fs/cifs/connect.c

   1 /*
   2  *   fs/cifs/connect.c
   3  *
   4  *   Copyright (C) International Business Machines  Corp., 2002,2009
   5  *   Author(s): Steve French (sfrench@us.ibm.com)
   6  *
   7  *   This library is free software; you can redistribute it and/or modify
   8  *   it under the terms of the GNU Lesser General Public License as published
   9  *   by the Free Software Foundation; either version 2.1 of the License, or
  10  *   (at your option) any later version.
  11  *
  12  *   This library is distributed in the hope that it will be useful,
  13  *   but WITHOUT ANY WARRANTY; without even the implied warranty of
  14  *   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See
  15  *   the GNU Lesser General Public License for more details.
  16  *
  17  *   You should have received a copy of the GNU Lesser General Public License
  18  *   along with this library; if not, write to the Free Software
  19  *   Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
  20  */
  21 #include <linux/fs.h>
  22 #include <linux/net.h>
  23 #include <linux/string.h>
  24 #include <linux/list.h>
  25 #include <linux/wait.h>
  26 #include <linux/slab.h>
  27 #include <linux/pagemap.h>
  28 #include <linux/ctype.h>
  29 #include <linux/utsname.h>
  30 #include <linux/mempool.h>
  31 #include <linux/delay.h>
  32 #include <linux/completion.h>
  33 #include <linux/kthread.h>
  34 #include <linux/pagevec.h>
  35 #include <linux/freezer.h>
  36 #include <linux/namei.h>
  37 #include <asm/uaccess.h>
  38 #include <asm/processor.h>
  39 #include <linux/inet.h>
  40 #include <net/ipv6.h>
  41 #include "cifspdu.h"
  42 #include "cifsglob.h"
  43 #include "cifsproto.h"
  44 #include "cifs_unicode.h"
  45 #include "cifs_debug.h"
  46 #include "cifs_fs_sb.h"
  47 #include "ntlmssp.h"
  48 #include "nterr.h"
  49 #include "rfc1002pdu.h"
  50 #include "fscache.h"
  51
  52 #define CIFS_PORT 445
  53 #define RFC1001_PORT 139
  54
  55 /* SMB echo "timeout" -- FIXME: tunable? */
  56 #define SMB_ECHO_INTERVAL (60 * HZ)
  57
  58 extern mempool_t *cifs_req_poolp;
  59
  60 /* FIXME: should these be tunable? */
  61 #define TLINK_ERROR_EXPIRE      (1 * HZ)
  62 #define TLINK_IDLE_EXPIRE       (600 * HZ)
  63
  64 static int ip_connect(struct TCP_Server_Info *server);
  65 static int generic_ip_connect(struct TCP_Server_Info *server);
  66 static void tlink_rb_insert(struct rb_root *root, struct tcon_link *new_tlink);
  67 static void cifs_prune_tlinks(struct work_struct *work);
  68
  69 /*
  70  * cifs tcp session reconnection
  71  *
  72  * mark tcp session as reconnecting so temporarily locked
  73  * mark all smb sessions as reconnecting for tcp session
  74  * reconnect tcp session
  75  * wake up waiters on reconnection? - (not needed currently)
  76  */
  77 static int
  78 cifs_reconnect(struct TCP_Server_Info *server)
  79 {
  80         int rc = 0;
  81         struct list_head *tmp, *tmp2;
  82         struct cifs_ses *ses;
  83         struct cifs_tcon *tcon;
  84         struct mid_q_entry *mid_entry;
  85         struct list_head retry_list;
  86
  87         spin_lock(&GlobalMid_Lock);
  88         if (server->tcpStatus == CifsExiting) {
  89                 /* the demux thread will exit normally
  90                 next time through the loop */
  91                 spin_unlock(&GlobalMid_Lock);
  92                 return rc;
  93         } else
  94                 server->tcpStatus = CifsNeedReconnect;
  95         spin_unlock(&GlobalMid_Lock);
  96         server->maxBuf = 0;
  97
  98         cFYI(1, "Reconnecting tcp session");
  99
 100         /* before reconnecting the tcp session, mark the smb session (uid)
 101                 and the tid bad so they are not used until reconnected */
 102         cFYI(1, "%s: marking sessions and tcons for reconnect", __func__);
 103         spin_lock(&cifs_tcp_ses_lock);
 104         list_for_each(tmp, &server->smb_ses_list) {
 105                 ses = list_entry(tmp, struct cifs_ses, smb_ses_list);
 106                 ses->need_reconnect = true;
 107                 ses->ipc_tid = 0;
 108                 list_for_each(tmp2, &ses->tcon_list) {
 109                         tcon = list_entry(tmp2, struct cifs_tcon, tcon_list);
 110                         tcon->need_reconnect = true;
 111                 }
 112         }
 113         spin_unlock(&cifs_tcp_ses_lock);
 114
 115         /* do not want to be sending data on a socket we are freeing */
 116         cFYI(1, "%s: tearing down socket", __func__);
 117         mutex_lock(&server->srv_mutex);
 118         if (server->ssocket) {
 119                 cFYI(1, "State: 0x%x Flags: 0x%lx", server->ssocket->state,
 120                         server->ssocket->flags);
 121                 kernel_sock_shutdown(server->ssocket, SHUT_WR);
 122                 cFYI(1, "Post shutdown state: 0x%x Flags: 0x%lx",
 123                         server->ssocket->state,
 124                         server->ssocket->flags);
 125                 sock_release(server->ssocket);
 126                 server->ssocket = NULL;
 127         }
 128         server->sequence_number = 0;
 129         server->session_estab = false;
 130         kfree(server->session_key.response);
 131         server->session_key.response = NULL;
 132         server->session_key.len = 0;
 133         server->lstrp = jiffies;
 134         mutex_unlock(&server->srv_mutex);
 135
 136         /* mark submitted MIDs for retry and issue callback */
 137         INIT_LIST_HEAD(&retry_list);
 138         cFYI(1, "%s: moving mids to private list", __func__);
 139         spin_lock(&GlobalMid_Lock);
 140         list_for_each_safe(tmp, tmp2, &server->pending_mid_q) {
 141                 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
 142                 if (mid_entry->midState == MID_REQUEST_SUBMITTED)
 143                         mid_entry->midState = MID_RETRY_NEEDED;
 144                 list_move(&mid_entry->qhead, &retry_list);
 145         }
 146         spin_unlock(&GlobalMid_Lock);
 147
 148         cFYI(1, "%s: issuing mid callbacks", __func__);
 149         list_for_each_safe(tmp, tmp2, &retry_list) {
 150                 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
 151                 list_del_init(&mid_entry->qhead);
 152                 mid_entry->callback(mid_entry);
 153         }
 154
 155         do {
 156                 try_to_freeze();
 157
 158                 /* we should try only the port we connected to before */
 159                 rc = generic_ip_connect(server);
 160                 if (rc) {
 161                         cFYI(1, "reconnect error %d", rc);
 162                         msleep(3000);
 163                 } else {
 164                         atomic_inc(&tcpSesReconnectCount);
 165                         spin_lock(&GlobalMid_Lock);
 166                         if (server->tcpStatus != CifsExiting)
 167                                 server->tcpStatus = CifsNeedNegotiate;
 168                         spin_unlock(&GlobalMid_Lock);
 169                 }
 170         } while (server->tcpStatus == CifsNeedReconnect);
 171
 172         return rc;
 173 }
 174
 175 /*
 176         return codes:
 177                 0       not a transact2, or all data present
 178                 >0      transact2 with that much data missing
 179                 -EINVAL = invalid transact2
 180
 181  */
 182 static int check2ndT2(struct smb_hdr *pSMB, unsigned int maxBufSize)
 183 {
 184         struct smb_t2_rsp *pSMBt;
 185         int remaining;
 186         __u16 total_data_size, data_in_this_rsp;
 187
 188         if (pSMB->Command != SMB_COM_TRANSACTION2)
 189                 return 0;
 190
 191         /* check for plausible wct, bcc and t2 data and parm sizes */
 192         /* check for parm and data offset going beyond end of smb */
 193         if (pSMB->WordCount != 10) { /* coalesce_t2 depends on this */
 194                 cFYI(1, "invalid transact2 word count");
 195                 return -EINVAL;
 196         }
 197
 198         pSMBt = (struct smb_t2_rsp *)pSMB;
 199
 200         total_data_size = get_unaligned_le16(&pSMBt->t2_rsp.TotalDataCount);
 201         data_in_this_rsp = get_unaligned_le16(&pSMBt->t2_rsp.DataCount);
 202
 203         if (total_data_size == data_in_this_rsp)
 204                 return 0;
 205         else if (total_data_size < data_in_this_rsp) {
 206                 cFYI(1, "total data %d smaller than data in frame %d",
 207                         total_data_size, data_in_this_rsp);
 208                 return -EINVAL;
 209         }
 210
 211         remaining = total_data_size - data_in_this_rsp;
 212
 213         cFYI(1, "missing %d bytes from transact2, check next response",
 214                 remaining);
 215         if (total_data_size > maxBufSize) {
 216                 cERROR(1, "TotalDataSize %d is over maximum buffer %d",
 217                         total_data_size, maxBufSize);
 218                 return -EINVAL;
 219         }
 220         return remaining;
 221 }
 222
 223 static int coalesce_t2(struct smb_hdr *psecond, struct smb_hdr *pTargetSMB)
 224 {
 225         struct smb_t2_rsp *pSMB2 = (struct smb_t2_rsp *)psecond;
 226         struct smb_t2_rsp *pSMBt  = (struct smb_t2_rsp *)pTargetSMB;
 227         char *data_area_of_target;
 228         char *data_area_of_buf2;
 229         int remaining;
 230         unsigned int byte_count, total_in_buf;
 231         __u16 total_data_size, total_in_buf2;
 232
 233         total_data_size = get_unaligned_le16(&pSMBt->t2_rsp.TotalDataCount);
 234
 235         if (total_data_size !=
 236             get_unaligned_le16(&pSMB2->t2_rsp.TotalDataCount))
 237                 cFYI(1, "total data size of primary and secondary t2 differ");
 238
 239         total_in_buf = get_unaligned_le16(&pSMBt->t2_rsp.DataCount);
 240
 241         remaining = total_data_size - total_in_buf;
 242
 243         if (remaining < 0)
 244                 return -EPROTO;
 245
 246         if (remaining == 0) /* nothing to do, ignore */
 247                 return 0;
 248
 249         total_in_buf2 = get_unaligned_le16(&pSMB2->t2_rsp.DataCount);
 250         if (remaining < total_in_buf2) {
 251                 cFYI(1, "transact2 2nd response contains too much data");
 252         }
 253
 254         /* find end of first SMB data area */
 255         data_area_of_target = (char *)&pSMBt->hdr.Protocol +
 256                                 get_unaligned_le16(&pSMBt->t2_rsp.DataOffset);
 257         /* validate target area */
 258
 259         data_area_of_buf2 = (char *)&pSMB2->hdr.Protocol +
 260                                 get_unaligned_le16(&pSMB2->t2_rsp.DataOffset);
 261
 262         data_area_of_target += total_in_buf;
 263
 264         /* copy second buffer into end of first buffer */
 265         total_in_buf += total_in_buf2;
 266         /* is the result too big for the field? */
 267         if (total_in_buf > USHRT_MAX)
 268                 return -EPROTO;
 269         put_unaligned_le16(total_in_buf, &pSMBt->t2_rsp.DataCount);
 270
 271         /* fix up the BCC */
 272         byte_count = get_bcc(pTargetSMB);
 273         byte_count += total_in_buf2;
 274         /* is the result too big for the field? */
 275         if (byte_count > USHRT_MAX)
 276                 return -EPROTO;
 277         put_bcc(byte_count, pTargetSMB);
 278
 279         byte_count = be32_to_cpu(pTargetSMB->smb_buf_length);
 280         byte_count += total_in_buf2;
 281         /* don't allow buffer to overflow */
 282         if (byte_count > CIFSMaxBufSize)
 283                 return -ENOBUFS;
 284         pTargetSMB->smb_buf_length = cpu_to_be32(byte_count);
 285
 286         memcpy(data_area_of_target, data_area_of_buf2, total_in_buf2);
 287
 288         if (remaining == total_in_buf2) {
 289                 cFYI(1, "found the last secondary response");
 290                 return 0; /* we are done */
 291         } else /* more responses to go */
 292                 return 1;
 293 }
 294
 295 static void
 296 cifs_echo_request(struct work_struct *work)
 297 {
 298         int rc;
 299         struct TCP_Server_Info *server = container_of(work,
 300                                         struct TCP_Server_Info, echo.work);
 301
 302         /*
 303          * We cannot send an echo until the NEGOTIATE_PROTOCOL request is
 304          * done, which is indicated by maxBuf != 0. Also, no need to ping if
 305          * we got a response recently
 306          */
 307         if (server->maxBuf == 0 ||
 308             time_before(jiffies, server->lstrp + SMB_ECHO_INTERVAL - HZ))
 309                 goto requeue_echo;
 310
 311         rc = CIFSSMBEcho(server);
 312         if (rc)
 313                 cFYI(1, "Unable to send echo request to server: %s",
 314                         server->hostname);
 315
 316 requeue_echo:
 317         queue_delayed_work(system_nrt_wq, &server->echo, SMB_ECHO_INTERVAL);
 318 }
 319
 320 static int
 321 cifs_demultiplex_thread(struct TCP_Server_Info *server)
 322 {
 323         int length;
 324         unsigned int pdu_length, total_read;
 325         struct smb_hdr *smb_buffer = NULL;
 326         struct smb_hdr *bigbuf = NULL;
 327         struct smb_hdr *smallbuf = NULL;
 328         struct msghdr smb_msg;
 329         struct kvec iov;
 330         struct socket *csocket = server->ssocket;
 331         struct list_head *tmp, *tmp2;
 332         struct task_struct *task_to_wake = NULL;
 333         struct mid_q_entry *mid_entry;
 334         char temp;
 335         bool isLargeBuf = false;
 336         bool isMultiRsp;
 337         int reconnect;
 338
 339         current->flags |= PF_MEMALLOC;
 340         cFYI(1, "Demultiplex PID: %d", task_pid_nr(current));
 341
 342         length = atomic_inc_return(&tcpSesAllocCount);
 343         if (length > 1)
 344                 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
 345                                 GFP_KERNEL);
 346
 347         set_freezable();
 348         while (server->tcpStatus != CifsExiting) {
 349                 if (try_to_freeze())
 350                         continue;
 351                 if (bigbuf == NULL) {
 352                         bigbuf = cifs_buf_get();
 353                         if (!bigbuf) {
 354                                 cERROR(1, "No memory for large SMB response");
 355                                 msleep(3000);
 356                                 /* retry will check if exiting */
 357                                 continue;
 358                         }
 359                 } else if (isLargeBuf) {
 360                         /* we are reusing a dirty large buf, clear its start */
 361                         memset(bigbuf, 0, sizeof(struct smb_hdr));
 362                 }
 363
 364                 if (smallbuf == NULL) {
 365                         smallbuf = cifs_small_buf_get();
 366                         if (!smallbuf) {
 367                                 cERROR(1, "No memory for SMB response");
 368                                 msleep(1000);
 369                                 /* retry will check if exiting */
 370                                 continue;
 371                         }
 372                         /* beginning of smb buffer is cleared in our buf_get */
 373                 } else /* if existing small buf clear beginning */
 374                         memset(smallbuf, 0, sizeof(struct smb_hdr));
 375
 376                 isLargeBuf = false;
 377                 isMultiRsp = false;
 378                 smb_buffer = smallbuf;
 379                 iov.iov_base = smb_buffer;
 380                 iov.iov_len = 4;
 381                 smb_msg.msg_control = NULL;
 382                 smb_msg.msg_controllen = 0;
 383                 pdu_length = 4; /* enough to get RFC1001 header */
 384
 385 incomplete_rcv:
 386                 if (echo_retries > 0 && server->tcpStatus == CifsGood &&
 387                     time_after(jiffies, server->lstrp +
 388                                         (echo_retries * SMB_ECHO_INTERVAL))) {
 389                         cERROR(1, "Server %s has not responded in %d seconds. "
 390                                   "Reconnecting...", server->hostname,
 391                                   (echo_retries * SMB_ECHO_INTERVAL / HZ));
 392                         cifs_reconnect(server);
 393                         csocket = server->ssocket;
 394                         wake_up(&server->response_q);
 395                         continue;
 396                 }
 397
 398                 length =
 399                     kernel_recvmsg(csocket, &smb_msg,
 400                                 &iov, 1, pdu_length, 0 /* BB other flags? */);
 401
 402                 if (server->tcpStatus == CifsExiting) {
 403                         break;
 404                 } else if (server->tcpStatus == CifsNeedReconnect) {
 405                         cFYI(1, "Reconnect after server stopped responding");
 406                         cifs_reconnect(server);
 407                         cFYI(1, "call to reconnect done");
 408                         csocket = server->ssocket;
 409                         continue;
 410                 } else if (length == -ERESTARTSYS ||
 411                            length == -EAGAIN ||
 412                            length == -EINTR) {
 413                         msleep(1); /* minimum sleep to prevent looping
 414                                 allowing socket to clear and app threads to set
 415                                 tcpStatus CifsNeedReconnect if server hung */
 416                         if (pdu_length < 4) {
 417                                 iov.iov_base = (4 - pdu_length) +
 418                                                         (char *)smb_buffer;
 419                                 iov.iov_len = pdu_length;
 420                                 smb_msg.msg_control = NULL;
 421                                 smb_msg.msg_controllen = 0;
 422                                 goto incomplete_rcv;
 423                         } else
 424                                 continue;
 425                 } else if (length <= 0) {
 426                         cFYI(1, "Reconnect after unexpected peek error %d",
 427                                 length);
 428                         cifs_reconnect(server);
 429                         csocket = server->ssocket;
 430                         wake_up(&server->response_q);
 431                         continue;
 432                 } else if (length < pdu_length) {
 433                         cFYI(1, "requested %d bytes but only got %d bytes",
 434                                   pdu_length, length);
 435                         pdu_length -= length;
 436                         msleep(1);
 437                         goto incomplete_rcv;
 438                 }
 439
 440                 /* The right amount was read from socket - 4 bytes */
 441                 /* so we can now interpret the length field */
 442
 443                 /* the first byte big endian of the length field,
 444                 is actually not part of the length but the type
 445                 with the most common, zero, as regular data */
 446                 temp = *((char *) smb_buffer);
 447
 448                 /* Note that FC 1001 length is big endian on the wire,
 449                 but we convert it here so it is always manipulated
 450                 as host byte order */
 451                 pdu_length = be32_to_cpu(smb_buffer->smb_buf_length);
 452
 453                 cFYI(1, "rfc1002 length 0x%x", pdu_length+4);
 454
 455                 if (temp == (char) RFC1002_SESSION_KEEP_ALIVE) {
 456                         continue;
 457                 } else if (temp == (char)RFC1002_POSITIVE_SESSION_RESPONSE) {
 458                         cFYI(1, "Good RFC 1002 session rsp");
 459                         continue;
 460                 } else if (temp == (char)RFC1002_NEGATIVE_SESSION_RESPONSE) {
 461                         /* we get this from Windows 98 instead of
 462                            an error on SMB negprot response */
 463                         cFYI(1, "Negative RFC1002 Session Response Error 0x%x)",
 464                                 pdu_length);
 465                         /* give server a second to clean up  */
 466                         msleep(1000);
 467                         /* always try 445 first on reconnect since we get NACK
 468                          * on some if we ever connected to port 139 (the NACK
 469                          * is since we do not begin with RFC1001 session
 470                          * initialize frame)
 471                          */
 472                         cifs_set_port((struct sockaddr *)
 473                                         &server->dstaddr, CIFS_PORT);
 474                         cifs_reconnect(server);
 475                         csocket = server->ssocket;
 476                         wake_up(&server->response_q);
 477                         continue;
 478                 } else if (temp != (char) 0) {
 479                         cERROR(1, "Unknown RFC 1002 frame");
 480                         cifs_dump_mem(" Received Data: ", (char *)smb_buffer,
 481                                       length);
 482                         cifs_reconnect(server);
 483                         csocket = server->ssocket;
 484                         continue;
 485                 }
 486
 487                 /* else we have an SMB response */
 488                 if ((pdu_length > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE - 4) ||
 489                             (pdu_length < sizeof(struct smb_hdr) - 1 - 4)) {
 490                         cERROR(1, "Invalid size SMB length %d pdu_length %d",
 491                                         length, pdu_length+4);
 492                         cifs_reconnect(server);
 493                         csocket = server->ssocket;
 494                         wake_up(&server->response_q);
 495                         continue;
 496                 }
 497
 498                 /* else length ok */
 499                 reconnect = 0;
 500
 501                 if (pdu_length > MAX_CIFS_SMALL_BUFFER_SIZE - 4) {
 502                         isLargeBuf = true;
 503                         memcpy(bigbuf, smallbuf, 4);
 504                         smb_buffer = bigbuf;
 505                 }
 506                 length = 0;
 507                 iov.iov_base = 4 + (char *)smb_buffer;
 508                 iov.iov_len = pdu_length;
 509                 for (total_read = 0; total_read < pdu_length;
 510                      total_read += length) {
 511                         length = kernel_recvmsg(csocket, &smb_msg, &iov, 1,
 512                                                 pdu_length - total_read, 0);
 513                         if (server->tcpStatus == CifsExiting) {
 514                                 /* then will exit */
 515                                 reconnect = 2;
 516                                 break;
 517                         } else if (server->tcpStatus == CifsNeedReconnect) {
 518                                 cifs_reconnect(server);
 519                                 csocket = server->ssocket;
 520                                 /* Reconnect wakes up rspns q */
 521                                 /* Now we will reread sock */
 522                                 reconnect = 1;
 523                                 break;
 524                         } else if (length == -ERESTARTSYS ||
 525                                    length == -EAGAIN ||
 526                                    length == -EINTR) {
 527                                 msleep(1); /* minimum sleep to prevent looping,
 528                                               allowing socket to clear and app
 529                                               threads to set tcpStatus
 530                                               CifsNeedReconnect if server hung*/
 531                                 length = 0;
 532                                 continue;
 533                         } else if (length <= 0) {
 534                                 cERROR(1, "Received no data, expecting %d",
 535                                               pdu_length - total_read);
 536                                 cifs_reconnect(server);
 537                                 csocket = server->ssocket;
 538                                 reconnect = 1;
 539                                 break;
 540                         }
 541                 }
 542                 if (reconnect == 2)
 543                         break;
 544                 else if (reconnect == 1)
 545                         continue;
 546
 547                 total_read += 4; /* account for rfc1002 hdr */
 548
 549                 dump_smb(smb_buffer, total_read);
 550
 551                 /*
 552                  * We know that we received enough to get to the MID as we
 553                  * checked the pdu_length earlier. Now check to see
 554                  * if the rest of the header is OK. We borrow the length
 555                  * var for the rest of the loop to avoid a new stack var.
