fs/cifs/connect.c

   1 /*
   2  *   fs/cifs/connect.c
   3  *
   4  *   Copyright (C) International Business Machines  Corp., 2002,2009
   5  *   Author(s): Steve French (sfrench@us.ibm.com)
   6  *
   7  *   This library is free software; you can redistribute it and/or modify
   8  *   it under the terms of the GNU Lesser General Public License as published
   9  *   by the Free Software Foundation; either version 2.1 of the License, or
  10  *   (at your option) any later version.
  11  *
  12  *   This library is distributed in the hope that it will be useful,
  13  *   but WITHOUT ANY WARRANTY; without even the implied warranty of
  14  *   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See
  15  *   the GNU Lesser General Public License for more details.
  16  *
  17  *   You should have received a copy of the GNU Lesser General Public License
  18  *   along with this library; if not, write to the Free Software
  19  *   Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
  20  */
  21 #include <linux/fs.h>
  22 #include <linux/net.h>
  23 #include <linux/string.h>
  24 #include <linux/list.h>
  25 #include <linux/wait.h>
  26 #include <linux/pagemap.h>
  27 #include <linux/ctype.h>
  28 #include <linux/utsname.h>
  29 #include <linux/mempool.h>
  30 #include <linux/delay.h>
  31 #include <linux/completion.h>
  32 #include <linux/kthread.h>
  33 #include <linux/pagevec.h>
  34 #include <linux/freezer.h>
  35 #include <linux/namei.h>
  36 #include <asm/uaccess.h>
  37 #include <asm/processor.h>
  38 #include <linux/inet.h>
  39 #include <net/ipv6.h>
  40 #include "cifspdu.h"
  41 #include "cifsglob.h"
  42 #include "cifsproto.h"
  43 #include "cifs_unicode.h"
  44 #include "cifs_debug.h"
  45 #include "cifs_fs_sb.h"
  46 #include "ntlmssp.h"
  47 #include "nterr.h"
  48 #include "rfc1002pdu.h"
  49 #include "cn_cifs.h"
  50
  51 #define CIFS_PORT 445
  52 #define RFC1001_PORT 139
  53
  54 extern void SMBNTencrypt(unsigned char *passwd, unsigned char *c8,
  55                          unsigned char *p24);
  56
  57 extern mempool_t *cifs_req_poolp;
  58
  59 struct smb_vol {
  60         char *username;
  61         char *password;
  62         char *domainname;
  63         char *UNC;
  64         char *UNCip;
  65         char *iocharset;  /* local code page for mapping to and from Unicode */
  66         char source_rfc1001_name[16]; /* netbios name of client */
  67         char target_rfc1001_name[16]; /* netbios name of server for Win9x/ME */
  68         uid_t linux_uid;
  69         gid_t linux_gid;
  70         mode_t file_mode;
  71         mode_t dir_mode;
  72         unsigned secFlg;
  73         bool rw:1;
  74         bool retry:1;
  75         bool intr:1;
  76         bool setuids:1;
  77         bool override_uid:1;
  78         bool override_gid:1;
  79         bool dynperm:1;
  80         bool noperm:1;
  81         bool no_psx_acl:1; /* set if posix acl support should be disabled */
  82         bool cifs_acl:1;
  83         bool no_xattr:1;   /* set if xattr (EA) support should be disabled*/
  84         bool server_ino:1; /* use inode numbers from server ie UniqueId */
  85         bool direct_io:1;
  86         bool remap:1;      /* set to remap seven reserved chars in filenames */
  87         bool posix_paths:1; /* unset to not ask for posix pathnames. */
  88         bool no_linux_ext:1;
  89         bool sfu_emul:1;
  90         bool nullauth:1;   /* attempt to authenticate with null user */
  91         bool nocase:1;     /* request case insensitive filenames */
  92         bool nobrl:1;      /* disable sending byte range locks to srv */
  93         bool mand_lock:1;  /* send mandatory not posix byte range lock reqs */
  94         bool seal:1;       /* request transport encryption on share */
  95         bool nodfs:1;      /* Do not request DFS, even if available */
  96         bool local_lease:1; /* check leases only on local system, not remote */
  97         bool noblocksnd:1;
  98         bool noautotune:1;
  99         bool nostrictsync:1; /* do not force expensive SMBflush on every sync */
 100         unsigned int rsize;
 101         unsigned int wsize;
 102         unsigned int sockopt;
 103         unsigned short int port;
 104         char *prepath;
 105 };
 106
 107 static int ipv4_connect(struct TCP_Server_Info *server);
 108 static int ipv6_connect(struct TCP_Server_Info *server);
 109
 110 /*
 111  * cifs tcp session reconnection
 112  *
 113  * mark tcp session as reconnecting so temporarily locked
 114  * mark all smb sessions as reconnecting for tcp session
 115  * reconnect tcp session
 116  * wake up waiters on reconnection? - (not needed currently)
 117  */
 118 static int
 119 cifs_reconnect(struct TCP_Server_Info *server)
 120 {
 121         int rc = 0;
 122         struct list_head *tmp, *tmp2;
 123         struct cifsSesInfo *ses;
 124         struct cifsTconInfo *tcon;
 125         struct mid_q_entry *mid_entry;
 126
 127         spin_lock(&GlobalMid_Lock);
 128         if (server->tcpStatus == CifsExiting) {
 129                 /* the demux thread will exit normally
 130                 next time through the loop */
 131                 spin_unlock(&GlobalMid_Lock);
 132                 return rc;
 133         } else
 134                 server->tcpStatus = CifsNeedReconnect;
 135         spin_unlock(&GlobalMid_Lock);
 136         server->maxBuf = 0;
 137
 138         cFYI(1, ("Reconnecting tcp session"));
 139
 140         /* before reconnecting the tcp session, mark the smb session (uid)
 141                 and the tid bad so they are not used until reconnected */
 142         read_lock(&cifs_tcp_ses_lock);
 143         list_for_each(tmp, &server->smb_ses_list) {
 144                 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
 145                 ses->need_reconnect = true;
 146                 ses->ipc_tid = 0;
 147                 list_for_each(tmp2, &ses->tcon_list) {
 148                         tcon = list_entry(tmp2, struct cifsTconInfo, tcon_list);
 149                         tcon->need_reconnect = true;
 150                 }
 151         }
 152         read_unlock(&cifs_tcp_ses_lock);
 153         /* do not want to be sending data on a socket we are freeing */
 154         mutex_lock(&server->srv_mutex);
 155         if (server->ssocket) {
 156                 cFYI(1, ("State: 0x%x Flags: 0x%lx", server->ssocket->state,
 157                         server->ssocket->flags));
 158                 kernel_sock_shutdown(server->ssocket, SHUT_WR);
 159                 cFYI(1, ("Post shutdown state: 0x%x Flags: 0x%lx",
 160                         server->ssocket->state,
 161                         server->ssocket->flags));
 162                 sock_release(server->ssocket);
 163                 server->ssocket = NULL;
 164         }
 165
 166         spin_lock(&GlobalMid_Lock);
 167         list_for_each(tmp, &server->pending_mid_q) {
 168                 mid_entry = list_entry(tmp, struct
 169                                         mid_q_entry,
 170                                         qhead);
 171                 if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
 172                                 /* Mark other intransit requests as needing
 173                                    retry so we do not immediately mark the
 174                                    session bad again (ie after we reconnect
 175                                    below) as they timeout too */
 176                         mid_entry->midState = MID_RETRY_NEEDED;
 177                 }
 178         }
 179         spin_unlock(&GlobalMid_Lock);
 180         mutex_unlock(&server->srv_mutex);
 181
 182         while ((server->tcpStatus != CifsExiting) &&
 183                (server->tcpStatus != CifsGood)) {
 184                 try_to_freeze();
 185                 if (server->addr.sockAddr6.sin6_family == AF_INET6)
 186                         rc = ipv6_connect(server);
 187                 else
 188                         rc = ipv4_connect(server);
 189                 if (rc) {
 190                         cFYI(1, ("reconnect error %d", rc));
 191                         msleep(3000);
 192                 } else {
 193                         atomic_inc(&tcpSesReconnectCount);
 194                         spin_lock(&GlobalMid_Lock);
 195                         if (server->tcpStatus != CifsExiting)
 196                                 server->tcpStatus = CifsGood;
 197                         server->sequence_number = 0;
 198                         spin_unlock(&GlobalMid_Lock);
 199         /*              atomic_set(&server->inFlight,0);*/
 200                         wake_up(&server->response_q);
 201                 }
 202         }
 203         return rc;
 204 }
 205
 206 /*
 207         return codes:
 208                 0       not a transact2, or all data present
 209                 >0      transact2 with that much data missing
 210                 -EINVAL = invalid transact2
 211
 212  */
 213 static int check2ndT2(struct smb_hdr *pSMB, unsigned int maxBufSize)
 214 {
 215         struct smb_t2_rsp *pSMBt;
 216         int total_data_size;
 217         int data_in_this_rsp;
 218         int remaining;
 219
 220         if (pSMB->Command != SMB_COM_TRANSACTION2)
 221                 return 0;
 222
 223         /* check for plausible wct, bcc and t2 data and parm sizes */
 224         /* check for parm and data offset going beyond end of smb */
 225         if (pSMB->WordCount != 10) { /* coalesce_t2 depends on this */
 226                 cFYI(1, ("invalid transact2 word count"));
 227                 return -EINVAL;
 228         }
 229
 230         pSMBt = (struct smb_t2_rsp *)pSMB;
 231
 232         total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
 233         data_in_this_rsp = le16_to_cpu(pSMBt->t2_rsp.DataCount);
 234
 235         remaining = total_data_size - data_in_this_rsp;
 236
 237         if (remaining == 0)
 238                 return 0;
 239         else if (remaining < 0) {
 240                 cFYI(1, ("total data %d smaller than data in frame %d",
 241                         total_data_size, data_in_this_rsp));
 242                 return -EINVAL;
 243         } else {
 244                 cFYI(1, ("missing %d bytes from transact2, check next response",
 245                         remaining));
 246                 if (total_data_size > maxBufSize) {
 247                         cERROR(1, ("TotalDataSize %d is over maximum buffer %d",
 248                                 total_data_size, maxBufSize));
 249                         return -EINVAL;
 250                 }
 251                 return remaining;
 252         }
 253 }
 254
 255 static int coalesce_t2(struct smb_hdr *psecond, struct smb_hdr *pTargetSMB)
 256 {
 257         struct smb_t2_rsp *pSMB2 = (struct smb_t2_rsp *)psecond;
 258         struct smb_t2_rsp *pSMBt  = (struct smb_t2_rsp *)pTargetSMB;
 259         int total_data_size;
 260         int total_in_buf;
 261         int remaining;
 262         int total_in_buf2;
 263         char *data_area_of_target;
 264         char *data_area_of_buf2;
 265         __u16 byte_count;
 266
 267         total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
 268
 269         if (total_data_size != le16_to_cpu(pSMB2->t2_rsp.TotalDataCount)) {
 270                 cFYI(1, ("total data size of primary and secondary t2 differ"));
 271         }
 272
 273         total_in_buf = le16_to_cpu(pSMBt->t2_rsp.DataCount);
 274
 275         remaining = total_data_size - total_in_buf;
 276
 277         if (remaining < 0)
 278                 return -EINVAL;
 279
 280         if (remaining == 0) /* nothing to do, ignore */
 281                 return 0;
 282
 283         total_in_buf2 = le16_to_cpu(pSMB2->t2_rsp.DataCount);
 284         if (remaining < total_in_buf2) {
 285                 cFYI(1, ("transact2 2nd response contains too much data"));
 286         }
 287
 288         /* find end of first SMB data area */
 289         data_area_of_target = (char *)&pSMBt->hdr.Protocol +
 290                                 le16_to_cpu(pSMBt->t2_rsp.DataOffset);
 291         /* validate target area */
 292
 293         data_area_of_buf2 = (char *) &pSMB2->hdr.Protocol +
 294                                         le16_to_cpu(pSMB2->t2_rsp.DataOffset);
 295
 296         data_area_of_target += total_in_buf;
 297
 298         /* copy second buffer into end of first buffer */
 299         memcpy(data_area_of_target, data_area_of_buf2, total_in_buf2);
 300         total_in_buf += total_in_buf2;
 301         pSMBt->t2_rsp.DataCount = cpu_to_le16(total_in_buf);
 302         byte_count = le16_to_cpu(BCC_LE(pTargetSMB));
 303         byte_count += total_in_buf2;
 304         BCC_LE(pTargetSMB) = cpu_to_le16(byte_count);
 305
 306         byte_count = pTargetSMB->smb_buf_length;
 307         byte_count += total_in_buf2;
 308
 309         /* BB also add check that we are not beyond maximum buffer size */
 310
 311         pTargetSMB->smb_buf_length = byte_count;
 312
 313         if (remaining == total_in_buf2) {
 314                 cFYI(1, ("found the last secondary response"));
 315                 return 0; /* we are done */
 316         } else /* more responses to go */
 317                 return 1;
 318
 319 }
 320
 321 static int
 322 cifs_demultiplex_thread(struct TCP_Server_Info *server)
 323 {
 324         int length;
 325         unsigned int pdu_length, total_read;
 326         struct smb_hdr *smb_buffer = NULL;
 327         struct smb_hdr *bigbuf = NULL;
 328         struct smb_hdr *smallbuf = NULL;
 329         struct msghdr smb_msg;
 330         struct kvec iov;
 331         struct socket *csocket = server->ssocket;
 332         struct list_head *tmp;
 333         struct cifsSesInfo *ses;
 334         struct task_struct *task_to_wake = NULL;
 335         struct mid_q_entry *mid_entry;
 336         char temp;
 337         bool isLargeBuf = false;
 338         bool isMultiRsp;
 339         int reconnect;
 340
 341         current->flags |= PF_MEMALLOC;
 342         cFYI(1, ("Demultiplex PID: %d", task_pid_nr(current)));
 343
 344         length = atomic_inc_return(&tcpSesAllocCount);
 345         if (length > 1)
 346                 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
 347                                 GFP_KERNEL);
 348
 349         set_freezable();
 350         while (server->tcpStatus != CifsExiting) {
 351                 if (try_to_freeze())
 352                         continue;
 353                 if (bigbuf == NULL) {
 354                         bigbuf = cifs_buf_get();
 355                         if (!bigbuf) {
 356                                 cERROR(1, ("No memory for large SMB response"));
 357                                 msleep(3000);
 358                                 /* retry will check if exiting */
 359                                 continue;
 360                         }
 361                 } else if (isLargeBuf) {
 362                         /* we are reusing a dirty large buf, clear its start */
 363                         memset(bigbuf, 0, sizeof(struct smb_hdr));
 364                 }
 365
 366                 if (smallbuf == NULL) {
 367                         smallbuf = cifs_small_buf_get();
 368                         if (!smallbuf) {
 369                                 cERROR(1, ("No memory for SMB response"));
 370                                 msleep(1000);
 371                                 /* retry will check if exiting */
 372                                 continue;
 373                         }
 374                         /* beginning of smb buffer is cleared in our buf_get */
 375                 } else /* if existing small buf clear beginning */
 376                         memset(smallbuf, 0, sizeof(struct smb_hdr));
 377
 378                 isLargeBuf = false;
 379                 isMultiRsp = false;
 380                 smb_buffer = smallbuf;
 381                 iov.iov_base = smb_buffer;
 382                 iov.iov_len = 4;
 383                 smb_msg.msg_control = NULL;
 384                 smb_msg.msg_controllen = 0;
 385                 pdu_length = 4; /* enough to get RFC1001 header */
 386 incomplete_rcv:
 387                 length =
 388                     kernel_recvmsg(csocket, &smb_msg,
 389                                 &iov, 1, pdu_length, 0 /* BB other flags? */);
 390
 391                 if (server->tcpStatus == CifsExiting) {
 392                         break;
 393                 } else if (server->tcpStatus == CifsNeedReconnect) {
 394                         cFYI(1, ("Reconnect after server stopped responding"));
 395                         cifs_reconnect(server);
 396                         cFYI(1, ("call to reconnect done"));
 397                         csocket = server->ssocket;
 398                         continue;
 399                 } else if ((length == -ERESTARTSYS) || (length == -EAGAIN)) {
 400                         msleep(1); /* minimum sleep to prevent looping
 401                                 allowing socket to clear and app threads to set
 402                                 tcpStatus CifsNeedReconnect if server hung */
 403                         if (pdu_length < 4) {
 404                                 iov.iov_base = (4 - pdu_length) +
 405                                                         (char *)smb_buffer;
 406                                 iov.iov_len = pdu_length;
 407                                 smb_msg.msg_control = NULL;
 408                                 smb_msg.msg_controllen = 0;
 409                                 goto incomplete_rcv;
 410                         } else
 411                                 continue;
 412                 } else if (length <= 0) {
 413                         if (server->tcpStatus == CifsNew) {
 414                                 cFYI(1, ("tcp session abend after SMBnegprot"));
 415                                 /* some servers kill the TCP session rather than
 416                                    returning an SMB negprot error, in which
 417                                    case reconnecting here is not going to help,
