;
 596                                                         mid_entry->largeBuf =
 597                                                                  true;
 598                                                         bigbuf = NULL;
 599                                                 }
 600                                         }
 601                                         break;
 602                                 }
 603                                 mid_entry->resp_buf = smb_buffer;
 604                                 mid_entry->largeBuf = isLargeBuf;
 605 multi_t2_fnd:
 606                                 task_to_wake = mid_entry->tsk;
 607                                 mid_entry->midState = MID_RESPONSE_RECEIVED;
 608 #ifdef CONFIG_CIFS_STATS2
 609                                 mid_entry->when_received = jiffies;
 610 #endif
 611                                 /* so we do not time out requests to  server
 612                                 which is still responding (since server could
 613                                 be busy but not dead) */
 614                                 server->lstrp = jiffies;
 615                                 break;
 616                         }
 617                 }
 618                 spin_unlock(&GlobalMid_Lock);
 619                 if (task_to_wake) {
 620                         /* Was previous buf put in mpx struct for multi-rsp? */
 621                         if (!isMultiRsp) {
 622                                 /* smb buffer will be freed by user thread */
 623                                 if (isLargeBuf)
 624                                         bigbuf = NULL;
 625                                 else
 626                                         smallbuf = NULL;
 627                         }
 628                         wake_up_process(task_to_wake);
 629                 } else if (!is_valid_oplock_break(smb_buffer, server) &&
 630                            !isMultiRsp) {
 631                         cERROR(1, "No task to wake, unknown frame received! "
 632                                    "NumMids %d", midCount.counter);
 633                         cifs_dump_mem("Received Data is: ", (char *)smb_buffer,
 634                                       sizeof(struct smb_hdr));
 635 #ifdef CONFIG_CIFS_DEBUG2
 636                         cifs_dump_detail(smb_buffer);
 637                         cifs_dump_mids(server);
 638 #endif /* CIFS_DEBUG2 */
 639
 640                 }
 641         } /* end while !EXITING */
 642
 643         /* take it off the list, if it's not already */
 644         spin_lock(&cifs_tcp_ses_lock);
 645         list_del_init(&server->tcp_ses_list);
 646         spin_unlock(&cifs_tcp_ses_lock);
 647
 648         spin_lock(&GlobalMid_Lock);
 649         server->tcpStatus = CifsExiting;
 650         spin_unlock(&GlobalMid_Lock);
 651         wake_up_all(&server->response_q);
 652
 653         /* check if we have blocked requests that need to free */
 654         /* Note that cifs_max_pending is normally 50, but
 655         can be set at module install time to as little as two */
 656         spin_lock(&GlobalMid_Lock);
 657         if (atomic_read(&server->inFlight) >= cifs_max_pending)
 658                 atomic_set(&server->inFlight, cifs_max_pending - 1);
 659         /* We do not want to set the max_pending too low or we
 660         could end up with the counter going negative */
 661         spin_unlock(&GlobalMid_Lock);
 662         /* Although there should not be any requests blocked on
 663         this queue it can not hurt to be paranoid and try to wake up requests
 664         that may haven been blocked when more than 50 at time were on the wire
 665         to the same server - they now will see the session is in exit state
 666         and get out of SendReceive.  */
 667         wake_up_all(&server->request_q);
 668         /* give those requests time to exit */
 669         msleep(125);
 670
 671         if (server->ssocket) {
 672                 sock_release(csocket);
 673                 server->ssocket = NULL;
 674         }
 675         /* buffer usuallly freed in free_mid - need to free it here on exit */
 676         cifs_buf_release(bigbuf);
 677         if (smallbuf) /* no sense logging a debug message if NULL */
 678                 cifs_small_buf_release(smallbuf);
 679
 680         /*
 681          * BB: we shouldn't have to do any of this. It shouldn't be
 682          * possible to exit from the thread with active SMB sessions
 683          */
 684         spin_lock(&cifs_tcp_ses_lock);
 685         if (list_empty(&server->pending_mid_q)) {
 686                 /* loop through server session structures attached to this and
 687                     mark them dead */
 688                 list_for_each(tmp, &server->smb_ses_list) {
 689                         ses = list_entry(tmp, struct cifsSesInfo,
 690                                          smb_ses_list);
 691                         ses->status = CifsExiting;
 692                         ses->server = NULL;
 693                 }
 694                 spin_unlock(&cifs_tcp_ses_lock);
 695         } else {
 696                 /* although we can not zero the server struct pointer yet,
 697                 since there are active requests which may depnd on them,
 698                 mark the corresponding SMB sessions as exiting too */
 699                 list_for_each(tmp, &server->smb_ses_list) {
 700                         ses = list_entry(tmp, struct cifsSesInfo,
 701                                          smb_ses_list);
 702                         ses->status = CifsExiting;
 703                 }
 704
 705                 spin_lock(&GlobalMid_Lock);
 706                 list_for_each(tmp, &server->pending_mid_q) {
 707                 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
 708                         if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
 709                                 cFYI(1, "Clearing Mid 0x%x - waking up ",
 710                                          mid_entry->mid);
 711                                 task_to_wake = mid_entry->tsk;
 712                                 if (task_to_wake)
 713                                         wake_up_process(task_to_wake);
 714                         }
 715                 }
 716                 spin_unlock(&GlobalMid_Lock);
 717                 spin_unlock(&cifs_tcp_ses_lock);
 718                 /* 1/8th of sec is more than enough time for them to exit */
 719                 msleep(125);
 720         }
 721
 722         if (!list_empty(&server->pending_mid_q)) {
 723                 /* mpx threads have not exited yet give them
 724                 at least the smb send timeout time for long ops */
 725                 /* due to delays on oplock break requests, we need
 726                 to wait at least 45 seconds before giving up
 727                 on a request getting a response and going ahead
 728                 and killing cifsd */
 729                 cFYI(1, "Wait for exit from demultiplex thread");
 730                 msleep(46000);
 731                 /* if threads still have not exited they are probably never
 732                 coming home not much else we can do but free the memory */
 733         }
 734
 735         /* last chance to mark ses pointers invalid
 736         if there are any pointing to this (e.g
 737         if a crazy root user tried to kill cifsd
 738         kernel thread explicitly this might happen) */
 739         /* BB: This shouldn't be necessary, see above */
 740         spin_lock(&cifs_tcp_ses_lock);
 741         list_for_each(tmp, &server->smb_ses_list) {
 742                 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
 743                 ses->server = NULL;
 744         }
 745         spin_unlock(&cifs_tcp_ses_lock);
 746
 747         kfree(server->hostname);
 748         task_to_wake = xchg(&server->tsk, NULL);
 749         kfree(server);
 750
 751         length = atomic_dec_return(&tcpSesAllocCount);
 752         if (length  > 0)
 753                 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
 754                                 GFP_KERNEL);
 755
 756         /* if server->tsk was NULL then wait for a signal before exiting */
 757         if (!task_to_wake) {
 758                 set_current_state(TASK_INTERRUPTIBLE);
 759                 while (!signal_pending(current)) {
 760                         schedule();
 761                         set_current_state(TASK_INTERRUPTIBLE);
 762                 }
 763                 set_current_state(TASK_RUNNING);
 764         }
 765
 766         module_put_and_exit(0);
 767 }
 768
 769 /* extract the host portion of the UNC string */
 770 static char *
 771 extract_hostname(const char *unc)
 772 {
 773         const char *src;
 774         char *dst, *delim;
 775         unsigned int len;
 776
 777         /* skip double chars at beginning of string */
 778         /* BB: check validity of these bytes? */
 779         src = unc + 2;
 780
 781         /* delimiter between hostname and sharename is always '\\' now */
 782         delim = strchr(src, '\\');
 783         if (!delim)
 784                 return ERR_PTR(-EINVAL);
 785
 786         len = delim - src;
 787         dst = kmalloc((len + 1), GFP_KERNEL);
 788         if (dst == NULL)
 789                 return ERR_PTR(-ENOMEM);
 790
 791         memcpy(dst, src, len);
 792         dst[len] = '\0';
 793
 794         return dst;
 795 }
 796
 797 static int
 798 cifs_parse_mount_options(char *options, const char *devname,
 799                          struct smb_vol *vol)
 800 {
 801         char *value;
 802         char *data;
 803         unsigned int  temp_len, i, j;
 804         char separator[2];
 805         short int override_uid = -1;
 806         short int override_gid = -1;
 807         bool uid_specified = false;
 808         bool gid_specified = false;
 809         char *nodename = utsname()->nodename;
 810
 811         separator[0] = ',';
 812         separator[1] = 0;
 813
 814         /*
 815          * does not have to be perfect mapping since field is
 816          * informational, only used for servers that do not support
 817          * port 445 and it can be overridden at mount time
 818          */
 819         memset(vol->source_rfc1001_name, 0x20, RFC1001_NAME_LEN);
 820         for (i = 0; i < strnlen(nodename, RFC1001_NAME_LEN); i++)
 821                 vol->source_rfc1001_name[i] = toupper(nodename[i]);
 822
 823         vol->source_rfc1001_name[RFC1001_NAME_LEN] = 0;
 824         /* null target name indicates to use *SMBSERVR default called name
 825            if we end up sending RFC1001 session initialize */
 826         vol->target_rfc1001_name[0] = 0;
 827         vol->cred_uid = current_uid();
 828         vol->linux_uid = current_uid();
 829         vol->linux_gid = current_gid();
 830
 831         /* default to only allowing write access to owner of the mount */
 832         vol->dir_mode = vol->file_mode = S_IRUGO | S_IXUGO | S_IWUSR;
 833
 834         /* vol->retry default is 0 (i.e. "soft" limited retry not hard retry) */
 835         /* default is always to request posix paths. */
 836         vol->posix_paths = 1;
 837         /* default to using server inode numbers where available */
 838         vol->server_ino = 1;
 839
 840         vol->actimeo = CIFS_DEF_ACTIMEO;
 841
 842         if (!options)
 843                 return 1;
 844
 845         if (strncmp(options, "sep=", 4) == 0) {
 846                 if (options[4] != 0) {
 847                         separator[0] = options[4];
 848                         options += 5;
 849                 } else {
 850                         cFYI(1, "Null separator not allowed");
 851                 }
 852         }
 853
 854         while ((data = strsep(&options, separator)) != NULL) {
 855                 if (!*data)
 856                         continue;
 857                 if ((value = strchr(data, '=')) != NULL)
 858                         *value++ = '\0';
 859
 860                 /* Have to parse this before we parse for "user" */
 861                 if (strnicmp(data, "user_xattr", 10) == 0) {
 862                         vol->no_xattr = 0;
 863                 } else if (strnicmp(data, "nouser_xattr", 12) == 0) {
 864                         vol->no_xattr = 1;
 865                 } else if (strnicmp(data, "user", 4) == 0) {
 866                         if (!value) {
 867                                 printk(KERN_WARNING
 868                                        "CIFS: invalid or missing username\n");
 869                                 return 1;       /* needs_arg; */
 870                         } else if (!*value) {
 871                                 /* null user, ie anonymous, authentication */
 872                                 vol->nullauth = 1;
 873                         }
 874                         if (strnlen(value, 200) < 200) {
 875                                 vol->username = value;
 876                         } else {
 877                                 printk(KERN_WARNING "CIFS: username too long\n");
 878                                 return 1;
 879                         }
 880                 } else if (strnicmp(data, "pass", 4) == 0) {
 881                         if (!value) {
 882                                 vol->password = NULL;
 883                                 continue;
 884                         } else if (value[0] == 0) {
 885                                 /* check if string begins with double comma
 886                                    since that would mean the password really
 887                                    does start with a comma, and would not
 888                                    indicate an empty string */
 889                                 if (value[1] != separator[0]) {
 890                                         vol->password = NULL;
 891                                         continue;
 892                                 }
 893                         }
 894                         temp_len = strlen(value);
 895                         /* removed password length check, NTLM passwords
 896                                 can be arbitrarily long */
 897
 898                         /* if comma in password, the string will be
 899                         prematurely null terminated.  Commas in password are
 900                         specified across the cifs mount interface by a double
 901                         comma ie ,, and a comma used as in other cases ie ','
 902                         as a parameter delimiter/separator is single and due
 903                         to the strsep above is temporarily zeroed. */
 904
 905                         /* NB: password legally can have multiple commas and
 906                         the only illegal character in a password is null */
 907
 908                         if ((value[temp_len] == 0) &&
 909                             (value[temp_len+1] == separator[0])) {
 910                                 /* reinsert comma */
 911                                 value[temp_len] = separator[0];
 912                                 temp_len += 2;  /* move after second comma */
 913                                 while (value[temp_len] != 0)  {
 914                                         if (value[temp_len] == separator[0]) {
 915                                                 if (value[temp_len+1] ==
 916                                                      separator[0]) {
 917                                                 /* skip second comma */
 918                                                         temp_len++;
 919                                                 } else {
 920                                                 /* single comma indicating start
 921                                                          of next parm */
 922                                                         break;
 923                                                 }
 924                                         }
 925                                         temp_len++;
 926                                 }
 927                                 if (value[temp_len] == 0) {
 928                                         options = NULL;
 929                                 } else {
 930                                         value[temp_len] = 0;
 931                                         /* point option to start of next parm */
 932                                         options = value + temp_len + 1;
 933                                 }
 934                                 /* go from value to value + temp_len condensing
 935                                 double commas to singles. Note that this ends up