 556                  *
 557                  * 48 bytes is enough to display the header and a little bit
 558                  * into the payload for debugging purposes.
 559                  */
 560                 length = checkSMB(smb_buffer, smb_buffer->Mid, total_read);
 561                 if (length != 0)
 562                         cifs_dump_mem("Bad SMB: ", smb_buffer,
 563                                         min_t(unsigned int, total_read, 48));
 564
 565                 mid_entry = NULL;
 566                 server->lstrp = jiffies;
 567
 568                 spin_lock(&GlobalMid_Lock);
 569                 list_for_each_safe(tmp, tmp2, &server->pending_mid_q) {
 570                         mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
 571
 572                         if (mid_entry->mid != smb_buffer->Mid ||
 573                             mid_entry->midState != MID_REQUEST_SUBMITTED ||
 574                             mid_entry->command != smb_buffer->Command) {
 575                                 mid_entry = NULL;
 576                                 continue;
 577                         }
 578
 579                         if (length == 0 &&
 580                             check2ndT2(smb_buffer, server->maxBuf) > 0) {
 581                                 /* We have a multipart transact2 resp */
 582                                 isMultiRsp = true;
 583                                 if (mid_entry->resp_buf) {
 584                                         /* merge response - fix up 1st*/
 585                                         length = coalesce_t2(smb_buffer,
 586                                                         mid_entry->resp_buf);
 587                                         if (length > 0) {
 588                                                 length = 0;
 589                                                 mid_entry->multiRsp = true;
 590                                                 break;
 591                                         } else {
 592                                                 /* all parts received or
 593                                                  * packet is malformed
 594                                                  */
 595                                                 mid_entry->multiEnd = true;
 596                                                 goto multi_t2_fnd;
 597                                         }
 598                                 } else {
 599                                         if (!isLargeBuf) {
 600                                                 /*
 601                                                  * FIXME: switch to already
 602                                                  *        allocated largebuf?
 603                                                  */
 604                                                 cERROR(1, "1st trans2 resp "
 605                                                           "needs bigbuf");
 606                                         } else {
 607                                                 /* Have first buffer */
 608                                                 mid_entry->resp_buf =
 609                                                          smb_buffer;
 610                                                 mid_entry->largeBuf = true;
 611                                                 bigbuf = NULL;
 612                                         }
 613                                 }
 614                                 break;
 615                         }
 616                         mid_entry->resp_buf = smb_buffer;
 617                         mid_entry->largeBuf = isLargeBuf;
 618 multi_t2_fnd:
 619                         if (length == 0)
 620                                 mid_entry->midState = MID_RESPONSE_RECEIVED;
 621                         else
 622                                 mid_entry->midState = MID_RESPONSE_MALFORMED;
 623 #ifdef CONFIG_CIFS_STATS2
 624                         mid_entry->when_received = jiffies;
 625 #endif
 626                         list_del_init(&mid_entry->qhead);
 627                         break;
 628                 }
 629                 spin_unlock(&GlobalMid_Lock);
 630
 631                 if (mid_entry != NULL) {
 632                         mid_entry->callback(mid_entry);
 633                         /* Was previous buf put in mpx struct for multi-rsp? */
 634                         if (!isMultiRsp) {
 635                                 /* smb buffer will be freed by user thread */
 636                                 if (isLargeBuf)
 637                                         bigbuf = NULL;
 638                                 else
 639                                         smallbuf = NULL;
 640                         }
 641                 } else if (length != 0) {
 642                         /* response sanity checks failed */
 643                         continue;
 644                 } else if (!is_valid_oplock_break(smb_buffer, server) &&
 645                            !isMultiRsp) {
 646                         cERROR(1, "No task to wake, unknown frame received! "
 647                                    "NumMids %d", atomic_read(&midCount));
 648                         cifs_dump_mem("Received Data is: ", (char *)smb_buffer,
 649                                       sizeof(struct smb_hdr));
 650 #ifdef CONFIG_CIFS_DEBUG2
 651                         cifs_dump_detail(smb_buffer);
 652                         cifs_dump_mids(server);
 653 #endif /* CIFS_DEBUG2 */
 654
 655                 }
 656         } /* end while !EXITING */
 657
 658         /* take it off the list, if it's not already */
 659         spin_lock(&cifs_tcp_ses_lock);
 660         list_del_init(&server->tcp_ses_list);
 661         spin_unlock(&cifs_tcp_ses_lock);
 662
 663         spin_lock(&GlobalMid_Lock);
 664         server->tcpStatus = CifsExiting;
 665         spin_unlock(&GlobalMid_Lock);
 666         wake_up_all(&server->response_q);
 667
 668         /* check if we have blocked requests that need to free */
 669         /* Note that cifs_max_pending is normally 50, but
 670         can be set at module install time to as little as two */
 671         spin_lock(&GlobalMid_Lock);
 672         if (atomic_read(&server->inFlight) >= cifs_max_pending)
 673                 atomic_set(&server->inFlight, cifs_max_pending - 1);
 674         /* We do not want to set the max_pending too low or we
 675         could end up with the counter going negative */
 676         spin_unlock(&GlobalMid_Lock);
 677         /* Although there should not be any requests blocked on
 678         this queue it can not hurt to be paranoid and try to wake up requests
 679         that may haven been blocked when more than 50 at time were on the wire
 680         to the same server - they now will see the session is in exit state
 681         and get out of SendReceive.  */
 682         wake_up_all(&server->request_q);
 683         /* give those requests time to exit */
 684         msleep(125);
 685
 686         if (server->ssocket) {
 687                 sock_release(csocket);
 688                 server->ssocket = NULL;
 689         }
 690         /* buffer usually freed in free_mid - need to free it here on exit */
 691         cifs_buf_release(bigbuf);
 692         if (smallbuf) /* no sense logging a debug message if NULL */
 693                 cifs_small_buf_release(smallbuf);
 694
 695         if (!list_empty(&server->pending_mid_q)) {
 696                 struct list_head dispose_list;
 697
 698                 INIT_LIST_HEAD(&dispose_list);
 699                 spin_lock(&GlobalMid_Lock);
 700                 list_for_each_safe(tmp, tmp2, &server->pending_mid_q) {
 701                         mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
 702                         cFYI(1, "Clearing mid 0x%x", mid_entry->mid);
 703                         mid_entry->midState = MID_SHUTDOWN;
 704                         list_move(&mid_entry->qhead, &dispose_list);
 705                 }
 706                 spin_unlock(&GlobalMid_Lock);
 707
 708                 /* now walk dispose list and issue callbacks */
 709                 list_for_each_safe(tmp, tmp2, &dispose_list) {
 710                         mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
 711                         cFYI(1, "Callback mid 0x%x", mid_entry->mid);
 712                         list_del_init(&mid_entry->qhead);
 713                         mid_entry->callback(mid_entry);
 714                 }
 715                 /* 1/8th of sec is more than enough time for them to exit */
 716                 msleep(125);
 717         }
 718
 719         if (!list_empty(&server->pending_mid_q)) {
 720                 /* mpx threads have not exited yet give them
 721                 at least the smb send timeout time for long ops */
 722                 /* due to delays on oplock break requests, we need
 723                 to wait at least 45 seconds before giving up
 724                 on a request getting a response and going ahead
 725                 and killing cifsd */
 726                 cFYI(1, "Wait for exit from demultiplex thread");
 727                 msleep(46000);
 728                 /* if threads still have not exited they are probably never
 729                 coming home not much else we can do but free the memory */
 730         }
 731
 732         kfree(server->hostname);
 733         task_to_wake = xchg(&server->tsk, NULL);
 734         kfree(server);
 735
 736         length = atomic_dec_return(&tcpSesAllocCount);
 737         if (length  > 0)
 738                 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
 739                                 GFP_KERNEL);
 740
 741         /* if server->tsk was NULL then wait for a signal before exiting */
 742         if (!task_to_wake) {
 743                 set_current_state(TASK_INTERRUPTIBLE);
 744                 while (!signal_pending(current)) {
 745                         schedule();
 746                         set_current_state(TASK_INTERRUPTIBLE);
 747                 }
 748                 set_current_state(TASK_RUNNING);
 749         }
 750
 751         module_put_and_exit(0);
 752 }
 753
 754 /* extract the host portion of the UNC string */
 755 static char *
 756 extract_hostname(const char *unc)
 757 {
 758         const char *src;
 759         char *dst, *delim;
 760         unsigned int len;
 761
 762         /* skip double chars at beginning of string */
 763         /* BB: check validity of these bytes? */
 764         src = unc + 2;
 765
 766         /* delimiter between hostname and sharename is always '\\' now */
 767         delim = strchr(src, '\\');
 768         if (!delim)
 769                 return ERR_PTR(-EINVAL);
 770
 771         len = delim - src;
 772         dst = kmalloc((len + 1), GFP_KERNEL);
 773         if (dst == NULL)
 774                 return ERR_PTR(-ENOMEM);
 775
 776         memcpy(dst, src, len);
 777         dst[len] = '\0';
 778
 779         return dst;
 780 }
 781
 782 static int
 783 cifs_parse_mount_options(const char *mountdata, const char *devname,
 784                          struct smb_vol *vol)
 785 {
 786         char *value, *data, *end;
 787         char *mountdata_copy = NULL, *options;
 788         unsigned int  temp_len, i, j;
 789         char separator[2];
 790         short int override_uid = -1;
 791         short int override_gid = -1;
 792         bool uid_specified = false;
 793         bool gid_specified = false;
 794         char *nodename = utsname()->nodename;
 795
 796         separator[0] = ',';
 797         separator[1] = 0;
 798
 799         /*
 800          * does not have to be perfect mapping since field is
 801          * informational, only used for servers that do not support
 802          * port 445 and it can be overridden at mount time
 803          */
 804         memset(vol->source_rfc1001_name, 0x20, RFC1001_NAME_LEN);
 805         for (i = 0; i < strnlen(nodename, RFC1001_NAME_LEN); i++)
 806                 vol->source_rfc1001_name[i] = toupper(nodename[i]);
 807
 808         vol->source_rfc1001_name[RFC1001_NAME_LEN] = 0;
 809         /* null target name indicates to use *SMBSERVR default called name
 810            if we end up sending RFC1001 session initialize */
 811         vol->target_rfc1001_name[0] = 0;
 812         vol->cred_uid = current_uid();
 813         vol->linux_uid = current_uid();
 814         vol->linux_gid = current_gid();
 815
 816         /* default to only allowing write access to owner of the mount */
 817         vol->dir_mode = vol->file_mode = S_IRUGO | S_IXUGO | S_IWUSR;
 818
 819         /* vol->retry default is 0 (i.e. "soft" limited retry not hard retry) */
 820         /* default is always to request posix paths. */
 821         vol->posix_paths = 1;
 822         /* default to using server inode numbers where available */
 823         vol->server_ino = 1;
 824
 825         vol->actimeo = CIFS_DEF_ACTIMEO;
 826
 827         if (!mountdata)
 828                 goto cifs_parse_mount_err;
 829
 830         mountdata_copy = kstrndup(mountdata, PAGE_SIZE, GFP_KERNEL);
 831         if (!mountdata_copy)
 832                 goto cifs_parse_mount_err;
 833
 834         options = mountdata_copy;
 835         end = options + strlen(options);
 836         if (strncmp(options, "sep=", 4) == 0) {
 837                 if (options[4] != 0) {
 838                         separator[0] = options[4];
 839                         options += 5;
 840                 } else {
 841                         cFYI(1, "Null separator not allowed");
 842                 }
 843         }
 844
 845         while ((data = strsep(&options, separator)) != NULL) {
 846                 if (!*data)
 847                         continue;
 848                 if ((value = strchr(data, '=')) != NULL)
 849                         *value++ = '\0';
 850
 851                 /* Have to parse this before we parse for "user" */
 852                 if (strnicmp(data, "user_xattr", 10) == 0) {
 853                         vol->no_xattr = 0;
 854                 } else if (strnicmp(data, "nouser_xattr", 12) == 0) {
 855                         vol->no_xattr = 1;
 856                 } else if (strnicmp(data, "user", 4) == 0) {
 857                         if (!value) {
 858                                 printk(KERN_WARNING
 859                                        "CIFS: invalid or missing username\n");
 860                                 goto cifs_parse_mount_err;
 861                         } else if (!*value) {
 862                                 /* null user, ie anonymous, authentication */
 863                                 vol->nullauth = 1;
 864                         }
 865                         if (strnlen(value, MAX_USERNAME_SIZE) <
 866                                                 MAX_USERNAME_SIZE) {
 867                                 vol->username = kstrdup(value, GFP_KERNEL);
 868                                 if (!vol->username) {
 869                                         printk(KERN_WARNING "CIFS: no memory "
 870                                                             "for username\n");
 871                                         goto cifs_parse_mount_err;
 872                                 }
 873                         } else {
 874                                 printk(KERN_WARNING "CIFS: username too long\n");
 875                                 goto cifs_parse_mount_err;
 876                         }
 877                 } else if (strnicmp(data, "pass", 4) == 0) {
 878                         if (!value) {
 879                                 vol->password = NULL;
 880                                 continue;
 881                         } else if (value[0] == 0) {
 882                                 /* check if string begins with double comma
 883                                    since that would mean the password really
 884                                    does start with a comma, and would not
 885                                    indicate an empty string */
 886                                 if (value[1] != separator[0]) {
 887                                         vol->password = NULL;
 888                                         continue;
 889                                 }
 890                         }
 891                         temp_len = strlen(value);
 892                         /* removed password length check, NTLM passwords
 893                                 can be arbitrarily long */
 894
 895                         /* if comma in password, the string will be
 896                         prematurely null terminated.  Commas in password are
 897                         specified across the cifs mount interface by a double
 898                         comma ie ,, and a comma used as in other cases ie ','
 899                         as a parameter delimiter/separator is single and due
 900                         to the strsep above is temporarily zeroed. */
 901
 902                         /* NB: password legally can have multiple commas and
 903                         the only illegal character in a password is null */
 904
 905                         if ((value[temp_len] == 0) &&
 906                             (value + temp_len < end) &&
 907                             (value[temp_len+1] == separator[0])) {
 908                                 /* reinsert comma */
 909                                 value[temp_len] = separator[0];
 910                                 temp_len += 2;  /* move after second comma */
 911                                 while (value[temp_len] != 0)  {
 912                                         if (value[temp_len] == separator[0]) {
 913                                                 if (value[temp_len+1] ==
 914                                                      separator[0]) {
 915                                                 /* skip second comma */
 916                                                         temp_len++;
 917                                                 } else {
 918                                                 /* single comma indicating start
 919                                                          of next parm */
 920                                                         break;
 921                                                 }
 922                                         }
 923                                         temp_len++;
 924                                 }
 925                                 if (value[temp_len] == 0) {
 926                                         options = NULL;
 927                                 } else {
 928                                         value[temp_len] = 0;
 929                                         /* point option to start of next parm */
 930                                         options = value + temp_len + 1;
 931                                 }
 932                                 /* go from value to value + temp_len condensing
 933                                 double commas to singles. Note that this ends up
 934                                 allocating a few bytes too many, which is ok */
 935                                 vol->password = kzalloc(temp_len, GFP_KERNEL);
 936                                 if (vol->password == NULL) {
 937                                         printk(KERN_WARNING "CIFS: no memory "
 938                                                             "for password\n");
 939                                         goto cifs_parse_mount_err;
 940                                 }
 941                                 for (i = 0, j = 0; i < temp_len; i++, j++) {
 942                                         vol->password[j] = value[i];
 943                                         if (value[i] == separator[0]
 944                                                 && value[i+1] == separator[0]) {
 945                                                 /* skip second comma */
 946                                                 i++;
 947                                         }
 948                                 }
 949                                 vol->password[j] = 0;
 950                         } else {
 951                                 vol->password = kzalloc(temp_len+1, GFP_KERNEL);
 952                                 if (vol->password == NULL) {
 953                                         printk(KERN_WARNING "CIFS: no memory "
 954                                                             "for password\n");
 955                                         goto cifs_parse_mount_err;
 956                                 }
 957                                 strcpy(vol->password, value);
 958                         }
 959                 } else if (!strnicmp(data, "ip", 2) ||
 960                            !strnicmp(data, "addr", 4)) {
 961                         if (!value || !*value) {
 962                                 vol->UNCip = NULL;
 963                         } else if (strnlen(value, INET6_ADDRSTRLEN) <
 964                                                         INET6_ADDRSTRLEN) {
 965                                 vol->UNCip = kstrdup(value, GFP_KERNEL);
 966                                 if (!vol->UNCip) {
 967                                         printk(KERN_WARNING "CIFS: no memory "
 968                                                             "for UNC IP\n");