 418                                    and so simply return error to mount */
 419                                 break;
 420                         }
 421                         if (!try_to_freeze() && (length == -EINTR)) {
 422                                 cFYI(1, ("cifsd thread killed"));
 423                                 break;
 424                         }
 425                         cFYI(1, ("Reconnect after unexpected peek error %d",
 426                                 length));
 427                         cifs_reconnect(server);
 428                         csocket = server->ssocket;
 429                         wake_up(&server->response_q);
 430                         continue;
 431                 } else if (length < pdu_length) {
 432                         cFYI(1, ("requested %d bytes but only got %d bytes",
 433                                   pdu_length, length));
 434                         pdu_length -= length;
 435                         msleep(1);
 436                         goto incomplete_rcv;
 437                 }
 438
 439                 /* The right amount was read from socket - 4 bytes */
 440                 /* so we can now interpret the length field */
 441
 442                 /* the first byte big endian of the length field,
 443                 is actually not part of the length but the type
 444                 with the most common, zero, as regular data */
 445                 temp = *((char *) smb_buffer);
 446
 447                 /* Note that FC 1001 length is big endian on the wire,
 448                 but we convert it here so it is always manipulated
 449                 as host byte order */
 450                 pdu_length = be32_to_cpu((__force __be32)smb_buffer->smb_buf_length);
 451                 smb_buffer->smb_buf_length = pdu_length;
 452
 453                 cFYI(1, ("rfc1002 length 0x%x", pdu_length+4));
 454
 455                 if (temp == (char) RFC1002_SESSION_KEEP_ALIVE) {
 456                         continue;
 457                 } else if (temp == (char)RFC1002_POSITIVE_SESSION_RESPONSE) {
 458                         cFYI(1, ("Good RFC 1002 session rsp"));
 459                         continue;
 460                 } else if (temp == (char)RFC1002_NEGATIVE_SESSION_RESPONSE) {
 461                         /* we get this from Windows 98 instead of
 462                            an error on SMB negprot response */
 463                         cFYI(1, ("Negative RFC1002 Session Response Error 0x%x)",
 464                                 pdu_length));
 465                         if (server->tcpStatus == CifsNew) {
 466                                 /* if nack on negprot (rather than
 467                                 ret of smb negprot error) reconnecting
 468                                 not going to help, ret error to mount */
 469                                 break;
 470                         } else {
 471                                 /* give server a second to
 472                                 clean up before reconnect attempt */
 473                                 msleep(1000);
 474                                 /* always try 445 first on reconnect
 475                                 since we get NACK on some if we ever
 476                                 connected to port 139 (the NACK is
 477                                 since we do not begin with RFC1001
 478                                 session initialize frame) */
 479                                 server->addr.sockAddr.sin_port =
 480                                         htons(CIFS_PORT);
 481                                 cifs_reconnect(server);
 482                                 csocket = server->ssocket;
 483                                 wake_up(&server->response_q);
 484                                 continue;
 485                         }
 486                 } else if (temp != (char) 0) {
 487                         cERROR(1, ("Unknown RFC 1002 frame"));
 488                         cifs_dump_mem(" Received Data: ", (char *)smb_buffer,
 489                                       length);
 490                         cifs_reconnect(server);
 491                         csocket = server->ssocket;
 492                         continue;
 493                 }
 494
 495                 /* else we have an SMB response */
 496                 if ((pdu_length > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE - 4) ||
 497                             (pdu_length < sizeof(struct smb_hdr) - 1 - 4)) {
 498                         cERROR(1, ("Invalid size SMB length %d pdu_length %d",
 499                                         length, pdu_length+4));
 500                         cifs_reconnect(server);
 501                         csocket = server->ssocket;
 502                         wake_up(&server->response_q);
 503                         continue;
 504                 }
 505
 506                 /* else length ok */
 507                 reconnect = 0;
 508
 509                 if (pdu_length > MAX_CIFS_SMALL_BUFFER_SIZE - 4) {
 510                         isLargeBuf = true;
 511                         memcpy(bigbuf, smallbuf, 4);
 512                         smb_buffer = bigbuf;
 513                 }
 514                 length = 0;
 515                 iov.iov_base = 4 + (char *)smb_buffer;
 516                 iov.iov_len = pdu_length;
 517                 for (total_read = 0; total_read < pdu_length;
 518                      total_read += length) {
 519                         length = kernel_recvmsg(csocket, &smb_msg, &iov, 1,
 520                                                 pdu_length - total_read, 0);
 521                         if ((server->tcpStatus == CifsExiting) ||
 522                             (length == -EINTR)) {
 523                                 /* then will exit */
 524                                 reconnect = 2;
 525                                 break;
 526                         } else if (server->tcpStatus == CifsNeedReconnect) {
 527                                 cifs_reconnect(server);
 528                                 csocket = server->ssocket;
 529                                 /* Reconnect wakes up rspns q */
 530                                 /* Now we will reread sock */
 531                                 reconnect = 1;
 532                                 break;
 533                         } else if ((length == -ERESTARTSYS) ||
 534                                    (length == -EAGAIN)) {
 535                                 msleep(1); /* minimum sleep to prevent looping,
 536                                               allowing socket to clear and app
 537                                               threads to set tcpStatus
 538                                               CifsNeedReconnect if server hung*/
 539                                 length = 0;
 540                                 continue;
 541                         } else if (length <= 0) {
 542                                 cERROR(1, ("Received no data, expecting %d",
 543                                               pdu_length - total_read));
 544                                 cifs_reconnect(server);
 545                                 csocket = server->ssocket;
 546                                 reconnect = 1;
 547                                 break;
 548                         }
 549                 }
 550                 if (reconnect == 2)
 551                         break;
 552                 else if (reconnect == 1)
 553                         continue;
 554
 555                 length += 4; /* account for rfc1002 hdr */
 556
 557
 558                 dump_smb(smb_buffer, length);
 559                 if (checkSMB(smb_buffer, smb_buffer->Mid, total_read+4)) {
 560                         cifs_dump_mem("Bad SMB: ", smb_buffer, 48);
 561                         continue;
 562                 }
 563
 564
 565                 task_to_wake = NULL;
 566                 spin_lock(&GlobalMid_Lock);
 567                 list_for_each(tmp, &server->pending_mid_q) {
 568                         mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
 569
 570                         if ((mid_entry->mid == smb_buffer->Mid) &&
 571                             (mid_entry->midState == MID_REQUEST_SUBMITTED) &&
 572                             (mid_entry->command == smb_buffer->Command)) {
 573                                 if (check2ndT2(smb_buffer,server->maxBuf) > 0) {
 574                                         /* We have a multipart transact2 resp */
 575                                         isMultiRsp = true;
 576                                         if (mid_entry->resp_buf) {
 577                                                 /* merge response - fix up 1st*/
 578                                                 if (coalesce_t2(smb_buffer,
 579                                                         mid_entry->resp_buf)) {
 580                                                         mid_entry->multiRsp =
 581                                                                  true;
 582                                                         break;
 583                                                 } else {
 584                                                         /* all parts received */
 585                                                         mid_entry->multiEnd =
 586                                                                  true;
 587                                                         goto multi_t2_fnd;
 588                                                 }
 589                                         } else {
 590                                                 if (!isLargeBuf) {
 591                                                         cERROR(1,("1st trans2 resp needs bigbuf"));
 592                                         /* BB maybe we can fix this up,  switch
 593                                            to already allocated large buffer? */
 594                                                 } else {
 595                                                         /* Have first buffer */
 596                                                         mid_entry->resp_buf =
 597                                                                  smb_buffer;
 598                                                         mid_entry->largeBuf =
 599                                                                  true;
 600                                                         bigbuf = NULL;
 601                                                 }
 602                                         }
 603                                         break;
 604                                 }
 605                                 mid_entry->resp_buf = smb_buffer;
 606                                 mid_entry->largeBuf = isLargeBuf;
 607 multi_t2_fnd:
 608                                 task_to_wake = mid_entry->tsk;
 609                                 mid_entry->midState = MID_RESPONSE_RECEIVED;
 610 #ifdef CONFIG_CIFS_STATS2
 611                                 mid_entry->when_received = jiffies;
 612 #endif
 613                                 /* so we do not time out requests to  server
 614                                 which is still responding (since server could
 615                                 be busy but not dead) */
 616                                 server->lstrp = jiffies;
 617                                 break;
 618                         }
 619                 }
 620                 spin_unlock(&GlobalMid_Lock);
 621                 if (task_to_wake) {
 622                         /* Was previous buf put in mpx struct for multi-rsp? */
 623                         if (!isMultiRsp) {
 624                                 /* smb buffer will be freed by user thread */
 625                                 if (isLargeBuf)
 626                                         bigbuf = NULL;
 627                                 else
 628                                         smallbuf = NULL;
 629                         }
 630                         wake_up_process(task_to_wake);
 631                 } else if (!is_valid_oplock_break(smb_buffer, server) &&
 632                            !isMultiRsp) {
 633                         cERROR(1, ("No task to wake, unknown frame received! "
 634                                    "NumMids %d", midCount.counter));
 635                         cifs_dump_mem("Received Data is: ", (char *)smb_buffer,
 636                                       sizeof(struct smb_hdr));
 637 #ifdef CONFIG_CIFS_DEBUG2
 638                         cifs_dump_detail(smb_buffer);
 639                         cifs_dump_mids(server);
 640 #endif /* CIFS_DEBUG2 */
 641
 642                 }
 643         } /* end while !EXITING */
 644
 645         /* take it off the list, if it's not already */
 646         write_lock(&cifs_tcp_ses_lock);
 647         list_del_init(&server->tcp_ses_list);
 648         write_unlock(&cifs_tcp_ses_lock);
 649
 650         spin_lock(&GlobalMid_Lock);
 651         server->tcpStatus = CifsExiting;
 652         spin_unlock(&GlobalMid_Lock);
 653         wake_up_all(&server->response_q);
 654
 655         /* check if we have blocked requests that need to free */
 656         /* Note that cifs_max_pending is normally 50, but
 657         can be set at module install time to as little as two */
 658         spin_lock(&GlobalMid_Lock);
 659         if (atomic_read(&server->inFlight) >= cifs_max_pending)
 660                 atomic_set(&server->inFlight, cifs_max_pending - 1);
 661         /* We do not want to set the max_pending too low or we
 662         could end up with the counter going negative */
 663         spin_unlock(&GlobalMid_Lock);
 664         /* Although there should not be any requests blocked on
 665         this queue it can not hurt to be paranoid and try to wake up requests
 666         that may haven been blocked when more than 50 at time were on the wire
 667         to the same server - they now will see the session is in exit state
 668         and get out of SendReceive.  */
 669         wake_up_all(&server->request_q);
 670         /* give those requests time to exit */
 671         msleep(125);
 672
 673         if (server->ssocket) {
 674                 sock_release(csocket);
 675                 server->ssocket = NULL;
 676         }
 677         /* buffer usuallly freed in free_mid - need to free it here on exit */
 678         cifs_buf_release(bigbuf);
 679         if (smallbuf) /* no sense logging a debug message if NULL */
 680                 cifs_small_buf_release(smallbuf);
 681
 682         /*
 683          * BB: we shouldn't have to do any of this. It shouldn't be
 684          * possible to exit from the thread with active SMB sessions
 685          */
 686         read_lock(&cifs_tcp_ses_lock);
 687         if (list_empty(&server->pending_mid_q)) {
 688                 /* loop through server session structures attached to this and
 689                     mark them dead */
 690                 list_for_each(tmp, &server->smb_ses_list) {
 691                         ses = list_entry(tmp, struct cifsSesInfo,
 692                                          smb_ses_list);
 693                         ses->status = CifsExiting;
 694                         ses->server = NULL;
 695                 }
 696                 read_unlock(&cifs_tcp_ses_lock);
 697         } else {
 698                 /* although we can not zero the server struct pointer yet,
 699                 since there are active requests which may depnd on them,
 700                 mark the corresponding SMB sessions as exiting too */
 701                 list_for_each(tmp, &server->smb_ses_list) {
 702                         ses = list_entry(tmp, struct cifsSesInfo,
 703                                          smb_ses_list);
 704                         ses->status = CifsExiting;
 705                 }
 706
 707                 spin_lock(&GlobalMid_Lock);
 708                 list_for_each(tmp, &server->pending_mid_q) {
 709                 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
 710                         if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
 711                                 cFYI(1, ("Clearing Mid 0x%x - waking up ",
 712                                          mid_entry->mid));
 713                                 task_to_wake = mid_entry->tsk;
 714                                 if (task_to_wake)
 715                                         wake_up_process(task_to_wake);
 716                         }
 717                 }
 718                 spin_unlock(&GlobalMid_Lock);
 719                 read_unlock(&cifs_tcp_ses_lock);
 720                 /* 1/8th of sec is more than enough time for them to exit */
 721                 msleep(125);
 722         }
 723
 724         if (!list_empty(&server->pending_mid_q)) {
 725                 /* mpx threads have not exited yet give them
 726                 at least the smb send timeout time for long ops */
 727                 /* due to delays on oplock break requests, we need
 728                 to wait at least 45 seconds before giving up
 729                 on a request getting a response and going ahead
 730                 and killing cifsd */
 731                 cFYI(1, ("Wait for exit from demultiplex thread"));
 732                 msleep(46000);
 733                 /* if threads still have not exited they are probably never
 734                 coming home not much else we can do but free the memory */
 735         }
 736
 737         /* last chance to mark ses pointers invalid
 738         if there are any pointing to this (e.g
 739         if a crazy root user tried to kill cifsd
 740         kernel thread explicitly this might happen) */
 741         /* BB: This shouldn't be necessary, see above */
 742         read_lock(&cifs_tcp_ses_lock);
 743         list_for_each(tmp, &server->smb_ses_list) {
 744                 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