 936                                 allocating a few bytes too many, which is ok */
 937                                 vol->password = kzalloc(temp_len, GFP_KERNEL);
 938                                 if (vol->password == NULL) {
 939                                         printk(KERN_WARNING "CIFS: no memory "
 940                                                             "for password\n");
 941                                         return 1;
 942                                 }
 943                                 for (i = 0, j = 0; i < temp_len; i++, j++) {
 944                                         vol->password[j] = value[i];
 945                                         if (value[i] == separator[0]
 946                                                 && value[i+1] == separator[0]) {
 947                                                 /* skip second comma */
 948                                                 i++;
 949                                         }
 950                                 }
 951                                 vol->password[j] = 0;
 952                         } else {
 953                                 vol->password = kzalloc(temp_len+1, GFP_KERNEL);
 954                                 if (vol->password == NULL) {
 955                                         printk(KERN_WARNING "CIFS: no memory "
 956                                                             "for password\n");
 957                                         return 1;
 958                                 }
 959                                 strcpy(vol->password, value);
 960                         }
 961                 } else if (!strnicmp(data, "ip", 2) ||
 962                            !strnicmp(data, "addr", 4)) {
 963                         if (!value || !*value) {
 964                                 vol->UNCip = NULL;
 965                         } else if (strnlen(value, INET6_ADDRSTRLEN) <
 966                                                         INET6_ADDRSTRLEN) {
 967                                 vol->UNCip = value;
 968                         } else {
 969                                 printk(KERN_WARNING "CIFS: ip address "
 970                                                     "too long\n");
 971                                 return 1;
 972                         }
 973                 } else if (strnicmp(data, "sec", 3) == 0) {
 974                         if (!value || !*value) {
 975                                 cERROR(1, "no security value specified");
 976                                 continue;
 977                         } else if (strnicmp(value, "krb5i", 5) == 0) {
 978                                 vol->secFlg |= CIFSSEC_MAY_KRB5 |
 979                                         CIFSSEC_MUST_SIGN;
 980                         } else if (strnicmp(value, "krb5p", 5) == 0) {
 981                                 /* vol->secFlg |= CIFSSEC_MUST_SEAL |
 982                                         CIFSSEC_MAY_KRB5; */
 983                                 cERROR(1, "Krb5 cifs privacy not supported");
 984                                 return 1;
 985                         } else if (strnicmp(value, "krb5", 4) == 0) {
 986                                 vol->secFlg |= CIFSSEC_MAY_KRB5;
 987 #ifdef CONFIG_CIFS_EXPERIMENTAL
 988                         } else if (strnicmp(value, "ntlmsspi", 8) == 0) {
 989                                 vol->secFlg |= CIFSSEC_MAY_NTLMSSP |
 990                                         CIFSSEC_MUST_SIGN;
 991                         } else if (strnicmp(value, "ntlmssp", 7) == 0) {
 992                                 vol->secFlg |= CIFSSEC_MAY_NTLMSSP;
 993 #endif
 994                         } else if (strnicmp(value, "ntlmv2i", 7) == 0) {
 995                                 vol->secFlg |= CIFSSEC_MAY_NTLMV2 |
 996                                         CIFSSEC_MUST_SIGN;
 997                         } else if (strnicmp(value, "ntlmv2", 6) == 0) {
 998                                 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
 999                         } else if (strnicmp(value, "ntlmi", 5) == 0) {
1000                                 vol->secFlg |= CIFSSEC_MAY_NTLM |
1001                                         CIFSSEC_MUST_SIGN;
1002                         } else if (strnicmp(value, "ntlm", 4) == 0) {
1003                                 /* ntlm is default so can be turned off too */
1004                                 vol->secFlg |= CIFSSEC_MAY_NTLM;
1005                         } else if (strnicmp(value, "nontlm", 6) == 0) {
1006                                 /* BB is there a better way to do this? */
1007                                 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
1008 #ifdef CONFIG_CIFS_WEAK_PW_HASH
1009                         } else if (strnicmp(value, "lanman", 6) == 0) {
1010                                 vol->secFlg |= CIFSSEC_MAY_LANMAN;
1011 #endif
1012                         } else if (strnicmp(value, "none", 4) == 0) {
1013                                 vol->nullauth = 1;
1014                         } else {
1015                                 cERROR(1, "bad security option: %s", value);
1016                                 return 1;
1017                         }
1018                 } else if ((strnicmp(data, "unc", 3) == 0)
1019                            || (strnicmp(data, "target", 6) == 0)
1020                            || (strnicmp(data, "path", 4) == 0)) {
1021                         if (!value || !*value) {
1022                                 printk(KERN_WARNING "CIFS: invalid path to "
1023                                                     "network resource\n");
1024                                 return 1;       /* needs_arg; */
1025                         }
1026                         if ((temp_len = strnlen(value, 300)) < 300) {
1027                                 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1028                                 if (vol->UNC == NULL)
1029                                         return 1;
1030                                 strcpy(vol->UNC, value);
1031                                 if (strncmp(vol->UNC, "//", 2) == 0) {
1032                                         vol->UNC[0] = '\\';
1033                                         vol->UNC[1] = '\\';
1034                                 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1035                                         printk(KERN_WARNING
1036                                                "CIFS: UNC Path does not begin "
1037                                                "with // or \\\\ \n");
1038                                         return 1;
1039                                 }
1040                         } else {
1041                                 printk(KERN_WARNING "CIFS: UNC name too long\n");
1042                                 return 1;
1043                         }
1044                 } else if ((strnicmp(data, "domain", 3) == 0)
1045                            || (strnicmp(data, "workgroup", 5) == 0)) {
1046                         if (!value || !*value) {
1047                                 printk(KERN_WARNING "CIFS: invalid domain name\n");
1048                                 return 1;       /* needs_arg; */
1049                         }
1050                         /* BB are there cases in which a comma can be valid in
1051                         a domain name and need special handling? */
1052                         if (strnlen(value, 256) < 256) {
1053                                 vol->domainname = value;
1054                                 cFYI(1, "Domain name set");
1055                         } else {
1056                                 printk(KERN_WARNING "CIFS: domain name too "
1057                                                     "long\n");
1058                                 return 1;
1059                         }
1060                 } else if (strnicmp(data, "srcaddr", 7) == 0) {
1061                         vol->srcaddr.ss_family = AF_UNSPEC;
1062
1063                         if (!value || !*value) {
1064                                 printk(KERN_WARNING "CIFS: srcaddr value"
1065                                        " not specified.\n");
1066                                 return 1;       /* needs_arg; */
1067                         }
1068                         i = cifs_convert_address((struct sockaddr *)&vol->srcaddr,
1069                                                  value, strlen(value));
1070                         if (i == 0) {
1071                                 printk(KERN_WARNING "CIFS:  Could not parse"
1072                                        " srcaddr: %s\n",
1073                                        value);
1074                                 return 1;
1075                         }
1076                 } else if (strnicmp(data, "prefixpath", 10) == 0) {
1077                         if (!value || !*value) {
1078                                 printk(KERN_WARNING
1079                                         "CIFS: invalid path prefix\n");
1080                                 return 1;       /* needs_argument */
1081                         }
1082                         if ((temp_len = strnlen(value, 1024)) < 1024) {
1083                                 if (value[0] != '/')
1084                                         temp_len++;  /* missing leading slash */
1085                                 vol->prepath = kmalloc(temp_len+1, GFP_KERNEL);
1086                                 if (vol->prepath == NULL)
1087                                         return 1;
1088                                 if (value[0] != '/') {
1089                                         vol->prepath[0] = '/';
1090                                         strcpy(vol->prepath+1, value);
1091                                 } else
1092                                         strcpy(vol->prepath, value);
1093                                 cFYI(1, "prefix path %s", vol->prepath);
1094                         } else {
1095                                 printk(KERN_WARNING "CIFS: prefix too long\n");
1096                                 return 1;
1097                         }
1098                 } else if (strnicmp(data, "iocharset", 9) == 0) {
1099                         if (!value || !*value) {
1100                                 printk(KERN_WARNING "CIFS: invalid iocharset "
1101                                                     "specified\n");
1102                                 return 1;       /* needs_arg; */
1103                         }
1104                         if (strnlen(value, 65) < 65) {
1105                                 if (strnicmp(value, "default", 7))
1106                                         vol->iocharset = value;
1107                                 /* if iocharset not set then load_nls_default
1108                                    is used by caller */
1109                                 cFYI(1, "iocharset set to %s", value);
1110                         } else {
1111                                 printk(KERN_WARNING "CIFS: iocharset name "
1112                                                     "too long.\n");
1113                                 return 1;
1114                         }
1115                 } else if (!strnicmp(data, "uid", 3) && value && *value) {
1116                         vol->linux_uid = simple_strtoul(value, &value, 0);
1117                         uid_specified = true;
1118                 } else if (!strnicmp(data, "forceuid", 8)) {
1119                         override_uid = 1;
1120                 } else if (!strnicmp(data, "noforceuid", 10)) {
1121                         override_uid = 0;
1122                 } else if (!strnicmp(data, "gid", 3) && value && *value) {
1123                         vol->linux_gid = simple_strtoul(value, &value, 0);
1124                         gid_specified = true;
1125                 } else if (!strnicmp(data, "forcegid", 8)) {
1126                         override_gid = 1;
1127                 } else if (!strnicmp(data, "noforcegid", 10)) {
1128                         override_gid = 0;
1129                 } else if (strnicmp(data, "file_mode", 4) == 0) {
1130                         if (value && *value) {
1131                                 vol->file_mode =
1132                                         simple_strtoul(value, &value, 0);
1133                         }
1134                 } else if (strnicmp(data, "dir_mode", 4) == 0) {
1135                         if (value && *value) {
1136                                 vol->dir_mode =
1137                                         simple_strtoul(value, &value, 0);
1138                         }
1139                 } else if (strnicmp(data, "dirmode", 4) == 0) {
1140                         if (value && *value) {
1141                                 vol->dir_mode =
1142                                         simple_strtoul(value, &value, 0);
1143                         }
1144                 } else if (strnicmp(data, "port", 4) == 0) {
1145                         if (value && *value) {
1146                                 vol->port =
1147                                         simple_strtoul(value, &value, 0);
1148                         }
1149                 } else if (strnicmp(data, "rsize", 5) == 0) {
1150                         if (value && *value) {
1151                                 vol->rsize =
1152                                         simple_strtoul(value, &value, 0);
1153                         }
1154                 } else if (strnicmp(data, "wsize", 5) == 0) {
1155                         if (value && *value) {
1156                                 vol->wsize =
1157                                         simple_strtoul(value, &value, 0);
1158                         }
1159                 } else if (strnicmp(data, "sockopt", 5) == 0) {
1160                         if (!value || !*value) {
1161                                 cERROR(1, "no socket option specified");
1162                                 continue;
1163                         } else if (strnicmp(value, "TCP_NODELAY", 11) == 0) {
1164                                 vol->sockopt_tcp_nodelay = 1;
1165                         }
1166                 } else if (strnicmp(data, "netbiosname", 4) == 0) {
1167                         if (!value || !*value || (*value == ' ')) {
1168                                 cFYI(1, "invalid (empty) netbiosname");
1169                         } else {
1170                                 memset(vol->source_rfc1001_name, 0x20,
1171                                         RFC1001_NAME_LEN);
1172                                 /*
1173                                  * FIXME: are there cases in which a comma can
1174                                  * be valid in workstation netbios name (and
1175                                  * need special handling)?
1176                                  */
1177                                 for (i = 0; i < RFC1001_NAME_LEN; i++) {
1178                                         /* don't ucase netbiosname for user */
1179                                         if (value[i] == 0)
1180                                                 break;
1181                                         vol->source_rfc1001_name[i] = value[i];
1182                                 }
1183                                 /* The string has 16th byte zero still from
1184                                 set at top of the function  */
1185                                 if (i == RFC1001_NAME_LEN && value[i] != 0)
1186                                         printk(KERN_WARNING "CIFS: netbiosname"
1187                                                 " longer than 15 truncated.\n");
1188                         }
1189                 } else if (strnicmp(data, "servern", 7) == 0) {
1190                         /* servernetbiosname specified override *SMBSERVER */
1191                         if (!value || !*value || (*value == ' ')) {
1192                                 cFYI(1, "empty server netbiosname specified");
1193                         } else {
1194                                 /* last byte, type, is 0x20 for servr type */
1195                                 memset(vol->target_rfc1001_name, 0x20,
1196                                         RFC1001_NAME_LEN_WITH_NULL);
1197
1198                                 for (i = 0; i < 15; i++) {
1199                                 /* BB are there cases in which a comma can be
1200                                    valid in this workstation netbios name
1201                                    (and need special handling)? */
1202
1203                                 /* user or mount helper must uppercase