 969                                         goto cifs_parse_mount_err;
 970                                 }
 971                         } else {
 972                                 printk(KERN_WARNING "CIFS: ip address "
 973                                                     "too long\n");
 974                                 goto cifs_parse_mount_err;
 975                         }
 976                 } else if (strnicmp(data, "sec", 3) == 0) {
 977                         if (!value || !*value) {
 978                                 cERROR(1, "no security value specified");
 979                                 continue;
 980                         } else if (strnicmp(value, "krb5i", 5) == 0) {
 981                                 vol->secFlg |= CIFSSEC_MAY_KRB5 |
 982                                         CIFSSEC_MUST_SIGN;
 983                         } else if (strnicmp(value, "krb5p", 5) == 0) {
 984                                 /* vol->secFlg |= CIFSSEC_MUST_SEAL |
 985                                         CIFSSEC_MAY_KRB5; */
 986                                 cERROR(1, "Krb5 cifs privacy not supported");
 987                                 goto cifs_parse_mount_err;
 988                         } else if (strnicmp(value, "krb5", 4) == 0) {
 989                                 vol->secFlg |= CIFSSEC_MAY_KRB5;
 990                         } else if (strnicmp(value, "ntlmsspi", 8) == 0) {
 991                                 vol->secFlg |= CIFSSEC_MAY_NTLMSSP |
 992                                         CIFSSEC_MUST_SIGN;
 993                         } else if (strnicmp(value, "ntlmssp", 7) == 0) {
 994                                 vol->secFlg |= CIFSSEC_MAY_NTLMSSP;
 995                         } else if (strnicmp(value, "ntlmv2i", 7) == 0) {
 996                                 vol->secFlg |= CIFSSEC_MAY_NTLMV2 |
 997                                         CIFSSEC_MUST_SIGN;
 998                         } else if (strnicmp(value, "ntlmv2", 6) == 0) {
 999                                 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
1000                         } else if (strnicmp(value, "ntlmi", 5) == 0) {
1001                                 vol->secFlg |= CIFSSEC_MAY_NTLM |
1002                                         CIFSSEC_MUST_SIGN;
1003                         } else if (strnicmp(value, "ntlm", 4) == 0) {
1004                                 /* ntlm is default so can be turned off too */
1005                                 vol->secFlg |= CIFSSEC_MAY_NTLM;
1006                         } else if (strnicmp(value, "nontlm", 6) == 0) {
1007                                 /* BB is there a better way to do this? */
1008                                 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
1009 #ifdef CONFIG_CIFS_WEAK_PW_HASH
1010                         } else if (strnicmp(value, "lanman", 6) == 0) {
1011                                 vol->secFlg |= CIFSSEC_MAY_LANMAN;
1012 #endif
1013                         } else if (strnicmp(value, "none", 4) == 0) {
1014                                 vol->nullauth = 1;
1015                         } else {
1016                                 cERROR(1, "bad security option: %s", value);
1017                                 goto cifs_parse_mount_err;
1018                         }
1019                 } else if (strnicmp(data, "vers", 3) == 0) {
1020                         if (!value || !*value) {
1021                                 cERROR(1, "no protocol version specified"
1022                                           " after vers= mount option");
1023                         } else if ((strnicmp(value, "cifs", 4) == 0) ||
1024                                    (strnicmp(value, "1", 1) == 0)) {
1025                                 /* this is the default */
1026                                 continue;
1027                         }
1028                 } else if ((strnicmp(data, "unc", 3) == 0)
1029                            || (strnicmp(data, "target", 6) == 0)
1030                            || (strnicmp(data, "path", 4) == 0)) {
1031                         if (!value || !*value) {
1032                                 printk(KERN_WARNING "CIFS: invalid path to "
1033                                                     "network resource\n");
1034                                 goto cifs_parse_mount_err;
1035                         }
1036                         if ((temp_len = strnlen(value, 300)) < 300) {
1037                                 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1038                                 if (vol->UNC == NULL)
1039                                         goto cifs_parse_mount_err;
1040                                 strcpy(vol->UNC, value);
1041                                 if (strncmp(vol->UNC, "//", 2) == 0) {
1042                                         vol->UNC[0] = '\\';
1043                                         vol->UNC[1] = '\\';
1044                                 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1045                                         printk(KERN_WARNING
1046                                                "CIFS: UNC Path does not begin "
1047                                                "with // or \\\\ \n");
1048                                         goto cifs_parse_mount_err;
1049                                 }
1050                         } else {
1051                                 printk(KERN_WARNING "CIFS: UNC name too long\n");
1052                                 goto cifs_parse_mount_err;
1053                         }
1054                 } else if ((strnicmp(data, "domain", 3) == 0)
1055                            || (strnicmp(data, "workgroup", 5) == 0)) {
1056                         if (!value || !*value) {
1057                                 printk(KERN_WARNING "CIFS: invalid domain name\n");
1058                                 goto cifs_parse_mount_err;
1059                         }
1060                         /* BB are there cases in which a comma can be valid in
1061                         a domain name and need special handling? */
1062                         if (strnlen(value, 256) < 256) {
1063                                 vol->domainname = kstrdup(value, GFP_KERNEL);
1064                                 if (!vol->domainname) {
1065                                         printk(KERN_WARNING "CIFS: no memory "
1066                                                             "for domainname\n");
1067                                         goto cifs_parse_mount_err;
1068                                 }
1069                                 cFYI(1, "Domain name set");
1070                         } else {
1071                                 printk(KERN_WARNING "CIFS: domain name too "
1072                                                     "long\n");
1073                                 goto cifs_parse_mount_err;
1074                         }
1075                 } else if (strnicmp(data, "srcaddr", 7) == 0) {
1076                         vol->srcaddr.ss_family = AF_UNSPEC;
1077
1078                         if (!value || !*value) {
1079                                 printk(KERN_WARNING "CIFS: srcaddr value"
1080                                        " not specified.\n");
1081                                 goto cifs_parse_mount_err;
1082                         }
1083                         i = cifs_convert_address((struct sockaddr *)&vol->srcaddr,
1084                                                  value, strlen(value));
1085                         if (i == 0) {
1086                                 printk(KERN_WARNING "CIFS:  Could not parse"
1087                                        " srcaddr: %s\n",
1088                                        value);
1089                                 goto cifs_parse_mount_err;
1090                         }
1091                 } else if (strnicmp(data, "prefixpath", 10) == 0) {
1092                         if (!value || !*value) {
1093                                 printk(KERN_WARNING
1094                                         "CIFS: invalid path prefix\n");
1095                                 goto cifs_parse_mount_err;
1096                         }
1097                         if ((temp_len = strnlen(value, 1024)) < 1024) {
1098                                 if (value[0] != '/')
1099                                         temp_len++;  /* missing leading slash */
1100                                 vol->prepath = kmalloc(temp_len+1, GFP_KERNEL);
1101                                 if (vol->prepath == NULL)
1102                                         goto cifs_parse_mount_err;
1103                                 if (value[0] != '/') {
1104                                         vol->prepath[0] = '/';
1105                                         strcpy(vol->prepath+1, value);
1106                                 } else
1107                                         strcpy(vol->prepath, value);
1108                                 cFYI(1, "prefix path %s", vol->prepath);
1109                         } else {
1110                                 printk(KERN_WARNING "CIFS: prefix too long\n");
1111                                 goto cifs_parse_mount_err;
1112                         }
1113                 } else if (strnicmp(data, "iocharset", 9) == 0) {
1114                         if (!value || !*value) {
1115                                 printk(KERN_WARNING "CIFS: invalid iocharset "
1116                                                     "specified\n");
1117                                 goto cifs_parse_mount_err;
1118                         }
1119                         if (strnlen(value, 65) < 65) {
1120                                 if (strnicmp(value, "default", 7)) {
1121                                         vol->iocharset = kstrdup(value,
1122                                                                  GFP_KERNEL);
1123
1124                                         if (!vol->iocharset) {
1125                                                 printk(KERN_WARNING "CIFS: no "
1126                                                                    "memory for"
1127                                                                    "charset\n");
1128                                                 goto cifs_parse_mount_err;
1129                                         }
1130                                 }
1131                                 /* if iocharset not set then load_nls_default
1132                                    is used by caller */
1133                                 cFYI(1, "iocharset set to %s", value);
1134                         } else {
1135                                 printk(KERN_WARNING "CIFS: iocharset name "
1136                                                     "too long.\n");
1137                                 goto cifs_parse_mount_err;
1138                         }
1139                 } else if (!strnicmp(data, "uid", 3) && value && *value) {
1140                         vol->linux_uid = simple_strtoul(value, &value, 0);
1141                         uid_specified = true;
1142                 } else if (!strnicmp(data, "cruid", 5) && value && *value) {
1143                         vol->cred_uid = simple_strtoul(value, &value, 0);
1144                 } else if (!strnicmp(data, "forceuid", 8)) {
1145                         override_uid = 1;
1146                 } else if (!strnicmp(data, "noforceuid", 10)) {
1147                         override_uid = 0;
1148                 } else if (!strnicmp(data, "gid", 3) && value && *value) {
1149                         vol->linux_gid = simple_strtoul(value, &value, 0);
1150                         gid_specified = true;
1151                 } else if (!strnicmp(data, "forcegid", 8)) {
1152                         override_gid = 1;
1153                 } else if (!strnicmp(data, "noforcegid", 10)) {
1154                         override_gid = 0;
1155                 } else if (strnicmp(data, "file_mode", 4) == 0) {
1156                         if (value && *value) {
1157                                 vol->file_mode =
1158                                         simple_strtoul(value, &value, 0);
1159                         }
1160                 } else if (strnicmp(data, "dir_mode", 4) == 0) {
1161                         if (value && *value) {
1162                                 vol->dir_mode =
1163                                         simple_strtoul(value, &value, 0);
1164                         }
1165                 } else if (strnicmp(data, "dirmode", 4) == 0) {
1166                         if (value && *value) {
1167                                 vol->dir_mode =
1168                                         simple_strtoul(value, &value, 0);
1169                         }
1170                 } else if (strnicmp(data, "port", 4) == 0) {
1171                         if (value && *value) {
1172                                 vol->port =
1173                                         simple_strtoul(value, &value, 0);
1174                         }
1175                 } else if (strnicmp(data, "rsize", 5) == 0) {
1176                         if (value && *value) {
1177                                 vol->rsize =
1178                                         simple_strtoul(value, &value, 0);
1179                         }
1180                 } else if (strnicmp(data, "wsize", 5) == 0) {
1181                         if (value && *value) {
1182                                 vol->wsize =
1183                                         simple_strtoul(value, &value, 0);
1184                         }
1185                 } else if (strnicmp(data, "sockopt", 5) == 0) {
1186                         if (!value || !*value) {
1187                                 cERROR(1, "no socket option specified");
1188                                 continue;
1189                         } else if (strnicmp(value, "TCP_NODELAY", 11) == 0) {
1190                                 vol->sockopt_tcp_nodelay = 1;
1191                         }
1192                 } else if (strnicmp(data, "netbiosname", 4) == 0) {
1193                         if (!value || !*value || (*value == ' ')) {
1194                                 cFYI(1, "invalid (empty) netbiosname");
1195                         } else {
1196                                 memset(vol->source_rfc1001_name, 0x20,
1197                                         RFC1001_NAME_LEN);
1198                                 /*
1199                                  * FIXME: are there cases in which a comma can
1200                                  * be valid in workstation netbios name (and
1201                                  * need special handling)?
1202                                  */
1203                                 for (i = 0; i < RFC1001_NAME_LEN; i++) {
1204                                         /* don't ucase netbiosname for user */
1205                                         if (value[i] == 0)
1206                                                 break;
1207                                         vol->source_rfc1001_name[i] = value[i];
1208                                 }
1209                                 /* The string has 16th byte zero still from
1210                                 set at top of the function  */
1211                                 if (i == RFC1001_NAME_LEN && value[i] != 0)
1212                                         printk(KERN_WARNING "CIFS: netbiosname"
1213                                                 " longer than 15 truncated.\n");
1214                         }
1215                 } else if (strnicmp(data, "servern", 7) == 0) {
1216                         /* servernetbiosname specified override *SMBSERVER */
1217                         if (!value || !*value || (*value == ' ')) {
1218                                 cFYI(1, "empty server netbiosname specified");
1219                         } else {
1220                                 /* last byte, type, is 0x20 for servr type */
1221                                 memset(vol->target_rfc1001_name, 0x20,
1222                                         RFC1001_NAME_LEN_WITH_NULL);
1223
1224                                 for (i = 0; i < 15; i++) {
1225                                 /* BB are there cases in which a comma can be
1226                                    valid in this workstation netbios name
1227                                    (and need special handling)? */
1228
1229                                 /* user or mount helper must uppercase
1230                                    the netbiosname */
1231                                         if (value[i] == 0)
1232                                                 break;
1233                                         else
1234                                                 vol->target_rfc1001_name[i] =
1235                                                                 value[i];
1236                                 }
1237                                 /* The string has 16th byte zero still from
1238                                    set at top of the function  */
1239                                 if (i == RFC1001_NAME_LEN && value[i] != 0)
1240                                         printk(KERN_WARNING "CIFS: server net"
1241                                         "biosname longer than 15 truncated.\n");
1242                         }
1243                 } else if (strnicmp(data, "actimeo", 7) == 0) {
1244                         if (value && *value) {
1245                                 vol->actimeo = HZ * simple_strtoul(value,
1246                                                                    &value, 0);
1247                                 if (vol->actimeo > CIFS_MAX_ACTIMEO) {
1248                                         cERROR(1, "CIFS: attribute cache"
1249                                                         "timeout too large");
1250                                         goto cifs_parse_mount_err;
1251                                 }
1252                         }
1253                 } else if (strnicmp(data, "credentials", 4) == 0) {
1254                         /* ignore */
1255                 } else if (strnicmp(data, "version", 3) == 0) {
1256                         /* ignore */
1257                 } else if (strnicmp(data, "guest", 5) == 0) {
1258                         /* ignore */
1259                 } else if (strnicmp(data, "rw", 2) == 0) {
1260                         /* ignore */
1261                 } else if (strnicmp(data, "ro", 2) == 0) {
1262                         /* ignore */
1263                 } else if (strnicmp(data, "noblocksend", 11) == 0) {
1264                         vol->noblocksnd = 1;
1265                 } else if (strnicmp(data, "noautotune", 10) == 0) {
1266                         vol->noautotune = 1;
1267                 } else if ((strnicmp(data, "suid", 4) == 0) ||
1268                                    (strnicmp(data, "nosuid", 6) == 0) ||
1269                                    (strnicmp(data, "exec", 4) == 0) ||
1270                                    (strnicmp(data, "noexec", 6) == 0) ||
1271                                    (strnicmp(data, "nodev", 5) == 0) ||
1272                                    (strnicmp(data, "noauto", 6) == 0) ||
1273                                    (strnicmp(data, "dev", 3) == 0)) {
1274                         /*  The mount tool or mount.cifs helper (if present)
1275                             uses these opts to set flags, and the flags are read
1276                             by the kernel vfs layer before we get here (ie
1277                             before read super) so there is no point trying to
1278                             parse these options again and set anything and it
1279                             is ok to just ignore them */
1280                         continue;
1281                 } else if (strnicmp(data, "hard", 4) == 0) {
1282                         vol->retry = 1;
1283                 } else if (strnicmp(data, "soft", 4) == 0) {
1284                         vol->retry = 0;
1285                 } else if (strnicmp(data, "perm", 4) == 0) {
1286                         vol->noperm = 0;
1287                 } else if (strnicmp(data, "noperm", 6) == 0) {
1288                         vol->noperm = 1;
1289                 } else if (strnicmp(data, "mapchars", 8) == 0) {
1290                         vol->remap = 1;
1291                 } else if (strnicmp(data, "nomapchars", 10) == 0) {
1292                         vol->remap = 0;
1293                 } else if (strnicmp(data, "sfu", 3) == 0) {
1294                         vol->sfu_emul = 1;
1295                 } else if (strnicmp(data, "nosfu", 5) == 0) {
1296                         vol->sfu_emul = 0;
1297                 } else if (strnicmp(data, "nodfs", 5) == 0) {
1298                         vol->nodfs = 1;
1299                 } else if (strnicmp(data, "posixpaths", 10) == 0) {
1300                         vol->posix_paths = 1;
1301                 } else if (strnicmp(data, "noposixpaths", 12) == 0) {
1302                         vol->posix_paths = 0;
1303                 } else if (strnicmp(data, "nounix", 6) == 0) {
1304                         vol->no_linux_ext = 1;
1305                 } else if (strnicmp(data, "nolinux", 7) == 0) {
1306                         vol->no_linux_ext = 1;
1307                 } else if ((strnicmp(data, "nocase", 6) == 0) ||