 745                 ses->server = NULL;
 746         }
 747         read_unlock(&cifs_tcp_ses_lock);
 748
 749         kfree(server->hostname);
 750         task_to_wake = xchg(&server->tsk, NULL);
 751         kfree(server);
 752
 753         length = atomic_dec_return(&tcpSesAllocCount);
 754         if (length  > 0)
 755                 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
 756                                 GFP_KERNEL);
 757
 758         /* if server->tsk was NULL then wait for a signal before exiting */
 759         if (!task_to_wake) {
 760                 set_current_state(TASK_INTERRUPTIBLE);
 761                 while (!signal_pending(current)) {
 762                         schedule();
 763                         set_current_state(TASK_INTERRUPTIBLE);
 764                 }
 765                 set_current_state(TASK_RUNNING);
 766         }
 767
 768         module_put_and_exit(0);
 769 }
 770
 771 /* extract the host portion of the UNC string */
 772 static char *
 773 extract_hostname(const char *unc)
 774 {
 775         const char *src;
 776         char *dst, *delim;
 777         unsigned int len;
 778
 779         /* skip double chars at beginning of string */
 780         /* BB: check validity of these bytes? */
 781         src = unc + 2;
 782
 783         /* delimiter between hostname and sharename is always '\\' now */
 784         delim = strchr(src, '\\');
 785         if (!delim)
 786                 return ERR_PTR(-EINVAL);
 787
 788         len = delim - src;
 789         dst = kmalloc((len + 1), GFP_KERNEL);
 790         if (dst == NULL)
 791                 return ERR_PTR(-ENOMEM);
 792
 793         memcpy(dst, src, len);
 794         dst[len] = '\0';
 795
 796         return dst;
 797 }
 798
 799 static int
 800 cifs_parse_mount_options(char *options, const char *devname,
 801                          struct smb_vol *vol)
 802 {
 803         char *value;
 804         char *data;
 805         unsigned int  temp_len, i, j;
 806         char separator[2];
 807
 808         separator[0] = ',';
 809         separator[1] = 0;
 810
 811         if (Local_System_Name[0] != 0)
 812                 memcpy(vol->source_rfc1001_name, Local_System_Name, 15);
 813         else {
 814                 char *nodename = utsname()->nodename;
 815                 int n = strnlen(nodename, 15);
 816                 memset(vol->source_rfc1001_name, 0x20, 15);
 817                 for (i = 0; i < n; i++) {
 818                         /* does not have to be perfect mapping since field is
 819                         informational, only used for servers that do not support
 820                         port 445 and it can be overridden at mount time */
 821                         vol->source_rfc1001_name[i] = toupper(nodename[i]);
 822                 }
 823         }
 824         vol->source_rfc1001_name[15] = 0;
 825         /* null target name indicates to use *SMBSERVR default called name
 826            if we end up sending RFC1001 session initialize */
 827         vol->target_rfc1001_name[0] = 0;
 828         vol->linux_uid = current_uid();  /* use current_euid() instead? */
 829         vol->linux_gid = current_gid();
 830
 831         /* default to only allowing write access to owner of the mount */
 832         vol->dir_mode = vol->file_mode = S_IRUGO | S_IXUGO | S_IWUSR;
 833
 834         /* vol->retry default is 0 (i.e. "soft" limited retry not hard retry) */
 835         vol->rw = true;
 836         /* default is always to request posix paths. */
 837         vol->posix_paths = 1;
 838         /* default to using server inode numbers where available */
 839         vol->server_ino = 1;
 840
 841         if (!options)
 842                 return 1;
 843
 844         if (strncmp(options, "sep=", 4) == 0) {
 845                 if (options[4] != 0) {
 846                         separator[0] = options[4];
 847                         options += 5;
 848                 } else {
 849                         cFYI(1, ("Null separator not allowed"));
 850                 }
 851         }
 852
 853         while ((data = strsep(&options, separator)) != NULL) {
 854                 if (!*data)
 855                         continue;
 856                 if ((value = strchr(data, '=')) != NULL)
 857                         *value++ = '\0';
 858
 859                 /* Have to parse this before we parse for "user" */
 860                 if (strnicmp(data, "user_xattr", 10) == 0) {
 861                         vol->no_xattr = 0;
 862                 } else if (strnicmp(data, "nouser_xattr", 12) == 0) {
 863                         vol->no_xattr = 1;
 864                 } else if (strnicmp(data, "user", 4) == 0) {
 865                         if (!value) {
 866                                 printk(KERN_WARNING
 867                                        "CIFS: invalid or missing username\n");
 868                                 return 1;       /* needs_arg; */
 869                         } else if (!*value) {
 870                                 /* null user, ie anonymous, authentication */
 871                                 vol->nullauth = 1;
 872                         }
 873                         if (strnlen(value, 200) < 200) {
 874                                 vol->username = value;
 875                         } else {
 876                                 printk(KERN_WARNING "CIFS: username too long\n");
 877                                 return 1;
 878                         }
 879                 } else if (strnicmp(data, "pass", 4) == 0) {
 880                         if (!value) {
 881                                 vol->password = NULL;
 882                                 continue;
 883                         } else if (value[0] == 0) {
 884                                 /* check if string begins with double comma
 885                                    since that would mean the password really
 886                                    does start with a comma, and would not
 887                                    indicate an empty string */
 888                                 if (value[1] != separator[0]) {
 889                                         vol->password = NULL;
 890                                         continue;
 891                                 }
 892                         }
 893                         temp_len = strlen(value);
 894                         /* removed password length check, NTLM passwords
 895                                 can be arbitrarily long */
 896
 897                         /* if comma in password, the string will be
 898                         prematurely null terminated.  Commas in password are
 899                         specified across the cifs mount interface by a double
 900                         comma ie ,, and a comma used as in other cases ie ','
 901                         as a parameter delimiter/separator is single and due
 902                         to the strsep above is temporarily zeroed. */
 903
 904                         /* NB: password legally can have multiple commas and
 905                         the only illegal character in a password is null */
 906
 907                         if ((value[temp_len] == 0) &&
 908                             (value[temp_len+1] == separator[0])) {
 909                                 /* reinsert comma */
 910                                 value[temp_len] = separator[0];
 911                                 temp_len += 2;  /* move after second comma */
 912                                 while (value[temp_len] != 0)  {
 913                                         if (value[temp_len] == separator[0]) {
 914                                                 if (value[temp_len+1] ==
 915                                                      separator[0]) {
 916                                                 /* skip second comma */
 917                                                         temp_len++;
 918                                                 } else {
 919                                                 /* single comma indicating start
 920                                                          of next parm */
 921                                                         break;
 922                                                 }
 923                                         }
 924                                         temp_len++;
 925                                 }
 926                                 if (value[temp_len] == 0) {
 927                                         options = NULL;
 928                                 } else {
 929                                         value[temp_len] = 0;
 930                                         /* point option to start of next parm */
 931                                         options = value + temp_len + 1;
 932                                 }
 933                                 /* go from value to value + temp_len condensing
 934                                 double commas to singles. Note that this ends up
 935                                 allocating a few bytes too many, which is ok */
 936                                 vol->password = kzalloc(temp_len, GFP_KERNEL);
 937                                 if (vol->password == NULL) {
 938                                         printk(KERN_WARNING "CIFS: no memory "
 939                                                             "for password\n");
 940                                         return 1;
 941                                 }
 942                                 for (i = 0, j = 0; i < temp_len; i++, j++) {
 943                                         vol->password[j] = value[i];
 944                                         if (value[i] == separator[0]
 945                                                 && value[i+1] == separator[0]) {
 946                                                 /* skip second comma */
 947                                                 i++;
 948                                         }
 949                                 }
 950                                 vol->password[j] = 0;
 951                         } else {
 952                                 vol->password = kzalloc(temp_len+1, GFP_KERNEL);
 953                                 if (vol->password == NULL) {
 954                                         printk(KERN_WARNING "CIFS: no memory "
 955                                                             "for password\n");
 956                                         return 1;
 957                                 }
 958                                 strcpy(vol->password, value);
 959                         }
 960                 } else if (!strnicmp(data, "ip", 2) ||
 961                            !strnicmp(data, "addr", 4)) {
 962                         if (!value || !*value) {
 963                                 vol->UNCip = NULL;
 964                         } else if (strnlen(value, INET6_ADDRSTRLEN) <
 965                                                         INET6_ADDRSTRLEN) {
 966                                 vol->UNCip = value;
 967                         } else {
 968                                 printk(KERN_WARNING "CIFS: ip address "
 969                                                     "too long\n");
 970                                 return 1;
 971                         }
 972                 } else if (strnicmp(data, "sec", 3) == 0) {
 973                         if (!value || !*value) {
 974                                 cERROR(1, ("no security value specified"));
 975                                 continue;
 976                         } else if (strnicmp(value, "krb5i", 5) == 0) {
 977                                 vol->secFlg |= CIFSSEC_MAY_KRB5 |
 978                                         CIFSSEC_MUST_SIGN;
 979                         } else if (strnicmp(value, "krb5p", 5) == 0) {
 980                                 /* vol->secFlg |= CIFSSEC_MUST_SEAL |
 981                                         CIFSSEC_MAY_KRB5; */
 982                                 cERROR(1, ("Krb5 cifs privacy not supported"));
 983                                 return 1;
 984                         } else if (strnicmp(value, "krb5", 4) == 0) {
 985                                 vol->secFlg |= CIFSSEC_MAY_KRB5;
 986 #ifdef CONFIG_CIFS_EXPERIMENTAL
 987                         } else if (strnicmp(value, "ntlmsspi", 8) == 0) {
 988                                 vol->secFlg |= CIFSSEC_MAY_NTLMSSP |
 989                                         CIFSSEC_MUST_SIGN;
 990                         } else if (strnicmp(value, "ntlmssp", 7) == 0) {
 991                                 vol->secFlg |= CIFSSEC_MAY_NTLMSSP;
 992 #endif
 993                         } else if (strnicmp(value, "ntlmv2i", 7) == 0) {
 994                                 vol->secFlg |= CIFSSEC_MAY_NTLMV2 |
 995                                         CIFSSEC_MUST_SIGN;
 996                         } else if (strnicmp(value, "ntlmv2", 6) == 0) {
 997                                 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
 998                         } else if (strnicmp(value, "ntlmi", 5) == 0) {
 999                                 vol->secFlg |= CIFSSEC_MAY_NTLM |
1000                                         CIFSSEC_MUST_SIGN;
1001                         } else if (strnicmp(value, "ntlm", 4) == 0) {
1002                                 /* ntlm is default so can be turned off too */
1003                                 vol->secFlg |= CIFSSEC_MAY_NTLM;
1004                         } else if (strnicmp(value, "nontlm", 6) == 0) {
1005                                 /* BB is there a better way to do this? */
1006                                 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
1007 #ifdef CONFIG_CIFS_WEAK_PW_HASH
1008                         } else if (strnicmp(value, "lanman", 6) == 0) {
1009                                 vol->secFlg |= CIFSSEC_MAY_LANMAN;
1010 #endif
1011                         } else if (strnicmp(value, "none", 4) == 0) {
1012                                 vol->nullauth = 1;
1013                         } else {
1014                                 cERROR(1, ("bad security option: %s", value));
1015                                 return 1;
1016                         }
1017                 } else if ((strnicmp(data, "unc", 3) == 0)
1018                            || (strnicmp(data, "target", 6) == 0)
1019                            || (strnicmp(data, "path", 4) == 0)) {
1020                         if (!value || !*value) {
1021                                 printk(KERN_WARNING "CIFS: invalid path to "
1022                                                     "network resource\n");
1023                                 return 1;       /* needs_arg; */
1024                         }
1025                         if ((temp_len = strnlen(value, 300)) < 300) {
1026                                 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1027                                 if (vol->UNC == NULL)
1028                                         return 1;
1029                                 strcpy(vol->UNC, value);
1030                                 if (strncmp(vol->UNC, "//", 2) == 0) {
1031                                         vol->UNC[0] = '\\';
1032                                         vol->UNC[1] = '\\';
1033                                 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1034                                         printk(KERN_WARNING
1035                                                "CIFS: UNC Path does not begin "
1036                                                "with // or \\\\ \n");
1037                                         return 1;
1038                                 }
1039                         } else {
1040                                 printk(KERN_WARNING "CIFS: UNC name too long\n");
1041                                 return 1;
1042                         }
1043                 } else if ((strnicmp(data, "domain", 3) == 0)
1044                            || (strnicmp(data, "workgroup", 5) == 0)) {
1045                         if (!value || !*value) {
1046                                 printk(KERN_WARNING "CIFS: invalid domain name\n");
1047                                 return 1;       /* needs_arg; */
1048                         }
1049                         /* BB are there cases in which a comma can be valid in
1050                         a domain name and need special handling? */
1051                         if (strnlen(value, 256) < 256) {
1052                                 vol->domainname = value;
1053                                 cFYI(1, ("Domain name set"));
1054                         } else {
1055                                 printk(KERN_WARNING "CIFS: domain name too "
1056                                                     "long\n");
1057                                 return 1;
1058                         }
1059                 } else if (strnicmp(data, "prefixpath", 10) == 0) {
1060                         if (!value || !*value) {
1061                                 printk(KERN_WARNING
1062                                         "CIFS: invalid path prefix\n");
1063                                 return 1;       /* needs_argument */
1064                         }
1065                         if ((temp_len = strnlen(value, 1024)) < 1024) {
1066                                 if (value[0] != '/')
1067                                         temp_len++;  /* missing leading slash */
1068                                 vol->prepath = kmalloc(temp_len+1, GFP_KERNEL);
1069                                 if (vol->prepath == NULL)
1070                                         return 1;
1071                                 if (value[0] != '/') {
1072                                         vol->prepath[0] = '/';
1073                                         strcpy(vol->prepath+1, value);
1074                                 } else
1075                                         strcpy(vol->prepath, value);