1204                                    the netbiosname */
1205                                         if (value[i] == 0)
1206                                                 break;
1207                                         else
1208                                                 vol->target_rfc1001_name[i] =
1209                                                                 value[i];
1210                                 }
1211                                 /* The string has 16th byte zero still from
1212                                    set at top of the function  */
1213                                 if (i == RFC1001_NAME_LEN && value[i] != 0)
1214                                         printk(KERN_WARNING "CIFS: server net"
1215                                         "biosname longer than 15 truncated.\n");
1216                         }
1217                 } else if (strnicmp(data, "actimeo", 7) == 0) {
1218                         if (value && *value) {
1219                                 vol->actimeo = HZ * simple_strtoul(value,
1220                                                                    &value, 0);
1221                                 if (vol->actimeo > CIFS_MAX_ACTIMEO) {
1222                                         cERROR(1, "CIFS: attribute cache"
1223                                                         "timeout too large");
1224                                         return 1;
1225                                 }
1226                         }
1227                 } else if (strnicmp(data, "credentials", 4) == 0) {
1228                         /* ignore */
1229                 } else if (strnicmp(data, "version", 3) == 0) {
1230                         /* ignore */
1231                 } else if (strnicmp(data, "guest", 5) == 0) {
1232                         /* ignore */
1233                 } else if (strnicmp(data, "rw", 2) == 0) {
1234                         /* ignore */
1235                 } else if (strnicmp(data, "ro", 2) == 0) {
1236                         /* ignore */
1237                 } else if (strnicmp(data, "noblocksend", 11) == 0) {
1238                         vol->noblocksnd = 1;
1239                 } else if (strnicmp(data, "noautotune", 10) == 0) {
1240                         vol->noautotune = 1;
1241                 } else if ((strnicmp(data, "suid", 4) == 0) ||
1242                                    (strnicmp(data, "nosuid", 6) == 0) ||
1243                                    (strnicmp(data, "exec", 4) == 0) ||
1244                                    (strnicmp(data, "noexec", 6) == 0) ||
1245                                    (strnicmp(data, "nodev", 5) == 0) ||
1246                                    (strnicmp(data, "noauto", 6) == 0) ||
1247                                    (strnicmp(data, "dev", 3) == 0)) {
1248                         /*  The mount tool or mount.cifs helper (if present)
1249                             uses these opts to set flags, and the flags are read
1250                             by the kernel vfs layer before we get here (ie
1251                             before read super) so there is no point trying to
1252                             parse these options again and set anything and it
1253                             is ok to just ignore them */
1254                         continue;
1255                 } else if (strnicmp(data, "hard", 4) == 0) {
1256                         vol->retry = 1;
1257                 } else if (strnicmp(data, "soft", 4) == 0) {
1258                         vol->retry = 0;
1259                 } else if (strnicmp(data, "perm", 4) == 0) {
1260                         vol->noperm = 0;
1261                 } else if (strnicmp(data, "noperm", 6) == 0) {
1262                         vol->noperm = 1;
1263                 } else if (strnicmp(data, "mapchars", 8) == 0) {
1264                         vol->remap = 1;
1265                 } else if (strnicmp(data, "nomapchars", 10) == 0) {
1266                         vol->remap = 0;
1267                 } else if (strnicmp(data, "sfu", 3) == 0) {
1268                         vol->sfu_emul = 1;
1269                 } else if (strnicmp(data, "nosfu", 5) == 0) {
1270                         vol->sfu_emul = 0;
1271                 } else if (strnicmp(data, "nodfs", 5) == 0) {
1272                         vol->nodfs = 1;
1273                 } else if (strnicmp(data, "posixpaths", 10) == 0) {
1274                         vol->posix_paths = 1;
1275                 } else if (strnicmp(data, "noposixpaths", 12) == 0) {
1276                         vol->posix_paths = 0;
1277                 } else if (strnicmp(data, "nounix", 6) == 0) {
1278                         vol->no_linux_ext = 1;
1279                 } else if (strnicmp(data, "nolinux", 7) == 0) {
1280                         vol->no_linux_ext = 1;
1281                 } else if ((strnicmp(data, "nocase", 6) == 0) ||
1282                            (strnicmp(data, "ignorecase", 10)  == 0)) {
1283                         vol->nocase = 1;
1284                 } else if (strnicmp(data, "mand", 4) == 0) {
1285                         /* ignore */
1286                 } else if (strnicmp(data, "nomand", 6) == 0) {
1287                         /* ignore */
1288                 } else if (strnicmp(data, "_netdev", 7) == 0) {
1289                         /* ignore */
1290                 } else if (strnicmp(data, "brl", 3) == 0) {
1291                         vol->nobrl =  0;
1292                 } else if ((strnicmp(data, "nobrl", 5) == 0) ||
1293                            (strnicmp(data, "nolock", 6) == 0)) {
1294                         vol->nobrl =  1;
1295                         /* turn off mandatory locking in mode
1296                         if remote locking is turned off since the
1297                         local vfs will do advisory */
1298                         if (vol->file_mode ==
1299                                 (S_IALLUGO & ~(S_ISUID | S_IXGRP)))
1300                                 vol->file_mode = S_IALLUGO;
1301                 } else if (strnicmp(data, "forcemandatorylock", 9) == 0) {
1302                         /* will take the shorter form "forcemand" as well */
1303                         /* This mount option will force use of mandatory
1304                           (DOS/Windows style) byte range locks, instead of
1305                           using posix advisory byte range locks, even if the
1306                           Unix extensions are available and posix locks would
1307                           be supported otherwise. If Unix extensions are not
1308                           negotiated this has no effect since mandatory locks
1309                           would be used (mandatory locks is all that those
1310                           those servers support) */
1311                         vol->mand_lock = 1;
1312                 } else if (strnicmp(data, "setuids", 7) == 0) {
1313                         vol->setuids = 1;
1314                 } else if (strnicmp(data, "nosetuids", 9) == 0) {
1315                         vol->setuids = 0;
1316                 } else if (strnicmp(data, "dynperm", 7) == 0) {
1317                         vol->dynperm = true;
1318                 } else if (strnicmp(data, "nodynperm", 9) == 0) {
1319                         vol->dynperm = false;
1320                 } else if (strnicmp(data, "nohard", 6) == 0) {
1321                         vol->retry = 0;
1322                 } else if (strnicmp(data, "nosoft", 6) == 0) {
1323                         vol->retry = 1;
1324                 } else if (strnicmp(data, "nointr", 6) == 0) {
1325                         vol->intr = 0;
1326                 } else if (strnicmp(data, "intr", 4) == 0) {
1327                         vol->intr = 1;
1328                 } else if (strnicmp(data, "nostrictsync", 12) == 0) {
1329                         vol->nostrictsync = 1;
1330                 } else if (strnicmp(data, "strictsync", 10) == 0) {
1331                         vol->nostrictsync = 0;
1332                 } else if (strnicmp(data, "serverino", 7) == 0) {
1333                         vol->server_ino = 1;
1334                 } else if (strnicmp(data, "noserverino", 9) == 0) {
1335                         vol->server_ino = 0;
1336                 } else if (strnicmp(data, "cifsacl", 7) == 0) {
1337                         vol->cifs_acl = 1;
1338                 } else if (strnicmp(data, "nocifsacl", 9) == 0) {
1339                         vol->cifs_acl = 0;
1340                 } else if (strnicmp(data, "acl", 3) == 0) {
1341                         vol->no_psx_acl = 0;
1342                 } else if (strnicmp(data, "noacl", 5) == 0) {
1343                         vol->no_psx_acl = 1;
1344 #ifdef CONFIG_CIFS_EXPERIMENTAL
1345                 } else if (strnicmp(data, "locallease", 6) == 0) {
1346                         vol->local_lease = 1;
1347 #endif
1348                 } else if (strnicmp(data, "sign", 4) == 0) {
1349                         vol->secFlg |= CIFSSEC_MUST_SIGN;
1350                 } else if (strnicmp(data, "seal", 4) == 0) {
1351                         /* we do not do the following in secFlags because seal
1352                            is a per tree connection (mount) not a per socket
1353                            or per-smb connection option in the protocol */
1354                         /* vol->secFlg |= CIFSSEC_MUST_SEAL; */
1355                         vol->seal = 1;
1356                 } else if (strnicmp(data, "direct", 6) == 0) {
1357                         vol->direct_io = 1;
1358                 } else if (strnicmp(data, "forcedirectio", 13) == 0) {
1359                         vol->direct_io = 1;
1360                 } else if (strnicmp(data, "noac", 4) == 0) {
1361                         printk(KERN_WARNING "CIFS: Mount option noac not "
1362                                 "supported. Instead set "
1363                                 "/proc/fs/cifs/LookupCacheEnabled to 0\n");
1364                 } else if (strnicmp(data, "fsc", 3) == 0) {
1365 #ifndef CONFIG_CIFS_FSCACHE
1366                         cERROR(1, "FS-Cache support needs CONFIG_CIFS_FSCACHE"
1367                                   "kernel config option set");
1368                         return 1;
1369 #endif
1370                         vol->fsc = true;
1371                 } else if (strnicmp(data, "mfsymlinks", 10) == 0) {
1372                         vol->mfsymlinks = true;
1373                 } else if (strnicmp(data, "multiuser", 8) == 0) {
1374                         vol->multiuser = true;
1375                 } else
1376                         printk(KERN_WARNING "CIFS: Unknown mount option %s\n",
1377                                                 data);
1378         }
1379         if (vol->UNC == NULL) {
1380                 if (devname == NULL) {
1381                         printk(KERN_WARNING "CIFS: Missing UNC name for mount "
1382                                                 "target\n");
1383                         return 1;
1384                 }
1385                 if ((temp_len = strnlen(devname, 300)) < 300) {
1386                         vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1387                         if (vol->UNC == NULL)
1388                                 return 1;
1389                         strcpy(vol->UNC, devname);
1390                         if (strncmp(vol->UNC, "//", 2) == 0) {
1391                                 vol->UNC[0] = '\\';
1392                                 vol->UNC[1] = '\\';
1393                         } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1394                                 printk(KERN_WARNING "CIFS: UNC Path does not "
1395                                                     "begin with // or \\\\ \n");
1396                                 return 1;
1397                         }
1398                         value = strpbrk(vol->UNC+2, "/\\");
1399                         if (value)
1400                                 *value = '\\';
1401                 } else {
1402                         printk(KERN_WARNING "CIFS: UNC name too long\n");
1403                         return 1;
1404                 }
1405         }
1406
1407         if (vol->multiuser && !(vol->secFlg & CIFSSEC_MAY_KRB5)) {
1408                 cERROR(1, "Multiuser mounts currently require krb5 "
1409                           "authentication!");
1410                 return 1;
1411         }
1412
1413         if (vol->UNCip == NULL)
1414                 vol->UNCip = &vol->UNC[2];
1415
1416         if (uid_specified)
1417                 vol->override_uid = override_uid;
1418         else if (override_uid == 1)
1419                 printk(KERN_NOTICE "CIFS: ignoring forceuid mount option "
1420                                    "specified with no uid= option.\n");
1421
1422         if (gid_specified)
1423                 vol->override_gid = override_gid;
1424         else if (override_gid == 1)
1425                 printk(KERN_NOTICE "CIFS: ignoring forcegid mount option "
1426                                    "specified with no gid= option.\n");
1427
1428         return 0;
1429 }
1430
1431 /** Returns true if srcaddr isn't specified and rhs isn't
1432  * specified, or if srcaddr is specified and
1433  * matches the IP address of the rhs argument.
1434  */
1435 static bool
1436 srcip_matches(struct sockaddr *srcaddr, struct sockaddr *rhs)
1437 {
1438         switch (srcaddr->sa_family) {
1439         case AF_UNSPEC:
1440                 return (rhs->sa_family == AF_UNSPEC);
1441         case AF_INET: {
1442                 struct sockaddr_in *saddr4 = (struct sockaddr_in *)srcaddr;
1443                 struct sockaddr_in *vaddr4 = (struct sockaddr_in *)rhs;
1444                 return (saddr4->sin_addr.s_addr == vaddr4->sin_addr.s_addr);
1445         }
1446         case AF_INET6: {
1447                 struct sockaddr_in6 *saddr6 = (struct sockaddr_in6 *)srcaddr;
1448                 struct sockaddr_in6 *vaddr6 = (struct sockaddr_in6 *)&rhs;
1449                 return ipv6_addr_equal(&saddr6->sin6_addr, &vaddr6->sin6_addr);
1450         }
1451         default:
1452                 WARN_ON(1);
1453                 return false; /* don't expect to be here */
1454         }
1455 }
1456
1457 /*
1458  * If no port is specified in addr structure, we try to match with 445 port
1459  * and if it fails - with 139 ports. It should be called only if address
1460  * families of server and addr are equal.
1461  */
1462 static bool
1463 match_port(struct TCP_Server_Info *server, struct sockaddr *addr)
1464 {
1465         unsigned short int port, *sport;
1466
1467         switch (addr->sa_family) {
1468         case AF_INET:
1469                 sport = &((struct sockaddr_in *) &server->dstaddr)->sin_port;
1470                 port = ((struct sockaddr_in *) addr)->sin_port;
1471                 break;
1472         case AF_INET6:
1473                 sport = &((struct sockaddr_in6 *) &server->dstaddr)->sin6_port;
1474                 port = ((struct sockaddr_in6 *) addr)->sin6_port;
1475                 break;
1476         default:
1477                 WARN_ON(1);
1478                 return false;
1479         }
1480
1481         if (!port) {
1482                 port = htons(CIFS_PORT);
1483                 if (port == *sport)
1484                         return true;
1485
1486                 port = htons(RFC1001_PORT);
1487         }
1488
1489         return port == *sport;
1490 }
1491
1492 static bool
1493 match_address(struct TCP_Server_Info *server, struct sockaddr *addr,
1494               struct sockaddr *srcaddr)
1495 {
1496         switch (addr->sa_family) {
1497         case AF_INET: {
1498                 struct sockaddr_in *addr4 = (struct sockaddr_in *)addr;
1499                 struct sockaddr_in *srv_addr4 =
1500                                         (struct sockaddr_in *)&server->dstaddr;
1501
1502                 if (addr4->sin_addr.s_addr != srv_addr4->sin_addr.s_addr)
1503                         return false;
1504                 break;
1505         }
1506         case AF_INET6: {
1507                 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)addr;
1508                 struct sockaddr_in6 *srv_addr6 =
1509                                         (struct sockaddr_in6 *)&server->dstaddr;
1510
1511                 if (!ipv6_addr_equal(&addr6->sin6_addr,
1512                                      &srv_addr6->sin6_addr))
1513                         return false;
1514                 if (addr6->sin6_scope_id != srv_addr6->sin6_scope_id)
1515                         return false;
1516                 break;
1517         }
1518         default:
1519                 WARN_ON(1);
1520                 return false; /* don't expect to be here */
1521         }
1522