1308                            (strnicmp(data, "ignorecase", 10)  == 0)) {
1309                         vol->nocase = 1;
1310                 } else if (strnicmp(data, "mand", 4) == 0) {
1311                         /* ignore */
1312                 } else if (strnicmp(data, "nomand", 6) == 0) {
1313                         /* ignore */
1314                 } else if (strnicmp(data, "_netdev", 7) == 0) {
1315                         /* ignore */
1316                 } else if (strnicmp(data, "brl", 3) == 0) {
1317                         vol->nobrl =  0;
1318                 } else if ((strnicmp(data, "nobrl", 5) == 0) ||
1319                            (strnicmp(data, "nolock", 6) == 0)) {
1320                         vol->nobrl =  1;
1321                         /* turn off mandatory locking in mode
1322                         if remote locking is turned off since the
1323                         local vfs will do advisory */
1324                         if (vol->file_mode ==
1325                                 (S_IALLUGO & ~(S_ISUID | S_IXGRP)))
1326                                 vol->file_mode = S_IALLUGO;
1327                 } else if (strnicmp(data, "forcemandatorylock", 9) == 0) {
1328                         /* will take the shorter form "forcemand" as well */
1329                         /* This mount option will force use of mandatory
1330                           (DOS/Windows style) byte range locks, instead of
1331                           using posix advisory byte range locks, even if the
1332                           Unix extensions are available and posix locks would
1333                           be supported otherwise. If Unix extensions are not
1334                           negotiated this has no effect since mandatory locks
1335                           would be used (mandatory locks is all that those
1336                           those servers support) */
1337                         vol->mand_lock = 1;
1338                 } else if (strnicmp(data, "setuids", 7) == 0) {
1339                         vol->setuids = 1;
1340                 } else if (strnicmp(data, "nosetuids", 9) == 0) {
1341                         vol->setuids = 0;
1342                 } else if (strnicmp(data, "dynperm", 7) == 0) {
1343                         vol->dynperm = true;
1344                 } else if (strnicmp(data, "nodynperm", 9) == 0) {
1345                         vol->dynperm = false;
1346                 } else if (strnicmp(data, "nohard", 6) == 0) {
1347                         vol->retry = 0;
1348                 } else if (strnicmp(data, "nosoft", 6) == 0) {
1349                         vol->retry = 1;
1350                 } else if (strnicmp(data, "nointr", 6) == 0) {
1351                         vol->intr = 0;
1352                 } else if (strnicmp(data, "intr", 4) == 0) {
1353                         vol->intr = 1;
1354                 } else if (strnicmp(data, "nostrictsync", 12) == 0) {
1355                         vol->nostrictsync = 1;
1356                 } else if (strnicmp(data, "strictsync", 10) == 0) {
1357                         vol->nostrictsync = 0;
1358                 } else if (strnicmp(data, "serverino", 7) == 0) {
1359                         vol->server_ino = 1;
1360                 } else if (strnicmp(data, "noserverino", 9) == 0) {
1361                         vol->server_ino = 0;
1362                 } else if (strnicmp(data, "rwpidforward", 4) == 0) {
1363                         vol->rwpidforward = 1;
1364                 } else if (strnicmp(data, "cifsacl", 7) == 0) {
1365                         vol->cifs_acl = 1;
1366                 } else if (strnicmp(data, "nocifsacl", 9) == 0) {
1367                         vol->cifs_acl = 0;
1368                 } else if (strnicmp(data, "acl", 3) == 0) {
1369                         vol->no_psx_acl = 0;
1370                 } else if (strnicmp(data, "noacl", 5) == 0) {
1371                         vol->no_psx_acl = 1;
1372                 } else if (strnicmp(data, "locallease", 6) == 0) {
1373                         vol->local_lease = 1;
1374                 } else if (strnicmp(data, "sign", 4) == 0) {
1375                         vol->secFlg |= CIFSSEC_MUST_SIGN;
1376                 } else if (strnicmp(data, "seal", 4) == 0) {
1377                         /* we do not do the following in secFlags because seal
1378                            is a per tree connection (mount) not a per socket
1379                            or per-smb connection option in the protocol */
1380                         /* vol->secFlg |= CIFSSEC_MUST_SEAL; */
1381                         vol->seal = 1;
1382                 } else if (strnicmp(data, "direct", 6) == 0) {
1383                         vol->direct_io = 1;
1384                 } else if (strnicmp(data, "forcedirectio", 13) == 0) {
1385                         vol->direct_io = 1;
1386                 } else if (strnicmp(data, "strictcache", 11) == 0) {
1387                         vol->strict_io = 1;
1388                 } else if (strnicmp(data, "noac", 4) == 0) {
1389                         printk(KERN_WARNING "CIFS: Mount option noac not "
1390                                 "supported. Instead set "
1391                                 "/proc/fs/cifs/LookupCacheEnabled to 0\n");
1392                 } else if (strnicmp(data, "fsc", 3) == 0) {
1393 #ifndef CONFIG_CIFS_FSCACHE
1394                         cERROR(1, "FS-Cache support needs CONFIG_CIFS_FSCACHE "
1395                                   "kernel config option set");
1396                         goto cifs_parse_mount_err;
1397 #endif
1398                         vol->fsc = true;
1399                 } else if (strnicmp(data, "mfsymlinks", 10) == 0) {
1400                         vol->mfsymlinks = true;
1401                 } else if (strnicmp(data, "multiuser", 8) == 0) {
1402                         vol->multiuser = true;
1403                 } else
1404                         printk(KERN_WARNING "CIFS: Unknown mount option %s\n",
1405                                                 data);
1406         }
1407         if (vol->UNC == NULL) {
1408                 if (devname == NULL) {
1409                         printk(KERN_WARNING "CIFS: Missing UNC name for mount "
1410                                                 "target\n");
1411                         goto cifs_parse_mount_err;
1412                 }
1413                 if ((temp_len = strnlen(devname, 300)) < 300) {
1414                         vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1415                         if (vol->UNC == NULL)
1416                                 goto cifs_parse_mount_err;
1417                         strcpy(vol->UNC, devname);
1418                         if (strncmp(vol->UNC, "//", 2) == 0) {
1419                                 vol->UNC[0] = '\\';
1420                                 vol->UNC[1] = '\\';
1421                         } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1422                                 printk(KERN_WARNING "CIFS: UNC Path does not "
1423                                                     "begin with // or \\\\ \n");
1424                                 goto cifs_parse_mount_err;
1425                         }
1426                         value = strpbrk(vol->UNC+2, "/\\");
1427                         if (value)
1428                                 *value = '\\';
1429                 } else {
1430                         printk(KERN_WARNING "CIFS: UNC name too long\n");
1431                         goto cifs_parse_mount_err;
1432                 }
1433         }
1434
1435         if (vol->multiuser && !(vol->secFlg & CIFSSEC_MAY_KRB5)) {
1436                 cERROR(1, "Multiuser mounts currently require krb5 "
1437                           "authentication!");
1438                 goto cifs_parse_mount_err;
1439         }
1440
1441         if (vol->UNCip == NULL)
1442                 vol->UNCip = &vol->UNC[2];
1443
1444         if (uid_specified)
1445                 vol->override_uid = override_uid;
1446         else if (override_uid == 1)
1447                 printk(KERN_NOTICE "CIFS: ignoring forceuid mount option "
1448                                    "specified with no uid= option.\n");
1449
1450         if (gid_specified)
1451                 vol->override_gid = override_gid;
1452         else if (override_gid == 1)
1453                 printk(KERN_NOTICE "CIFS: ignoring forcegid mount option "
1454                                    "specified with no gid= option.\n");
1455
1456         kfree(mountdata_copy);
1457         return 0;
1458
1459 cifs_parse_mount_err:
1460         kfree(mountdata_copy);
1461         return 1;
1462 }
1463
1464 /** Returns true if srcaddr isn't specified and rhs isn't
1465  * specified, or if srcaddr is specified and
1466  * matches the IP address of the rhs argument.
1467  */
1468 static bool
1469 srcip_matches(struct sockaddr *srcaddr, struct sockaddr *rhs)
1470 {
1471         switch (srcaddr->sa_family) {
1472         case AF_UNSPEC:
1473                 return (rhs->sa_family == AF_UNSPEC);
1474         case AF_INET: {
1475                 struct sockaddr_in *saddr4 = (struct sockaddr_in *)srcaddr;
1476                 struct sockaddr_in *vaddr4 = (struct sockaddr_in *)rhs;
1477                 return (saddr4->sin_addr.s_addr == vaddr4->sin_addr.s_addr);
1478         }
1479         case AF_INET6: {
1480                 struct sockaddr_in6 *saddr6 = (struct sockaddr_in6 *)srcaddr;
1481                 struct sockaddr_in6 *vaddr6 = (struct sockaddr_in6 *)&rhs;
1482                 return ipv6_addr_equal(&saddr6->sin6_addr, &vaddr6->sin6_addr);
1483         }
1484         default:
1485                 WARN_ON(1);
1486                 return false; /* don't expect to be here */
1487         }
1488 }
1489
1490 /*
1491  * If no port is specified in addr structure, we try to match with 445 port
1492  * and if it fails - with 139 ports. It should be called only if address
1493  * families of server and addr are equal.
1494  */
1495 static bool
1496 match_port(struct TCP_Server_Info *server, struct sockaddr *addr)
1497 {
1498         __be16 port, *sport;
1499
1500         switch (addr->sa_family) {
1501         case AF_INET:
1502                 sport = &((struct sockaddr_in *) &server->dstaddr)->sin_port;
1503                 port = ((struct sockaddr_in *) addr)->sin_port;
1504                 break;
1505         case AF_INET6:
1506                 sport = &((struct sockaddr_in6 *) &server->dstaddr)->sin6_port;
1507                 port = ((struct sockaddr_in6 *) addr)->sin6_port;
1508                 break;
1509         default:
1510                 WARN_ON(1);
1511                 return false;
1512         }
1513
1514         if (!port) {
1515                 port = htons(CIFS_PORT);
1516                 if (port == *sport)
1517                         return true;
1518
1519                 port = htons(RFC1001_PORT);
1520         }
1521
1522         return port == *sport;
1523 }
1524
1525 static bool
1526 match_address(struct TCP_Server_Info *server, struct sockaddr *addr,
1527               struct sockaddr *srcaddr)
1528 {
1529         switch (addr->sa_family) {
1530         case AF_INET: {
1531                 struct sockaddr_in *addr4 = (struct sockaddr_in *)addr;
1532                 struct sockaddr_in *srv_addr4 =
1533                                         (struct sockaddr_in *)&server->dstaddr;
1534
1535                 if (addr4->sin_addr.s_addr != srv_addr4->sin_addr.s_addr)
1536                         return false;
1537                 break;
1538         }
1539         case AF_INET6: {
1540                 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)addr;
1541                 struct sockaddr_in6 *srv_addr6 =
1542                                         (struct sockaddr_in6 *)&server->dstaddr;
1543
1544                 if (!ipv6_addr_equal(&addr6->sin6_addr,
1545                                      &srv_addr6->sin6_addr))
1546                         return false;
1547                 if (addr6->sin6_scope_id != srv_addr6->sin6_scope_id)
1548                         return false;
1549                 break;
1550         }
1551         default:
1552                 WARN_ON(1);
1553                 return false; /* don't expect to be here */
1554         }
1555
1556         if (!srcip_matches(srcaddr, (struct sockaddr *)&server->srcaddr))
1557                 return false;
1558
1559         return true;
1560 }
1561
1562 static bool
1563 match_security(struct TCP_Server_Info *server, struct smb_vol *vol)
1564 {
1565         unsigned int secFlags;
1566
1567         if (vol->secFlg & (~(CIFSSEC_MUST_SIGN | CIFSSEC_MUST_SEAL)))
1568                 secFlags = vol->secFlg;
1569         else
1570                 secFlags = global_secflags | vol->secFlg;
1571
1572         switch (server->secType) {
1573         case LANMAN:
1574                 if (!(secFlags & (CIFSSEC_MAY_LANMAN|CIFSSEC_MAY_PLNTXT)))
1575                         return false;
1576                 break;
1577         case NTLMv2:
1578                 if (!(secFlags & CIFSSEC_MAY_NTLMV2))
1579                         return false;
1580                 break;
1581         case NTLM:
1582                 if (!(secFlags & CIFSSEC_MAY_NTLM))
1583                         return false;
1584                 break;
1585         case Kerberos:
1586                 if (!(secFlags & CIFSSEC_MAY_KRB5))
1587                         return false;
1588                 break;
1589         case RawNTLMSSP:
1590                 if (!(secFlags & CIFSSEC_MAY_NTLMSSP))
1591                         return false;
1592                 break;
1593         default:
1594                 /* shouldn't happen */
1595                 return false;
1596         }
1597
1598         /* now check if signing mode is acceptable */
1599         if ((secFlags & CIFSSEC_MAY_SIGN) == 0 &&
1600             (server->sec_mode & SECMODE_SIGN_REQUIRED))
1601                         return false;
1602         else if (((secFlags & CIFSSEC_MUST_SIGN) == CIFSSEC_MUST_SIGN) &&
1603                  (server->sec_mode &
1604                   (SECMODE_SIGN_ENABLED|SECMODE_SIGN_REQUIRED)) == 0)
1605                         return false;
1606
1607         return true;
1608 }
1609
1610 static int match_server(struct TCP_Server_Info *server, struct sockaddr *addr,
1611                          struct smb_vol *vol)
1612 {
1613         if (!net_eq(cifs_net_ns(server), current->nsproxy->net_ns))
1614                 return 0;
1615
1616         if (!match_address(server, addr,
1617                            (struct sockaddr *)&vol->srcaddr))
1618                 return 0;
1619
1620         if (!match_port(server, addr))
1621                 return 0;
1622
1623         if (!match_security(server, vol))
1624                 return 0;
1625
1626         return 1;
1627 }
1628
1629 static struct TCP_Server_Info *
1630 cifs_find_tcp_session(struct sockaddr *addr, struct smb_vol *vol)
1631 {
1632         struct TCP_Server_Info *server;
1633
1634         spin_lock(&cifs_tcp_ses_lock);
1635         list_for_each_entry(server, &cifs_tcp_ses_list, tcp_ses_list) {
1636                 if (!match_server(server, addr, vol))
1637                         continue;
1638
1639                 ++server->srv_count;
1640                 spin_unlock(&cifs_tcp_ses_lock);
1641                 cFYI(1, "Existing tcp session with server found");
1642                 return server;
1643         }
1644         spin_unlock(&cifs_tcp_ses_lock);
1645         return NULL;
1646 }
1647
1648 static void
1649 cifs_put_tcp_session(struct TCP_Server_Info *server)
1650 {
1651         struct task_struct *task;
1652
1653         spin_lock(&cifs_tcp_ses_lock);
1654         if (--server->srv_count > 0) {
1655                 spin_unlock(&cifs_tcp_ses_lock);
1656                 return;
1657         }
1658
1659         put_net(cifs_net_ns(server));
1660
1661         list_del_init(&server->tcp_ses_list);
1662         spin_unlock(&cifs_tcp_ses_lock);
1663
1664         cancel_delayed_work_sync(&server->echo);
1665
1666         spin_lock(&GlobalMid_Lock);
1667         server->tcpStatus = CifsExiting;
1668         spin_unlock(&GlobalMid_Lock);
1669
1670         cifs_crypto_shash_release(server);
1671         cifs_fscache_release_client_cookie(server);
1672
1673         kfree(server->session_key.response);
1674         server->session_key.response = NULL;
1675         server->session_key.len = 0;
1676
1677         task = xchg(&server->tsk, NULL);
1678         if (task)
1679                 force_sig(SIGKILL, task);
1680 }
1681
1682 static struct TCP_Server_Info *
1683 cifs_get_tcp_session(struct smb_vol *volume_info)
1684 {
1685         struct TCP_Server_Info *tcp_ses = NULL;
1686         struct sockaddr_storage addr;
1687         struct sockaddr_in *sin_server = (struct sockaddr_in *) &addr;
1688         struct sockaddr_in6 *sin_server6 = (struct sockaddr_in6 *) &addr;
1689         int rc;
1690
1691         memset(&addr, 0, sizeof(struct sockaddr_storage));
1692
1693         cFYI(1, "UNC: %s ip: %s", volume_info->UNC, volume_info->UNCip);
1694
1695         if (volume_info->UNCip && volume_info->UNC) {
1696                 rc = cifs_fill_sockaddr((struct sockaddr *)&addr,
1697                                         volume_info->UNCip,
1698                                         strlen(volume_info->UNCip),
1699                                         volume_info->port);
1700                 if (!rc) {
1701                         /* we failed translating address */
1702                         rc = -EINVAL;
1703                         goto out_err;
1704                 }
1705         } else if (volume_info->UNCip) {
1706                 /* BB using ip addr as tcp_ses name to connect to the
1707                    DFS root below */
1708                 cERROR(1, "Connecting to DFS root not implemented yet");
1709                 rc = -EINVAL;
1710                 goto out_err;
1711         } else /* which tcp_sess DFS root would we conect to */ {
1712                 cERROR(1, "CIFS mount error: No UNC path (e.g. -o "
1713                         "unc=//192.168.1.100/public) specified");
1714                 rc = -EINVAL;
1715                 goto out_err;
1716         }
1717
1718         /* see if we already have a matching tcp_ses */
1719         tcp_ses = cifs_find_tcp_session((struct sockaddr *)&addr, volume_info);
1720         if (tcp_ses)
1721                 return tcp_ses;
1722
1723         tcp_ses = kzalloc(sizeof(struct TCP_Server_Info), GFP_KERNEL);
1724         if (!tcp_ses) {
1725                 rc = -ENOMEM;
1726                 goto out_err;
1727         }
1728
1729         rc = cifs_crypto_shash_allocate(tcp_ses);
1730         if (rc) {
1731                 cERROR(1, "could not setup hash structures rc %d", rc);
1732                 goto out_err;
1733         }
1734
1735         cifs_set_net_ns(tcp_ses, get_net(current->nsproxy->net_ns));
1736         tcp_ses->hostname = extract_hostname(volume_info->UNC);
1737         if (IS_ERR(tcp_ses->hostname)) {
1738                 rc = PTR_ERR(tcp_ses->hostname);
1739                 goto out_err_crypto_release;
1740         }
1741
1742         tcp_ses->noblocksnd = volume_info->noblocksnd;
1743         tcp_ses->noautotune = volume_info->noautotune;
1744         tcp_ses->tcp_nodelay = volume_info->sockopt_tcp_nodelay;
1745         atomic_set(&tcp_ses->inFlight, 0);
1746         init_waitqueue_head(&tcp_ses->response_q);
1747         init_waitqueue_head(&tcp_ses->request_q);
1748         INIT_LIST_HEAD(&tcp_ses->pending_mid_q);
1749         mutex_init(&tcp_ses->srv_mutex);
1750         memcpy(tcp_ses->workstation_RFC1001_name,
1751                 volume_info->source_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1752         memcpy(tcp_ses->server_RFC1001_name,
1753                 volume_info->target_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1754         tcp_ses->session_estab = false;
1755         tcp_ses->sequence_number = 0;
1756         tcp_ses->lstrp = jiffies;
1757         INIT_LIST_HEAD(&tcp_ses->tcp_ses_list);
1758         INIT_LIST_HEAD(&tcp_ses->smb_ses_list);
1759         INIT_DELAYED_WORK(&tcp_ses->echo, cifs_echo_request);
1760
1761         /*
1762          * at this point we are the only ones with the pointer
1763          * to the struct since the kernel thread not created yet
1764          * no need to spinlock this init of tcpStatus or srv_count
1765          */
1766         tcp_ses->tcpStatus = CifsNew;
1767         memcpy(&tcp_ses->srcaddr, &volume_info->srcaddr,
1768                sizeof(tcp_ses->srcaddr));
1769         ++tcp_ses->srv_count;
1770
1771         if (addr.ss_family == AF_INET6) {
1772                 cFYI(1, "attempting ipv6 connect");
1773                 /* BB should we allow ipv6 on port 139? */
1774                 /* other OS never observed in Wild doing 139 with v6 */
1775                 memcpy(&tcp_ses->dstaddr, sin_server6,
1776                        sizeof(struct sockaddr_in6));
1777         } else
1778                 memcpy(&tcp_ses->dstaddr, sin_server,
1779                        sizeof(struct sockaddr_in));
1780
1781         rc = ip_connect(tcp_ses);
1782         if (rc < 0) {
1783                 cERROR(1, "Error connecting to socket. Aborting operation");
1784                 goto out_err_crypto_release;
1785         }
1786
1787         /*
1788          * since we're in a cifs function already, we know that
1789          * this will succeed. No need for try_module_get().