1076                                 cFYI(1, ("prefix path %s", vol->prepath));
1077                         } else {
1078                                 printk(KERN_WARNING "CIFS: prefix too long\n");
1079                                 return 1;
1080                         }
1081                 } else if (strnicmp(data, "iocharset", 9) == 0) {
1082                         if (!value || !*value) {
1083                                 printk(KERN_WARNING "CIFS: invalid iocharset "
1084                                                     "specified\n");
1085                                 return 1;       /* needs_arg; */
1086                         }
1087                         if (strnlen(value, 65) < 65) {
1088                                 if (strnicmp(value, "default", 7))
1089                                         vol->iocharset = value;
1090                                 /* if iocharset not set then load_nls_default
1091                                    is used by caller */
1092                                 cFYI(1, ("iocharset set to %s", value));
1093                         } else {
1094                                 printk(KERN_WARNING "CIFS: iocharset name "
1095                                                     "too long.\n");
1096                                 return 1;
1097                         }
1098                 } else if (strnicmp(data, "uid", 3) == 0) {
1099                         if (value && *value)
1100                                 vol->linux_uid =
1101                                         simple_strtoul(value, &value, 0);
1102                 } else if (strnicmp(data, "forceuid", 8) == 0) {
1103                                 vol->override_uid = 1;
1104                 } else if (strnicmp(data, "gid", 3) == 0) {
1105                         if (value && *value)
1106                                 vol->linux_gid =
1107                                         simple_strtoul(value, &value, 0);
1108                 } else if (strnicmp(data, "forcegid", 8) == 0) {
1109                                 vol->override_gid = 1;
1110                 } else if (strnicmp(data, "file_mode", 4) == 0) {
1111                         if (value && *value) {
1112                                 vol->file_mode =
1113                                         simple_strtoul(value, &value, 0);
1114                         }
1115                 } else if (strnicmp(data, "dir_mode", 4) == 0) {
1116                         if (value && *value) {
1117                                 vol->dir_mode =
1118                                         simple_strtoul(value, &value, 0);
1119                         }
1120                 } else if (strnicmp(data, "dirmode", 4) == 0) {
1121                         if (value && *value) {
1122                                 vol->dir_mode =
1123                                         simple_strtoul(value, &value, 0);
1124                         }
1125                 } else if (strnicmp(data, "port", 4) == 0) {
1126                         if (value && *value) {
1127                                 vol->port =
1128                                         simple_strtoul(value, &value, 0);
1129                         }
1130                 } else if (strnicmp(data, "rsize", 5) == 0) {
1131                         if (value && *value) {
1132                                 vol->rsize =
1133                                         simple_strtoul(value, &value, 0);
1134                         }
1135                 } else if (strnicmp(data, "wsize", 5) == 0) {
1136                         if (value && *value) {
1137                                 vol->wsize =
1138                                         simple_strtoul(value, &value, 0);
1139                         }
1140                 } else if (strnicmp(data, "sockopt", 5) == 0) {
1141                         if (value && *value) {
1142                                 vol->sockopt =
1143                                         simple_strtoul(value, &value, 0);
1144                         }
1145                 } else if (strnicmp(data, "netbiosname", 4) == 0) {
1146                         if (!value || !*value || (*value == ' ')) {
1147                                 cFYI(1, ("invalid (empty) netbiosname"));
1148                         } else {
1149                                 memset(vol->source_rfc1001_name, 0x20, 15);
1150                                 for (i = 0; i < 15; i++) {
1151                                 /* BB are there cases in which a comma can be
1152                                 valid in this workstation netbios name (and need
1153                                 special handling)? */
1154
1155                                 /* We do not uppercase netbiosname for user */
1156                                         if (value[i] == 0)
1157                                                 break;
1158                                         else
1159                                                 vol->source_rfc1001_name[i] =
1160                                                                 value[i];
1161                                 }
1162                                 /* The string has 16th byte zero still from
1163                                 set at top of the function  */
1164                                 if ((i == 15) && (value[i] != 0))
1165                                         printk(KERN_WARNING "CIFS: netbiosname"
1166                                                 " longer than 15 truncated.\n");
1167                         }
1168                 } else if (strnicmp(data, "servern", 7) == 0) {
1169                         /* servernetbiosname specified override *SMBSERVER */
1170                         if (!value || !*value || (*value == ' ')) {
1171                                 cFYI(1, ("empty server netbiosname specified"));
1172                         } else {
1173                                 /* last byte, type, is 0x20 for servr type */
1174                                 memset(vol->target_rfc1001_name, 0x20, 16);
1175
1176                                 for (i = 0; i < 15; i++) {
1177                                 /* BB are there cases in which a comma can be
1178                                    valid in this workstation netbios name
1179                                    (and need special handling)? */
1180
1181                                 /* user or mount helper must uppercase
1182                                    the netbiosname */
1183                                         if (value[i] == 0)
1184                                                 break;
1185                                         else
1186                                                 vol->target_rfc1001_name[i] =
1187                                                                 value[i];
1188                                 }
1189                                 /* The string has 16th byte zero still from
1190                                    set at top of the function  */
1191                                 if ((i == 15) && (value[i] != 0))
1192                                         printk(KERN_WARNING "CIFS: server net"
1193                                         "biosname longer than 15 truncated.\n");
1194                         }
1195                 } else if (strnicmp(data, "credentials", 4) == 0) {
1196                         /* ignore */
1197                 } else if (strnicmp(data, "version", 3) == 0) {
1198                         /* ignore */
1199                 } else if (strnicmp(data, "guest", 5) == 0) {
1200                         /* ignore */
1201                 } else if (strnicmp(data, "rw", 2) == 0) {
1202                         vol->rw = true;
1203                 } else if (strnicmp(data, "noblocksend", 11) == 0) {
1204                         vol->noblocksnd = 1;
1205                 } else if (strnicmp(data, "noautotune", 10) == 0) {
1206                         vol->noautotune = 1;
1207                 } else if ((strnicmp(data, "suid", 4) == 0) ||
1208                                    (strnicmp(data, "nosuid", 6) == 0) ||
1209                                    (strnicmp(data, "exec", 4) == 0) ||
1210                                    (strnicmp(data, "noexec", 6) == 0) ||
1211                                    (strnicmp(data, "nodev", 5) == 0) ||
1212                                    (strnicmp(data, "noauto", 6) == 0) ||
1213                                    (strnicmp(data, "dev", 3) == 0)) {
1214                         /*  The mount tool or mount.cifs helper (if present)
1215                             uses these opts to set flags, and the flags are read
1216                             by the kernel vfs layer before we get here (ie
1217                             before read super) so there is no point trying to
1218                             parse these options again and set anything and it
1219                             is ok to just ignore them */
1220                         continue;
1221                 } else if (strnicmp(data, "ro", 2) == 0) {
1222                         vol->rw = false;
1223                 } else if (strnicmp(data, "hard", 4) == 0) {
1224                         vol->retry = 1;
1225                 } else if (strnicmp(data, "soft", 4) == 0) {
1226                         vol->retry = 0;
1227                 } else if (strnicmp(data, "perm", 4) == 0) {
1228                         vol->noperm = 0;
1229                 } else if (strnicmp(data, "noperm", 6) == 0) {
1230                         vol->noperm = 1;
1231                 } else if (strnicmp(data, "mapchars", 8) == 0) {
1232                         vol->remap = 1;
1233                 } else if (strnicmp(data, "nomapchars", 10) == 0) {
1234                         vol->remap = 0;
1235                 } else if (strnicmp(data, "sfu", 3) == 0) {
1236                         vol->sfu_emul = 1;
1237                 } else if (strnicmp(data, "nosfu", 5) == 0) {
1238                         vol->sfu_emul = 0;
1239                 } else if (strnicmp(data, "nodfs", 5) == 0) {
1240                         vol->nodfs = 1;
1241                 } else if (strnicmp(data, "posixpaths", 10) == 0) {
1242                         vol->posix_paths = 1;
1243                 } else if (strnicmp(data, "noposixpaths", 12) == 0) {
1244                         vol->posix_paths = 0;
1245                 } else if (strnicmp(data, "nounix", 6) == 0) {
1246                         vol->no_linux_ext = 1;
1247                 } else if (strnicmp(data, "nolinux", 7) == 0) {
1248                         vol->no_linux_ext = 1;
1249                 } else if ((strnicmp(data, "nocase", 6) == 0) ||
1250                            (strnicmp(data, "ignorecase", 10)  == 0)) {
1251                         vol->nocase = 1;
1252                 } else if (strnicmp(data, "brl", 3) == 0) {
1253                         vol->nobrl =  0;
1254                 } else if ((strnicmp(data, "nobrl", 5) == 0) ||
1255                            (strnicmp(data, "nolock", 6) == 0)) {
1256                         vol->nobrl =  1;
1257                         /* turn off mandatory locking in mode
1258                         if remote locking is turned off since the
1259                         local vfs will do advisory */
1260                         if (vol->file_mode ==
1261                                 (S_IALLUGO & ~(S_ISUID | S_IXGRP)))
1262                                 vol->file_mode = S_IALLUGO;
1263                 } else if (strnicmp(data, "forcemandatorylock", 9) == 0) {
1264                         /* will take the shorter form "forcemand" as well */
1265                         /* This mount option will force use of mandatory
1266                           (DOS/Windows style) byte range locks, instead of
1267                           using posix advisory byte range locks, even if the
1268                           Unix extensions are available and posix locks would
1269                           be supported otherwise. If Unix extensions are not
1270                           negotiated this has no effect since mandatory locks
1271                           would be used (mandatory locks is all that those
1272                           those servers support) */
1273                         vol->mand_lock = 1;
1274                 } else if (strnicmp(data, "setuids", 7) == 0) {
1275                         vol->setuids = 1;
1276                 } else if (strnicmp(data, "nosetuids", 9) == 0) {
1277                         vol->setuids = 0;
1278                 } else if (strnicmp(data, "dynperm", 7) == 0) {
1279                         vol->dynperm = true;
1280                 } else if (strnicmp(data, "nodynperm", 9) == 0) {
1281                         vol->dynperm = false;
1282                 } else if (strnicmp(data, "nohard", 6) == 0) {
1283                         vol->retry = 0;
1284                 } else if (strnicmp(data, "nosoft", 6) == 0) {
1285                         vol->retry = 1;
1286                 } else if (strnicmp(data, "nointr", 6) == 0) {
1287                         vol->intr = 0;
1288                 } else if (strnicmp(data, "intr", 4) == 0) {
1289                         vol->intr = 1;
1290                 } else if (strnicmp(data, "nostrictsync", 12) == 0) {
1291                         vol->nostrictsync = 1;
1292                 } else if (strnicmp(data, "strictsync", 10) == 0) {
1293                         vol->nostrictsync = 0;
1294                 } else if (strnicmp(data, "serverino", 7) == 0) {
1295                         vol->server_ino = 1;
1296                 } else if (strnicmp(data, "noserverino", 9) == 0) {
1297                         vol->server_ino = 0;
1298                 } else if (strnicmp(data, "cifsacl", 7) == 0) {
1299                         vol->cifs_acl = 1;
1300                 } else if (strnicmp(data, "nocifsacl", 9) == 0) {
1301                         vol->cifs_acl = 0;
1302                 } else if (strnicmp(data, "acl", 3) == 0) {
1303                         vol->no_psx_acl = 0;
1304                 } else if (strnicmp(data, "noacl", 5) == 0) {
1305                         vol->no_psx_acl = 1;
1306 #ifdef CONFIG_CIFS_EXPERIMENTAL
1307                 } else if (strnicmp(data, "locallease", 6) == 0) {
1308                         vol->local_lease = 1;
1309 #endif
1310                 } else if (strnicmp(data, "sign", 4) == 0) {
1311                         vol->secFlg |= CIFSSEC_MUST_SIGN;
1312                 } else if (strnicmp(data, "seal", 4) == 0) {
1313                         /* we do not do the following in secFlags because seal
1314                            is a per tree connection (mount) not a per socket
1315                            or per-smb connection option in the protocol */
1316                         /* vol->secFlg |= CIFSSEC_MUST_SEAL; */
1317                         vol->seal = 1;
1318                 } else if (strnicmp(data, "direct", 6) == 0) {
1319                         vol->direct_io = 1;
1320                 } else if (strnicmp(data, "forcedirectio", 13) == 0) {
1321                         vol->direct_io = 1;
1322                 } else if (strnicmp(data, "noac", 4) == 0) {
1323                         printk(KERN_WARNING "CIFS: Mount option noac not "
1324                                 "supported. Instead set "
1325                                 "/proc/fs/cifs/LookupCacheEnabled to 0\n");
1326                 } else
1327                         printk(KERN_WARNING "CIFS: Unknown mount option %s\n",
1328                                                 data);
1329         }
1330         if (vol->UNC == NULL) {
1331                 if (devname == NULL) {
1332                         printk(KERN_WARNING "CIFS: Missing UNC name for mount "
1333                                                 "target\n");
1334                         return 1;
1335                 }
1336                 if ((temp_len = strnlen(devname, 300)) < 300) {
1337                         vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1338                         if (vol->UNC == NULL)
1339                                 return 1;
1340                         strcpy(vol->UNC, devname);
1341                         if (strncmp(vol->UNC, "//", 2) == 0) {
1342                                 vol->UNC[0] = '\\';
1343                                 vol->UNC[1] = '\\';
1344                         } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1345                                 printk(KERN_WARNING "CIFS: UNC Path does not "
1346                                                     "begin with // or \\\\ \n");
1347                                 return 1;
1348                         }
1349                         value = strpbrk(vol->UNC+2, "/\\");
1350                         if (value)
1351                                 *value = '\\';
1352                 } else {
1353                         printk(KERN_WARNING "CIFS: UNC name too long\n");
1354                         return 1;
1355                 }
1356         }
1357         if (vol->UNCip == NULL)
1358                 vol->UNCip = &vol->UNC[2];
1359
1360         return 0;
1361 }
1362
1363 static struct TCP_Server_Info *
1364 cifs_find_tcp_session(struct sockaddr_storage *addr)
1365 {
1366         struct list_head *tmp;
1367         struct TCP_Server_Info *server;
1368         struct sockaddr_in *addr4 = (struct sockaddr_in *) addr;
1369         struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *) addr;
1370
1371         write_lock(&cifs_tcp_ses_lock);
1372         list_for_each(tmp, &cifs_tcp_ses_list) {
1373                 server = list_entry(tmp, struct TCP_Server_Info,
1374                                     tcp_ses_list);
1375                 /*
1376                  * the demux thread can exit on its own while still in CifsNew
1377                  * so don't accept any sockets in that state. Since the
1378                  * tcpStatus never changes back to CifsNew it's safe to check
1379                  * for this without a lock.