1523         if (!srcip_matches(srcaddr, (struct sockaddr *)&server->srcaddr))
1524                 return false;
1525
1526         return true;
1527 }
1528
1529 static bool
1530 match_security(struct TCP_Server_Info *server, struct smb_vol *vol)
1531 {
1532         unsigned int secFlags;
1533
1534         if (vol->secFlg & (~(CIFSSEC_MUST_SIGN | CIFSSEC_MUST_SEAL)))
1535                 secFlags = vol->secFlg;
1536         else
1537                 secFlags = global_secflags | vol->secFlg;
1538
1539         switch (server->secType) {
1540         case LANMAN:
1541                 if (!(secFlags & (CIFSSEC_MAY_LANMAN|CIFSSEC_MAY_PLNTXT)))
1542                         return false;
1543                 break;
1544         case NTLMv2:
1545                 if (!(secFlags & CIFSSEC_MAY_NTLMV2))
1546                         return false;
1547                 break;
1548         case NTLM:
1549                 if (!(secFlags & CIFSSEC_MAY_NTLM))
1550                         return false;
1551                 break;
1552         case Kerberos:
1553                 if (!(secFlags & CIFSSEC_MAY_KRB5))
1554                         return false;
1555                 break;
1556         case RawNTLMSSP:
1557                 if (!(secFlags & CIFSSEC_MAY_NTLMSSP))
1558                         return false;
1559                 break;
1560         default:
1561                 /* shouldn't happen */
1562                 return false;
1563         }
1564
1565         /* now check if signing mode is acceptible */
1566         if ((secFlags & CIFSSEC_MAY_SIGN) == 0 &&
1567             (server->secMode & SECMODE_SIGN_REQUIRED))
1568                         return false;
1569         else if (((secFlags & CIFSSEC_MUST_SIGN) == CIFSSEC_MUST_SIGN) &&
1570                  (server->secMode &
1571                   (SECMODE_SIGN_ENABLED|SECMODE_SIGN_REQUIRED)) == 0)
1572                         return false;
1573
1574         return true;
1575 }
1576
1577 static struct TCP_Server_Info *
1578 cifs_find_tcp_session(struct sockaddr *addr, struct smb_vol *vol)
1579 {
1580         struct TCP_Server_Info *server;
1581
1582         spin_lock(&cifs_tcp_ses_lock);
1583         list_for_each_entry(server, &cifs_tcp_ses_list, tcp_ses_list) {
1584                 if (!match_address(server, addr,
1585                                    (struct sockaddr *)&vol->srcaddr))
1586                         continue;
1587
1588                 if (!match_port(server, addr))
1589                         continue;
1590
1591                 if (!match_security(server, vol))
1592                         continue;
1593
1594                 ++server->srv_count;
1595                 spin_unlock(&cifs_tcp_ses_lock);
1596                 cFYI(1, "Existing tcp session with server found");
1597                 return server;
1598         }
1599         spin_unlock(&cifs_tcp_ses_lock);
1600         return NULL;
1601 }
1602
1603 static void
1604 cifs_put_tcp_session(struct TCP_Server_Info *server)
1605 {
1606         struct task_struct *task;
1607
1608         spin_lock(&cifs_tcp_ses_lock);
1609         if (--server->srv_count > 0) {
1610                 spin_unlock(&cifs_tcp_ses_lock);
1611                 return;
1612         }
1613
1614         list_del_init(&server->tcp_ses_list);
1615         spin_unlock(&cifs_tcp_ses_lock);
1616
1617         spin_lock(&GlobalMid_Lock);
1618         server->tcpStatus = CifsExiting;
1619         spin_unlock(&GlobalMid_Lock);
1620
1621         cifs_crypto_shash_release(server);
1622         cifs_fscache_release_client_cookie(server);
1623
1624         kfree(server->session_key.response);
1625         server->session_key.response = NULL;
1626         server->session_key.len = 0;
1627
1628         task = xchg(&server->tsk, NULL);
1629         if (task)
1630                 force_sig(SIGKILL, task);
1631 }
1632
1633 static struct TCP_Server_Info *
1634 cifs_get_tcp_session(struct smb_vol *volume_info)
1635 {
1636         struct TCP_Server_Info *tcp_ses = NULL;
1637         struct sockaddr_storage addr;
1638         struct sockaddr_in *sin_server = (struct sockaddr_in *) &addr;
1639         struct sockaddr_in6 *sin_server6 = (struct sockaddr_in6 *) &addr;
1640         int rc;
1641
1642         memset(&addr, 0, sizeof(struct sockaddr_storage));
1643
1644         cFYI(1, "UNC: %s ip: %s", volume_info->UNC, volume_info->UNCip);
1645
1646         if (volume_info->UNCip && volume_info->UNC) {
1647                 rc = cifs_fill_sockaddr((struct sockaddr *)&addr,
1648                                         volume_info->UNCip,
1649                                         strlen(volume_info->UNCip),
1650                                         volume_info->port);
1651                 if (!rc) {
1652                         /* we failed translating address */
1653                         rc = -EINVAL;
1654                         goto out_err;
1655                 }
1656         } else if (volume_info->UNCip) {
1657                 /* BB using ip addr as tcp_ses name to connect to the
1658                    DFS root below */
1659                 cERROR(1, "Connecting to DFS root not implemented yet");
1660                 rc = -EINVAL;
1661                 goto out_err;
1662         } else /* which tcp_sess DFS root would we conect to */ {
1663                 cERROR(1, "CIFS mount error: No UNC path (e.g. -o "
1664                         "unc=//192.168.1.100/public) specified");
1665                 rc = -EINVAL;
1666                 goto out_err;
1667         }
1668
1669         /* see if we already have a matching tcp_ses */
1670         tcp_ses = cifs_find_tcp_session((struct sockaddr *)&addr, volume_info);
1671         if (tcp_ses)
1672                 return tcp_ses;
1673
1674         tcp_ses = kzalloc(sizeof(struct TCP_Server_Info), GFP_KERNEL);
1675         if (!tcp_ses) {
1676                 rc = -ENOMEM;
1677                 goto out_err;
1678         }
1679
1680         rc = cifs_crypto_shash_allocate(tcp_ses);
1681         if (rc) {
1682                 cERROR(1, "could not setup hash structures rc %d", rc);
1683                 goto out_err;
1684         }
1685
1686         tcp_ses->hostname = extract_hostname(volume_info->UNC);
1687         if (IS_ERR(tcp_ses->hostname)) {
1688                 rc = PTR_ERR(tcp_ses->hostname);
1689                 goto out_err_crypto_release;
1690         }
1691
1692         tcp_ses->noblocksnd = volume_info->noblocksnd;
1693         tcp_ses->noautotune = volume_info->noautotune;
1694         tcp_ses->tcp_nodelay = volume_info->sockopt_tcp_nodelay;
1695         atomic_set(&tcp_ses->inFlight, 0);
1696         init_waitqueue_head(&tcp_ses->response_q);
1697         init_waitqueue_head(&tcp_ses->request_q);
1698         INIT_LIST_HEAD(&tcp_ses->pending_mid_q);
1699         mutex_init(&tcp_ses->srv_mutex);
1700         memcpy(tcp_ses->workstation_RFC1001_name,
1701                 volume_info->source_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1702         memcpy(tcp_ses->server_RFC1001_name,
1703                 volume_info->target_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1704         tcp_ses->session_estab = false;
1705         tcp_ses->sequence_number = 0;
1706         INIT_LIST_HEAD(&tcp_ses->tcp_ses_list);
1707         INIT_LIST_HEAD(&tcp_ses->smb_ses_list);
1708
1709         /*
1710          * at this point we are the only ones with the pointer
1711          * to the struct since the kernel thread not created yet
1712          * no need to spinlock this init of tcpStatus or srv_count
1713          */
1714         tcp_ses->tcpStatus = CifsNew;
1715         memcpy(&tcp_ses->srcaddr, &volume_info->srcaddr,
1716                sizeof(tcp_ses->srcaddr));
1717         ++tcp_ses->srv_count;
1718
1719         if (addr.ss_family == AF_INET6) {
1720                 cFYI(1, "attempting ipv6 connect");
1721                 /* BB should we allow ipv6 on port 139? */
1722                 /* other OS never observed in Wild doing 139 with v6 */
1723                 memcpy(&tcp_ses->dstaddr, sin_server6,
1724                        sizeof(struct sockaddr_in6));
1725         } else
1726                 memcpy(&tcp_ses->dstaddr, sin_server,
1727                        sizeof(struct sockaddr_in));
1728
1729         rc = ip_connect(tcp_ses);
1730         if (rc < 0) {
1731                 cERROR(1, "Error connecting to socket. Aborting operation");
1732                 goto out_err_crypto_release;
1733         }
1734
1735         /*
1736          * since we're in a cifs function already, we know that
1737          * this will succeed. No need for try_module_get().
1738          */
1739         __module_get(THIS_MODULE);
1740         tcp_ses->tsk = kthread_run((void *)(void *)cifs_demultiplex_thread,
1741                                   tcp_ses, "cifsd");
1742         if (IS_ERR(tcp_ses->tsk)) {
1743                 rc = PTR_ERR(tcp_ses->tsk);
1744                 cERROR(1, "error %d create cifsd thread", rc);
1745                 module_put(THIS_MODULE);
1746                 goto out_err_crypto_release;
1747         }
1748
1749         /* thread spawned, put it on the list */
1750         spin_lock(&cifs_tcp_ses_lock);
1751         list_add(&tcp_ses->tcp_ses_list, &cifs_tcp_ses_list);
1752         spin_unlock(&cifs_tcp_ses_lock);
1753
1754         cifs_fscache_get_client_cookie(tcp_ses);
1755
1756         return tcp_ses;
1757
1758 out_err_crypto_release:
1759         cifs_crypto_shash_release(tcp_ses);
1760
1761 out_err:
1762         if (tcp_ses) {
1763                 if (!IS_ERR(tcp_ses->hostname))
1764                         kfree(tcp_ses->hostname);
1765                 if (tcp_ses->ssocket)
1766                         sock_release(tcp_ses->ssocket);
1767                 kfree(tcp_ses);
1768         }
1769         return ERR_PTR(rc);
1770 }
1771
1772 static struct cifsSesInfo *
1773 cifs_find_smb_ses(struct TCP_Server_Info *server, struct smb_vol *vol)
1774 {
1775         struct cifsSesInfo *ses;
1776
1777         spin_lock(&cifs_tcp_ses_lock);
1778         list_for_each_entry(ses, &server->smb_ses_list, smb_ses_list) {
1779                 switch (server->secType) {
1780                 case Kerberos:
1781                         if (vol->cred_uid != ses->cred_uid)
1782                                 continue;
1783                         break;
1784                 default:
1785                         /* anything else takes username/password */
1786                         if (strncmp(ses->userName, vol->username,
1787                                     MAX_USERNAME_SIZE))
1788                                 continue;
1789                         if (strlen(vol->username) != 0 &&
1790                             ses->password != NULL &&
1791                             strncmp(ses->password,
1792                                     vol->password ? vol->password : "",
1793                                     MAX_PASSWORD_SIZE))
1794                                 continue;
1795                 }
1796                 ++ses->ses_count;
1797                 spin_unlock(&cifs_tcp_ses_lock);
1798                 return ses;
1799         }
1800         spin_unlock(&cifs_tcp_ses_lock);
1801         return NULL;
1802 }
1803
1804 static void
1805 cifs_put_smb_ses(struct cifsSesInfo *ses)
1806 {
1807         int xid;
1808         struct TCP_Server_Info *server = ses->server;
1809
1810         cFYI(1, "%s: ses_count=%d\n", __func__, ses->ses_count);
1811         spin_lock(&cifs_tcp_ses_lock);
1812         if (--ses->ses_count > 0) {
1813                 spin_unlock(&cifs_tcp_ses_lock);
1814                 return;
1815         }
1816
1817         list_del_init(&ses->smb_ses_list);
1818         spin_unlock(&cifs_tcp_ses_lock);
1819
1820         if (ses->status == CifsGood) {
1821                 xid = GetXid();
1822                 CIFSSMBLogoff(xid, ses);
1823                 _FreeXid(xid);
1824         }
1825         sesInfoFree(ses);
1826         cifs_put_tcp_session(server);
1827 }
1828
1829 static struct cifsSesInfo *
1830 cifs_get_smb_ses(struct TCP_Server_Info *server, struct smb_vol *volume_info)
1831 {
1832         int rc = -ENOMEM, xid;
1833         struct cifsSesInfo *ses;
1834         struct sockaddr_in *addr = (struct sockaddr_in *)&server->dstaddr;
1835         struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)&server->dstaddr;
1836
1837         xid = GetXid();
1838
1839         ses = cifs_find_smb_ses(server, volume_info);
1840         if (ses) {
1841                 cFYI(1, "Existing smb sess found (status=%d)", ses->status);
1842
1843                 mutex_lock(&ses->session_mutex);
1844                 rc = cifs_negotiate_protocol(xid, ses);
1845                 if (rc) {
1846                         mutex_unlock(&ses->session_mutex);
1847                         /* problem -- put our ses reference */
1848                         cifs_put_smb_ses(ses);
1849                         FreeXid(xid);
1850                         return ERR_PTR(rc);
1851                 }
1852                 if (ses->need_reconnect) {
1853                         cFYI(1, "Session needs reconnect");
1854                         rc = cifs_setup_session(xid, ses,
1855                                                 volume_info->local_nls);
1856                         if (rc) {
1857                                 mutex_unlock(&ses->session_mutex);
1858                                 /* problem -- put our reference */
1859                                 cifs_put_smb_ses(ses);
1860                                 FreeXid(xid);
1861                                 return ERR_PTR(rc);
1862                         }
1863                 }
1864                 mutex_unlock(&ses->session_mutex);
1865
1866                 /* existing SMB ses has a server reference already */
1867                 cifs_put_tcp_session(server);
1868                 FreeXid(xid);
1869                 return ses;
1870         }
1871
1872         cFYI(1, "Existing smb sess not found");
1873         ses = sesInfoAlloc();
1874         if (ses == NULL)
1875                 goto get_ses_fail;
1876
1877         /* new SMB session uses our server ref */
1878         ses->server = server;
1879         if (server->dstaddr.ss_family == AF_INET6)
1880                 sprintf(ses->serverName, "%pI6", &addr6->sin6_addr);
1881         else
1882                 sprintf(ses->serverName, "%pI4", &addr->sin_addr);
1883
1884         if (volume_info->username)
1885                 strncpy(ses->userName, volume_info->username,
1886                         MAX_USERNAME_SIZE);
1887
1888         /* volume_info->password freed at unmount */
1889         if (volume_info->password) {
1890                 ses->password = kstrdup(volume_info->password, GFP_KERNEL);
1891                 if (!ses->password)
1892                         goto get_ses_fail;
1893         }
1894         if (volume_info->domainname) {
1895                 ses->domainName = kstrdup(volume_info->domainname, GFP_KERNEL);
1896                 if (!ses->domainName)
1897                         goto get_ses_fail;
1898         }
1899         ses->cred_uid = volume_info->cred_uid;
1900         ses->linux_uid = volume_info->linux_uid;
1901         ses->overrideSecFlg = volume_info->secFlg;
1902
1903         mutex_lock(&ses->session_mutex);
1904         rc = cifs_negotiate_protocol(xid, ses);
1905         if (!rc)
1906                 rc = cifs_setup_session(xid, ses, volume_info->local_nls);
1907         mutex_unlock(&ses->session_mutex);
1908         if (rc)
1909                 goto get_ses_fail;
1910
1911         /* success, put it on the list */
1912         spin_lock(&cifs_tcp_ses_lock);
1913         list_add(&ses->smb_ses_list, &server->smb_ses_list);
1914         spin_unlock(&cifs_tcp_ses_lock);
1915
1916         FreeXid(xid);
1917         return ses;
1918
1919 get_ses_fail:
1920         sesInfoFree(ses);
1921         FreeXid(xid);
1922         return ERR_PTR(rc);
1923 }
1924
1925 static struct cifsTconInfo *
1926 cifs_find_tcon(struct cifsSesInfo *ses, const char *unc)
1927 {
1928         struct list_head *tmp;
1929         struct cifsTconInfo *tcon;
1930
1931         spin_lock(&cifs_tcp_ses_lock);
1932         list_for_each(tmp, &ses->tcon_list) {
1933                 tcon = list_entry(tmp, struct cifsTconInfo, tcon_list);
1934                 if (tcon->tidStatus == CifsExiting)
1935                         continue;
1936                 if (strncmp(tcon->treeName, unc, MAX_TREE_SIZE))
1937                         continue;
1938
1939                 ++tcon->tc_count;
1940                 spin_unlock(&cifs_tcp_ses_lock);
1941                 return tcon;
1942         }
1943         spin_unlock(&cifs_tcp_ses_lock);
1944         return NULL;
1945 }
1946
1947 static void
1948 cifs_put_tcon(struct cifsTconInfo *tcon)
1949 {
1950         int xid;
1951         struct cifsSesInfo *ses = tcon->ses;