1790          */
1791         __module_get(THIS_MODULE);
1792         tcp_ses->tsk = kthread_run((void *)(void *)cifs_demultiplex_thread,
1793                                   tcp_ses, "cifsd");
1794         if (IS_ERR(tcp_ses->tsk)) {
1795                 rc = PTR_ERR(tcp_ses->tsk);
1796                 cERROR(1, "error %d create cifsd thread", rc);
1797                 module_put(THIS_MODULE);
1798                 goto out_err_crypto_release;
1799         }
1800         tcp_ses->tcpStatus = CifsNeedNegotiate;
1801
1802         /* thread spawned, put it on the list */
1803         spin_lock(&cifs_tcp_ses_lock);
1804         list_add(&tcp_ses->tcp_ses_list, &cifs_tcp_ses_list);
1805         spin_unlock(&cifs_tcp_ses_lock);
1806
1807         cifs_fscache_get_client_cookie(tcp_ses);
1808
1809         /* queue echo request delayed work */
1810         queue_delayed_work(system_nrt_wq, &tcp_ses->echo, SMB_ECHO_INTERVAL);
1811
1812         return tcp_ses;
1813
1814 out_err_crypto_release:
1815         cifs_crypto_shash_release(tcp_ses);
1816
1817         put_net(cifs_net_ns(tcp_ses));
1818
1819 out_err:
1820         if (tcp_ses) {
1821                 if (!IS_ERR(tcp_ses->hostname))
1822                         kfree(tcp_ses->hostname);
1823                 if (tcp_ses->ssocket)
1824                         sock_release(tcp_ses->ssocket);
1825                 kfree(tcp_ses);
1826         }
1827         return ERR_PTR(rc);
1828 }
1829
1830 static int match_session(struct cifs_ses *ses, struct smb_vol *vol)
1831 {
1832         switch (ses->server->secType) {
1833         case Kerberos:
1834                 if (vol->cred_uid != ses->cred_uid)
1835                         return 0;
1836                 break;
1837         default:
1838                 /* anything else takes username/password */
1839                 if (ses->user_name == NULL)
1840                         return 0;
1841                 if (strncmp(ses->user_name, vol->username,
1842                             MAX_USERNAME_SIZE))
1843                         return 0;
1844                 if (strlen(vol->username) != 0 &&
1845                     ses->password != NULL &&
1846                     strncmp(ses->password,
1847                             vol->password ? vol->password : "",
1848                             MAX_PASSWORD_SIZE))
1849                         return 0;
1850         }
1851         return 1;
1852 }
1853
1854 static struct cifs_ses *
1855 cifs_find_smb_ses(struct TCP_Server_Info *server, struct smb_vol *vol)
1856 {
1857         struct cifs_ses *ses;
1858
1859         spin_lock(&cifs_tcp_ses_lock);
1860         list_for_each_entry(ses, &server->smb_ses_list, smb_ses_list) {
1861                 if (!match_session(ses, vol))
1862                         continue;
1863                 ++ses->ses_count;
1864                 spin_unlock(&cifs_tcp_ses_lock);
1865                 return ses;
1866         }
1867         spin_unlock(&cifs_tcp_ses_lock);
1868         return NULL;
1869 }
1870
1871 static void
1872 cifs_put_smb_ses(struct cifs_ses *ses)
1873 {
1874         int xid;
1875         struct TCP_Server_Info *server = ses->server;
1876
1877         cFYI(1, "%s: ses_count=%d\n", __func__, ses->ses_count);
1878         spin_lock(&cifs_tcp_ses_lock);
1879         if (--ses->ses_count > 0) {
1880                 spin_unlock(&cifs_tcp_ses_lock);
1881                 return;
1882         }
1883
1884         list_del_init(&ses->smb_ses_list);
1885         spin_unlock(&cifs_tcp_ses_lock);
1886
1887         if (ses->status == CifsGood) {
1888                 xid = GetXid();
1889                 CIFSSMBLogoff(xid, ses);
1890                 _FreeXid(xid);
1891         }
1892         sesInfoFree(ses);
1893         cifs_put_tcp_session(server);
1894 }
1895
1896 static bool warned_on_ntlm;  /* globals init to false automatically */
1897
1898 static struct cifs_ses *
1899 cifs_get_smb_ses(struct TCP_Server_Info *server, struct smb_vol *volume_info)
1900 {
1901         int rc = -ENOMEM, xid;
1902         struct cifs_ses *ses;
1903         struct sockaddr_in *addr = (struct sockaddr_in *)&server->dstaddr;
1904         struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)&server->dstaddr;
1905
1906         xid = GetXid();
1907
1908         ses = cifs_find_smb_ses(server, volume_info);
1909         if (ses) {
1910                 cFYI(1, "Existing smb sess found (status=%d)", ses->status);
1911
1912                 mutex_lock(&ses->session_mutex);
1913                 rc = cifs_negotiate_protocol(xid, ses);
1914                 if (rc) {
1915                         mutex_unlock(&ses->session_mutex);
1916                         /* problem -- put our ses reference */
1917                         cifs_put_smb_ses(ses);
1918                         FreeXid(xid);
1919                         return ERR_PTR(rc);
1920                 }
1921                 if (ses->need_reconnect) {
1922                         cFYI(1, "Session needs reconnect");
1923                         rc = cifs_setup_session(xid, ses,
1924                                                 volume_info->local_nls);
1925                         if (rc) {
1926                                 mutex_unlock(&ses->session_mutex);
1927                                 /* problem -- put our reference */
1928                                 cifs_put_smb_ses(ses);
1929                                 FreeXid(xid);
1930                                 return ERR_PTR(rc);
1931                         }
1932                 }
1933                 mutex_unlock(&ses->session_mutex);
1934
1935                 /* existing SMB ses has a server reference already */
1936                 cifs_put_tcp_session(server);
1937                 FreeXid(xid);
1938                 return ses;
1939         }
1940
1941         cFYI(1, "Existing smb sess not found");
1942         ses = sesInfoAlloc();
1943         if (ses == NULL)
1944                 goto get_ses_fail;
1945
1946         /* new SMB session uses our server ref */
1947         ses->server = server;
1948         if (server->dstaddr.ss_family == AF_INET6)
1949                 sprintf(ses->serverName, "%pI6", &addr6->sin6_addr);
1950         else
1951                 sprintf(ses->serverName, "%pI4", &addr->sin_addr);
1952
1953         if (volume_info->username) {
1954                 ses->user_name = kstrdup(volume_info->username, GFP_KERNEL);
1955                 if (!ses->user_name)
1956                         goto get_ses_fail;
1957         }
1958
1959         /* volume_info->password freed at unmount */
1960         if (volume_info->password) {
1961                 ses->password = kstrdup(volume_info->password, GFP_KERNEL);
1962                 if (!ses->password)
1963                         goto get_ses_fail;
1964         }
1965         if (volume_info->domainname) {
1966                 ses->domainName = kstrdup(volume_info->domainname, GFP_KERNEL);
1967                 if (!ses->domainName)
1968                         goto get_ses_fail;
1969         }
1970         ses->cred_uid = volume_info->cred_uid;
1971         ses->linux_uid = volume_info->linux_uid;
1972
1973         /* ntlmv2 is much stronger than ntlm security, and has been broadly
1974         supported for many years, time to update default security mechanism */
1975         if ((volume_info->secFlg == 0) && warned_on_ntlm == false) {
1976                 warned_on_ntlm = true;
1977                 cERROR(1, "default security mechanism requested.  The default "
1978                         "security mechanism will be upgraded from ntlm to "
1979                         "ntlmv2 in kernel release 3.1");
1980         }
1981         ses->overrideSecFlg = volume_info->secFlg;
1982
1983         mutex_lock(&ses->session_mutex);
1984         rc = cifs_negotiate_protocol(xid, ses);
1985         if (!rc)
1986                 rc = cifs_setup_session(xid, ses, volume_info->local_nls);
1987         mutex_unlock(&ses->session_mutex);
1988         if (rc)
1989                 goto get_ses_fail;
1990
1991         /* success, put it on the list */
1992         spin_lock(&cifs_tcp_ses_lock);
1993         list_add(&ses->smb_ses_list, &server->smb_ses_list);
1994         spin_unlock(&cifs_tcp_ses_lock);
1995
1996         FreeXid(xid);
1997         return ses;
1998
1999 get_ses_fail:
2000         sesInfoFree(ses);
2001         FreeXid(xid);
2002         return ERR_PTR(rc);
2003 }
2004
2005 static int match_tcon(struct cifs_tcon *tcon, const char *unc)
2006 {
2007         if (tcon->tidStatus == CifsExiting)
2008                 return 0;
2009         if (strncmp(tcon->treeName, unc, MAX_TREE_SIZE))
2010                 return 0;
2011         return 1;
2012 }
2013
2014 static struct cifs_tcon *
2015 cifs_find_tcon(struct cifs_ses *ses, const char *unc)
2016 {
2017         struct list_head *tmp;
2018         struct cifs_tcon *tcon;
2019
2020         spin_lock(&cifs_tcp_ses_lock);
2021         list_for_each(tmp, &ses->tcon_list) {
2022                 tcon = list_entry(tmp, struct cifs_tcon, tcon_list);
2023                 if (!match_tcon(tcon, unc))
2024                         continue;
2025                 ++tcon->tc_count;
2026                 spin_unlock(&cifs_tcp_ses_lock);
2027                 return tcon;
2028         }
2029         spin_unlock(&cifs_tcp_ses_lock);
2030         return NULL;
2031 }
2032
2033 static void
2034 cifs_put_tcon(struct cifs_tcon *tcon)
2035 {
2036         int xid;
2037         struct cifs_ses *ses = tcon->ses;
2038
2039         cFYI(1, "%s: tc_count=%d\n", __func__, tcon->tc_count);
2040         spin_lock(&cifs_tcp_ses_lock);
2041         if (--tcon->tc_count > 0) {
2042                 spin_unlock(&cifs_tcp_ses_lock);
2043                 return;
2044         }
2045
2046         list_del_init(&tcon->tcon_list);
2047         spin_unlock(&cifs_tcp_ses_lock);
2048
2049         xid = GetXid();
2050         CIFSSMBTDis(xid, tcon);
2051         _FreeXid(xid);
2052
2053         cifs_fscache_release_super_cookie(tcon);
2054         tconInfoFree(tcon);
2055         cifs_put_smb_ses(ses);
2056 }
2057
2058 static struct cifs_tcon *
2059 cifs_get_tcon(struct cifs_ses *ses, struct smb_vol *volume_info)
2060 {
2061         int rc, xid;
2062         struct cifs_tcon *tcon;
2063
2064         tcon = cifs_find_tcon(ses, volume_info->UNC);
2065         if (tcon) {
2066                 cFYI(1, "Found match on UNC path");
2067                 /* existing tcon already has a reference */
2068                 cifs_put_smb_ses(ses);
2069                 if (tcon->seal != volume_info->seal)
2070                         cERROR(1, "transport encryption setting "
2071                                    "conflicts with existing tid");
2072                 return tcon;
2073         }
2074
2075         tcon = tconInfoAlloc();
2076         if (tcon == NULL) {
2077                 rc = -ENOMEM;
2078                 goto out_fail;
2079         }
2080
2081         tcon->ses = ses;
2082         if (volume_info->password) {
2083                 tcon->password = kstrdup(volume_info->password, GFP_KERNEL);
2084                 if (!tcon->password) {
2085                         rc = -ENOMEM;
2086                         goto out_fail;
2087                 }
2088         }
2089
2090         if (strchr(volume_info->UNC + 3, '\\') == NULL
2091             && strchr(volume_info->UNC + 3, '/') == NULL) {
2092                 cERROR(1, "Missing share name");
2093                 rc = -ENODEV;
2094                 goto out_fail;
2095         }
2096
2097         /* BB Do we need to wrap session_mutex around
2098          * this TCon call and Unix SetFS as
2099          * we do on SessSetup and reconnect? */
2100         xid = GetXid();
2101         rc = CIFSTCon(xid, ses, volume_info->UNC, tcon, volume_info->local_nls);
2102         FreeXid(xid);
2103         cFYI(1, "CIFS Tcon rc = %d", rc);
2104         if (rc)
2105                 goto out_fail;
2106
2107         if (volume_info->nodfs) {
2108                 tcon->Flags &= ~SMB_SHARE_IS_IN_DFS;
2109                 cFYI(1, "DFS disabled (%d)", tcon->Flags);
2110         }
2111         tcon->seal = volume_info->seal;
2112         /* we can have only one retry value for a connection
2113            to a share so for resources mounted more than once
2114            to the same server share the last value passed in
2115            for the retry flag is used */
2116         tcon->retry = volume_info->retry;
2117         tcon->nocase = volume_info->nocase;
2118         tcon->local_lease = volume_info->local_lease;
2119
2120         spin_lock(&cifs_tcp_ses_lock);
2121         list_add(&tcon->tcon_list, &ses->tcon_list);
2122         spin_unlock(&cifs_tcp_ses_lock);
2123
2124         cifs_fscache_get_super_cookie(tcon);
2125
2126         return tcon;
2127
2128 out_fail:
2129         tconInfoFree(tcon);
2130         return ERR_PTR(rc);
2131 }
2132
2133 void
2134 cifs_put_tlink(struct tcon_link *tlink)
2135 {
2136         if (!tlink || IS_ERR(tlink))
2137                 return;
2138
2139         if (!atomic_dec_and_test(&tlink->tl_count) ||
2140             test_bit(TCON_LINK_IN_TREE, &tlink->tl_flags)) {
2141                 tlink->tl_time = jiffies;
2142                 return;
2143         }
2144
2145         if (!IS_ERR(tlink_tcon(tlink)))
2146                 cifs_put_tcon(tlink_tcon(tlink));
2147         kfree(tlink);
2148         return;
2149 }
2150
2151 static inline struct tcon_link *
2152 cifs_sb_master_tlink(struct cifs_sb_info *cifs_sb)
2153 {
2154         return cifs_sb->master_tlink;
2155 }
2156
2157 static int
2158 compare_mount_options(struct super_block *sb, struct cifs_mnt_data *mnt_data)
2159 {
2160         struct cifs_sb_info *old = CIFS_SB(sb);
2161         struct cifs_sb_info *new = mnt_data->cifs_sb;
2162
2163         if ((sb->s_flags & CIFS_MS_MASK) != (mnt_data->flags & CIFS_MS_MASK))
2164                 return 0;
2165
2166         if ((old->mnt_cifs_flags & CIFS_MOUNT_MASK) !=
2167             (new->mnt_cifs_flags & CIFS_MOUNT_MASK))
2168                 return 0;
2169
2170         if (old->rsize != new->rsize)
2171                 return 0;
2172
2173         /*
2174          * We want to share sb only if we don't specify wsize or specified wsize
2175          * is greater or equal than existing one.
2176          */
2177         if (new->wsize && new->wsize < old->wsize)
2178                 return 0;
2179
2180         if (old->mnt_uid != new->mnt_uid || old->mnt_gid != new->mnt_gid)
2181                 return 0;
2182
2183         if (old->mnt_file_mode != new->mnt_file_mode ||
2184             old->mnt_dir_mode != new->mnt_dir_mode)
2185                 return 0;
2186
2187         if (strcmp(old->local_nls->charset, new->local_nls->charset))
2188                 return 0;
2189
2190         if (old->actimeo != new->actimeo)
2191                 return 0;
2192
2193         return 1;
2194 }
2195
2196 int
2197 cifs_match_super(struct super_block *sb, void *data)
2198 {
2199         struct cifs_mnt_data *mnt_data = (struct cifs_mnt_data *)data;
2200         struct smb_vol *volume_info;
2201         struct cifs_sb_info *cifs_sb;
2202         struct TCP_Server_Info *tcp_srv;
2203         struct cifs_ses *ses;
2204         struct cifs_tcon *tcon;
2205         struct tcon_link *tlink;
2206         struct sockaddr_storage addr;
2207         int rc = 0;
2208
2209         memset(&addr, 0, sizeof(struct sockaddr_storage));
2210
2211         spin_lock(&cifs_tcp_ses_lock);
2212         cifs_sb = CIFS_SB(sb);
2213         tlink = cifs_get_tlink(cifs_sb_master_tlink(cifs_sb));
2214         if (IS_ERR(tlink)) {
2215                 spin_unlock(&cifs_tcp_ses_lock);
2216                 return rc;
2217         }
2218         tcon = tlink_tcon(tlink);
2219         ses = tcon->ses;
2220         tcp_srv = ses->server;
2221
2222         volume_info = mnt_data->vol;
2223
2224         if (!volume_info->UNCip || !volume_info->UNC)
2225                 goto out;
2226
2227         rc = cifs_fill_sockaddr((struct sockaddr *)&addr,
2228                                 volume_info->UNCip,
2229                                 strlen(volume_info->UNCip),
2230                                 volume_info->port);
2231         if (!rc)
2232                 goto out;
2233
2234         if (!match_server(tcp_srv, (struct sockaddr *)&addr, volume_info) ||
2235             !match_session(ses, volume_info) ||
2236             !match_tcon(tcon, volume_info->UNC)) {
2237                 rc = 0;
2238                 goto out;
2239         }
2240
2241         rc = compare_mount_options(sb, mnt_data);
2242 out:
2243         cifs_put_tlink(tlink);
2244         spin_unlock(&cifs_tcp_ses_lock);
2245         return rc;
2246 }
2247
2248 int
2249 get_dfs_path(int xid, struct cifs_ses *pSesInfo, const char *old_path,
2250              const struct nls_table *nls_codepage, unsigned int *pnum_referrals,
2251              struct dfs_info3_param **preferrals, int remap)
2252 {
2253         char *temp_unc;
2254         int rc = 0;
2255
2256         *pnum_referrals = 0;
2257         *preferrals = NULL;
2258
2259         if (pSesInfo->ipc_tid == 0) {
2260                 temp_unc = kmalloc(2 /* for slashes */ +
2261                         strnlen(pSesInfo->serverName,
2262                                 SERVER_NAME_LEN_WITH_NULL * 2)
2263                                  + 1 + 4 /* slash IPC$ */  + 2,
2264                                 GFP_KERNEL);
2265                 if (temp_unc == NULL)
2266                         return -ENOMEM;
2267                 temp_unc[0] = '\\';
2268                 temp_unc[1] = '\\';
2269                 strcpy(temp_unc + 2, pSesInfo->serverName);
2270                 strcpy(temp_unc + 2 + strlen(pSesInfo->serverName), "\\IPC$");
2271                 rc = CIFSTCon(xid, pSesInfo, temp_unc, NULL, nls_codepage);
2272                 cFYI(1, "CIFS Tcon rc = %d ipc_tid = %d", rc, pSesInfo->ipc_tid);
2273                 kfree(temp_unc);
2274         }
2275         if (rc == 0)
2276                 rc = CIFSGetDFSRefer(xid, pSesInfo, old_path, preferrals,
2277                                      pnum_referrals, nls_codepage, remap);
2278         /* BB map targetUNCs to dfs_info3 structures, here or
2279                 in CIFSGetDFSRefer BB */
2280
2281         return rc;
2282 }
2283
2284 #ifdef CONFIG_DEBUG_LOCK_ALLOC
2285 static struct lock_class_key cifs_key[2];
2286 static struct lock_class_key cifs_slock_key[2];
2287
2288 static inline void
2289 cifs_reclassify_socket4(struct socket *sock)
2290 {
2291         struct sock *sk = sock->sk;
2292         BUG_ON(sock_owned_by_user(sk));
2293         sock_lock_init_class_and_name(sk, "slock-AF_INET-CIFS",
2294                 &cifs_slock_key[0], "sk_lock-AF_INET-CIFS", &cifs_key[0]);
2295 }
2296
2297 static inline void
2298 cifs_reclassify_socket6(struct socket *sock)
2299 {
2300         struct sock *sk = sock->sk;
2301         BUG_ON(sock_owned_by_user(sk));
2302         sock_lock_init_class_and_name(sk, "slock-AF_INET6-CIFS",
2303                 &cifs_slock_key[1], "sk_lock-AF_INET6-CIFS", &cifs_key[1]);
2304 }
2305 #else
2306 static inline void
2307 cifs_reclassify_socket4(struct socket *sock)
2308 {
2309 }
2310
2311 static inline void
2312 cifs_reclassify_socket6(struct socket *sock)
2313 {
2314 }
2315 #endif
2316
2317 /* See RFC1001 section 14 on representation of Netbios names */
2318 static void rfc1002mangle(char *target, char *source, unsigned int length)
2319 {
2320         unsigned int i, j;
2321
2322         for (i = 0, j = 0; i < (length); i++) {
2323                 /* mask a nibble at a time and encode */
2324                 target[j] = 'A' + (0x0F & (source[i] >> 4));
2325                 target[j+1] = 'A' + (0x0F & source[i]);
2326                 j += 2;
2327         }
2328
2329 }
2330
2331 static int
2332 bind_socket(struct TCP_Server_Info *server)
2333 {
2334         int rc = 0;
2335         if (server->srcaddr.ss_family != AF_UNSPEC) {
2336                 /* Bind to the specified local IP address */
2337                 struct socket *socket = server->ssocket;
2338                 rc = socket->ops->bind(socket,
2339                                        (struct sockaddr *) &server->srcaddr,
2340                                        sizeof(server->srcaddr));
2341                 if (rc < 0) {
2342                         struct sockaddr_in *saddr4;
2343                         struct sockaddr_in6 *saddr6;
2344                         saddr4 = (struct sockaddr_in *)&server->srcaddr;
2345                         saddr6 = (struct sockaddr_in6 *)&server->srcaddr;
2346                         if (saddr6->sin6_family == AF_INET6)
2347                                 cERROR(1, "cifs: "
2348                                        "Failed to bind to: %pI6c, error: %d\n",
2349                                        &saddr6->sin6_addr, rc);
2350                         else
2351                                 cERROR(1, "cifs: "
2352                                        "Failed to bind to: %pI4, error: %d\n",
2353                                        &saddr4->sin_addr.s_addr, rc);
2354                 }
2355         }
2356         return rc;
2357 }
2358
2359 static int
2360 ip_rfc1001_connect(struct TCP_Server_Info *server)
2361 {
2362         int rc = 0;
2363         /*
2364          * some servers require RFC1001 sessinit before sending
2365          * negprot - BB check reconnection in case where second
2366          * sessinit is sent but no second negprot
2367          */
2368         struct rfc1002_session_packet *ses_init_buf;
2369         struct smb_hdr *smb_buf;
2370         ses_init_buf = kzalloc(sizeof(struct rfc1002_session_packet),
2371                                GFP_KERNEL);
2372         if (ses_init_buf) {
2373                 ses_init_buf->trailer.session_req.called_len = 32;
2374
2375                 if (server->server_RFC1001_name &&
2376                     server->server_RFC1001_name[0] != 0)
2377                         rfc1002mangle(ses_init_buf->trailer.