1380                  */
1381                 if (server->tcpStatus == CifsNew)
1382                         continue;
1383
1384                 if (addr->ss_family == AF_INET &&
1385                     (addr4->sin_addr.s_addr !=
1386                      server->addr.sockAddr.sin_addr.s_addr))
1387                         continue;
1388                 else if (addr->ss_family == AF_INET6 &&
1389                          !ipv6_addr_equal(&server->addr.sockAddr6.sin6_addr,
1390                                           &addr6->sin6_addr))
1391                         continue;
1392
1393                 ++server->srv_count;
1394                 write_unlock(&cifs_tcp_ses_lock);
1395                 cFYI(1, ("Existing tcp session with server found"));
1396                 return server;
1397         }
1398         write_unlock(&cifs_tcp_ses_lock);
1399         return NULL;
1400 }
1401
1402 static void
1403 cifs_put_tcp_session(struct TCP_Server_Info *server)
1404 {
1405         struct task_struct *task;
1406
1407         write_lock(&cifs_tcp_ses_lock);
1408         if (--server->srv_count > 0) {
1409                 write_unlock(&cifs_tcp_ses_lock);
1410                 return;
1411         }
1412
1413         list_del_init(&server->tcp_ses_list);
1414         write_unlock(&cifs_tcp_ses_lock);
1415
1416         spin_lock(&GlobalMid_Lock);
1417         server->tcpStatus = CifsExiting;
1418         spin_unlock(&GlobalMid_Lock);
1419
1420         task = xchg(&server->tsk, NULL);
1421         if (task)
1422                 force_sig(SIGKILL, task);
1423 }
1424
1425 static struct TCP_Server_Info *
1426 cifs_get_tcp_session(struct smb_vol *volume_info)
1427 {
1428         struct TCP_Server_Info *tcp_ses = NULL;
1429         struct sockaddr_storage addr;
1430         struct sockaddr_in *sin_server = (struct sockaddr_in *) &addr;
1431         struct sockaddr_in6 *sin_server6 = (struct sockaddr_in6 *) &addr;
1432         int rc;
1433
1434         memset(&addr, 0, sizeof(struct sockaddr_storage));
1435
1436         if (volume_info->UNCip && volume_info->UNC) {
1437                 rc = cifs_inet_pton(AF_INET, volume_info->UNCip,
1438                                     &sin_server->sin_addr.s_addr);
1439
1440                 if (rc <= 0) {
1441                         /* not ipv4 address, try ipv6 */
1442                         rc = cifs_inet_pton(AF_INET6, volume_info->UNCip,
1443                                             &sin_server6->sin6_addr.in6_u);
1444                         if (rc > 0)
1445                                 addr.ss_family = AF_INET6;
1446                 } else {
1447                         addr.ss_family = AF_INET;
1448                 }
1449
1450                 if (rc <= 0) {
1451                         /* we failed translating address */
1452                         rc = -EINVAL;
1453                         goto out_err;
1454                 }
1455
1456                 cFYI(1, ("UNC: %s ip: %s", volume_info->UNC,
1457                          volume_info->UNCip));
1458         } else if (volume_info->UNCip) {
1459                 /* BB using ip addr as tcp_ses name to connect to the
1460                    DFS root below */
1461                 cERROR(1, ("Connecting to DFS root not implemented yet"));
1462                 rc = -EINVAL;
1463                 goto out_err;
1464         } else /* which tcp_sess DFS root would we conect to */ {
1465                 cERROR(1,
1466                        ("CIFS mount error: No UNC path (e.g. -o "
1467                         "unc=//192.168.1.100/public) specified"));
1468                 rc = -EINVAL;
1469                 goto out_err;
1470         }
1471
1472         /* see if we already have a matching tcp_ses */
1473         tcp_ses = cifs_find_tcp_session(&addr);
1474         if (tcp_ses)
1475                 return tcp_ses;
1476
1477         tcp_ses = kzalloc(sizeof(struct TCP_Server_Info), GFP_KERNEL);
1478         if (!tcp_ses) {
1479                 rc = -ENOMEM;
1480                 goto out_err;
1481         }
1482
1483         tcp_ses->hostname = extract_hostname(volume_info->UNC);
1484         if (IS_ERR(tcp_ses->hostname)) {
1485                 rc = PTR_ERR(tcp_ses->hostname);
1486                 goto out_err;
1487         }
1488
1489         tcp_ses->noblocksnd = volume_info->noblocksnd;
1490         tcp_ses->noautotune = volume_info->noautotune;
1491         atomic_set(&tcp_ses->inFlight, 0);
1492         init_waitqueue_head(&tcp_ses->response_q);
1493         init_waitqueue_head(&tcp_ses->request_q);
1494         INIT_LIST_HEAD(&tcp_ses->pending_mid_q);
1495         mutex_init(&tcp_ses->srv_mutex);
1496         memcpy(tcp_ses->workstation_RFC1001_name,
1497                 volume_info->source_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1498         memcpy(tcp_ses->server_RFC1001_name,
1499                 volume_info->target_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1500         tcp_ses->sequence_number = 0;
1501         INIT_LIST_HEAD(&tcp_ses->tcp_ses_list);
1502         INIT_LIST_HEAD(&tcp_ses->smb_ses_list);
1503
1504         /*
1505          * at this point we are the only ones with the pointer
1506          * to the struct since the kernel thread not created yet
1507          * no need to spinlock this init of tcpStatus or srv_count
1508          */
1509         tcp_ses->tcpStatus = CifsNew;
1510         ++tcp_ses->srv_count;
1511
1512         if (addr.ss_family == AF_INET6) {
1513                 cFYI(1, ("attempting ipv6 connect"));
1514                 /* BB should we allow ipv6 on port 139? */
1515                 /* other OS never observed in Wild doing 139 with v6 */
1516                 memcpy(&tcp_ses->addr.sockAddr6, sin_server6,
1517                         sizeof(struct sockaddr_in6));
1518                 sin_server6->sin6_port = htons(volume_info->port);
1519                 rc = ipv6_connect(tcp_ses);
1520         } else {
1521                 memcpy(&tcp_ses->addr.sockAddr, sin_server,
1522                         sizeof(struct sockaddr_in));
1523                 sin_server->sin_port = htons(volume_info->port);
1524                 rc = ipv4_connect(tcp_ses);
1525         }
1526         if (rc < 0) {
1527                 cERROR(1, ("Error connecting to socket. Aborting operation"));
1528                 goto out_err;
1529         }
1530
1531         /*
1532          * since we're in a cifs function already, we know that
1533          * this will succeed. No need for try_module_get().
1534          */
1535         __module_get(THIS_MODULE);
1536         tcp_ses->tsk = kthread_run((void *)(void *)cifs_demultiplex_thread,
1537                                   tcp_ses, "cifsd");
1538         if (IS_ERR(tcp_ses->tsk)) {
1539                 rc = PTR_ERR(tcp_ses->tsk);
1540                 cERROR(1, ("error %d create cifsd thread", rc));
1541                 module_put(THIS_MODULE);
1542                 goto out_err;
1543         }
1544
1545         /* thread spawned, put it on the list */
1546         write_lock(&cifs_tcp_ses_lock);
1547         list_add(&tcp_ses->tcp_ses_list, &cifs_tcp_ses_list);
1548         write_unlock(&cifs_tcp_ses_lock);
1549
1550         return tcp_ses;
1551
1552 out_err:
1553         if (tcp_ses) {
1554                 kfree(tcp_ses->hostname);
1555                 if (tcp_ses->ssocket)
1556                         sock_release(tcp_ses->ssocket);
1557                 kfree(tcp_ses);
1558         }
1559         return ERR_PTR(rc);
1560 }
1561
1562 static struct cifsSesInfo *
1563 cifs_find_smb_ses(struct TCP_Server_Info *server, char *username)
1564 {
1565         struct list_head *tmp;
1566         struct cifsSesInfo *ses;
1567
1568         write_lock(&cifs_tcp_ses_lock);
1569         list_for_each(tmp, &server->smb_ses_list) {
1570                 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
1571                 if (strncmp(ses->userName, username, MAX_USERNAME_SIZE))
1572                         continue;
1573
1574                 ++ses->ses_count;
1575                 write_unlock(&cifs_tcp_ses_lock);
1576                 return ses;
1577         }
1578         write_unlock(&cifs_tcp_ses_lock);
1579         return NULL;
1580 }
1581
1582 static void
1583 cifs_put_smb_ses(struct cifsSesInfo *ses)
1584 {
1585         int xid;
1586         struct TCP_Server_Info *server = ses->server;
1587
1588         write_lock(&cifs_tcp_ses_lock);
1589         if (--ses->ses_count > 0) {
1590                 write_unlock(&cifs_tcp_ses_lock);
1591                 return;
1592         }
1593
1594         list_del_init(&ses->smb_ses_list);
1595         write_unlock(&cifs_tcp_ses_lock);
1596
1597         if (ses->status == CifsGood) {
1598                 xid = GetXid();
1599                 CIFSSMBLogoff(xid, ses);
1600                 _FreeXid(xid);
1601         }
1602         sesInfoFree(ses);
1603         cifs_put_tcp_session(server);
1604 }
1605
1606 static struct cifsTconInfo *
1607 cifs_find_tcon(struct cifsSesInfo *ses, const char *unc)
1608 {
1609         struct list_head *tmp;
1610         struct cifsTconInfo *tcon;
1611
1612         write_lock(&cifs_tcp_ses_lock);
1613         list_for_each(tmp, &ses->tcon_list) {
1614                 tcon = list_entry(tmp, struct cifsTconInfo, tcon_list);
1615                 if (tcon->tidStatus == CifsExiting)
1616                         continue;
1617                 if (strncmp(tcon->treeName, unc, MAX_TREE_SIZE))
1618                         continue;
1619
1620                 ++tcon->tc_count;
1621                 write_unlock(&cifs_tcp_ses_lock);
1622                 return tcon;
1623         }
1624         write_unlock(&cifs_tcp_ses_lock);
1625         return NULL;
1626 }
1627
1628 static void
1629 cifs_put_tcon(struct cifsTconInfo *tcon)
1630 {
1631         int xid;
1632         struct cifsSesInfo *ses = tcon->ses;
1633
1634         write_lock(&cifs_tcp_ses_lock);
1635         if (--tcon->tc_count > 0) {
1636                 write_unlock(&cifs_tcp_ses_lock);
1637                 return;
1638         }
1639
1640         list_del_init(&tcon->tcon_list);
1641         write_unlock(&cifs_tcp_ses_lock);
1642
1643         xid = GetXid();
1644         CIFSSMBTDis(xid, tcon);
1645         _FreeXid(xid);
1646
1647         DeleteTconOplockQEntries(tcon);
1648         tconInfoFree(tcon);
1649         cifs_put_smb_ses(ses);
1650 }
1651
1652 int
1653 get_dfs_path(int xid, struct cifsSesInfo *pSesInfo, const char *old_path,
1654              const struct nls_table *nls_codepage, unsigned int *pnum_referrals,
1655              struct dfs_info3_param **preferrals, int remap)
1656 {
1657         char *temp_unc;
1658         int rc = 0;
1659
1660         *pnum_referrals = 0;
1661         *preferrals = NULL;
1662
1663         if (pSesInfo->ipc_tid == 0) {
1664                 temp_unc = kmalloc(2 /* for slashes */ +
1665                         strnlen(pSesInfo->serverName,
1666                                 SERVER_NAME_LEN_WITH_NULL * 2)
1667                                  + 1 + 4 /* slash IPC$ */  + 2,
1668                                 GFP_KERNEL);
1669                 if (temp_unc == NULL)
1670                         return -ENOMEM;
1671                 temp_unc[0] = '\\';
1672                 temp_unc[1] = '\\';
1673                 strcpy(temp_unc + 2, pSesInfo->serverName);
1674                 strcpy(temp_unc + 2 + strlen(pSesInfo->serverName), "\\IPC$");
1675                 rc = CIFSTCon(xid, pSesInfo, temp_unc, NULL, nls_codepage);
1676                 cFYI(1,
1677                      ("CIFS Tcon rc = %d ipc_tid = %d", rc, pSesInfo->ipc_tid));
1678                 kfree(temp_unc);
1679         }
1680         if (rc == 0)
1681                 rc = CIFSGetDFSRefer(xid, pSesInfo, old_path, preferrals,
1682                                      pnum_referrals, nls_codepage, remap);
1683         /* BB map targetUNCs to dfs_info3 structures, here or
1684                 in CIFSGetDFSRefer BB */
1685
1686         return rc;
1687 }
1688
1689 #ifdef CONFIG_DEBUG_LOCK_ALLOC
1690 static struct lock_class_key cifs_key[2];
1691 static struct lock_class_key cifs_slock_key[2];
1692
1693 static inline void
1694 cifs_reclassify_socket4(struct socket *sock)
1695 {
1696         struct sock *sk = sock->sk;
1697         BUG_ON(sock_owned_by_user(sk));
1698         sock_lock_init_class_and_name(sk, "slock-AF_INET-CIFS",
1699                 &cifs_slock_key[0], "sk_lock-AF_INET-CIFS", &cifs_key[0]);
1700 }
1701
1702 static inline void
1703 cifs_reclassify_socket6(struct socket *sock)
1704 {
1705         struct sock *sk = sock->sk;
1706         BUG_ON(sock_owned_by_user(sk));
1707         sock_lock_init_class_and_name(sk, "slock-AF_INET6-CIFS",
1708                 &cifs_slock_key[1], "sk_lock-AF_INET6-CIFS", &cifs_key[1]);
1709 }
1710 #else
1711 static inline void
1712 cifs_reclassify_socket4(struct socket *sock)
1713 {
1714 }
1715
1716 static inline void
1717 cifs_reclassify_socket6(struct socket *sock)
1718 {
1719 }
1720 #endif
1721
1722 /* See RFC1001 section 14 on representation of Netbios names */
1723 static void rfc1002mangle(char *target, char *source, unsigned int length)
1724 {
1725         unsigned int i, j;
1726
1727         for (i = 0, j = 0; i < (length); i++) {
1728                 /* mask a nibble at a time and encode */
1729                 target[j] = 'A' + (0x0F & (source[i] >> 4));
1730                 target[j+1] = 'A' + (0x0F & source[i]);
1731                 j += 2;
1732         }
1733
1734 }
1735
1736
1737 static int
1738 ipv4_connect(struct TCP_Server_Info *server)
1739 {
1740         int rc = 0;
1741         bool connected = false;
1742         __be16 orig_port = 0;
1743         struct socket *socket = server->ssocket;
1744
1745         if (socket == NULL) {
1746                 rc = sock_create_kern(PF_INET, SOCK_STREAM,
1747                                       IPPROTO_TCP, &socket);
1748                 if (rc < 0) {
1749                         cERROR(1, ("Error %d creating socket", rc));
1750                         return rc;
1751                 }
1752
1753                 /* BB other socket options to set KEEPALIVE, NODELAY? */
1754                 cFYI(1, ("Socket created"));
1755                 server->ssocket = socket;
1756                 socket->sk->sk_allocation = GFP_NOFS;
1757                 cifs_reclassify_socket4(socket);
1758         }
1759
1760         /* user overrode default port */
1761         if (server->addr.sockAddr.sin_port) {
1762                 rc = socket->ops->connect(socket, (struct sockaddr *)
1763                                           &server->addr.sockAddr,
1764                                           sizeof(struct sockaddr_in), 0);
1765                 if (rc >= 0)
1766                         connected = true;
1767         }
1768
1769         if (!connected) {
1770                 /* save original port so we can retry user specified port
1771                         later if fall back ports fail this time  */
1772                 orig_port = server->addr.sockAddr.sin_port;
1773
1774                 /* do not retry on the same port we just failed on */
1775                 if (server->addr.sockAddr.sin_port != htons(CIFS_PORT)) {
1776                         server->addr.sockAddr.sin_port = htons(CIFS_PORT);
1777                         rc = socket->ops->connect(socket,
1778                                                 (struct sockaddr *)
1779                                                 &server->addr.sockAddr,
1780                                                 sizeof(struct sockaddr_in), 0);
1781                         if (rc >= 0)
1782                                 connected = true;
1783                 }
1784         }
1785         if (!connected) {
1786                 server->addr.sockAddr.sin_port = htons(RFC1001_PORT);
1787                 rc = socket->ops->connect(socket, (struct sockaddr *)
1788                                               &server->addr.sockAddr,
1789                                               sizeof(struct sockaddr_in), 0);
1790                 if (rc >= 0)
1791                         connected = true;
1792         }
1793
1794         /* give up here - unless we want to retry on different
1795                 protocol families some day */
1796         if (!connected) {
1797                 if (orig_port)
1798                         server->addr.sockAddr.sin_port = orig_port;
1799                 cFYI(1, ("Error %d connecting to server via ipv4", rc));
1800                 sock_release(socket);
1801                 server->ssocket = NULL;
1802                 return rc;
1803         }
1804
1805
1806         /*
1807          * Eventually check for other socket options to change from
1808          *  the default. sock_setsockopt not used because it expects
1809          *  user space buffer
1810          */
1811         socket->sk->sk_rcvtimeo = 7 * HZ;
1812         socket->sk->sk_sndtimeo = 5 * HZ;
1813
1814         /* make the bufsizes depend on wsize/rsize and max requests */
1815         if (server->noautotune) {
1816                 if (socket->sk->sk_sndbuf < (200 * 1024))
1817                         socket->sk->sk_sndbuf = 200 * 1024;
1818                 if (socket->sk->sk_rcvbuf < (140 * 1024))
1819                         socket->sk->sk_rcvbuf = 140 * 1024;
1820         }
1821
1822          cFYI(1, ("sndbuf %d rcvbuf %d rcvtimeo 0x%lx",
1823                  socket->sk->sk_sndbuf,
1824                  socket->sk->sk_rcvbuf, socket->sk->sk_rcvtimeo));
1825
1826         /* send RFC1001 sessinit */
1827         if (server->addr.sockAddr.sin_port == htons(RFC1001_PORT)) {
1828                 /* some servers require RFC1001 sessinit before sending
1829                 negprot - BB check reconnection in case where second
1830                 sessinit is sent but no second negprot */
1831                 struct rfc1002_session_packet *ses_init_buf;
1832                 struct smb_hdr *smb_buf;
1833                 ses_init_buf = kzalloc(sizeof(struct rfc1002_session_packet),
1834                                        GFP_KERNEL);
1835                 if (ses_init_buf) {
1836                         ses_init_buf->trailer.session_req.called_len = 32;
1837                         if (server->server_RFC1001_name &&
1838                             server->server_RFC1001_name[0] != 0)
1839                                 rfc1002mangle(ses_init_buf->trailer.