1952
1953         cFYI(1, "%s: tc_count=%d\n", __func__, tcon->tc_count);
1954         spin_lock(&cifs_tcp_ses_lock);
1955         if (--tcon->tc_count > 0) {
1956                 spin_unlock(&cifs_tcp_ses_lock);
1957                 return;
1958         }
1959
1960         list_del_init(&tcon->tcon_list);
1961         spin_unlock(&cifs_tcp_ses_lock);
1962
1963         xid = GetXid();
1964         CIFSSMBTDis(xid, tcon);
1965         _FreeXid(xid);
1966
1967         cifs_fscache_release_super_cookie(tcon);
1968         tconInfoFree(tcon);
1969         cifs_put_smb_ses(ses);
1970 }
1971
1972 static struct cifsTconInfo *
1973 cifs_get_tcon(struct cifsSesInfo *ses, struct smb_vol *volume_info)
1974 {
1975         int rc, xid;
1976         struct cifsTconInfo *tcon;
1977
1978         tcon = cifs_find_tcon(ses, volume_info->UNC);
1979         if (tcon) {
1980                 cFYI(1, "Found match on UNC path");
1981                 /* existing tcon already has a reference */
1982                 cifs_put_smb_ses(ses);
1983                 if (tcon->seal != volume_info->seal)
1984                         cERROR(1, "transport encryption setting "
1985                                    "conflicts with existing tid");
1986                 return tcon;
1987         }
1988
1989         tcon = tconInfoAlloc();
1990         if (tcon == NULL) {
1991                 rc = -ENOMEM;
1992                 goto out_fail;
1993         }
1994
1995         tcon->ses = ses;
1996         if (volume_info->password) {
1997                 tcon->password = kstrdup(volume_info->password, GFP_KERNEL);
1998                 if (!tcon->password) {
1999                         rc = -ENOMEM;
2000                         goto out_fail;
2001                 }
2002         }
2003
2004         if (strchr(volume_info->UNC + 3, '\\') == NULL
2005             && strchr(volume_info->UNC + 3, '/') == NULL) {
2006                 cERROR(1, "Missing share name");
2007                 rc = -ENODEV;
2008                 goto out_fail;
2009         }
2010
2011         /* BB Do we need to wrap session_mutex around
2012          * this TCon call and Unix SetFS as
2013          * we do on SessSetup and reconnect? */
2014         xid = GetXid();
2015         rc = CIFSTCon(xid, ses, volume_info->UNC, tcon, volume_info->local_nls);
2016         FreeXid(xid);
2017         cFYI(1, "CIFS Tcon rc = %d", rc);
2018         if (rc)
2019                 goto out_fail;
2020
2021         if (volume_info->nodfs) {
2022                 tcon->Flags &= ~SMB_SHARE_IS_IN_DFS;
2023                 cFYI(1, "DFS disabled (%d)", tcon->Flags);
2024         }
2025         tcon->seal = volume_info->seal;
2026         /* we can have only one retry value for a connection
2027            to a share so for resources mounted more than once
2028            to the same server share the last value passed in
2029            for the retry flag is used */
2030         tcon->retry = volume_info->retry;
2031         tcon->nocase = volume_info->nocase;
2032         tcon->local_lease = volume_info->local_lease;
2033
2034         spin_lock(&cifs_tcp_ses_lock);
2035         list_add(&tcon->tcon_list, &ses->tcon_list);
2036         spin_unlock(&cifs_tcp_ses_lock);
2037
2038         cifs_fscache_get_super_cookie(tcon);
2039
2040         return tcon;
2041
2042 out_fail:
2043         tconInfoFree(tcon);
2044         return ERR_PTR(rc);
2045 }
2046
2047 void
2048 cifs_put_tlink(struct tcon_link *tlink)
2049 {
2050         if (!tlink || IS_ERR(tlink))
2051                 return;
2052
2053         if (!atomic_dec_and_test(&tlink->tl_count) ||
2054             test_bit(TCON_LINK_IN_TREE, &tlink->tl_flags)) {
2055                 tlink->tl_time = jiffies;
2056                 return;
2057         }
2058
2059         if (!IS_ERR(tlink_tcon(tlink)))
2060                 cifs_put_tcon(tlink_tcon(tlink));
2061         kfree(tlink);
2062         return;
2063 }
2064
2065 int
2066 get_dfs_path(int xid, struct cifsSesInfo *pSesInfo, const char *old_path,
2067              const struct nls_table *nls_codepage, unsigned int *pnum_referrals,
2068              struct dfs_info3_param **preferrals, int remap)
2069 {
2070         char *temp_unc;
2071         int rc = 0;
2072
2073         *pnum_referrals = 0;
2074         *preferrals = NULL;
2075
2076         if (pSesInfo->ipc_tid == 0) {
2077                 temp_unc = kmalloc(2 /* for slashes */ +
2078                         strnlen(pSesInfo->serverName,
2079                                 SERVER_NAME_LEN_WITH_NULL * 2)
2080                                  + 1 + 4 /* slash IPC$ */  + 2,
2081                                 GFP_KERNEL);
2082                 if (temp_unc == NULL)
2083                         return -ENOMEM;
2084                 temp_unc[0] = '\\';
2085                 temp_unc[1] = '\\';
2086                 strcpy(temp_unc + 2, pSesInfo->serverName);
2087                 strcpy(temp_unc + 2 + strlen(pSesInfo->serverName), "\\IPC$");
2088                 rc = CIFSTCon(xid, pSesInfo, temp_unc, NULL, nls_codepage);
2089                 cFYI(1, "CIFS Tcon rc = %d ipc_tid = %d", rc, pSesInfo->ipc_tid);
2090                 kfree(temp_unc);
2091         }
2092         if (rc == 0)
2093                 rc = CIFSGetDFSRefer(xid, pSesInfo, old_path, preferrals,
2094                                      pnum_referrals, nls_codepage, remap);
2095         /* BB map targetUNCs to dfs_info3 structures, here or
2096                 in CIFSGetDFSRefer BB */
2097
2098         return rc;
2099 }
2100
2101 #ifdef CONFIG_DEBUG_LOCK_ALLOC
2102 static struct lock_class_key cifs_key[2];
2103 static struct lock_class_key cifs_slock_key[2];
2104
2105 static inline void
2106 cifs_reclassify_socket4(struct socket *sock)
2107 {
2108         struct sock *sk = sock->sk;
2109         BUG_ON(sock_owned_by_user(sk));
2110         sock_lock_init_class_and_name(sk, "slock-AF_INET-CIFS",
2111                 &cifs_slock_key[0], "sk_lock-AF_INET-CIFS", &cifs_key[0]);
2112 }
2113
2114 static inline void
2115 cifs_reclassify_socket6(struct socket *sock)
2116 {
2117         struct sock *sk = sock->sk;
2118         BUG_ON(sock_owned_by_user(sk));
2119         sock_lock_init_class_and_name(sk, "slock-AF_INET6-CIFS",
2120                 &cifs_slock_key[1], "sk_lock-AF_INET6-CIFS", &cifs_key[1]);
2121 }
2122 #else
2123 static inline void
2124 cifs_reclassify_socket4(struct socket *sock)
2125 {
2126 }
2127
2128 static inline void
2129 cifs_reclassify_socket6(struct socket *sock)
2130 {
2131 }
2132 #endif
2133
2134 /* See RFC1001 section 14 on representation of Netbios names */
2135 static void rfc1002mangle(char *target, char *source, unsigned int length)
2136 {
2137         unsigned int i, j;
2138
2139         for (i = 0, j = 0; i < (length); i++) {
2140                 /* mask a nibble at a time and encode */
2141                 target[j] = 'A' + (0x0F & (source[i] >> 4));
2142                 target[j+1] = 'A' + (0x0F & source[i]);
2143                 j += 2;
2144         }
2145
2146 }
2147
2148 static int
2149 bind_socket(struct TCP_Server_Info *server)
2150 {
2151         int rc = 0;
2152         if (server->srcaddr.ss_family != AF_UNSPEC) {
2153                 /* Bind to the specified local IP address */
2154                 struct socket *socket = server->ssocket;
2155                 rc = socket->ops->bind(socket,
2156                                        (struct sockaddr *) &server->srcaddr,
2157                                        sizeof(server->srcaddr));
2158                 if (rc < 0) {
2159                         struct sockaddr_in *saddr4;
2160                         struct sockaddr_in6 *saddr6;
2161                         saddr4 = (struct sockaddr_in *)&server->srcaddr;
2162                         saddr6 = (struct sockaddr_in6 *)&server->srcaddr;
2163                         if (saddr6->sin6_family == AF_INET6)
2164                                 cERROR(1, "cifs: "
2165                                        "Failed to bind to: %pI6c, error: %d\n",
2166                                        &saddr6->sin6_addr, rc);
2167                         else
2168                                 cERROR(1, "cifs: "
2169                                        "Failed to bind to: %pI4, error: %d\n",
2170                                        &saddr4->sin_addr.s_addr, rc);
2171                 }
2172         }
2173         return rc;
2174 }
2175
2176 static int
2177 ip_rfc1001_connect(struct TCP_Server_Info *server)
2178 {
2179         int rc = 0;
2180         /*
2181          * some servers require RFC1001 sessinit before sending
2182          * negprot - BB check reconnection in case where second
2183          * sessinit is sent but no second negprot
2184          */
2185         struct rfc1002_session_packet *ses_init_buf;
2186         struct smb_hdr *smb_buf;
2187         ses_init_buf = kzalloc(sizeof(struct rfc1002_session_packet),
2188                                GFP_KERNEL);
2189         if (ses_init_buf) {
2190                 ses_init_buf->trailer.session_req.called_len = 32;
2191
2192                 if (server->server_RFC1001_name &&
2193                     server->server_RFC1001_name[0] != 0)
2194                         rfc1002mangle(ses_init_buf->trailer.
2195                                       session_req.called_name,
2196                                       server->server_RFC1001_name,
2197                                       RFC1001_NAME_LEN_WITH_NULL);
2198                 else
2199                         rfc1002mangle(ses_init_buf->trailer.
2200                                       session_req.called_name,
2201                                       DEFAULT_CIFS_CALLED_NAME,
2202                                       RFC1001_NAME_LEN_WITH_NULL);
2203
2204                 ses_init_buf->trailer.session_req.calling_len = 32;
2205
2206                 /*
2207                  * calling name ends in null (byte 16) from old smb
2208                  * convention.
2209                  */
2210                 if (server->workstation_RFC1001_name &&
2211                     server->workstation_RFC1001_name[0] != 0)
2212                         rfc1002mangle(ses_init_buf->trailer.
2213                                       session_req.calling_name,
2214                                       server->workstation_RFC1001_name,
2215                                       RFC1001_NAME_LEN_WITH_NULL);
2216                 else
2217                         rfc1002mangle(ses_init_buf->trailer.
2218                                       session_req.calling_name,
2219                                       "LINUX_CIFS_CLNT",
2220                                       RFC1001_NAME_LEN_WITH_NULL);
2221
2222                 ses_init_buf->trailer.session_req.scope1 = 0;
2223                 ses_init_buf->trailer.session_req.scope2 = 0;
2224                 smb_buf = (struct smb_hdr *)ses_init_buf;
2225
2226                 /* sizeof RFC1002_SESSION_REQUEST with no scope */
2227                 smb_buf->smb_buf_length = 0x81000044;
2228                 rc = smb_send(server, smb_buf, 0x44);
2229                 kfree(ses_init_buf);
2230                 /*
2231                  * RFC1001 layer in at least one server
2232                  * requires very short break before negprot
2233                  * presumably because not expecting negprot
2234                  * to follow so fast.  This is a simple
2235                  * solution that works without
2236                  * complicating the code and causes no
2237                  * significant slowing down on mount
2238                  * for everyone else
2239                  */
2240                 usleep_range(1000, 2000);
2241         }
2242         /*
2243          * else the negprot may still work without this
2244          * even though malloc failed
2245          */
2246
2247         return rc;
2248 }
2249
2250 static int
2251 generic_ip_connect(struct TCP_Server_Info *server)
2252 {
2253         int rc = 0;
2254         unsigned short int sport;
2255         int slen, sfamily;
2256         struct socket *socket = server->ssocket;
2257         struct sockaddr *saddr;
2258
2259         saddr = (struct sockaddr *) &server->dstaddr;
2260
2261         if (server->dstaddr.ss_family == AF_INET6) {
2262                 sport = ((struct sockaddr_in6 *) saddr)->sin6_port;
2263                 slen = sizeof(struct sockaddr_in6);
2264                 sfamily = AF_INET6;
2265         } else {
2266                 sport = ((struct sockaddr_in *) saddr)->sin_port;
2267                 slen = sizeof(struct sockaddr_in);
2268                 sfamily = AF_INET;
2269         }
2270
2271         if (socket == NULL) {
2272                 rc = sock_create_kern(sfamily, SOCK_STREAM,
2273                                       IPPROTO_TCP, &socket);
2274                 if (rc < 0) {
2275                         cERROR(1, "Error %d creating socket", rc);
2276                         server->ssocket = NULL;
2277                         return rc;
2278                 }
2279
2280                 /* BB other socket options to set KEEPALIVE, NODELAY? */
2281                 cFYI(1, "Socket created");
2282                 server->ssocket = socket;
2283                 socket->sk->sk_allocation = GFP_NOFS;
2284                 if (sfamily == AF_INET6)
2285                         cifs_reclassify_socket6(socket);
2286                 else
2287                         cifs_reclassify_socket4(socket);
2288         }
2289
2290         rc = bind_socket(server);
2291         if (rc < 0)
2292                 return rc;
2293
2294         rc = socket->ops->connect(socket, saddr, slen, 0);
2295         if (rc < 0) {
2296                 cFYI(1, "Error %d connecting to server", rc);
2297                 sock_release(socket);
2298                 server->ssocket = NULL;
2299                 return rc;
2300         }
2301
2302         /*
2303          * Eventually check for other socket options to change from
2304          * the default. sock_setsockopt not used because it expects
2305          * user space buffer
2306          */
2307         socket->sk->sk_rcvtimeo = 7 * HZ;
2308         socket->sk->sk_sndtimeo = 5 * HZ;
2309
2310         /* make the bufsizes depend on wsize/rsize and max requests */
2311         if (server->noautotune) {
2312                 if (socket->sk->sk_sndbuf < (200 * 1024))
2313                         socket->sk->sk_sndbuf = 200 * 1024;
2314                 if (socket->sk->sk_rcvbuf < (140 * 1024))
2315                         socket->sk->sk_rcvbuf = 140 * 1024;
2316         }
2317
2318         if (server->tcp_nodelay) {
2319                 int val = 1;
2320                 rc = kernel_setsockopt(socket, SOL_TCP, TCP_NODELAY,
2321                                 (char *)&val, sizeof(val));
2322                 if (rc)
2323                         cFYI(1, "set TCP_NODELAY socket option error %d", rc);
2324         }
2325
2326          cFYI(1, "sndbuf %d rcvbuf %d rcvtimeo 0x%lx",
2327                  socket->sk->sk_sndbuf,
2328                  socket->sk->sk_rcvbuf, socket->sk->sk_rcvtimeo);
2329
2330         if (sport == htons(RFC1001_PORT))
2331                 rc = ip_rfc1001_connect(server);
2332
2333         return rc;
2334 }
2335
2336 static int
2337 ip_connect(struct TCP_Server_Info *server)
2338 {
2339         unsigned short int *sport;
2340         struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)&server->dstaddr;
2341         struct sockaddr_in *addr = (struct sockaddr_in *)&server->dstaddr;
2342
2343         if (server->dstaddr.ss_family == AF_INET6)
2344                 sport = &addr6->sin6_port;
2345         else
2346                 sport = &addr->sin_port;
2347
2348         if (*sport == 0) {
2349                 int rc;
2350
2351                 /* try with 445 port at first */
2352                 *sport = htons(CIFS_PORT);
2353
2354                 rc = generic_ip_connect(server);
2355                 if (rc >= 0)
2356                         return rc;
2357
2358                 /* if it failed, try with 139 port */
2359                 *sport = htons(RFC1001_PORT);
2360         }
2361
2362         return generic_ip_connect(server);
2363 }
2364
2365 void reset_cifs_unix_caps(int xid, struct cifsTconInfo *tcon,
2366                           struct super_block *sb, struct smb_vol *vol_info)
2367 {
2368         /* if we are reconnecting then should we check to see if
2369          * any requested capabilities changed locally e.g. via
2370          * remount but we can not do much about it here
2371          * if they have (even if we could detect it by the following)
2372          * Perhaps we could add a backpointer to array of sb from tcon
2373          * or if we change to make all sb to same share the same
2374          * sb as NFS - then we only have one backpointer to sb.