2378                                       session_req.called_name,
2379                                       server->server_RFC1001_name,
2380                                       RFC1001_NAME_LEN_WITH_NULL);
2381                 else
2382                         rfc1002mangle(ses_init_buf->trailer.
2383                                       session_req.called_name,
2384                                       DEFAULT_CIFS_CALLED_NAME,
2385                                       RFC1001_NAME_LEN_WITH_NULL);
2386
2387                 ses_init_buf->trailer.session_req.calling_len = 32;
2388
2389                 /*
2390                  * calling name ends in null (byte 16) from old smb
2391                  * convention.
2392                  */
2393                 if (server->workstation_RFC1001_name &&
2394                     server->workstation_RFC1001_name[0] != 0)
2395                         rfc1002mangle(ses_init_buf->trailer.
2396                                       session_req.calling_name,
2397                                       server->workstation_RFC1001_name,
2398                                       RFC1001_NAME_LEN_WITH_NULL);
2399                 else
2400                         rfc1002mangle(ses_init_buf->trailer.
2401                                       session_req.calling_name,
2402                                       "LINUX_CIFS_CLNT",
2403                                       RFC1001_NAME_LEN_WITH_NULL);
2404
2405                 ses_init_buf->trailer.session_req.scope1 = 0;
2406                 ses_init_buf->trailer.session_req.scope2 = 0;
2407                 smb_buf = (struct smb_hdr *)ses_init_buf;
2408
2409                 /* sizeof RFC1002_SESSION_REQUEST with no scope */
2410                 smb_buf->smb_buf_length = cpu_to_be32(0x81000044);
2411                 rc = smb_send(server, smb_buf, 0x44);
2412                 kfree(ses_init_buf);
2413                 /*
2414                  * RFC1001 layer in at least one server
2415                  * requires very short break before negprot
2416                  * presumably because not expecting negprot
2417                  * to follow so fast.  This is a simple
2418                  * solution that works without
2419                  * complicating the code and causes no
2420                  * significant slowing down on mount
2421                  * for everyone else
2422                  */
2423                 usleep_range(1000, 2000);
2424         }
2425         /*
2426          * else the negprot may still work without this
2427          * even though malloc failed
2428          */
2429
2430         return rc;
2431 }
2432
2433 static int
2434 generic_ip_connect(struct TCP_Server_Info *server)
2435 {
2436         int rc = 0;
2437         __be16 sport;
2438         int slen, sfamily;
2439         struct socket *socket = server->ssocket;
2440         struct sockaddr *saddr;
2441
2442         saddr = (struct sockaddr *) &server->dstaddr;
2443
2444         if (server->dstaddr.ss_family == AF_INET6) {
2445                 sport = ((struct sockaddr_in6 *) saddr)->sin6_port;
2446                 slen = sizeof(struct sockaddr_in6);
2447                 sfamily = AF_INET6;
2448         } else {
2449                 sport = ((struct sockaddr_in *) saddr)->sin_port;
2450                 slen = sizeof(struct sockaddr_in);
2451                 sfamily = AF_INET;
2452         }
2453
2454         if (socket == NULL) {
2455                 rc = __sock_create(cifs_net_ns(server), sfamily, SOCK_STREAM,
2456                                    IPPROTO_TCP, &socket, 1);
2457                 if (rc < 0) {
2458                         cERROR(1, "Error %d creating socket", rc);
2459                         server->ssocket = NULL;
2460                         return rc;
2461                 }
2462
2463                 /* BB other socket options to set KEEPALIVE, NODELAY? */
2464                 cFYI(1, "Socket created");
2465                 server->ssocket = socket;
2466                 socket->sk->sk_allocation = GFP_NOFS;
2467                 if (sfamily == AF_INET6)
2468                         cifs_reclassify_socket6(socket);
2469                 else
2470                         cifs_reclassify_socket4(socket);
2471         }
2472
2473         rc = bind_socket(server);
2474         if (rc < 0)
2475                 return rc;
2476
2477         rc = socket->ops->connect(socket, saddr, slen, 0);
2478         if (rc < 0) {
2479                 cFYI(1, "Error %d connecting to server", rc);
2480                 sock_release(socket);
2481                 server->ssocket = NULL;
2482                 return rc;
2483         }
2484
2485         /*
2486          * Eventually check for other socket options to change from
2487          * the default. sock_setsockopt not used because it expects
2488          * user space buffer
2489          */
2490         socket->sk->sk_rcvtimeo = 7 * HZ;
2491         socket->sk->sk_sndtimeo = 5 * HZ;
2492
2493         /* make the bufsizes depend on wsize/rsize and max requests */
2494         if (server->noautotune) {
2495                 if (socket->sk->sk_sndbuf < (200 * 1024))
2496                         socket->sk->sk_sndbuf = 200 * 1024;
2497                 if (socket->sk->sk_rcvbuf < (140 * 1024))
2498                         socket->sk->sk_rcvbuf = 140 * 1024;
2499         }
2500
2501         if (server->tcp_nodelay) {
2502                 int val = 1;
2503                 rc = kernel_setsockopt(socket, SOL_TCP, TCP_NODELAY,
2504                                 (char *)&val, sizeof(val));
2505                 if (rc)
2506                         cFYI(1, "set TCP_NODELAY socket option error %d", rc);
2507         }
2508
2509          cFYI(1, "sndbuf %d rcvbuf %d rcvtimeo 0x%lx",
2510                  socket->sk->sk_sndbuf,
2511                  socket->sk->sk_rcvbuf, socket->sk->sk_rcvtimeo);
2512
2513         if (sport == htons(RFC1001_PORT))
2514                 rc = ip_rfc1001_connect(server);
2515
2516         return rc;
2517 }
2518
2519 static int
2520 ip_connect(struct TCP_Server_Info *server)
2521 {
2522         __be16 *sport;
2523         struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *)&server->dstaddr;
2524         struct sockaddr_in *addr = (struct sockaddr_in *)&server->dstaddr;
2525
2526         if (server->dstaddr.ss_family == AF_INET6)
2527                 sport = &addr6->sin6_port;
2528         else
2529                 sport = &addr->sin_port;
2530
2531         if (*sport == 0) {
2532                 int rc;
2533
2534                 /* try with 445 port at first */
2535                 *sport = htons(CIFS_PORT);
2536
2537                 rc = generic_ip_connect(server);
2538                 if (rc >= 0)
2539                         return rc;
2540
2541                 /* if it failed, try with 139 port */
2542                 *sport = htons(RFC1001_PORT);
2543         }
2544
2545         return generic_ip_connect(server);
2546 }
2547
2548 void reset_cifs_unix_caps(int xid, struct cifs_tcon *tcon,
2549                           struct cifs_sb_info *cifs_sb, struct smb_vol *vol_info)
2550 {
2551         /* if we are reconnecting then should we check to see if
2552          * any requested capabilities changed locally e.g. via
2553          * remount but we can not do much about it here
2554          * if they have (even if we could detect it by the following)
2555          * Perhaps we could add a backpointer to array of sb from tcon
2556          * or if we change to make all sb to same share the same
2557          * sb as NFS - then we only have one backpointer to sb.
2558          * What if we wanted to mount the server share twice once with
2559          * and once without posixacls or posix paths? */
2560         __u64 saved_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2561
2562         if (vol_info && vol_info->no_linux_ext) {
2563                 tcon->fsUnixInfo.Capability = 0;
2564                 tcon->unix_ext = 0; /* Unix Extensions disabled */
2565                 cFYI(1, "Linux protocol extensions disabled");
2566                 return;
2567         } else if (vol_info)
2568                 tcon->unix_ext = 1; /* Unix Extensions supported */
2569
2570         if (tcon->unix_ext == 0) {
2571                 cFYI(1, "Unix extensions disabled so not set on reconnect");
2572                 return;
2573         }
2574
2575         if (!CIFSSMBQFSUnixInfo(xid, tcon)) {
2576                 __u64 cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2577                 cFYI(1, "unix caps which server supports %lld", cap);
2578                 /* check for reconnect case in which we do not
2579                    want to change the mount behavior if we can avoid it */
2580                 if (vol_info == NULL) {
2581                         /* turn off POSIX ACL and PATHNAMES if not set
2582                            originally at mount time */
2583                         if ((saved_cap & CIFS_UNIX_POSIX_ACL_CAP) == 0)
2584                                 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2585                         if ((saved_cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2586                                 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2587                                         cERROR(1, "POSIXPATH support change");
2588                                 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2589                         } else if ((cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2590                                 cERROR(1, "possible reconnect error");
2591                                 cERROR(1, "server disabled POSIX path support");
2592                         }
2593                 }
2594
2595                 if (cap & CIFS_UNIX_TRANSPORT_ENCRYPTION_MANDATORY_CAP)
2596                         cERROR(1, "per-share encryption not supported yet");
2597
2598                 cap &= CIFS_UNIX_CAP_MASK;
2599                 if (vol_info && vol_info->no_psx_acl)
2600                         cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2601                 else if (CIFS_UNIX_POSIX_ACL_CAP & cap) {
2602                         cFYI(1, "negotiated posix acl support");
2603                         if (cifs_sb)
2604                                 cifs_sb->mnt_cifs_flags |=
2605                                         CIFS_MOUNT_POSIXACL;
2606                 }
2607
2608                 if (vol_info && vol_info->posix_paths == 0)
2609                         cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2610                 else if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) {
2611                         cFYI(1, "negotiate posix pathnames");
2612                         if (cifs_sb)
2613                                 cifs_sb->mnt_cifs_flags |=
2614                                         CIFS_MOUNT_POSIX_PATHS;
2615                 }
2616
2617                 if (cifs_sb && (cifs_sb->rsize > 127 * 1024)) {
2618                         if ((cap & CIFS_UNIX_LARGE_READ_CAP) == 0) {
2619                                 cifs_sb->rsize = 127 * 1024;
2620                                 cFYI(DBG2, "larger reads not supported by srv");
2621                         }
2622                 }
2623
2624
2625                 cFYI(1, "Negotiate caps 0x%x", (int)cap);
2626 #ifdef CONFIG_CIFS_DEBUG2
2627                 if (cap & CIFS_UNIX_FCNTL_CAP)
2628                         cFYI(1, "FCNTL cap");
2629                 if (cap & CIFS_UNIX_EXTATTR_CAP)
2630                         cFYI(1, "EXTATTR cap");
2631                 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2632                         cFYI(1, "POSIX path cap");
2633                 if (cap & CIFS_UNIX_XATTR_CAP)
2634                         cFYI(1, "XATTR cap");
2635                 if (cap & CIFS_UNIX_POSIX_ACL_CAP)
2636                         cFYI(1, "POSIX ACL cap");
2637                 if (cap & CIFS_UNIX_LARGE_READ_CAP)
2638                         cFYI(1, "very large read cap");
2639                 if (cap & CIFS_UNIX_LARGE_WRITE_CAP)
2640                         cFYI(1, "very large write cap");
2641                 if (cap & CIFS_UNIX_TRANSPORT_ENCRYPTION_CAP)
2642                         cFYI(1, "transport encryption cap");
2643                 if (cap & CIFS_UNIX_TRANSPORT_ENCRYPTION_MANDATORY_CAP)
2644                         cFYI(1, "mandatory transport encryption cap");
2645 #endif /* CIFS_DEBUG2 */
2646                 if (CIFSSMBSetFSUnixInfo(xid, tcon, cap)) {
2647                         if (vol_info == NULL) {
2648                                 cFYI(1, "resetting capabilities failed");
2649                         } else
2650                                 cERROR(1, "Negotiating Unix capabilities "
2651                                            "with the server failed.  Consider "
2652                                            "mounting with the Unix Extensions\n"
2653                                            "disabled, if problems are found, "
2654                                            "by specifying the nounix mount "
2655                                            "option.");
2656
2657                 }
2658         }
2659 }
2660
2661 void cifs_setup_cifs_sb(struct smb_vol *pvolume_info,
2662                         struct cifs_sb_info *cifs_sb)
2663 {
2664         INIT_DELAYED_WORK(&cifs_sb->prune_tlinks, cifs_prune_tlinks);
2665
2666         spin_lock_init(&cifs_sb->tlink_tree_lock);
2667         cifs_sb->tlink_tree = RB_ROOT;
2668
2669         if (pvolume_info->rsize > CIFSMaxBufSize) {
2670                 cERROR(1, "rsize %d too large, using MaxBufSize",
2671                         pvolume_info->rsize);
2672                 cifs_sb->rsize = CIFSMaxBufSize;
2673         } else if ((pvolume_info->rsize) &&
2674                         (pvolume_info->rsize <= CIFSMaxBufSize))
2675                 cifs_sb->rsize = pvolume_info->rsize;
2676         else /* default */
2677                 cifs_sb->rsize = CIFSMaxBufSize;
2678
2679         if (cifs_sb->rsize < 2048) {
2680                 cifs_sb->rsize = 2048;
2681                 /* Windows ME may prefer this */
2682                 cFYI(1, "readsize set to minimum: 2048");
2683         }
2684
2685         /*
2686          * Temporarily set wsize for matching superblock. If we end up using
2687          * new sb then cifs_negotiate_wsize will later negotiate it downward
2688          * if needed.
2689          */
2690         cifs_sb->wsize = pvolume_info->wsize;
2691
2692         cifs_sb->mnt_uid = pvolume_info->linux_uid;
2693         cifs_sb->mnt_gid = pvolume_info->linux_gid;
2694         cifs_sb->mnt_file_mode = pvolume_info->file_mode;
2695         cifs_sb->mnt_dir_mode = pvolume_info->dir_mode;
2696         cFYI(1, "file mode: 0x%x  dir mode: 0x%x",
2697                 cifs_sb->mnt_file_mode, cifs_sb->mnt_dir_mode);
2698
2699         cifs_sb->actimeo = pvolume_info->actimeo;
2700         cifs_sb->local_nls = pvolume_info->local_nls;
2701
2702         if (pvolume_info->noperm)
2703                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_PERM;
2704         if (pvolume_info->setuids)
2705                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SET_UID;
2706         if (pvolume_info->server_ino)
2707                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SERVER_INUM;
2708         if (pvolume_info->remap)
2709                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MAP_SPECIAL_CHR;
2710         if (pvolume_info->no_xattr)
2711                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_XATTR;
2712         if (pvolume_info->sfu_emul)
2713                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_UNX_EMUL;
2714         if (pvolume_info->nobrl)
2715                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_BRL;
2716         if (pvolume_info->nostrictsync)
2717                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOSSYNC;
2718         if (pvolume_info->mand_lock)
2719                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOPOSIXBRL;
2720         if (pvolume_info->rwpidforward)
2721                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_RWPIDFORWARD;
2722         if (pvolume_info->cifs_acl)
2723                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_ACL;
2724         if (pvolume_info->override_uid)
2725                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_UID;
2726         if (pvolume_info->override_gid)
2727                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_GID;
2728         if (pvolume_info->dynperm)
2729                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DYNPERM;
2730         if (pvolume_info->fsc)
2731                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_FSCACHE;
2732         if (pvolume_info->multiuser)
2733                 cifs_sb->mnt_cifs_flags |= (CIFS_MOUNT_MULTIUSER |
2734                                             CIFS_MOUNT_NO_PERM);
2735         if (pvolume_info->strict_io)
2736                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_STRICT_IO;
2737         if (pvolume_info->direct_io) {
2738                 cFYI(1, "mounting share using direct i/o");
2739                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DIRECT_IO;
2740         }
2741         if (pvolume_info->mfsymlinks) {
2742                 if (pvolume_info->sfu_emul) {
2743                         cERROR(1,  "mount option mfsymlinks ignored if sfu "
2744                                    "mount option is used");
2745                 } else {
2746                         cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MF_SYMLINKS;
2747                 }
2748         }
2749
2750         if ((pvolume_info->cifs_acl) && (pvolume_info->dynperm))
2751                 cERROR(1, "mount option dynperm ignored if cifsacl "
2752                            "mount option supported");
2753 }
2754
2755 /*
2756  * When the server supports very large writes via POSIX extensions, we can
2757  * allow up to 2^24-1, minus the size of a WRITE_AND_X header, not including
2758  * the RFC1001 length.
2759  *
2760  * Note that this might make for "interesting" allocation problems during
2761  * writeback however as we have to allocate an array of pointers for the
2762  * pages. A 16M write means ~32kb page array with PAGE_CACHE_SIZE == 4096.
2763  */
2764 #define CIFS_MAX_WSIZE ((1<<24) - 1 - sizeof(WRITE_REQ) + 4)
2765
2766 /*
2767  * When the server doesn't allow large posix writes, only allow a wsize of
2768  * 128k minus the size of the WRITE_AND_X header. That allows for a write up
2769  * to the maximum size described by RFC1002.