1840                                                 session_req.called_name,
1841                                               server->server_RFC1001_name,
1842                                               RFC1001_NAME_LEN_WITH_NULL);
1843                         else
1844                                 rfc1002mangle(ses_init_buf->trailer.
1845                                                 session_req.called_name,
1846                                               DEFAULT_CIFS_CALLED_NAME,
1847                                               RFC1001_NAME_LEN_WITH_NULL);
1848
1849                         ses_init_buf->trailer.session_req.calling_len = 32;
1850
1851                         /* calling name ends in null (byte 16) from old smb
1852                         convention. */
1853                         if (server->workstation_RFC1001_name &&
1854                             server->workstation_RFC1001_name[0] != 0)
1855                                 rfc1002mangle(ses_init_buf->trailer.
1856                                                 session_req.calling_name,
1857                                               server->workstation_RFC1001_name,
1858                                               RFC1001_NAME_LEN_WITH_NULL);
1859                         else
1860                                 rfc1002mangle(ses_init_buf->trailer.
1861                                                 session_req.calling_name,
1862                                               "LINUX_CIFS_CLNT",
1863                                               RFC1001_NAME_LEN_WITH_NULL);
1864
1865                         ses_init_buf->trailer.session_req.scope1 = 0;
1866                         ses_init_buf->trailer.session_req.scope2 = 0;
1867                         smb_buf = (struct smb_hdr *)ses_init_buf;
1868                         /* sizeof RFC1002_SESSION_REQUEST with no scope */
1869                         smb_buf->smb_buf_length = 0x81000044;
1870                         rc = smb_send(server, smb_buf, 0x44);
1871                         kfree(ses_init_buf);
1872                         msleep(1); /* RFC1001 layer in at least one server
1873                                       requires very short break before negprot
1874                                       presumably because not expecting negprot
1875                                       to follow so fast.  This is a simple
1876                                       solution that works without
1877                                       complicating the code and causes no
1878                                       significant slowing down on mount
1879                                       for everyone else */
1880                 }
1881                 /* else the negprot may still work without this
1882                 even though malloc failed */
1883
1884         }
1885
1886         return rc;
1887 }
1888
1889 static int
1890 ipv6_connect(struct TCP_Server_Info *server)
1891 {
1892         int rc = 0;
1893         bool connected = false;
1894         __be16 orig_port = 0;
1895         struct socket *socket = server->ssocket;
1896
1897         if (socket == NULL) {
1898                 rc = sock_create_kern(PF_INET6, SOCK_STREAM,
1899                                       IPPROTO_TCP, &socket);
1900                 if (rc < 0) {
1901                         cERROR(1, ("Error %d creating ipv6 socket", rc));
1902                         socket = NULL;
1903                         return rc;
1904                 }
1905
1906                 /* BB other socket options to set KEEPALIVE, NODELAY? */
1907                 cFYI(1, ("ipv6 Socket created"));
1908                 server->ssocket = socket;
1909                 socket->sk->sk_allocation = GFP_NOFS;
1910                 cifs_reclassify_socket6(socket);
1911         }
1912
1913         /* user overrode default port */
1914         if (server->addr.sockAddr6.sin6_port) {
1915                 rc = socket->ops->connect(socket,
1916                                 (struct sockaddr *) &server->addr.sockAddr6,
1917                                 sizeof(struct sockaddr_in6), 0);
1918                 if (rc >= 0)
1919                         connected = true;
1920         }
1921
1922         if (!connected) {
1923                 /* save original port so we can retry user specified port
1924                         later if fall back ports fail this time  */
1925
1926                 orig_port = server->addr.sockAddr6.sin6_port;
1927                 /* do not retry on the same port we just failed on */
1928                 if (server->addr.sockAddr6.sin6_port != htons(CIFS_PORT)) {
1929                         server->addr.sockAddr6.sin6_port = htons(CIFS_PORT);
1930                         rc = socket->ops->connect(socket, (struct sockaddr *)
1931                                         &server->addr.sockAddr6,
1932                                         sizeof(struct sockaddr_in6), 0);
1933                         if (rc >= 0)
1934                                 connected = true;
1935                 }
1936         }
1937         if (!connected) {
1938                 server->addr.sockAddr6.sin6_port = htons(RFC1001_PORT);
1939                 rc = socket->ops->connect(socket, (struct sockaddr *)
1940                                 &server->addr.sockAddr6,
1941                                 sizeof(struct sockaddr_in6), 0);
1942                 if (rc >= 0)
1943                         connected = true;
1944         }
1945
1946         /* give up here - unless we want to retry on different
1947                 protocol families some day */
1948         if (!connected) {
1949                 if (orig_port)
1950                         server->addr.sockAddr6.sin6_port = orig_port;
1951                 cFYI(1, ("Error %d connecting to server via ipv6", rc));
1952                 sock_release(socket);
1953                 server->ssocket = NULL;
1954                 return rc;
1955         }
1956
1957         /*
1958          * Eventually check for other socket options to change from
1959          * the default. sock_setsockopt not used because it expects
1960          * user space buffer
1961          */
1962         socket->sk->sk_rcvtimeo = 7 * HZ;
1963         socket->sk->sk_sndtimeo = 5 * HZ;
1964         server->ssocket = socket;
1965
1966         return rc;
1967 }
1968
1969 void reset_cifs_unix_caps(int xid, struct cifsTconInfo *tcon,
1970                           struct super_block *sb, struct smb_vol *vol_info)
1971 {
1972         /* if we are reconnecting then should we check to see if
1973          * any requested capabilities changed locally e.g. via
1974          * remount but we can not do much about it here
1975          * if they have (even if we could detect it by the following)
1976          * Perhaps we could add a backpointer to array of sb from tcon
1977          * or if we change to make all sb to same share the same
1978          * sb as NFS - then we only have one backpointer to sb.
1979          * What if we wanted to mount the server share twice once with
1980          * and once without posixacls or posix paths? */
1981         __u64 saved_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
1982
1983         if (vol_info && vol_info->no_linux_ext) {
1984                 tcon->fsUnixInfo.Capability = 0;
1985                 tcon->unix_ext = 0; /* Unix Extensions disabled */
1986                 cFYI(1, ("Linux protocol extensions disabled"));
1987                 return;
1988         } else if (vol_info)
1989                 tcon->unix_ext = 1; /* Unix Extensions supported */
1990
1991         if (tcon->unix_ext == 0) {
1992                 cFYI(1, ("Unix extensions disabled so not set on reconnect"));
1993                 return;
1994         }
1995
1996         if (!CIFSSMBQFSUnixInfo(xid, tcon)) {
1997                 __u64 cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
1998
1999                 /* check for reconnect case in which we do not
2000                    want to change the mount behavior if we can avoid it */
2001                 if (vol_info == NULL) {
2002                         /* turn off POSIX ACL and PATHNAMES if not set
2003                            originally at mount time */
2004                         if ((saved_cap & CIFS_UNIX_POSIX_ACL_CAP) == 0)
2005                                 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2006                         if ((saved_cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2007                                 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2008                                         cERROR(1, ("POSIXPATH support change"));
2009                                 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2010                         } else if ((cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2011                                 cERROR(1, ("possible reconnect error"));
2012                                 cERROR(1,
2013                                         ("server disabled POSIX path support"));
2014                         }
2015                 }
2016
2017                 cap &= CIFS_UNIX_CAP_MASK;
2018                 if (vol_info && vol_info->no_psx_acl)
2019                         cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2020                 else if (CIFS_UNIX_POSIX_ACL_CAP & cap) {
2021                         cFYI(1, ("negotiated posix acl support"));
2022                         if (sb)
2023                                 sb->s_flags |= MS_POSIXACL;
2024                 }
2025
2026                 if (vol_info && vol_info->posix_paths == 0)
2027                         cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2028                 else if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) {
2029                         cFYI(1, ("negotiate posix pathnames"));
2030                         if (sb)
2031                                 CIFS_SB(sb)->mnt_cifs_flags |=
2032                                         CIFS_MOUNT_POSIX_PATHS;
2033                 }
2034
2035                 /* We might be setting the path sep back to a different
2036                 form if we are reconnecting and the server switched its
2037                 posix path capability for this share */
2038                 if (sb && (CIFS_SB(sb)->prepathlen > 0))
2039                         CIFS_SB(sb)->prepath[0] = CIFS_DIR_SEP(CIFS_SB(sb));
2040
2041                 if (sb && (CIFS_SB(sb)->rsize > 127 * 1024)) {
2042                         if ((cap & CIFS_UNIX_LARGE_READ_CAP) == 0) {
2043                                 CIFS_SB(sb)->rsize = 127 * 1024;
2044                                 cFYI(DBG2,
2045                                         ("larger reads not supported by srv"));
2046                         }
2047                 }
2048
2049
2050                 cFYI(1, ("Negotiate caps 0x%x", (int)cap));
2051 #ifdef CONFIG_CIFS_DEBUG2
2052                 if (cap & CIFS_UNIX_FCNTL_CAP)
2053                         cFYI(1, ("FCNTL cap"));
2054                 if (cap & CIFS_UNIX_EXTATTR_CAP)
2055                         cFYI(1, ("EXTATTR cap"));
2056                 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2057                         cFYI(1, ("POSIX path cap"));
2058                 if (cap & CIFS_UNIX_XATTR_CAP)
2059                         cFYI(1, ("XATTR cap"));
2060                 if (cap & CIFS_UNIX_POSIX_ACL_CAP)
2061                         cFYI(1, ("POSIX ACL cap"));
2062                 if (cap & CIFS_UNIX_LARGE_READ_CAP)
2063                         cFYI(1, ("very large read cap"));
2064                 if (cap & CIFS_UNIX_LARGE_WRITE_CAP)
2065                         cFYI(1, ("very large write cap"));
2066 #endif /* CIFS_DEBUG2 */
2067                 if (CIFSSMBSetFSUnixInfo(xid, tcon, cap)) {
2068                         if (vol_info == NULL) {
2069                                 cFYI(1, ("resetting capabilities failed"));
2070                         } else
2071                                 cERROR(1, ("Negotiating Unix capabilities "
2072                                            "with the server failed.  Consider "
2073                                            "mounting with the Unix Extensions\n"
2074                                            "disabled, if problems are found, "
2075                                            "by specifying the nounix mount "
2076                                            "option."));
2077
2078                 }
2079         }
2080 }
2081
2082 static void
2083 convert_delimiter(char *path, char delim)
2084 {
2085         int i;
2086         char old_delim;
2087
2088         if (path == NULL)
2089                 return;
2090
2091         if (delim == '/')
2092                 old_delim = '\\';
2093         else
2094                 old_delim = '/';
2095
2096         for (i = 0; path[i] != '\0'; i++) {
2097                 if (path[i] == old_delim)
2098                         path[i] = delim;
2099         }
2100 }
2101
2102 static void setup_cifs_sb(struct smb_vol *pvolume_info,
2103                           struct cifs_sb_info *cifs_sb)
2104 {
2105         if (pvolume_info->rsize > CIFSMaxBufSize) {
2106                 cERROR(1, ("rsize %d too large, using MaxBufSize",
2107                         pvolume_info->rsize));
2108                 cifs_sb->rsize = CIFSMaxBufSize;
2109         } else if ((pvolume_info->rsize) &&
2110                         (pvolume_info->rsize <= CIFSMaxBufSize))
2111                 cifs_sb->rsize = pvolume_info->rsize;
2112         else /* default */
2113                 cifs_sb->rsize = CIFSMaxBufSize;
2114
2115         if (pvolume_info->wsize > PAGEVEC_SIZE * PAGE_CACHE_SIZE) {
2116                 cERROR(1, ("wsize %d too large, using 4096 instead",
2117                           pvolume_info->wsize));
2118                 cifs_sb->wsize = 4096;
2119         } else if (pvolume_info->wsize)
2120                 cifs_sb->wsize = pvolume_info->wsize;
2121         else
2122                 cifs_sb->wsize = min_t(const int,
2123                                         PAGEVEC_SIZE * PAGE_CACHE_SIZE,
2124                                         127*1024);
2125                 /* old default of CIFSMaxBufSize was too small now
2126                    that SMB Write2 can send multiple pages in kvec.