2375          * What if we wanted to mount the server share twice once with
2376          * and once without posixacls or posix paths? */
2377         __u64 saved_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2378
2379         if (vol_info && vol_info->no_linux_ext) {
2380                 tcon->fsUnixInfo.Capability = 0;
2381                 tcon->unix_ext = 0; /* Unix Extensions disabled */
2382                 cFYI(1, "Linux protocol extensions disabled");
2383                 return;
2384         } else if (vol_info)
2385                 tcon->unix_ext = 1; /* Unix Extensions supported */
2386
2387         if (tcon->unix_ext == 0) {
2388                 cFYI(1, "Unix extensions disabled so not set on reconnect");
2389                 return;
2390         }
2391
2392         if (!CIFSSMBQFSUnixInfo(xid, tcon)) {
2393                 __u64 cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2394
2395                 /* check for reconnect case in which we do not
2396                    want to change the mount behavior if we can avoid it */
2397                 if (vol_info == NULL) {
2398                         /* turn off POSIX ACL and PATHNAMES if not set
2399                            originally at mount time */
2400                         if ((saved_cap & CIFS_UNIX_POSIX_ACL_CAP) == 0)
2401                                 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2402                         if ((saved_cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2403                                 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2404                                         cERROR(1, "POSIXPATH support change");
2405                                 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2406                         } else if ((cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2407                                 cERROR(1, "possible reconnect error");
2408                                 cERROR(1, "server disabled POSIX path support");
2409                         }
2410                 }
2411
2412                 cap &= CIFS_UNIX_CAP_MASK;
2413                 if (vol_info && vol_info->no_psx_acl)
2414                         cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2415                 else if (CIFS_UNIX_POSIX_ACL_CAP & cap) {
2416                         cFYI(1, "negotiated posix acl support");
2417                         if (sb)
2418                                 sb->s_flags |= MS_POSIXACL;
2419                 }
2420
2421                 if (vol_info && vol_info->posix_paths == 0)
2422                         cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2423                 else if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) {
2424                         cFYI(1, "negotiate posix pathnames");
2425                         if (sb)
2426                                 CIFS_SB(sb)->mnt_cifs_flags |=
2427                                         CIFS_MOUNT_POSIX_PATHS;
2428                 }
2429
2430                 /* We might be setting the path sep back to a different
2431                 form if we are reconnecting and the server switched its
2432                 posix path capability for this share */
2433                 if (sb && (CIFS_SB(sb)->prepathlen > 0))
2434                         CIFS_SB(sb)->prepath[0] = CIFS_DIR_SEP(CIFS_SB(sb));
2435
2436                 if (sb && (CIFS_SB(sb)->rsize > 127 * 1024)) {
2437                         if ((cap & CIFS_UNIX_LARGE_READ_CAP) == 0) {
2438                                 CIFS_SB(sb)->rsize = 127 * 1024;
2439                                 cFYI(DBG2, "larger reads not supported by srv");
2440                         }
2441                 }
2442
2443
2444                 cFYI(1, "Negotiate caps 0x%x", (int)cap);
2445 #ifdef CONFIG_CIFS_DEBUG2
2446                 if (cap & CIFS_UNIX_FCNTL_CAP)
2447                         cFYI(1, "FCNTL cap");
2448                 if (cap & CIFS_UNIX_EXTATTR_CAP)
2449                         cFYI(1, "EXTATTR cap");
2450                 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2451                         cFYI(1, "POSIX path cap");
2452                 if (cap & CIFS_UNIX_XATTR_CAP)
2453                         cFYI(1, "XATTR cap");
2454                 if (cap & CIFS_UNIX_POSIX_ACL_CAP)
2455                         cFYI(1, "POSIX ACL cap");
2456                 if (cap & CIFS_UNIX_LARGE_READ_CAP)
2457                         cFYI(1, "very large read cap");
2458                 if (cap & CIFS_UNIX_LARGE_WRITE_CAP)
2459                         cFYI(1, "very large write cap");
2460 #endif /* CIFS_DEBUG2 */
2461                 if (CIFSSMBSetFSUnixInfo(xid, tcon, cap)) {
2462                         if (vol_info == NULL) {
2463                                 cFYI(1, "resetting capabilities failed");
2464                         } else
2465                                 cERROR(1, "Negotiating Unix capabilities "
2466                                            "with the server failed.  Consider "
2467                                            "mounting with the Unix Extensions\n"
2468                                            "disabled, if problems are found, "
2469                                            "by specifying the nounix mount "
2470                                            "option.");
2471
2472                 }
2473         }
2474 }
2475
2476 static void
2477 convert_delimiter(char *path, char delim)
2478 {
2479         int i;
2480         char old_delim;
2481
2482         if (path == NULL)
2483                 return;
2484
2485         if (delim == '/')
2486                 old_delim = '\\';
2487         else
2488                 old_delim = '/';
2489
2490         for (i = 0; path[i] != '\0'; i++) {
2491                 if (path[i] == old_delim)
2492                         path[i] = delim;
2493         }
2494 }
2495
2496 static void setup_cifs_sb(struct smb_vol *pvolume_info,
2497                           struct cifs_sb_info *cifs_sb)
2498 {
2499         INIT_DELAYED_WORK(&cifs_sb->prune_tlinks, cifs_prune_tlinks);
2500
2501         if (pvolume_info->rsize > CIFSMaxBufSize) {
2502                 cERROR(1, "rsize %d too large, using MaxBufSize",
2503                         pvolume_info->rsize);
2504                 cifs_sb->rsize = CIFSMaxBufSize;
2505         } else if ((pvolume_info->rsize) &&
2506                         (pvolume_info->rsize <= CIFSMaxBufSize))
2507                 cifs_sb->rsize = pvolume_info->rsize;
2508         else /* default */
2509                 cifs_sb->rsize = CIFSMaxBufSize;
2510
2511         if (pvolume_info->wsize > PAGEVEC_SIZE * PAGE_CACHE_SIZE) {
2512                 cERROR(1, "wsize %d too large, using 4096 instead",
2513                           pvolume_info->wsize);
2514                 cifs_sb->wsize = 4096;
2515         } else if (pvolume_info->wsize)
2516                 cifs_sb->wsize = pvolume_info->wsize;
2517         else
2518                 cifs_sb->wsize = min_t(const int,
2519                                         PAGEVEC_SIZE * PAGE_CACHE_SIZE,
2520                                         127*1024);
2521                 /* old default of CIFSMaxBufSize was too small now
2522                    that SMB Write2 can send multiple pages in kvec.
2523                    RFC1001 does not describe what happens when frame
2524                    bigger than 128K is sent so use that as max in
2525                    conjunction with 52K kvec constraint on arch with 4K
2526                    page size  */
2527
2528         if (cifs_sb->rsize < 2048) {
2529                 cifs_sb->rsize = 2048;
2530                 /* Windows ME may prefer this */
2531                 cFYI(1, "readsize set to minimum: 2048");
2532         }
2533         /* calculate prepath */
2534         cifs_sb->prepath = pvolume_info->prepath;
2535         if (cifs_sb->prepath) {
2536                 cifs_sb->prepathlen = strlen(cifs_sb->prepath);
2537                 /* we can not convert the / to \ in the path
2538                 separators in the prefixpath yet because we do not
2539                 know (until reset_cifs_unix_caps is called later)
2540                 whether POSIX PATH CAP is available. We normalize
2541                 the / to \ after reset_cifs_unix_caps is called */
2542                 pvolume_info->prepath = NULL;
2543         } else
2544                 cifs_sb->prepathlen = 0;
2545         cifs_sb->mnt_uid = pvolume_info->linux_uid;
2546         cifs_sb->mnt_gid = pvolume_info->linux_gid;
2547         cifs_sb->mnt_file_mode = pvolume_info->file_mode;
2548         cifs_sb->mnt_dir_mode = pvolume_info->dir_mode;
2549         cFYI(1, "file mode: 0x%x  dir mode: 0x%x",
2550                 cifs_sb->mnt_file_mode, cifs_sb->mnt_dir_mode);
2551
2552         cifs_sb->actimeo = pvolume_info->actimeo;
2553
2554         if (pvolume_info->noperm)
2555                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_PERM;
2556         if (pvolume_info->setuids)
2557                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SET_UID;
2558         if (pvolume_info->server_ino)
2559                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SERVER_INUM;
2560         if (pvolume_info->remap)
2561                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MAP_SPECIAL_CHR;
2562         if (pvolume_info->no_xattr)
2563                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_XATTR;
2564         if (pvolume_info->sfu_emul)
2565                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_UNX_EMUL;
2566         if (pvolume_info->nobrl)
2567                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_BRL;
2568         if (pvolume_info->nostrictsync)
2569                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOSSYNC;
2570         if (pvolume_info->mand_lock)
2571                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOPOSIXBRL;
2572         if (pvolume_info->cifs_acl)
2573                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_ACL;
2574         if (pvolume_info->override_uid)
2575                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_UID;
2576         if (pvolume_info->override_gid)
2577                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_GID;
2578         if (pvolume_info->dynperm)
2579                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DYNPERM;
2580         if (pvolume_info->fsc)
2581                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_FSCACHE;
2582         if (pvolume_info->multiuser)
2583                 cifs_sb->mnt_cifs_flags |= (CIFS_MOUNT_MULTIUSER |
2584                                             CIFS_MOUNT_NO_PERM);
2585         if (pvolume_info->direct_io) {
2586                 cFYI(1, "mounting share using direct i/o");
2587                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DIRECT_IO;
2588         }
2589         if (pvolume_info->mfsymlinks) {
2590                 if (pvolume_info->sfu_emul) {
2591                         cERROR(1,  "mount option mfsymlinks ignored if sfu "
2592                                    "mount option is used");
2593                 } else {
2594                         cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MF_SYMLINKS;
2595                 }
2596         }
2597
2598         if ((pvolume_info->cifs_acl) && (pvolume_info->dynperm))
2599                 cERROR(1, "mount option dynperm ignored if cifsacl "
2600                            "mount option supported");
2601 }
2602
2603 static int
2604 is_path_accessible(int xid, struct cifsTconInfo *tcon,
2605                    struct cifs_sb_info *cifs_sb, const char *full_path)
2606 {
2607         int rc;
2608         FILE_ALL_INFO *pfile_info;
2609
2610         pfile_info = kmalloc(sizeof(FILE_ALL_INFO), GFP_KERNEL);
2611         if (pfile_info == NULL)
2612                 return -ENOMEM;
2613
2614         rc = CIFSSMBQPathInfo(xid, tcon, full_path, pfile_info,
2615                               0 /* not legacy */, cifs_sb->local_nls,
2616                               cifs_sb->mnt_cifs_flags &
2617                                 CIFS_MOUNT_MAP_SPECIAL_CHR);
2618         kfree(pfile_info);
2619         return rc;
2620 }
2621
2622 static void
2623 cleanup_volume_info(struct smb_vol **pvolume_info)
2624 {
2625         struct smb_vol *volume_info;
2626
2627         if (!pvolume_info || !*pvolume_info)
2628                 return;
2629
2630         volume_info = *pvolume_info;
2631         kzfree(volume_info->password);
2632         kfree(volume_info->UNC);
2633         kfree(volume_info->prepath);
2634         kfree(volume_info);
2635         *pvolume_info = NULL;
2636         return;
2637 }
2638
2639 #ifdef CONFIG_CIFS_DFS_UPCALL
2640 /* build_path_to_root returns full path to root when
2641  * we do not have an exiting connection (tcon) */
2642 static char *
2643 build_unc_path_to_root(const struct smb_vol *volume_info,
2644                 const struct cifs_sb_info *cifs_sb)
2645 {
2646         char *full_path;
2647
2648         int unc_len = strnlen(volume_info->UNC, MAX_TREE_SIZE + 1);
2649         full_path = kmalloc(unc_len + cifs_sb->prepathlen + 1, GFP_KERNEL);
2650         if (full_path == NULL)
2651                 return ERR_PTR(-ENOMEM);
2652
2653         strncpy(full_path, volume_info->UNC, unc_len);
2654         if (cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) {
2655                 int i;
2656                 for (i = 0; i < unc_len; i++) {
2657                         if (full_path[i] == '\\')
2658                                 full_path[i] = '/';
2659                 }
2660         }
2661
2662         if (cifs_sb->prepathlen)
2663                 strncpy(full_path + unc_len, cifs_sb->prepath,
2664                                 cifs_sb->prepathlen);
2665
2666         full_path[unc_len + cifs_sb->prepathlen] = 0; /* add trailing null */
2667         return full_path;
2668 }
2669 #endif
2670
2671 int
2672 cifs_mount(struct super_block *sb, struct cifs_sb_info *cifs_sb,
2673                 char *mount_data_global, const char *devname)
2674 {
2675         int rc;
2676         int xid;
2677         struct smb_vol *volume_info;
2678         struct cifsSesInfo *pSesInfo;
2679         struct cifsTconInfo *tcon;
2680         struct TCP_Server_Info *srvTcp;
2681         char   *full_path;
2682         char *mount_data = mount_data_global;
2683         struct tcon_link *tlink;
2684 #ifdef CONFIG_CIFS_DFS_UPCALL
2685         struct dfs_info3_param *referrals = NULL;
2686         unsigned int num_referrals = 0;
2687         int referral_walks_count = 0;
2688 try_mount_again:
2689 #endif
2690         rc = 0;
2691         tcon = NULL;
2692         pSesInfo = NULL;
2693         srvTcp = NULL;
2694         full_path = NULL;
2695         tlink = NULL;
2696
2697         xid = GetXid();
2698
2699         volume_info = kzalloc(sizeof(struct smb_vol), GFP_KERNEL);
2700         if (!volume_info) {
2701                 rc = -ENOMEM;
2702                 goto out;
2703         }
2704
2705         if (cifs_parse_mount_options(mount_data, devname, volume_info)) {
2706                 rc = -EINVAL;
2707                 goto out;
2708         }
2709
2710         if (volume_info->nullauth) {
2711                 cFYI(1, "null user");
2712                 volume_info->username = "";
2713         } else if (volume_info->username) {
2714                 /* BB fixme parse for domain name here */
2715                 cFYI(1, "Username: %s", volume_info->username);
2716         } else {
2717                 cifserror("No username specified");
2718         /* In userspace mount helper we can get user name from alternate
2719            locations such as env variables and files on disk */
2720                 rc = -EINVAL;
2721                 goto out;
2722         }
2723
2724         /* this is needed for ASCII cp to Unicode converts */
2725         if (volume_info->iocharset == NULL) {
2726                 /* load_nls_default cannot return null */
2727                 volume_info->local_nls = load_nls_default();
2728         } else {
2729                 volume_info->local_nls = load_nls(volume_info->iocharset);
2730                 if (volume_info->local_nls == NULL) {
2731                         cERROR(1, "CIFS mount error: iocharset %s not found",
2732                                  volume_info->iocharset);
2733                         rc = -ELIBACC;
2734                         goto out;
2735                 }
2736         }
2737         cifs_sb->local_nls = volume_info->local_nls;
2738
2739         /* get a reference to a tcp session */
2740         srvTcp = cifs_get_tcp_session(volume_info);
2741         if (IS_ERR(srvTcp)) {
2742                 rc = PTR_ERR(srvTcp);
2743                 goto out;
2744         }
2745
2746         /* get a reference to a SMB session */
2747         pSesInfo = cifs_get_smb_ses(srvTcp, volume_info);
2748         if (IS_ERR(pSesInfo)) {
2749                 rc = PTR_ERR(pSesInfo);
2750                 pSesInfo = NULL;
2751                 goto mount_fail_check;
2752         }
2753
2754         setup_cifs_sb(volume_info, cifs_sb);
2755         if (pSesInfo->capabilities & CAP_LARGE_FILES)
2756                 sb->s_maxbytes = MAX_LFS_FILESIZE;
2757         else
2758                 sb->s_maxbytes = MAX_NON_LFS;
2759
2760         /* BB FIXME fix time_gran to be larger for LANMAN sessions */
2761         sb->s_time_gran = 100;
2762
2763         /* search for existing tcon to this server share */
2764         tcon = cifs_get_tcon(pSesInfo, volume_info);
2765         if (IS_ERR(tcon)) {
2766                 rc = PTR_ERR(tcon);
2767                 tcon = NULL;
2768                 goto remote_path_check;
2769         }
2770
2771         /* do not care if following two calls succeed - informational */
2772         if (!tcon->ipc) {
2773                 CIFSSMBQFSDeviceInfo(xid, tcon);
2774                 CIFSSMBQFSAttributeInfo(xid, tcon);
2775         }
2776
2777         /* tell server which Unix caps we support */
2778         if (tcon->ses->capabilities & CAP_UNIX)
2779                 /* reset of caps checks mount to see if unix extensions
2780                    disabled for just this mount */
2781                 reset_cifs_unix_caps(xid, tcon, sb, volume_info);
2782         else
2783                 tcon->unix_ext = 0; /* server does not support them */
2784
2785         /* convert forward to back slashes in prepath here if needed */
2786         if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2787                 convert_delimiter(cifs_sb->prepath, CIFS_DIR_SEP(cifs_sb));
2788
2789         if ((tcon->unix_ext == 0) && (cifs_sb->rsize > (1024 * 127))) {
2790                 cifs_sb->rsize = 1024 * 127;
2791                 cFYI(DBG2, "no very large read support, rsize now 127K");
2792         }
2793         if (!(tcon->ses->capabilities & CAP_LARGE_WRITE_X))
2794                 cifs_sb->wsize = min(cifs_sb->wsize,
2795                                (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2796         if (!(tcon->ses->capabilities & CAP_LARGE_READ_X))
2797                 cifs_sb->rsize = min(cifs_sb->rsize,
2798                                (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2799
2800 remote_path_check:
2801         /* check if a whole path (including prepath) is not remote */
2802         if (!rc && cifs_sb->prepathlen && tcon) {
2803                 /* build_path_to_root works only when we have a valid tcon */
2804                 full_path = cifs_build_path_to_root(cifs_sb, tcon);
2805                 if (full_path == NULL) {
2806                         rc = -ENOMEM;
2807                         goto mount_fail_check;
2808                 }
2809                 rc = is_path_accessible(xid, tcon, cifs_sb, full_path);
2810                 if (rc != 0 && rc != -EREMOTE) {
2811                         kfree(full_path);
2812                         goto mount_fail_check;
2813                 }
2814                 kfree(full_path);
2815         }
2816
2817         /* get referral if needed */
2818         if (rc == -EREMOTE) {
2819 #ifdef CONFIG_CIFS_DFS_UPCALL
2820                 if (referral_walks_count > MAX_NESTED_LINKS) {
2821                         /*
2822                          * BB: when we implement proper loop detection,
2823                          *     we will remove this check. But now we need it
2824                          *     to prevent an indefinite loop if 'DFS tree' is
2825                          *     misconfigured (i.e. has loops).