2770  */
2771 #define CIFS_MAX_RFC1002_WSIZE (128 * 1024 - sizeof(WRITE_REQ) + 4)
2772
2773 /*
2774  * The default wsize is 1M. find_get_pages seems to return a maximum of 256
2775  * pages in a single call. With PAGE_CACHE_SIZE == 4k, this means we can fill
2776  * a single wsize request with a single call.
2777  */
2778 #define CIFS_DEFAULT_WSIZE (1024 * 1024)
2779
2780 static unsigned int
2781 cifs_negotiate_wsize(struct cifs_tcon *tcon, struct smb_vol *pvolume_info)
2782 {
2783         __u64 unix_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2784         struct TCP_Server_Info *server = tcon->ses->server;
2785         unsigned int wsize = pvolume_info->wsize ? pvolume_info->wsize :
2786                                 CIFS_DEFAULT_WSIZE;
2787
2788         /* can server support 24-bit write sizes? (via UNIX extensions) */
2789         if (!tcon->unix_ext || !(unix_cap & CIFS_UNIX_LARGE_WRITE_CAP))
2790                 wsize = min_t(unsigned int, wsize, CIFS_MAX_RFC1002_WSIZE);
2791
2792         /*
2793          * no CAP_LARGE_WRITE_X or is signing enabled without CAP_UNIX set?
2794          * Limit it to max buffer offered by the server, minus the size of the
2795          * WRITEX header, not including the 4 byte RFC1001 length.
2796          */
2797         if (!(server->capabilities & CAP_LARGE_WRITE_X) ||
2798             (!(server->capabilities & CAP_UNIX) &&
2799              (server->sec_mode & (SECMODE_SIGN_ENABLED|SECMODE_SIGN_REQUIRED))))
2800                 wsize = min_t(unsigned int, wsize,
2801                                 server->maxBuf - sizeof(WRITE_REQ) + 4);
2802
2803         /* hard limit of CIFS_MAX_WSIZE */
2804         wsize = min_t(unsigned int, wsize, CIFS_MAX_WSIZE);
2805
2806         return wsize;
2807 }
2808
2809 static int
2810 is_path_accessible(int xid, struct cifs_tcon *tcon,
2811                    struct cifs_sb_info *cifs_sb, const char *full_path)
2812 {
2813         int rc;
2814         FILE_ALL_INFO *pfile_info;
2815
2816         pfile_info = kmalloc(sizeof(FILE_ALL_INFO), GFP_KERNEL);
2817         if (pfile_info == NULL)
2818                 return -ENOMEM;
2819
2820         rc = CIFSSMBQPathInfo(xid, tcon, full_path, pfile_info,
2821                               0 /* not legacy */, cifs_sb->local_nls,
2822                               cifs_sb->mnt_cifs_flags &
2823                                 CIFS_MOUNT_MAP_SPECIAL_CHR);
2824
2825         if (rc == -EOPNOTSUPP || rc == -EINVAL)
2826                 rc = SMBQueryInformation(xid, tcon, full_path, pfile_info,
2827                                 cifs_sb->local_nls, cifs_sb->mnt_cifs_flags &
2828                                   CIFS_MOUNT_MAP_SPECIAL_CHR);
2829         kfree(pfile_info);
2830         return rc;
2831 }
2832
2833 void
2834 cifs_cleanup_volume_info(struct smb_vol **pvolume_info)
2835 {
2836         struct smb_vol *volume_info;
2837
2838         if (!pvolume_info || !*pvolume_info)
2839                 return;
2840
2841         volume_info = *pvolume_info;
2842         kfree(volume_info->username);
2843         kzfree(volume_info->password);
2844         kfree(volume_info->UNC);
2845         kfree(volume_info->UNCip);
2846         kfree(volume_info->domainname);
2847         kfree(volume_info->iocharset);
2848         kfree(volume_info->prepath);
2849         kfree(volume_info);
2850         *pvolume_info = NULL;
2851         return;
2852 }
2853
2854 #ifdef CONFIG_CIFS_DFS_UPCALL
2855 /* build_path_to_root returns full path to root when
2856  * we do not have an exiting connection (tcon) */
2857 static char *
2858 build_unc_path_to_root(const struct smb_vol *volume_info,
2859                 const struct cifs_sb_info *cifs_sb)
2860 {
2861         char *full_path;
2862
2863         int unc_len = strnlen(volume_info->UNC, MAX_TREE_SIZE + 1);
2864         full_path = kmalloc(unc_len + 1, GFP_KERNEL);
2865         if (full_path == NULL)
2866                 return ERR_PTR(-ENOMEM);
2867
2868         strncpy(full_path, volume_info->UNC, unc_len);
2869         full_path[unc_len] = 0; /* add trailing null */
2870         convert_delimiter(full_path, CIFS_DIR_SEP(cifs_sb));
2871         return full_path;
2872 }
2873
2874 /*
2875  * Perform a dfs referral query for a share and (optionally) prefix
2876  *
2877  * If a referral is found, cifs_sb->mountdata will be (re-)allocated
2878  * to a string containing updated options for the submount.  Otherwise it
2879  * will be left untouched.
2880  *
2881  * Returns the rc from get_dfs_path to the caller, which can be used to
2882  * determine whether there were referrals.
2883  */
2884 static int
2885 expand_dfs_referral(int xid, struct cifs_ses *pSesInfo,
2886                     struct smb_vol *volume_info, struct cifs_sb_info *cifs_sb,
2887                     int check_prefix)
2888 {
2889         int rc;
2890         unsigned int num_referrals = 0;
2891         struct dfs_info3_param *referrals = NULL;
2892         char *full_path = NULL, *ref_path = NULL, *mdata = NULL;
2893
2894         full_path = build_unc_path_to_root(volume_info, cifs_sb);
2895         if (IS_ERR(full_path))
2896                 return PTR_ERR(full_path);
2897
2898         /* For DFS paths, skip the first '\' of the UNC */
2899         ref_path = check_prefix ? full_path + 1 : volume_info->UNC + 1;
2900
2901         rc = get_dfs_path(xid, pSesInfo , ref_path, cifs_sb->local_nls,
2902                           &num_referrals, &referrals,
2903                           cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
2904
2905         if (!rc && num_referrals > 0) {
2906                 char *fake_devname = NULL;
2907
2908                 mdata = cifs_compose_mount_options(cifs_sb->mountdata,
2909                                                    full_path + 1, referrals,
2910                                                    &fake_devname);
2911
2912                 free_dfs_info_array(referrals, num_referrals);
2913                 kfree(fake_devname);
2914
2915                 if (cifs_sb->mountdata != NULL)
2916                         kfree(cifs_sb->mountdata);
2917
2918                 if (IS_ERR(mdata)) {
2919                         rc = PTR_ERR(mdata);
2920                         mdata = NULL;
2921                 }
2922                 cifs_sb->mountdata = mdata;
2923         }
2924         kfree(full_path);
2925         return rc;
2926 }
2927 #endif
2928
2929 int cifs_setup_volume_info(struct smb_vol **pvolume_info, char *mount_data,
2930                            const char *devname)
2931 {
2932         struct smb_vol *volume_info;
2933         int rc = 0;
2934
2935         *pvolume_info = NULL;
2936
2937         volume_info = kzalloc(sizeof(struct smb_vol), GFP_KERNEL);
2938         if (!volume_info) {
2939                 rc = -ENOMEM;
2940                 goto out;
2941         }
2942
2943         if (cifs_parse_mount_options(mount_data, devname,
2944                                      volume_info)) {
2945                 rc = -EINVAL;
2946                 goto out;
2947         }
2948
2949         if (volume_info->nullauth) {
2950                 cFYI(1, "null user");
2951                 volume_info->username = kzalloc(1, GFP_KERNEL);
2952                 if (volume_info->username == NULL) {
2953                         rc = -ENOMEM;
2954                         goto out;
2955                 }
2956         } else if (volume_info->username) {
2957                 /* BB fixme parse for domain name here */
2958                 cFYI(1, "Username: %s", volume_info->username);
2959         } else {
2960                 cifserror("No username specified");
2961         /* In userspace mount helper we can get user name from alternate
2962            locations such as env variables and files on disk */
2963                 rc = -EINVAL;
2964                 goto out;
2965         }
2966
2967         /* this is needed for ASCII cp to Unicode converts */
2968         if (volume_info->iocharset == NULL) {
2969                 /* load_nls_default cannot return null */
2970                 volume_info->local_nls = load_nls_default();
2971         } else {
2972                 volume_info->local_nls = load_nls(volume_info->iocharset);
2973                 if (volume_info->local_nls == NULL) {
2974                         cERROR(1, "CIFS mount error: iocharset %s not found",
2975                                  volume_info->iocharset);
2976                         rc = -ELIBACC;
2977                         goto out;
2978                 }
2979         }
2980
2981         *pvolume_info = volume_info;
2982         return rc;
2983 out:
2984         cifs_cleanup_volume_info(&volume_info);
2985         return rc;
2986 }
2987
2988 int
2989 cifs_mount(struct cifs_sb_info *cifs_sb, struct smb_vol *volume_info)
2990 {
2991         int rc = 0;
2992         int xid;
2993         struct cifs_ses *pSesInfo;
2994         struct cifs_tcon *tcon;
2995         struct TCP_Server_Info *srvTcp;
2996         char   *full_path;
2997         struct tcon_link *tlink;
2998 #ifdef CONFIG_CIFS_DFS_UPCALL
2999         int referral_walks_count = 0;
3000
3001         rc = bdi_setup_and_register(&cifs_sb->bdi, "cifs", BDI_CAP_MAP_COPY);
3002         if (rc)
3003                 return rc;
3004
3005         cifs_sb->bdi.ra_pages = default_backing_dev_info.ra_pages;
3006
3007 try_mount_again:
3008         /* cleanup activities if we're chasing a referral */
3009         if (referral_walks_count) {
3010                 if (tcon)
3011                         cifs_put_tcon(tcon);
3012                 else if (pSesInfo)
3013                         cifs_put_smb_ses(pSesInfo);
3014
3015                 cifs_cleanup_volume_info(&volume_info);
3016                 FreeXid(xid);
3017         }
3018 #endif
3019         tcon = NULL;
3020         pSesInfo = NULL;
3021         srvTcp = NULL;
3022         full_path = NULL;
3023         tlink = NULL;
3024
3025         xid = GetXid();
3026
3027         /* get a reference to a tcp session */
3028         srvTcp = cifs_get_tcp_session(volume_info);
3029         if (IS_ERR(srvTcp)) {
3030                 rc = PTR_ERR(srvTcp);
3031                 bdi_destroy(&cifs_sb->bdi);
3032                 goto out;
3033         }
3034
3035         /* get a reference to a SMB session */
3036         pSesInfo = cifs_get_smb_ses(srvTcp, volume_info);
3037         if (IS_ERR(pSesInfo)) {
3038                 rc = PTR_ERR(pSesInfo);
3039                 pSesInfo = NULL;
3040                 goto mount_fail_check;
3041         }
3042
3043         /* search for existing tcon to this server share */
3044         tcon = cifs_get_tcon(pSesInfo, volume_info);
3045         if (IS_ERR(tcon)) {
3046                 rc = PTR_ERR(tcon);
3047                 tcon = NULL;
3048                 goto remote_path_check;
3049         }
3050
3051         /* tell server which Unix caps we support */
3052         if (tcon->ses->capabilities & CAP_UNIX) {
3053                 /* reset of caps checks mount to see if unix extensions
3054                    disabled for just this mount */
3055                 reset_cifs_unix_caps(xid, tcon, cifs_sb, volume_info);
3056                 if ((tcon->ses->server->tcpStatus == CifsNeedReconnect) &&
3057                     (le64_to_cpu(tcon->fsUnixInfo.Capability) &
3058                      CIFS_UNIX_TRANSPORT_ENCRYPTION_MANDATORY_CAP)) {
3059                         rc = -EACCES;
3060                         goto mount_fail_check;
3061                 }
3062         } else
3063                 tcon->unix_ext = 0; /* server does not support them */
3064
3065         /* do not care if following two calls succeed - informational */
3066         if (!tcon->ipc) {
3067                 CIFSSMBQFSDeviceInfo(xid, tcon);
3068                 CIFSSMBQFSAttributeInfo(xid, tcon);
3069         }
3070
3071         if ((tcon->unix_ext == 0) && (cifs_sb->rsize > (1024 * 127))) {
3072                 cifs_sb->rsize = 1024 * 127;
3073                 cFYI(DBG2, "no very large read support, rsize now 127K");
3074         }
3075         if (!(tcon->ses->capabilities & CAP_LARGE_READ_X))
3076                 cifs_sb->rsize = min(cifs_sb->rsize,
3077                                (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
3078
3079         cifs_sb->wsize = cifs_negotiate_wsize(tcon, volume_info);
3080
3081 remote_path_check:
3082 #ifdef CONFIG_CIFS_DFS_UPCALL
3083         /*
3084          * Perform an unconditional check for whether there are DFS
3085          * referrals for this path without prefix, to provide support
3086          * for DFS referrals from w2k8 servers which don't seem to respond
3087          * with PATH_NOT_COVERED to requests that include the prefix.
3088          * Chase the referral if found, otherwise continue normally.
3089          */
3090         if (referral_walks_count == 0) {
3091                 int refrc = expand_dfs_referral(xid, pSesInfo, volume_info,
3092                                                 cifs_sb, false);
3093                 if (!refrc) {
3094                         referral_walks_count++;
3095                         goto try_mount_again;
3096                 }
3097         }
3098 #endif
3099
3100         /* check if a whole path is not remote */
3101         if (!rc && tcon) {
3102                 /* build_path_to_root works only when we have a valid tcon */
3103                 full_path = cifs_build_path_to_root(volume_info, cifs_sb, tcon);
3104                 if (full_path == NULL) {
3105                         rc = -ENOMEM;
3106                         goto mount_fail_check;
3107                 }
3108                 rc = is_path_accessible(xid, tcon, cifs_sb, full_path);
3109                 if (rc != 0 && rc != -EREMOTE) {
3110                         kfree(full_path);
3111                         goto mount_fail_check;
3112                 }
3113                 kfree(full_path);
3114         }
3115
3116         /* get referral if needed */
3117         if (rc == -EREMOTE) {
3118 #ifdef CONFIG_CIFS_DFS_UPCALL
3119                 if (referral_walks_count > MAX_NESTED_LINKS) {
3120                         /*
3121                          * BB: when we implement proper loop detection,
3122                          *     we will remove this check. But now we need it
3123                          *     to prevent an indefinite loop if 'DFS tree' is
3124                          *     misconfigured (i.e. has loops).
3125                          */
3126                         rc = -ELOOP;
3127                         goto mount_fail_check;
3128                 }
3129
3130                 rc = expand_dfs_referral(xid, pSesInfo, volume_info, cifs_sb,
3131                                          true);
3132
3133                 if (!rc) {
3134                         referral_walks_count++;
3135                         goto try_mount_again;
3136                 }
3137                 goto mount_fail_check;
3138 #else /* No DFS support, return error on mount */
3139                 rc = -EOPNOTSUPP;
3140 #endif
3141         }
3142
3143         if (rc)
3144                 goto mount_fail_check;
3145
3146         /* now, hang the tcon off of the superblock */
3147         tlink = kzalloc(sizeof *tlink, GFP_KERNEL);
3148         if (tlink == NULL) {
3149                 rc = -ENOMEM;
3150                 goto mount_fail_check;
3151         }
3152
3153         tlink->tl_uid = pSesInfo->linux_uid;
3154         tlink->tl_tcon = tcon;
3155         tlink->tl_time = jiffies;
3156         set_bit(TCON_LINK_MASTER, &tlink->tl_flags);
3157         set_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3158
3159         cifs_sb->master_tlink = tlink;
3160         spin_lock(&cifs_sb->tlink_tree_lock);
3161         tlink_rb_insert(&cifs_sb->tlink_tree, tlink);
3162         spin_unlock(&cifs_sb->tlink_tree_lock);
3163
3164         queue_delayed_work(system_nrt_wq, &cifs_sb->prune_tlinks,
3165                                 TLINK_IDLE_EXPIRE);
3166
3167 mount_fail_check:
3168         /* on error free sesinfo and tcon struct if needed */
3169         if (rc) {
3170                 /* If find_unc succeeded then rc == 0 so we can not end */
3171                 /* up accidentally freeing someone elses tcon struct */
3172                 if (tcon)
3173                         cifs_put_tcon(tcon);
3174                 else if (pSesInfo)
3175                         cifs_put_smb_ses(pSesInfo);
3176                 else
3177                         cifs_put_tcp_session(srvTcp);
3178                 bdi_destroy(&cifs_sb->bdi);
3179                 goto out;
3180         }
3181
3182         /* volume_info->password is freed above when existing session found
3183         (in which case it is not needed anymore) but when new sesion is created
3184         the password ptr is put in the new session structure (in which case the
3185         password will be freed at unmount time) */
3186 out:
3187         /* zero out password before freeing */
3188         FreeXid(xid);
3189         return rc;
3190 }
3191
3192 /*
3193  * Issue a TREE_CONNECT request. Note that for IPC$ shares, that the tcon
3194  * pointer may be NULL.