2127                    RFC1001 does not describe what happens when frame
2128                    bigger than 128K is sent so use that as max in
2129                    conjunction with 52K kvec constraint on arch with 4K
2130                    page size  */
2131
2132         if (cifs_sb->rsize < 2048) {
2133                 cifs_sb->rsize = 2048;
2134                 /* Windows ME may prefer this */
2135                 cFYI(1, ("readsize set to minimum: 2048"));
2136         }
2137         /* calculate prepath */
2138         cifs_sb->prepath = pvolume_info->prepath;
2139         if (cifs_sb->prepath) {
2140                 cifs_sb->prepathlen = strlen(cifs_sb->prepath);
2141                 /* we can not convert the / to \ in the path
2142                 separators in the prefixpath yet because we do not
2143                 know (until reset_cifs_unix_caps is called later)
2144                 whether POSIX PATH CAP is available. We normalize
2145                 the / to \ after reset_cifs_unix_caps is called */
2146                 pvolume_info->prepath = NULL;
2147         } else
2148                 cifs_sb->prepathlen = 0;
2149         cifs_sb->mnt_uid = pvolume_info->linux_uid;
2150         cifs_sb->mnt_gid = pvolume_info->linux_gid;
2151         cifs_sb->mnt_file_mode = pvolume_info->file_mode;
2152         cifs_sb->mnt_dir_mode = pvolume_info->dir_mode;
2153         cFYI(1, ("file mode: 0x%x  dir mode: 0x%x",
2154                 cifs_sb->mnt_file_mode, cifs_sb->mnt_dir_mode));
2155
2156         if (pvolume_info->noperm)
2157                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_PERM;
2158         if (pvolume_info->setuids)
2159                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SET_UID;
2160         if (pvolume_info->server_ino)
2161                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SERVER_INUM;
2162         if (pvolume_info->remap)
2163                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MAP_SPECIAL_CHR;
2164         if (pvolume_info->no_xattr)
2165                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_XATTR;
2166         if (pvolume_info->sfu_emul)
2167                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_UNX_EMUL;
2168         if (pvolume_info->nobrl)
2169                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_BRL;
2170         if (pvolume_info->nostrictsync)
2171                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOSSYNC;
2172         if (pvolume_info->mand_lock)
2173                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOPOSIXBRL;
2174         if (pvolume_info->cifs_acl)
2175                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_ACL;
2176         if (pvolume_info->override_uid)
2177                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_UID;
2178         if (pvolume_info->override_gid)
2179                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_GID;
2180         if (pvolume_info->dynperm)
2181                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DYNPERM;
2182         if (pvolume_info->direct_io) {
2183                 cFYI(1, ("mounting share using direct i/o"));
2184                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DIRECT_IO;
2185         }
2186
2187         if ((pvolume_info->cifs_acl) && (pvolume_info->dynperm))
2188                 cERROR(1, ("mount option dynperm ignored if cifsacl "
2189                            "mount option supported"));
2190 }
2191
2192 static int
2193 is_path_accessible(int xid, struct cifsTconInfo *tcon,
2194                    struct cifs_sb_info *cifs_sb, const char *full_path)
2195 {
2196         int rc;
2197         __u64 inode_num;
2198         FILE_ALL_INFO *pfile_info;
2199
2200         rc = CIFSGetSrvInodeNumber(xid, tcon, full_path, &inode_num,
2201                                    cifs_sb->local_nls,
2202                                    cifs_sb->mnt_cifs_flags &
2203                                                 CIFS_MOUNT_MAP_SPECIAL_CHR);
2204         if (rc != -EOPNOTSUPP)
2205                 return rc;
2206
2207         pfile_info = kmalloc(sizeof(FILE_ALL_INFO), GFP_KERNEL);
2208         if (pfile_info == NULL)
2209                 return -ENOMEM;
2210
2211         rc = CIFSSMBQPathInfo(xid, tcon, full_path, pfile_info,
2212                               0 /* not legacy */, cifs_sb->local_nls,
2213                               cifs_sb->mnt_cifs_flags &
2214                                 CIFS_MOUNT_MAP_SPECIAL_CHR);
2215         kfree(pfile_info);
2216         return rc;
2217 }
2218
2219 static void
2220 cleanup_volume_info(struct smb_vol **pvolume_info)
2221 {
2222         struct smb_vol *volume_info;
2223
2224         if (!pvolume_info && !*pvolume_info)
2225                 return;
2226
2227         volume_info = *pvolume_info;
2228         kzfree(volume_info->password);
2229         kfree(volume_info->UNC);
2230         kfree(volume_info->prepath);
2231         kfree(volume_info);
2232         *pvolume_info = NULL;
2233         return;
2234 }
2235
2236 #ifdef CONFIG_CIFS_DFS_UPCALL
2237 /* build_path_to_root returns full path to root when
2238  * we do not have an exiting connection (tcon) */
2239 static char *
2240 build_unc_path_to_root(const struct smb_vol *volume_info,
2241                 const struct cifs_sb_info *cifs_sb)
2242 {
2243         char *full_path;
2244
2245         int unc_len = strnlen(volume_info->UNC, MAX_TREE_SIZE + 1);
2246         full_path = kmalloc(unc_len + cifs_sb->prepathlen + 1, GFP_KERNEL);
2247         if (full_path == NULL)
2248                 return ERR_PTR(-ENOMEM);
2249
2250         strncpy(full_path, volume_info->UNC, unc_len);
2251         if (cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) {
2252                 int i;
2253                 for (i = 0; i < unc_len; i++) {
2254                         if (full_path[i] == '\\')
2255                                 full_path[i] = '/';
2256                 }
2257         }
2258
2259         if (cifs_sb->prepathlen)
2260                 strncpy(full_path + unc_len, cifs_sb->prepath,
2261                                 cifs_sb->prepathlen);
2262
2263         full_path[unc_len + cifs_sb->prepathlen] = 0; /* add trailing null */
2264         return full_path;
2265 }
2266 #endif
2267
2268 int
2269 cifs_mount(struct super_block *sb, struct cifs_sb_info *cifs_sb,
2270                 char *mount_data_global, const char *devname)
2271 {
2272         int rc = 0;
2273         int xid;
2274         struct smb_vol *volume_info;
2275         struct cifsSesInfo *pSesInfo = NULL;
2276         struct cifsTconInfo *tcon = NULL;
2277         struct TCP_Server_Info *srvTcp = NULL;
2278         char   *full_path;
2279         char *mount_data = mount_data_global;
2280 #ifdef CONFIG_CIFS_DFS_UPCALL
2281         struct dfs_info3_param *referrals = NULL;
2282         unsigned int num_referrals = 0;
2283         int referral_walks_count = 0;
2284 try_mount_again:
2285 #endif
2286         full_path = NULL;
2287
2288         xid = GetXid();
2289
2290         volume_info = kzalloc(sizeof(struct smb_vol), GFP_KERNEL);
2291         if (!volume_info) {
2292                 rc = -ENOMEM;
2293                 goto out;
2294         }
2295
2296         if (cifs_parse_mount_options(mount_data, devname, volume_info)) {
2297                 rc = -EINVAL;
2298                 goto out;
2299         }
2300
2301         if (volume_info->nullauth) {
2302                 cFYI(1, ("null user"));
2303                 volume_info->username = "";
2304         } else if (volume_info->username) {
2305                 /* BB fixme parse for domain name here */
2306                 cFYI(1, ("Username: %s", volume_info->username));
2307         } else {
2308                 cifserror("No username specified");
2309         /* In userspace mount helper we can get user name from alternate
2310            locations such as env variables and files on disk */
2311                 rc = -EINVAL;
2312                 goto out;
2313         }
2314
2315
2316         /* this is needed for ASCII cp to Unicode converts */
2317         if (volume_info->iocharset == NULL) {
2318                 cifs_sb->local_nls = load_nls_default();
2319         /* load_nls_default can not return null */
2320         } else {
2321                 cifs_sb->local_nls = load_nls(volume_info->iocharset);
2322                 if (cifs_sb->local_nls == NULL) {
2323                         cERROR(1, ("CIFS mount error: iocharset %s not found",
2324                                  volume_info->iocharset));
2325                         rc = -ELIBACC;
2326                         goto out;
2327                 }
2328         }
2329
2330         /* get a reference to a tcp session */
2331         srvTcp = cifs_get_tcp_session(volume_info);
2332         if (IS_ERR(srvTcp)) {
2333                 rc = PTR_ERR(srvTcp);
2334                 goto out;
2335         }
2336
2337         pSesInfo = cifs_find_smb_ses(srvTcp, volume_info->username);
2338         if (pSesInfo) {
2339                 cFYI(1, ("Existing smb sess found (status=%d)",
2340                         pSesInfo->status));
2341                 /*
2342                  * The existing SMB session already has a reference to srvTcp,
2343                  * so we can put back the extra one we got before
2344                  */
2345                 cifs_put_tcp_session(srvTcp);
2346
2347                 down(&pSesInfo->sesSem);
2348                 if (pSesInfo->need_reconnect) {
2349                         cFYI(1, ("Session needs reconnect"));
2350                         rc = cifs_setup_session(xid, pSesInfo,
2351                                                 cifs_sb->local_nls);
2352                 }
2353                 up(&pSesInfo->sesSem);
2354         } else if (!rc) {
2355                 cFYI(1, ("Existing smb sess not found"));
2356                 pSesInfo = sesInfoAlloc();
2357                 if (pSesInfo == NULL) {
2358                         rc = -ENOMEM;
2359                         goto mount_fail_check;
2360                 }
2361
2362                 /* new SMB session uses our srvTcp ref */
2363                 pSesInfo->server = srvTcp;
2364                 if (srvTcp->addr.sockAddr6.sin6_family == AF_INET6)
2365                         sprintf(pSesInfo->serverName, "%pI6",
2366                                 &srvTcp->addr.sockAddr6.sin6_addr);
2367                 else
2368                         sprintf(pSesInfo->serverName, "%pI4",
2369                                 &srvTcp->addr.sockAddr.sin_addr.s_addr);
2370
2371                 write_lock(&cifs_tcp_ses_lock);
2372                 list_add(&pSesInfo->smb_ses_list, &srvTcp->smb_ses_list);
2373                 write_unlock(&cifs_tcp_ses_lock);
2374
2375                 /* volume_info->password freed at unmount */
2376                 if (volume_info->password) {
2377                         pSesInfo->password = kstrdup(volume_info->password,
2378                                                      GFP_KERNEL);
2379                         if (!pSesInfo->password) {
2380                                 rc = -ENOMEM;
2381                                 goto mount_fail_check;
2382                         }
2383                 }
2384                 if (volume_info->username)
2385                         strncpy(pSesInfo->userName, volume_info->username,
2386                                 MAX_USERNAME_SIZE);
2387                 if (volume_info->domainname) {
2388                         int len = strlen(volume_info->domainname);
2389                         pSesInfo->domainName = kmalloc(len + 1, GFP_KERNEL);
2390                         if (pSesInfo->domainName)
2391                                 strcpy(pSesInfo->domainName,
2392                                         volume_info->domainname);
2393                 }
2394                 pSesInfo->linux_uid = volume_info->linux_uid;
2395                 pSesInfo->overrideSecFlg = volume_info->secFlg;
2396                 down(&pSesInfo->sesSem);
2397
2398                 /* BB FIXME need to pass vol->secFlgs BB */
2399                 rc = cifs_setup_session(xid, pSesInfo,
2400                                         cifs_sb->local_nls);
2401                 up(&pSesInfo->sesSem);
2402         }
2403
2404         /* search for existing tcon to this server share */
2405         if (!rc) {
2406                 setup_cifs_sb(volume_info, cifs_sb);
2407
2408                 tcon = cifs_find_tcon(pSesInfo, volume_info->UNC);
2409                 if (tcon) {
2410                         cFYI(1, ("Found match on UNC path"));
2411                         /* existing tcon already has a reference */
2412                         cifs_put_smb_ses(pSesInfo);
2413                         if (tcon->seal != volume_info->seal)
2414                                 cERROR(1, ("transport encryption setting "
2415                                            "conflicts with existing tid"));
2416                 } else {
2417                         tcon = tconInfoAlloc();
2418                         if (tcon == NULL) {
2419                                 rc = -ENOMEM;
2420                                 goto mount_fail_check;
2421                         }
2422
2423                         tcon->ses = pSesInfo;
2424                         if (volume_info->password) {
2425                                 tcon->password = kstrdup(volume_info->password,
2426                                                          GFP_KERNEL);
2427                                 if (!tcon->password) {
2428                                         rc = -ENOMEM;
2429                                         goto mount_fail_check;
2430                                 }
2431                         }
2432
2433                         if ((strchr(volume_info->UNC + 3, '\\') == NULL)
2434                             && (strchr(volume_info->UNC + 3, '/') == NULL)) {
2435                                 cERROR(1, ("Missing share name"));
2436                                 rc = -ENODEV;
2437                                 goto mount_fail_check;
2438                         } else {
2439                                 /* BB Do we need to wrap sesSem around
2440                                  * this TCon call and Unix SetFS as
2441                                  * we do on SessSetup and reconnect? */
2442                                 rc = CIFSTCon(xid, pSesInfo, volume_info->UNC,
2443                                               tcon, cifs_sb->local_nls);
2444                                 cFYI(1, ("CIFS Tcon rc = %d", rc));
2445                                 if (volume_info->nodfs) {
2446                                         tcon->Flags &= ~SMB_SHARE_IS_IN_DFS;
2447                                         cFYI(1, ("DFS disabled (%d)",
2448                                                 tcon->Flags));
2449                                 }
2450                         }
2451                         if (rc)
2452                                 goto remote_path_check;
2453                         tcon->seal = volume_info->seal;
2454                         write_lock(&cifs_tcp_ses_lock);
2455                         list_add(&tcon->tcon_list, &pSesInfo->tcon_list);
2456                         write_unlock(&cifs_tcp_ses_lock);
2457                 }
2458
2459                 /* we can have only one retry value for a connection
2460                    to a share so for resources mounted more than once
2461                    to the same server share the last value passed in
2462                    for the retry flag is used */
2463                 tcon->retry = volume_info->retry;
2464                 tcon->nocase = volume_info->nocase;
2465                 tcon->local_lease = volume_info->local_lease;
2466         }
2467         if (pSesInfo) {
2468                 if (pSesInfo->capabilities & CAP_LARGE_FILES) {
2469                         sb->s_maxbytes = (u64) 1 << 63;
2470                 } else
2471                         sb->s_maxbytes = (u64) 1 << 31; /* 2 GB */
2472         }
2473
2474         /* BB FIXME fix time_gran to be larger for LANMAN sessions */
2475         sb->s_time_gran = 100;
2476
2477         if (rc)
2478                 goto remote_path_check;
2479
2480         cifs_sb->tcon = tcon;
2481
2482         /* do not care if following two calls succeed - informational */
2483         if (!tcon->ipc) {
2484                 CIFSSMBQFSDeviceInfo(xid, tcon);
2485                 CIFSSMBQFSAttributeInfo(xid, tcon);
2486         }
2487
2488         /* tell server which Unix caps we support */
2489         if (tcon->ses->capabilities & CAP_UNIX)
2490                 /* reset of caps checks mount to see if unix extensions
2491                    disabled for just this mount */
2492                 reset_cifs_unix_caps(xid, tcon, sb, volume_info);
2493         else
2494                 tcon->unix_ext = 0; /* server does not support them */
2495
2496         /* convert forward to back slashes in prepath here if needed */
2497         if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2498                 convert_delimiter(cifs_sb->prepath, CIFS_DIR_SEP(cifs_sb));
2499
2500         if ((tcon->unix_ext == 0) && (cifs_sb->rsize > (1024 * 127))) {
2501                 cifs_sb->rsize = 1024 * 127;
2502                 cFYI(DBG2, ("no very large read support, rsize now 127K"));
2503         }
2504         if (!(tcon->ses->capabilities & CAP_LARGE_WRITE_X))
2505                 cifs_sb->wsize = min(cifs_sb->wsize,
2506                                (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2507         if (!(tcon->ses->capabilities & CAP_LARGE_READ_X))
2508                 cifs_sb->rsize = min(cifs_sb->rsize,
2509                                (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2510
2511 remote_path_check:
2512         /* check if a whole path (including prepath) is not remote */
2513         if (!rc && cifs_sb->prepathlen && tcon) {
2514                 /* build_path_to_root works only when we have a valid tcon */
2515                 full_path = cifs_build_path_to_root(cifs_sb);
2516                 if (full_path == NULL) {
2517                         rc = -ENOMEM;
2518                         goto mount_fail_check;
2519                 }
2520                 rc = is_path_accessible(xid, tcon, cifs_sb, full_path);
2521                 if (rc != -EREMOTE) {
2522                         kfree(full_path);
2523                         goto mount_fail_check;
2524                 }
2525                 kfree(full_path);
2526         }
2527
2528         /* get referral if needed */
2529         if (rc == -EREMOTE) {
2530 #ifdef CONFIG_CIFS_DFS_UPCALL
2531                 if (referral_walks_count > MAX_NESTED_LINKS) {
2532                         /*
2533                          * BB: when we implement proper loop detection,
2534                          *     we will remove this check. But now we need it
2535                          *     to prevent an indefinite loop if 'DFS tree' is
2536                          *     misconfigured (i.e. has loops).