2826                          */
2827                         rc = -ELOOP;
2828                         goto mount_fail_check;
2829                 }
2830                 /* convert forward to back slashes in prepath here if needed */
2831                 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2832                         convert_delimiter(cifs_sb->prepath,
2833                                         CIFS_DIR_SEP(cifs_sb));
2834                 full_path = build_unc_path_to_root(volume_info, cifs_sb);
2835                 if (IS_ERR(full_path)) {
2836                         rc = PTR_ERR(full_path);
2837                         goto mount_fail_check;
2838                 }
2839
2840                 cFYI(1, "Getting referral for: %s", full_path);
2841                 rc = get_dfs_path(xid, pSesInfo , full_path + 1,
2842                         cifs_sb->local_nls, &num_referrals, &referrals,
2843                         cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
2844                 if (!rc && num_referrals > 0) {
2845                         char *fake_devname = NULL;
2846
2847                         if (mount_data != mount_data_global)
2848                                 kfree(mount_data);
2849
2850                         mount_data = cifs_compose_mount_options(
2851                                         cifs_sb->mountdata, full_path + 1,
2852                                         referrals, &fake_devname);
2853
2854                         free_dfs_info_array(referrals, num_referrals);
2855                         kfree(fake_devname);
2856                         kfree(full_path);
2857
2858                         if (IS_ERR(mount_data)) {
2859                                 rc = PTR_ERR(mount_data);
2860                                 mount_data = NULL;
2861                                 goto mount_fail_check;
2862                         }
2863
2864                         if (tcon)
2865                                 cifs_put_tcon(tcon);
2866                         else if (pSesInfo)
2867                                 cifs_put_smb_ses(pSesInfo);
2868
2869                         cleanup_volume_info(&volume_info);
2870                         referral_walks_count++;
2871                         FreeXid(xid);
2872                         goto try_mount_again;
2873                 }
2874 #else /* No DFS support, return error on mount */
2875                 rc = -EOPNOTSUPP;
2876 #endif
2877         }
2878
2879         if (rc)
2880                 goto mount_fail_check;
2881
2882         /* now, hang the tcon off of the superblock */
2883         tlink = kzalloc(sizeof *tlink, GFP_KERNEL);
2884         if (tlink == NULL) {
2885                 rc = -ENOMEM;
2886                 goto mount_fail_check;
2887         }
2888
2889         tlink->tl_uid = pSesInfo->linux_uid;
2890         tlink->tl_tcon = tcon;
2891         tlink->tl_time = jiffies;
2892         set_bit(TCON_LINK_MASTER, &tlink->tl_flags);
2893         set_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
2894
2895         cifs_sb->master_tlink = tlink;
2896         spin_lock(&cifs_sb->tlink_tree_lock);
2897         tlink_rb_insert(&cifs_sb->tlink_tree, tlink);
2898         spin_unlock(&cifs_sb->tlink_tree_lock);
2899
2900         queue_delayed_work(system_nrt_wq, &cifs_sb->prune_tlinks,
2901                                 TLINK_IDLE_EXPIRE);
2902
2903 mount_fail_check:
2904         /* on error free sesinfo and tcon struct if needed */
2905         if (rc) {
2906                 if (mount_data != mount_data_global)
2907                         kfree(mount_data);
2908                 /* If find_unc succeeded then rc == 0 so we can not end */
2909                 /* up accidently freeing someone elses tcon struct */
2910                 if (tcon)
2911                         cifs_put_tcon(tcon);
2912                 else if (pSesInfo)
2913                         cifs_put_smb_ses(pSesInfo);
2914                 else
2915                         cifs_put_tcp_session(srvTcp);
2916                 goto out;
2917         }
2918
2919         /* volume_info->password is freed above when existing session found
2920         (in which case it is not needed anymore) but when new sesion is created
2921         the password ptr is put in the new session structure (in which case the
2922         password will be freed at unmount time) */
2923 out:
2924         /* zero out password before freeing */
2925         cleanup_volume_info(&volume_info);
2926         FreeXid(xid);
2927         return rc;
2928 }
2929
2930 int
2931 CIFSTCon(unsigned int xid, struct cifsSesInfo *ses,
2932          const char *tree, struct cifsTconInfo *tcon,
2933          const struct nls_table *nls_codepage)
2934 {
2935         struct smb_hdr *smb_buffer;
2936         struct smb_hdr *smb_buffer_response;
2937         TCONX_REQ *pSMB;
2938         TCONX_RSP *pSMBr;
2939         unsigned char *bcc_ptr;
2940         int rc = 0;
2941         int length, bytes_left;
2942         __u16 count;
2943
2944         if (ses == NULL)
2945                 return -EIO;
2946
2947         smb_buffer = cifs_buf_get();
2948         if (smb_buffer == NULL)
2949                 return -ENOMEM;
2950
2951         smb_buffer_response = smb_buffer;
2952
2953         header_assemble(smb_buffer, SMB_COM_TREE_CONNECT_ANDX,
2954                         NULL /*no tid */ , 4 /*wct */ );
2955
2956         smb_buffer->Mid = GetNextMid(ses->server);
2957         smb_buffer->Uid = ses->Suid;
2958         pSMB = (TCONX_REQ *) smb_buffer;
2959         pSMBr = (TCONX_RSP *) smb_buffer_response;
2960
2961         pSMB->AndXCommand = 0xFF;
2962         pSMB->Flags = cpu_to_le16(TCON_EXTENDED_SECINFO);
2963         bcc_ptr = &pSMB->Password[0];
2964         if ((ses->server->secMode) & SECMODE_USER) {
2965                 pSMB->PasswordLength = cpu_to_le16(1);  /* minimum */
2966                 *bcc_ptr = 0; /* password is null byte */
2967                 bcc_ptr++;              /* skip password */
2968                 /* already aligned so no need to do it below */
2969         } else {
2970                 pSMB->PasswordLength = cpu_to_le16(CIFS_SESS_KEY_SIZE);
2971                 /* BB FIXME add code to fail this if NTLMv2 or Kerberos
2972                    specified as required (when that support is added to
2973                    the vfs in the future) as only NTLM or the much
2974                    weaker LANMAN (which we do not send by default) is accepted
2975                    by Samba (not sure whether other servers allow
2976                    NTLMv2 password here) */
2977 #ifdef CONFIG_CIFS_WEAK_PW_HASH
2978                 if ((global_secflags & CIFSSEC_MAY_LANMAN) &&
2979                     (ses->server->secType == LANMAN))
2980                         calc_lanman_hash(tcon->password, ses->server->cryptkey,
2981                                          ses->server->secMode &
2982                                             SECMODE_PW_ENCRYPT ? true : false,
2983                                          bcc_ptr);
2984                 else
2985 #endif /* CIFS_WEAK_PW_HASH */
2986                 SMBNTencrypt(tcon->password, ses->server->cryptkey, bcc_ptr);
2987
2988                 bcc_ptr += CIFS_SESS_KEY_SIZE;
2989                 if (ses->capabilities & CAP_UNICODE) {
2990                         /* must align unicode strings */
2991                         *bcc_ptr = 0; /* null byte password */
2992                         bcc_ptr++;
2993                 }
2994         }
2995
2996         if (ses->server->secMode &
2997                         (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
2998                 smb_buffer->Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
2999
3000         if (ses->capabilities & CAP_STATUS32) {
3001                 smb_buffer->Flags2 |= SMBFLG2_ERR_STATUS;
3002         }
3003         if (ses->capabilities & CAP_DFS) {
3004                 smb_buffer->Flags2 |= SMBFLG2_DFS;
3005         }
3006         if (ses->capabilities & CAP_UNICODE) {
3007                 smb_buffer->Flags2 |= SMBFLG2_UNICODE;
3008                 length =
3009                     cifs_strtoUCS((__le16 *) bcc_ptr, tree,
3010                         6 /* max utf8 char length in bytes */ *
3011                         (/* server len*/ + 256 /* share len */), nls_codepage);
3012                 bcc_ptr += 2 * length;  /* convert num 16 bit words to bytes */
3013                 bcc_ptr += 2;   /* skip trailing null */
3014         } else {                /* ASCII */
3015                 strcpy(bcc_ptr, tree);
3016                 bcc_ptr += strlen(tree) + 1;
3017         }
3018         strcpy(bcc_ptr, "?????");
3019         bcc_ptr += strlen("?????");
3020         bcc_ptr += 1;
3021         count = bcc_ptr - &pSMB->Password[0];
3022         pSMB->hdr.smb_buf_length += count;
3023         pSMB->ByteCount = cpu_to_le16(count);
3024
3025         rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response, &length,
3026                          CIFS_STD_OP);
3027
3028         /* above now done in SendReceive */
3029         if ((rc == 0) && (tcon != NULL)) {
3030                 bool is_unicode;
3031
3032                 tcon->tidStatus = CifsGood;
3033                 tcon->need_reconnect = false;
3034                 tcon->tid = smb_buffer_response->Tid;
3035                 bcc_ptr = pByteArea(smb_buffer_response);
3036                 bytes_left = BCC(smb_buffer_response);
3037                 length = strnlen(bcc_ptr, bytes_left - 2);
3038                 if (smb_buffer->Flags2 & SMBFLG2_UNICODE)
3039                         is_unicode = true;
3040                 else
3041                         is_unicode = false;
3042
3043
3044                 /* skip service field (NB: this field is always ASCII) */
3045                 if (length == 3) {
3046                         if ((bcc_ptr[0] == 'I') && (bcc_ptr[1] == 'P') &&
3047                             (bcc_ptr[2] == 'C')) {
3048                                 cFYI(1, "IPC connection");
3049                                 tcon->ipc = 1;
3050                         }
3051                 } else if (length == 2) {
3052                         if ((bcc_ptr[0] == 'A') && (bcc_ptr[1] == ':')) {
3053                                 /* the most common case */
3054                                 cFYI(1, "disk share connection");
3055                         }
3056                 }
3057                 bcc_ptr += length + 1;
3058                 bytes_left -= (length + 1);
3059                 strncpy(tcon->treeName, tree, MAX_TREE_SIZE);
3060
3061                 /* mostly informational -- no need to fail on error here */
3062                 kfree(tcon->nativeFileSystem);
3063                 tcon->nativeFileSystem = cifs_strndup_from_ucs(bcc_ptr,
3064                                                       bytes_left, is_unicode,
3065                                                       nls_codepage);
3066
3067                 cFYI(1, "nativeFileSystem=%s", tcon->nativeFileSystem);
3068
3069                 if ((smb_buffer_response->WordCount == 3) ||
3070                          (smb_buffer_response->WordCount == 7))
3071                         /* field is in same location */
3072                         tcon->Flags = le16_to_cpu(pSMBr->OptionalSupport);
3073                 else
3074                         tcon->Flags = 0;
3075                 cFYI(1, "Tcon flags: 0x%x ", tcon->Flags);
3076         } else if ((rc == 0) && tcon == NULL) {
3077                 /* all we need to save for IPC$ connection */
3078                 ses->ipc_tid = smb_buffer_response->Tid;
3079         }
3080
3081         cifs_buf_release(smb_buffer);
3082         return rc;
3083 }
3084
3085 int
3086 cifs_umount(struct super_block *sb, struct cifs_sb_info *cifs_sb)
3087 {
3088         struct rb_root *root = &cifs_sb->tlink_tree;
3089         struct rb_node *node;
3090         struct tcon_link *tlink;
3091         char *tmp;
3092
3093         cancel_delayed_work_sync(&cifs_sb->prune_tlinks);
3094
3095         spin_lock(&cifs_sb->tlink_tree_lock);
3096         while ((node = rb_first(root))) {
3097                 tlink = rb_entry(node, struct tcon_link, tl_rbnode);
3098                 cifs_get_tlink(tlink);
3099                 clear_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3100                 rb_erase(node, root);
3101
3102                 spin_unlock(&cifs_sb->tlink_tree_lock);
3103                 cifs_put_tlink(tlink);
3104                 spin_lock(&cifs_sb->tlink_tree_lock);
3105         }
3106         spin_unlock(&cifs_sb->tlink_tree_lock);
3107
3108         tmp = cifs_sb->prepath;
3109         cifs_sb->prepathlen = 0;