3195  */
3196 int
3197 CIFSTCon(unsigned int xid, struct cifs_ses *ses,
3198          const char *tree, struct cifs_tcon *tcon,
3199          const struct nls_table *nls_codepage)
3200 {
3201         struct smb_hdr *smb_buffer;
3202         struct smb_hdr *smb_buffer_response;
3203         TCONX_REQ *pSMB;
3204         TCONX_RSP *pSMBr;
3205         unsigned char *bcc_ptr;
3206         int rc = 0;
3207         int length;
3208         __u16 bytes_left, count;
3209
3210         if (ses == NULL)
3211                 return -EIO;
3212
3213         smb_buffer = cifs_buf_get();
3214         if (smb_buffer == NULL)
3215                 return -ENOMEM;
3216
3217         smb_buffer_response = smb_buffer;
3218
3219         header_assemble(smb_buffer, SMB_COM_TREE_CONNECT_ANDX,
3220                         NULL /*no tid */ , 4 /*wct */ );
3221
3222         smb_buffer->Mid = GetNextMid(ses->server);
3223         smb_buffer->Uid = ses->Suid;
3224         pSMB = (TCONX_REQ *) smb_buffer;
3225         pSMBr = (TCONX_RSP *) smb_buffer_response;
3226
3227         pSMB->AndXCommand = 0xFF;
3228         pSMB->Flags = cpu_to_le16(TCON_EXTENDED_SECINFO);
3229         bcc_ptr = &pSMB->Password[0];
3230         if (!tcon || (ses->server->sec_mode & SECMODE_USER)) {
3231                 pSMB->PasswordLength = cpu_to_le16(1);  /* minimum */
3232                 *bcc_ptr = 0; /* password is null byte */
3233                 bcc_ptr++;              /* skip password */
3234                 /* already aligned so no need to do it below */
3235         } else {
3236                 pSMB->PasswordLength = cpu_to_le16(CIFS_AUTH_RESP_SIZE);
3237                 /* BB FIXME add code to fail this if NTLMv2 or Kerberos
3238                    specified as required (when that support is added to
3239                    the vfs in the future) as only NTLM or the much
3240                    weaker LANMAN (which we do not send by default) is accepted
3241                    by Samba (not sure whether other servers allow
3242                    NTLMv2 password here) */
3243 #ifdef CONFIG_CIFS_WEAK_PW_HASH
3244                 if ((global_secflags & CIFSSEC_MAY_LANMAN) &&
3245                     (ses->server->secType == LANMAN))
3246                         calc_lanman_hash(tcon->password, ses->server->cryptkey,
3247                                          ses->server->sec_mode &
3248                                             SECMODE_PW_ENCRYPT ? true : false,
3249                                          bcc_ptr);
3250                 else
3251 #endif /* CIFS_WEAK_PW_HASH */
3252                 rc = SMBNTencrypt(tcon->password, ses->server->cryptkey,
3253                                         bcc_ptr);
3254
3255                 bcc_ptr += CIFS_AUTH_RESP_SIZE;
3256                 if (ses->capabilities & CAP_UNICODE) {
3257                         /* must align unicode strings */
3258                         *bcc_ptr = 0; /* null byte password */
3259                         bcc_ptr++;
3260                 }
3261         }
3262
3263         if (ses->server->sec_mode &
3264                         (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
3265                 smb_buffer->Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
3266
3267         if (ses->capabilities & CAP_STATUS32) {
3268                 smb_buffer->Flags2 |= SMBFLG2_ERR_STATUS;
3269         }
3270         if (ses->capabilities & CAP_DFS) {
3271                 smb_buffer->Flags2 |= SMBFLG2_DFS;
3272         }
3273         if (ses->capabilities & CAP_UNICODE) {
3274                 smb_buffer->Flags2 |= SMBFLG2_UNICODE;
3275                 length =
3276                     cifs_strtoUCS((__le16 *) bcc_ptr, tree,
3277                         6 /* max utf8 char length in bytes */ *
3278                         (/* server len*/ + 256 /* share len */), nls_codepage);
3279                 bcc_ptr += 2 * length;  /* convert num 16 bit words to bytes */
3280                 bcc_ptr += 2;   /* skip trailing null */
3281         } else {                /* ASCII */
3282                 strcpy(bcc_ptr, tree);
3283                 bcc_ptr += strlen(tree) + 1;
3284         }
3285         strcpy(bcc_ptr, "?????");
3286         bcc_ptr += strlen("?????");
3287         bcc_ptr += 1;
3288         count = bcc_ptr - &pSMB->Password[0];
3289         pSMB->hdr.smb_buf_length = cpu_to_be32(be32_to_cpu(
3290                                         pSMB->hdr.smb_buf_length) + count);
3291         pSMB->ByteCount = cpu_to_le16(count);
3292
3293         rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response, &length,
3294                          0);
3295
3296         /* above now done in SendReceive */
3297         if ((rc == 0) && (tcon != NULL)) {
3298                 bool is_unicode;
3299
3300                 tcon->tidStatus = CifsGood;
3301                 tcon->need_reconnect = false;
3302                 tcon->tid = smb_buffer_response->Tid;
3303                 bcc_ptr = pByteArea(smb_buffer_response);
3304                 bytes_left = get_bcc(smb_buffer_response);
3305                 length = strnlen(bcc_ptr, bytes_left - 2);
3306                 if (smb_buffer->Flags2 & SMBFLG2_UNICODE)
3307                         is_unicode = true;
3308                 else
3309                         is_unicode = false;
3310
3311
3312                 /* skip service field (NB: this field is always ASCII) */
3313                 if (length == 3) {
3314                         if ((bcc_ptr[0] == 'I') && (bcc_ptr[1] == 'P') &&
3315                             (bcc_ptr[2] == 'C')) {
3316                                 cFYI(1, "IPC connection");
3317                                 tcon->ipc = 1;
3318                         }
3319                 } else if (length == 2) {
3320                         if ((bcc_ptr[0] == 'A') && (bcc_ptr[1] == ':')) {
3321                                 /* the most common case */
3322                                 cFYI(1, "disk share connection");
3323                         }
3324                 }
3325                 bcc_ptr += length + 1;
3326                 bytes_left -= (length + 1);
3327                 strncpy(tcon->treeName, tree, MAX_TREE_SIZE);
3328
3329                 /* mostly informational -- no need to fail on error here */
3330                 kfree(tcon->nativeFileSystem);
3331                 tcon->nativeFileSystem = cifs_strndup_from_ucs(bcc_ptr,
3332                                                       bytes_left, is_unicode,
3333                                                       nls_codepage);
3334
3335                 cFYI(1, "nativeFileSystem=%s", tcon->nativeFileSystem);
3336
3337                 if ((smb_buffer_response->WordCount == 3) ||
3338                          (smb_buffer_response->WordCount == 7))
3339                         /* field is in same location */
3340                         tcon->Flags = le16_to_cpu(pSMBr->OptionalSupport);
3341                 else
3342                         tcon->Flags = 0;
3343                 cFYI(1, "Tcon flags: 0x%x ", tcon->Flags);
3344         } else if ((rc == 0) && tcon == NULL) {
3345                 /* all we need to save for IPC$ connection */
3346                 ses->ipc_tid = smb_buffer_response->Tid;
3347         }
3348
3349         cifs_buf_release(smb_buffer);
3350         return rc;
3351 }
3352
3353 void
3354 cifs_umount(struct cifs_sb_info *cifs_sb)
3355 {
3356         struct rb_root *root = &cifs_sb->tlink_tree;
3357         struct rb_node *node;
3358         struct tcon_link *tlink;
3359
3360         cancel_delayed_work_sync(&cifs_sb->prune_tlinks);
3361
3362         spin_lock(&cifs_sb->tlink_tree_lock);
3363         while ((node = rb_first(root))) {
3364                 tlink = rb_entry(node, struct tcon_link, tl_rbnode);
3365                 cifs_get_tlink(tlink);
3366                 clear_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3367                 rb_erase(node, root);
3368
3369                 spin_unlock(&cifs_sb->tlink_tree_lock);
3370                 cifs_put_tlink(tlink);
3371                 spin_lock(&cifs_sb->tlink_tree_lock);
3372         }
3373         spin_unlock(&cifs_sb->tlink_tree_lock);
3374
3375         bdi_destroy(&cifs_sb->bdi);
3376         kfree(cifs_sb->mountdata);
3377         unload_nls(cifs_sb->local_nls);
3378         kfree(cifs_sb);
3379 }
3380
3381 int cifs_negotiate_protocol(unsigned int xid, struct cifs_ses *ses)
3382 {
3383         int rc = 0;
3384         struct TCP_Server_Info *server = ses->server;
3385
3386         /* only send once per connect */
3387         if (server->maxBuf != 0)
3388                 return 0;
3389
3390         rc = CIFSSMBNegotiate(xid, ses);
3391         if (rc == -EAGAIN) {
3392                 /* retry only once on 1st time connection */
3393                 rc = CIFSSMBNegotiate(xid, ses);
3394                 if (rc == -EAGAIN)
3395                         rc = -EHOSTDOWN;
3396         }
3397         if (rc == 0) {
3398                 spin_lock(&GlobalMid_Lock);
3399                 if (server->tcpStatus == CifsNeedNegotiate)
3400                         server->tcpStatus = CifsGood;
3401                 else
3402                         rc = -EHOSTDOWN;
3403                 spin_unlock(&GlobalMid_Lock);
3404
3405         }
3406
3407         return rc;
3408 }
3409
3410
3411 int cifs_setup_session(unsigned int xid, struct cifs_ses *ses,
3412                         struct nls_table *nls_info)
3413 {
3414         int rc = 0;
3415         struct TCP_Server_Info *server = ses->server;
3416
3417         ses->flags = 0;
3418         ses->capabilities = server->capabilities;
3419         if (linuxExtEnabled == 0)
3420                 ses->capabilities &= (~CAP_UNIX);
3421
3422         cFYI(1, "Security Mode: 0x%x Capabilities: 0x%x TimeAdjust: %d",
3423                  server->sec_mode, server->capabilities, server->timeAdj);
3424
3425         rc = CIFS_SessSetup(xid, ses, nls_info);
3426         if (rc) {
3427                 cERROR(1, "Send error in SessSetup = %d", rc);
3428         } else {
3429                 mutex_lock(&ses->server->srv_mutex);
3430                 if (!server->session_estab) {
3431                         server->session_key.response = ses->auth_key.response;
3432                         server->session_key.len = ses->auth_key.len;
3433                         server->sequence_number = 0x2;
3434                         server->session_estab = true;
3435                         ses->auth_key.response = NULL;
3436                 }
3437                 mutex_unlock(&server->srv_mutex);
3438
3439                 cFYI(1, "CIFS Session Established successfully");
3440                 spin_lock(&GlobalMid_Lock);
3441                 ses->status = CifsGood;
3442                 ses->need_reconnect = false;
3443                 spin_unlock(&GlobalMid_Lock);
3444         }
3445
3446         kfree(ses->auth_key.response);
3447         ses->auth_key.response = NULL;
3448         ses->auth_key.len = 0;
3449         kfree(ses->ntlmssp);
3450         ses->ntlmssp = NULL;
3451
3452         return rc;
3453 }
3454
3455 static struct cifs_tcon *
3456 cifs_construct_tcon(struct cifs_sb_info *cifs_sb, uid_t fsuid)
3457 {
3458         struct cifs_tcon *master_tcon = cifs_sb_master_tcon(cifs_sb);
3459         struct cifs_ses *ses;
3460         struct cifs_tcon *tcon = NULL;
3461         struct smb_vol *vol_info;
3462         char username[28]; /* big enough for "krb50x" + hex of ULONG_MAX 6+16 */
3463                            /* We used to have this as MAX_USERNAME which is   */
3464                            /* way too big now (256 instead of 32) */
3465
3466         vol_info = kzalloc(sizeof(*vol_info), GFP_KERNEL);
3467         if (vol_info == NULL) {
3468                 tcon = ERR_PTR(-ENOMEM);
3469                 goto out;
3470         }
3471
3472         snprintf(username, MAX_USERNAME_SIZE, "krb50x%x", fsuid);
3473         vol_info->username = username;
3474         vol_info->local_nls = cifs_sb->local_nls;
3475         vol_info->linux_uid = fsuid;
3476         vol_info->cred_uid = fsuid;
3477         vol_info->UNC = master_tcon->treeName;
3478         vol_info->retry = master_tcon->retry;
3479         vol_info->nocase = master_tcon->nocase;
3480         vol_info->local_lease = master_tcon->local_lease;
3481         vol_info->no_linux_ext = !master_tcon->unix_ext;
3482
3483         /* FIXME: allow for other secFlg settings */
3484         vol_info->secFlg = CIFSSEC_MUST_KRB5;
3485
3486         /* get a reference for the same TCP session */
3487         spin_lock(&cifs_tcp_ses_lock);
3488         ++master_tcon->ses->server->srv_count;
3489         spin_unlock(&cifs_tcp_ses_lock);
3490
3491         ses = cifs_get_smb_ses(master_tcon->ses->server, vol_info);
3492         if (IS_ERR(ses)) {
3493                 tcon = (struct cifs_tcon *)ses;
3494                 cifs_put_tcp_session(master_tcon->ses->server);
3495                 goto out;
3496         }
3497
3498         tcon = cifs_get_tcon(ses, vol_info);
3499         if (IS_ERR(tcon)) {
3500                 cifs_put_smb_ses(ses);
3501                 goto out;
3502         }
3503
3504         if (ses->capabilities & CAP_UNIX)
3505                 reset_cifs_unix_caps(0, tcon, NULL, vol_info);
3506 out:
3507         kfree(vol_info);
3508
3509         return tcon;
3510 }
3511
3512 struct cifs_tcon *
3513 cifs_sb_master_tcon(struct cifs_sb_info *cifs_sb)
3514 {
3515         return tlink_tcon(cifs_sb_master_tlink(cifs_sb));
3516 }
3517
3518 static int
3519 cifs_sb_tcon_pending_wait(void *unused)
3520 {
3521         schedule();
3522         return signal_pending(current) ? -ERESTARTSYS : 0;
3523 }
3524
3525 /* find and return a tlink with given uid */
3526 static struct tcon_link *
3527 tlink_rb_search(struct rb_root *root, uid_t uid)
3528 {
3529         struct rb_node *node = root->rb_node;
3530         struct tcon_link *tlink;
3531
3532         while (node) {
3533                 tlink = rb_entry(node, struct tcon_link, tl_rbnode);
3534
3535                 if (tlink->tl_uid > uid)
3536                         node = node->rb_left;
3537                 else if (tlink->tl_uid < uid)
3538                         node = node->rb_right;
3539                 else
3540                         return tlink;
3541         }
3542         return NULL;
3543 }
3544
3545 /* insert a tcon_link into the tree */
3546 static void
3547 tlink_rb_insert(struct rb_root *root, struct tcon_link *new_tlink)
3548 {
3549         struct rb_node **new = &(root->rb_node), *parent = NULL;
3550         struct tcon_link *tlink;
3551
3552         while (*new) {
3553                 tlink = rb_entry(*new, struct tcon_link, tl_rbnode);
3554                 parent = *new;
3555
3556                 if (tlink->tl_uid > new_tlink->tl_uid)
3557                         new = &((*new)->rb_left);
3558                 else
3559                         new = &((*new)->rb_right);
3560         }
3561
3562         rb_link_node(&new_tlink->tl_rbnode, parent, new);
3563         rb_insert_color(&new_tlink->tl_rbnode, root);
3564 }
3565
3566 /*
3567  * Find or construct an appropriate tcon given a cifs_sb and the fsuid of the
3568  * current task.
3569  *
3570  * If the superblock doesn't refer to a multiuser mount, then just return
3571  * the master tcon for the mount.
3572  *
3573  * First, search the rbtree for an existing tcon for this fsuid. If one
3574  * exists, then check to see if it's pending construction. If it is then wait
3575  * for construction to complete. Once it's no longer pending, check to see if
3576  * it failed and either return an error or retry construction, depending on
3577  * the timeout.
3578  *
3579  * If one doesn't exist then insert a new tcon_link struct into the tree and
3580  * try to construct a new one.
3581  */
3582 struct tcon_link *
3583 cifs_sb_tlink(struct cifs_sb_info *cifs_sb)
3584 {
3585         int ret;
3586         uid_t fsuid = current_fsuid();
3587         struct tcon_link *tlink, *newtlink;
3588
3589         if (!(cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MULTIUSER))
3590                 return cifs_get_tlink(cifs_sb_master_tlink(cifs_sb));
3591
3592         spin_lock(&cifs_sb->tlink_tree_lock);
3593         tlink = tlink_rb_search(&cifs_sb->tlink_tree, fsuid);
3594         if (tlink)
3595                 cifs_get_tlink(tlink);
3596         spin_unlock(&cifs_sb->tlink_tree_lock);
3597
3598         if (tlink == NULL) {
3599                 newtlink = kzalloc(sizeof(*tlink), GFP_KERNEL);
3600                 if (newtlink == NULL)
3601                         return ERR_PTR(-ENOMEM);
3602                 newtlink->tl_uid = fsuid;
3603                 newtlink->tl_tcon = ERR_PTR(-EACCES);
3604                 set_bit(TCON_LINK_PENDING, &newtlink->tl_flags);
3605                 set_bit(TCON_LINK_IN_TREE, &newtlink->tl_flags);
3606                 cifs_get_tlink(newtlink);
3607
3608                 spin_lock(&cifs_sb->tlink_tree_lock);
3609                 /* was one inserted after previous search? */
3610                 tlink = tlink_rb_search(&cifs_sb->tlink_tree, fsuid);
3611                 if (tlink) {
3612                         cifs_get_tlink(tlink);
3613                         spin_unlock(&cifs_sb->tlink_tree_lock);
3614                         kfree(newtlink);
3615                         goto wait_for_construction;
3616                 }
3617                 tlink = newtlink;
3618                 tlink_rb_insert(&cifs_sb->tlink_tree, tlink);
3619                 spin_unlock(&cifs_sb->tlink_tree_lock);
3620         } else {
3621 wait_for_construction:
3622                 ret = wait_on_bit(&tlink->tl_flags, TCON_LINK_PENDING,
3623                                   cifs_sb_tcon_pending_wait,
3624                                   TASK_INTERRUPTIBLE);
3625                 if (ret) {
3626                         cifs_put_tlink(tlink);
3627                         return ERR_PTR(ret);
3628                 }
3629
3630                 /* if it's good, return it */
3631                 if (!IS_ERR(tlink->tl_tcon))
3632                         return tlink;
3633
3634                 /* return error if we tried this already recently */
3635                 if (time_before(jiffies, tlink->tl_time + TLINK_ERROR_EXPIRE)) {
3636                         cifs_put_tlink(tlink);
3637                         return ERR_PTR(-EACCES);
3638                 }
3639
3640                 if (test_and_set_bit(TCON_LINK_PENDING, &tlink->tl_flags))
3641                         goto wait_for_construction;
3642         }
3643
3644         tlink->tl_tcon = cifs_construct_tcon(cifs_sb, fsuid);
3645         clear_bit(TCON_LINK_PENDING, &tlink->tl_flags);
3646         wake_up_bit(&tlink->tl_flags, TCON_LINK_PENDING);
3647
3648         if (IS_ERR(tlink->tl_tcon)) {
3649                 cifs_put_tlink(tlink);
3650                 return ERR_PTR(-EACCES);
3651         }
3652
3653         return tlink;
3654 }
3655
3656 /*
3657  * periodic workqueue job that scans tcon_tree for a superblock and closes
3658  * out tcons.
3659  */
3660 static void
3661 cifs_prune_tlinks(struct work_struct *work)
3662 {
3663         struct cifs_sb_info *cifs_sb = container_of(work, struct cifs_sb_info,
3664                                                     prune_tlinks.work);
3665         struct rb_root *root = &cifs_sb->tlink_tree;
3666         struct rb_node *node = rb_first(root);
3667         struct rb_node *tmp;
3668         struct tcon_link *tlink;
3669
3670         /*
3671          * Because we drop the spinlock in the loop in order to put the tlink
3672          * it's not guarded against removal of links from the tree. The only
3673          * places that remove entries from the tree are this function and
3674          * umounts. Because this function is non-reentrant and is canceled
3675          * before umount can proceed, this is safe.
3676          */
3677         spin_lock(&cifs_sb->tlink_tree_lock);
3678         node = rb_first(root);
3679         while (node != NULL) {
3680                 tmp = node;
3681                 node = rb_next(tmp);
3682                 tlink = rb_entry(tmp, struct tcon_link, tl_rbnode);
3683
3684                 if (test_bit(TCON_LINK_MASTER, &tlink->tl_flags) ||
3685                     atomic_read(&tlink->tl_count) != 0 ||
3686                     time_after(tlink->tl_time + TLINK_IDLE_EXPIRE, jiffies))
3687                         continue;
3688
3689                 cifs_get_tlink(tlink);
3690                 clear_bit(TCON_LINK_IN_TREE, &tlink->tl_flags);
3691                 rb_erase(tmp, root);
3692
3693                 spin_unlock(&cifs_sb->tlink_tree_lock);
3694                 cifs_put_tlink(tlink);
3695                 spin_lock(&cifs_sb->tlink_tree_lock);
3696         }
3697         spin_unlock(&cifs_sb->tlink_tree_lock);
3698
3699         queue_delayed_work(system_nrt_wq, &cifs_sb->prune_tlinks,
3700                                 TLINK_IDLE_EXPIRE);
3701 }