2537                          */
2538                         rc = -ELOOP;
2539                         goto mount_fail_check;
2540                 }
2541                 /* convert forward to back slashes in prepath here if needed */
2542                 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2543                         convert_delimiter(cifs_sb->prepath,
2544                                         CIFS_DIR_SEP(cifs_sb));
2545                 full_path = build_unc_path_to_root(volume_info, cifs_sb);
2546                 if (IS_ERR(full_path)) {
2547                         rc = PTR_ERR(full_path);
2548                         goto mount_fail_check;
2549                 }
2550
2551                 cFYI(1, ("Getting referral for: %s", full_path));
2552                 rc = get_dfs_path(xid, pSesInfo , full_path + 1,
2553                         cifs_sb->local_nls, &num_referrals, &referrals,
2554                         cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
2555                 if (!rc && num_referrals > 0) {
2556                         char *fake_devname = NULL;
2557
2558                         if (mount_data != mount_data_global)
2559                                 kfree(mount_data);
2560                         mount_data = cifs_compose_mount_options(
2561                                         cifs_sb->mountdata, full_path + 1,
2562                                         referrals, &fake_devname);
2563                         kfree(fake_devname);
2564                         free_dfs_info_array(referrals, num_referrals);
2565
2566                         if (tcon)
2567                                 cifs_put_tcon(tcon);
2568                         else if (pSesInfo)
2569                                 cifs_put_smb_ses(pSesInfo);
2570
2571                         cleanup_volume_info(&volume_info);
2572                         FreeXid(xid);
2573                         kfree(full_path);
2574                         referral_walks_count++;
2575                         goto try_mount_again;
2576                 }
2577 #else /* No DFS support, return error on mount */
2578                 rc = -EOPNOTSUPP;
2579 #endif
2580         }
2581
2582 mount_fail_check:
2583         /* on error free sesinfo and tcon struct if needed */
2584         if (rc) {
2585                 if (mount_data != mount_data_global)
2586                         kfree(mount_data);
2587                 /* If find_unc succeeded then rc == 0 so we can not end */
2588                 /* up accidently freeing someone elses tcon struct */
2589                 if (tcon)
2590                         cifs_put_tcon(tcon);
2591                 else if (pSesInfo)
2592                         cifs_put_smb_ses(pSesInfo);
2593                 else
2594                         cifs_put_tcp_session(srvTcp);
2595                 goto out;
2596         }
2597
2598         /* volume_info->password is freed above when existing session found
2599         (in which case it is not needed anymore) but when new sesion is created
2600         the password ptr is put in the new session structure (in which case the
2601         password will be freed at unmount time) */
2602 out:
2603         /* zero out password before freeing */
2604         cleanup_volume_info(&volume_info);
2605         FreeXid(xid);
2606         return rc;
2607 }
2608
2609 int
2610 CIFSTCon(unsigned int xid, struct cifsSesInfo *ses,
2611          const char *tree, struct cifsTconInfo *tcon,
2612          const struct nls_table *nls_codepage)
2613 {
2614         struct smb_hdr *smb_buffer;
2615         struct smb_hdr *smb_buffer_response;
2616         TCONX_REQ *pSMB;
2617         TCONX_RSP *pSMBr;
2618         unsigned char *bcc_ptr;
2619         int rc = 0;
2620         int length, bytes_left;
2621         __u16 count;
2622
2623         if (ses == NULL)
2624                 return -EIO;
2625
2626         smb_buffer = cifs_buf_get();
2627         if (smb_buffer == NULL) {
2628                 return -ENOMEM;
2629         }
2630         smb_buffer_response = smb_buffer;
2631
2632         header_assemble(smb_buffer, SMB_COM_TREE_CONNECT_ANDX,
2633                         NULL /*no tid */ , 4 /*wct */ );
2634
2635         smb_buffer->Mid = GetNextMid(ses->server);
2636         smb_buffer->Uid = ses->Suid;
2637         pSMB = (TCONX_REQ *) smb_buffer;
2638         pSMBr = (TCONX_RSP *) smb_buffer_response;
2639
2640         pSMB->AndXCommand = 0xFF;
2641         pSMB->Flags = cpu_to_le16(TCON_EXTENDED_SECINFO);
2642         bcc_ptr = &pSMB->Password[0];
2643         if ((ses->server->secMode) & SECMODE_USER) {
2644                 pSMB->PasswordLength = cpu_to_le16(1);  /* minimum */
2645                 *bcc_ptr = 0; /* password is null byte */
2646                 bcc_ptr++;              /* skip password */
2647                 /* already aligned so no need to do it below */
2648         } else {
2649                 pSMB->PasswordLength = cpu_to_le16(CIFS_SESS_KEY_SIZE);
2650                 /* BB FIXME add code to fail this if NTLMv2 or Kerberos
2651                    specified as required (when that support is added to
2652                    the vfs in the future) as only NTLM or the much
2653                    weaker LANMAN (which we do not send by default) is accepted
2654                    by Samba (not sure whether other servers allow
2655                    NTLMv2 password here) */
2656 #ifdef CONFIG_CIFS_WEAK_PW_HASH
2657                 if ((extended_security & CIFSSEC_MAY_LANMAN) &&
2658                     (ses->server->secType == LANMAN))
2659                         calc_lanman_hash(tcon->password, ses->server->cryptKey,
2660                                          ses->server->secMode &
2661                                             SECMODE_PW_ENCRYPT ? true : false,
2662                                          bcc_ptr);
2663                 else
2664 #endif /* CIFS_WEAK_PW_HASH */
2665                 SMBNTencrypt(tcon->password, ses->server->cryptKey,
2666                              bcc_ptr);
2667
2668                 bcc_ptr += CIFS_SESS_KEY_SIZE;
2669                 if (ses->capabilities & CAP_UNICODE) {
2670                         /* must align unicode strings */
2671                         *bcc_ptr = 0; /* null byte password */
2672                         bcc_ptr++;
2673                 }
2674         }
2675
2676         if (ses->server->secMode &
2677                         (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
2678                 smb_buffer->Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
2679
2680         if (ses->capabilities & CAP_STATUS32) {
2681                 smb_buffer->Flags2 |= SMBFLG2_ERR_STATUS;
2682         }
2683         if (ses->capabilities & CAP_DFS) {
2684                 smb_buffer->Flags2 |= SMBFLG2_DFS;
2685         }
2686         if (ses->capabilities & CAP_UNICODE) {
2687                 smb_buffer->Flags2 |= SMBFLG2_UNICODE;
2688                 length =
2689                     cifs_strtoUCS((__le16 *) bcc_ptr, tree,
2690                         6 /* max utf8 char length in bytes */ *
2691                         (/* server len*/ + 256 /* share len */), nls_codepage);
2692                 bcc_ptr += 2 * length;  /* convert num 16 bit words to bytes */
2693                 bcc_ptr += 2;   /* skip trailing null */
2694         } else {                /* ASCII */
2695                 strcpy(bcc_ptr, tree);
2696                 bcc_ptr += strlen(tree) + 1;
2697         }
2698         strcpy(bcc_ptr, "?????");
2699         bcc_ptr += strlen("?????");
2700         bcc_ptr += 1;
2701         count = bcc_ptr - &pSMB->Password[0];
2702         pSMB->hdr.smb_buf_length += count;
2703         pSMB->ByteCount = cpu_to_le16(count);
2704
2705         rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response, &length,
2706                          CIFS_STD_OP);
2707
2708         /* above now done in SendReceive */
2709         if ((rc == 0) && (tcon != NULL)) {
2710                 bool is_unicode;
2711
2712                 tcon->tidStatus = CifsGood;
2713                 tcon->need_reconnect = false;
2714                 tcon->tid = smb_buffer_response->Tid;
2715                 bcc_ptr = pByteArea(smb_buffer_response);
2716                 bytes_left = BCC(smb_buffer_response);
2717                 length = strnlen(bcc_ptr, bytes_left - 2);
2718                 if (smb_buffer->Flags2 & SMBFLG2_UNICODE)
2719                         is_unicode = true;
2720                 else
2721                         is_unicode = false;
2722
2723
2724                 /* skip service field (NB: this field is always ASCII) */
2725                 if (length == 3) {
2726                         if ((bcc_ptr[0] == 'I') && (bcc_ptr[1] == 'P') &&
2727                             (bcc_ptr[2] == 'C')) {
2728                                 cFYI(1, ("IPC connection"));
2729                                 tcon->ipc = 1;
2730                         }
2731                 } else if (length == 2) {
2732                         if ((bcc_ptr[0] == 'A') && (bcc_ptr[1] == ':')) {
2733                                 /* the most common case */
2734                                 cFYI(1, ("disk share connection"));
2735                         }
2736                 }
2737                 bcc_ptr += length + 1;
2738                 bytes_left -= (length + 1);
2739                 strncpy(tcon->treeName, tree, MAX_TREE_SIZE);
2740
2741                 /* mostly informational -- no need to fail on error here */
2742                 tcon->nativeFileSystem = cifs_strndup_from_ucs(bcc_ptr,
2743                                                       bytes_left, is_unicode,
2744                                                       nls_codepage);
2745
2746                 cFYI(1, ("nativeFileSystem=%s", tcon->nativeFileSystem));
2747
2748                 if ((smb_buffer_response->WordCount == 3) ||
2749                          (smb_buffer_response->WordCount == 7))
2750                         /* field is in same location */
2751                         tcon->Flags = le16_to_cpu(pSMBr->OptionalSupport);
2752                 else
2753                         tcon->Flags = 0;
2754                 cFYI(1, ("Tcon flags: 0x%x ", tcon->Flags));
2755         } else if ((rc == 0) && tcon == NULL) {
2756                 /* all we need to save for IPC$ connection */
2757                 ses->ipc_tid = smb_buffer_response->Tid;
2758         }
2759
2760         cifs_buf_release(smb_buffer);
2761         return rc;
2762 }
2763
2764 int
2765 cifs_umount(struct super_block *sb, struct cifs_sb_info *cifs_sb)
2766 {
2767         int rc = 0;
2768         char *tmp;
2769
2770         if (cifs_sb->tcon)
2771                 cifs_put_tcon(cifs_sb->tcon);
2772
2773         cifs_sb->tcon = NULL;
2774         tmp = cifs_sb->prepath;
2775         cifs_sb->prepathlen = 0;
2776         cifs_sb->prepath = NULL;
2777         kfree(tmp);
2778
2779         return rc;
2780 }
2781
2782 int cifs_setup_session(unsigned int xid, struct cifsSesInfo *pSesInfo,
2783                                            struct nls_table *nls_info)
2784 {
2785         int rc = 0;
2786         int first_time = 0;
2787         struct TCP_Server_Info *server = pSesInfo->server;
2788
2789         /* what if server changes its buffer size after dropping the session? */
2790         if (server->maxBuf == 0) /* no need to send on reconnect */ {
2791                 rc = CIFSSMBNegotiate(xid, pSesInfo);
2792                 if (rc == -EAGAIN) {
2793                         /* retry only once on 1st time connection */
2794                         rc = CIFSSMBNegotiate(xid, pSesInfo);
2795                         if (rc == -EAGAIN)
2796                                 rc = -EHOSTDOWN;
2797                 }
2798                 if (rc == 0) {
2799                         spin_lock(&GlobalMid_Lock);
2800                         if (server->tcpStatus != CifsExiting)
2801                                 server->tcpStatus = CifsGood;
2802                         else
2803                                 rc = -EHOSTDOWN;
2804                         spin_unlock(&GlobalMid_Lock);
2805
2806                 }
2807                 first_time = 1;
2808         }
2809
2810         if (rc)
2811                 goto ss_err_exit;
2812
2813         pSesInfo->flags = 0;
2814         pSesInfo->capabilities = server->capabilities;
2815         if (linuxExtEnabled == 0)
2816                 pSesInfo->capabilities &= (~CAP_UNIX);
2817
2818         cFYI(1, ("Security Mode: 0x%x Capabilities: 0x%x TimeAdjust: %d",
2819                  server->secMode, server->capabilities, server->timeAdj));
2820
2821         rc = CIFS_SessSetup(xid, pSesInfo, first_time, nls_info);
2822         if (rc) {
2823                 cERROR(1, ("Send error in SessSetup = %d", rc));
2824         } else {
2825                 cFYI(1, ("CIFS Session Established successfully"));
2826                 spin_lock(&GlobalMid_Lock);
2827                 pSesInfo->status = CifsGood;
2828                 pSesInfo->need_reconnect = false;
2829                 spin_unlock(&GlobalMid_Lock);
2830         }
2831
2832 ss_err_exit:
2833         return rc;
2834 }
2835