3110         cifs_sb->prepath = NULL;
3111         kfree(tmp);
3112
3113         return 0;
3114 }
3115
3116 int cifs_negotiate_protocol(unsigned int xid, struct cifsSesInfo *ses)
3117 {
3118         int rc = 0;
3119         struct TCP_Server_Info *server = ses->server;
3120
3121         /* only send once per connect */
3122         if (server->maxBuf != 0)
3123                 return 0;
3124
3125         rc = CIFSSMBNegotiate(xid, ses);
3126         if (rc == -EAGAIN) {
3127                 /* retry only once on 1st time connection */
3128                 rc = CIFSSMBNegotiate(xid, ses);
3129                 if (rc == -EAGAIN)
3130                         rc = -EHOSTDOWN;
3131         }
3132         if (rc == 0) {
3133                 spin_lock(&GlobalMid_Lock);
3134                 if (server->tcpStatus != CifsExiting)
3135                         server->tcpStatus = CifsGood;
3136                 else
3137                         rc = -EHOSTDOWN;
3138                 spin_unlock(&GlobalMid_Lock);
3139
3140         }
3141
3142         return rc;
3143 }
3144
3145
3146 int cifs_setup_session(unsigned int xid, struct cifsSesInfo *ses,
3147                         struct nls_table *nls_info)
3148 {
3149         int rc = 0;
3150         struct TCP_Server_Info *server = ses->server;
3151
3152         ses->flags = 0;
3153         ses->capabilities = server->capabilities;
3154         if (linuxExtEnabled == 0)
3155                 ses->capabilities &= (~CAP_UNIX);
3156
3157         cFYI(1, "Security Mode: 0x%x Capabilities: 0x%x TimeAdjust: %d",
3158                  server->secMode, server->capabilities, server->timeAdj);
3159
3160         rc = CIFS_SessSetup(xid, ses, nls_info);
3161         if (rc) {
3162                 cERROR(1, "Send error in SessSetup = %d", rc);
3163         } else {
3164                 mutex_lock(&ses->server->srv_mutex);
3165                 if (!server->session_estab) {
3166                         server->session_key.response = ses->auth_key.response;
3167                         server->session_key.len = ses->auth_key.len;
3168                         server->sequence_number = 0x2;
3169                         server->session_estab = true;
3170                         ses->auth_key.response = NULL;
3171                 }
3172                 mutex_unlock(&server->srv_mutex);
3173
3174                 cFYI(1, "CIFS Session Established successfully");
3175                 spin_lock(&GlobalMid_Lock);
3176                 ses->status = CifsGood;
3177                 ses->need_reconnect = false;
3178                 spin_unlock(&GlobalMid_Lock);
3179         }
3180
3181         kfree(ses->auth_key.response);
3182         ses->auth_key.response = NULL;
3183         ses->auth_key.len = 0;
3184         kfree(ses->ntlmssp);
3185         ses->ntlmssp = NULL;
3186
3187         return rc;
3188 }
3189
3190 static struct cifsTconInfo *
3191 cifs_construct_tcon(struct cifs_sb_info *cifs_sb, uid_t fsuid)
3192 {
3193         struct cifsTconInfo *master_tcon = cifs_sb_master_tcon(cifs_sb);
3194         struct cifsSesInfo *ses;
3195         struct cifsTconInfo *tcon = NULL;
3196         struct smb_vol *vol_info;
3197         char username[MAX_USERNAME_SIZE + 1];
3198
3199         vol_info = kzalloc(sizeof(*vol_info), GFP_KERNEL);
3200         if (vol_info == NULL) {
3201                 tcon = ERR_PTR(-ENOMEM);
3202                 goto out;
3203         }
3204
3205         snprintf(username, MAX_USERNAME_SIZE, "krb50x%x", fsuid);
3206         vol_info->username = username;
3207         vol_info->local_nls = cifs_sb->local_nls;
3208         vol_info->linux_uid = fsuid;
3209         vol_info->cred_uid = fsuid;
3210         vol_info->UNC = master_tcon->treeName;
3211         vol_info->retry = master_tcon->retry;
3212         vol_info->nocase = master_tcon->nocase;
3213         vol_info->local_lease = master_tcon->local_lease;
3214         vol_info->no_linux_ext = !master_tcon->unix_ext;
3215
3216         /* FIXME: allow for other secFlg settings */
3217         vol_info->secFlg = CIFSSEC_MUST_KRB5;
3218
3219         /* get a reference for the same TCP session */
3220         spin_lock(&cifs_tcp_ses_lock);
3221         ++master_tcon->ses->server->srv_count;
3222         spin_unlock(&cifs_tcp_ses_lock);
3223
3224         ses = cifs_get_smb_ses(master_tcon->ses->server, vol_info);
3225         if (IS_ERR(ses)) {
3226                 tcon = (struct cifsTconInfo *)ses;
3227                 cifs_put_tcp_session(master_tcon->ses->server);
3228                 goto out;
3229         }
3230
3231         tcon = cifs_get_tcon(ses, vol_info);
3232         if (IS_ERR(tcon)) {
3233                 cifs_put_smb_ses(ses);
3234                 goto out;
3235         }
3236
3237         if (ses->capabilities & CAP_UNIX)
3238                 reset_cifs_unix_caps(0, tcon, NULL, vol_info);
3239 out:
3240         kfree(vol_info);
3241
3242         return tcon;
3243 }
3244
3245 static inline struct tcon_link *
3246 cifs_sb_master_tlink(struct cifs_sb_info *cifs_sb)
3247 {
3248         return cifs_sb->master_tlink;
3249 }
3250
3251 struct cifsTconInfo *
3252 cifs_sb_master_tcon(struct cifs_sb_info *cifs_sb)
3253 {
3254         return tlink_tcon(cifs_sb_master_tlink(cifs_sb));
3255 }
3256
3257 static int
3258 cifs_sb_tcon_pending_wait(void *unused)
3259 {
3260         schedule();
3261         return signal_pending(current) ? -ERESTARTSYS : 0;
3262 }
3263
3264 /* find and return a tlink with given uid */
3265 static struct tcon_link *
3266 tlink_rb_search(struct rb_root *root, uid_t uid)
3267 {
3268         struct rb_node *node = root->rb_node;
3269         struct tcon_link *tlink;
3270
3271         while (node) {
3272                 tlink = rb_entry(node, struct tcon_link, tl_rbnode);
3273
3274                 if (tlink->tl_uid > uid)
3275                         node = node->rb_left;
3276                 else if (tlink->tl_uid < uid)
3277                         node = node->rb_right;
3278                 else
3279                         return tlink;
3280         }
3281         return NULL;
3282 }
3283
3284 /* insert a tcon_link into the tree */
3285 static void
3286 tlink_rb_insert(struct rb_root *root, struct tcon_link *new_tlink)
3287 {
3288         struct rb_node **new = &(root->rb_node), *parent = NULL;
3289         struct tcon_link *tlink;
3290
3291         while (*new) {
3292                 tlink = rb_entry(*new, struct tcon_link, tl_rbnode);
3293                 parent = *new;
3294
3295                 if (tlink->tl_uid > new_tlink->tl_uid)
3296                         new = &((*new)->rb_left);
3297                 else
3298                         new = &((*new)->rb_right);
3299         }
3300
3301         rb_link_node(&new_tlink->tl_rbnode, parent, new);
3302         rb_insert_color(&new_tlink->tl_rbnode, root);
3303 }
3304
3305 /*
3306  * Find or construct an appropriate tcon given a cifs_sb and the fsuid of the
3307  * current task.
3308  *
3309  * If the superblock doesn't refer to a multiuser mount, then just return
3310  * the master tcon for the mount.
3311  *
3312  * First, search the rbtree for an existing tcon for this fsuid. If one
3313  * exists, then check to see if it's pending construction. If it is then wait
3314  * for construction to complete. Once it's no longer pending, check to see if
3315  * it failed and either return an error or retry construction, depending on
3316  * the timeout.
3317  *
3318  * If one doesn't exist then insert a new tcon_link struct into the tree and
3319  * try to construct a new one.
3320  */
3321 struct tcon_link *
3322 cifs_sb_tlink(struct cifs_sb_info *cifs_sb)
3323 {
3324         int ret;
3325         uid_t fsuid = current_fsuid();
3326         struct tcon_link *tlink, *newtlink;
3327
3328         if (!(cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MULTIUSER))
3329                 return cifs_get_tlink(cifs_sb_master_tlink(cifs_sb));
3330
3331         spin_lock(&cifs_sb->tlink_tree_lock);
3332         tlink = tlink_rb_search(&cifs_sb->tlink_tree, fsuid);
3333         if (tlink)
3334                 cifs_get_tlink(tlink);
3335         spin_unlock(&cifs_sb->tlink_tree_lock);
3336
3337         if (tlink == NULL) {
3338                 newtlink = kzalloc(sizeof(*tlink), GFP_KERNEL);
3339                 if (newtlink == NULL)
3340                         return ERR_PTR(-ENOMEM);
3341                 newtlink->tl_uid = fsuid;
3342                 newtlink->tl_tcon = ERR_PTR(-EACCES);
3343                 set_bit(TCON_LINK_PENDING, &newtlink->tl_flags);
3344                 set_bit(TCON_LINK_IN_TREE, &newtlink->tl_flags);
3345                 cifs_get_tlink(newtlink);
3346
3347                 spin_lock(&cifs_sb->tlink_tree_lock);
3348                 /* was one inserted after previous search? */
3349                 tlink = tlink_rb_search(&cifs_sb->tlink_tree, fsuid);
3350                 if (tlink) {
3351                         cifs_get_tlink(tlink);
3352                         spin_unlock(&cifs_sb->tlink_tree_lock);
3353                         kfree(newtlink);
3354                         goto wait_for_construction;
3355                 }
3356                 tlink = newtlink;
3357                 tlink_rb_insert(&cifs_sb->tlink_tree, tlink);
3358                 spin_unlock(&cifs_sb->tlink_tree_lock);
3359         } else {
3360 wait_for_construction:
3361                 ret = wait_on_bit(&tlink->tl_flags, TCON_LINK_PENDING,
3362                                   cifs_sb_tcon_pending_wait,
3363                                   TASK_INTERRUPTIBLE);
3364                 if (ret) {
3365                         cifs_put_tlink(tlink);
3366                         return ERR_PTR(ret);
3367                 }
3368
3369                 /* if it's good, return it */
3370                 if (!IS_ERR(tlink->tl_tcon))
3371                         return tlink;
3372
3373                 /* return error if we tried this already recently */
3374                 if (time_before(jiffies, tlink->tl_time + TLINK_ERROR_EXPIRE)) {
3375                         cifs_put_tlink(tlink);
3376                         return ERR_PTR(-EACCES);
3377                 }
3378
3379                 if (test_and_set_bit(TCON_LINK_PENDING, &tlink->tl_flags))
3380                         goto wait_for_construction;
3381         }
3382
3383         tlink->tl_tcon = cifs_construct_tcon(cifs_sb, fsuid);
3384         clear_bit(TCON_LINK_PENDING, &tlink->tl_flags);
3385         wake_up_bit(&tlink->tl_flags, TCON_LINK_PENDING);
3386
3387         if (IS_ERR(tlink->tl_tcon)) {
3388                 cifs_put_tlink(tlink);
3389                 return ERR_PTR(-EACCES);
3390         }
3391
3392         return tlink;
3393 }
3394
3395 /*
3396  * periodic workqueue job that scans tcon_tree for a superblock and closes
3397  * out tcons.
3398  */
3399 static void
3400 cifs_prune_tlinks(struct work_struct *work)
3401 {
3402         struct cifs_sb_info *cifs_sb = container_of(work, struct cifs_sb_info,
3403                                                     prune_tlinks.work);
3404         struct rb_root *root = &cifs_sb->tlink_tree;
3405         struct rb_node *node = rb_first(root);
3406         struct rb_node *tmp;
3407         struct tcon_link *tlink;
3408
3409         /*
3410          * Because we drop the spinlock in the loop in order to put the tlink
3411          * it's not guarded against removal of links from the tree. The only
3412          * places that remove entries from the tree are this function and
3413          * umounts. Because this function is non-reentrant and is canceled
3414          * before umount can proceed, this is safe.
3415          */
3416         spin_lock(&cifs_sb->tlink_tree_lock);
3417         node = rb_first(root);
3418         while (node != NULL) {
3419                 tmp = node;
3420                 node = rb_next(tmp);
3421                 tlink = rb_entry(tmp, struct tcon_link, tl_rbnode);
3422
3423                 if (test_bit(TCON_LINK_MASTER, &tlink->tl_flags) ||
3424                     atomic_read(&tlink->tl_count) != 0 ||
3425                     time_after(tlink->tl_time + TLINK_IDLE_EXPIRE, jiffies))
3426                         continue;
3427
3428                 cifs_get_tlink(tlink);
3429                 clear_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3430                 rb_erase(tmp, root);
3431
3432                 spin_unlock(&cifs_sb->tlink_tree_lock);
3433                 cifs_put_tlink(tlink);
3434                 spin_lock(&cifs_sb->tlink_tree_lock);
3435         }
3436         spin_unlock(&cifs_sb->tlink_tree_lock);
3437
3438         queue_delayed_work(system_nrt_wq, &cifs_sb->prune_tlinks,
3439                                 TLINK_IDLE_EXPIRE);
3440 }