fs/cifs/connect.c

   1 /*
   2  *   fs/cifs/connect.c
   3  *
   4  *   Copyright (C) International Business Machines  Corp., 2002,2009
   5  *   Author(s): Steve French (sfrench@us.ibm.com)
   6  *
   7  *   This library is free software; you can redistribute it and/or modify
   8  *   it under the terms of the GNU Lesser General Public License as published
   9  *   by the Free Software Foundation; either version 2.1 of the License, or
  10  *   (at your option) any later version.
  11  *
  12  *   This library is distributed in the hope that it will be useful,
  13  *   but WITHOUT ANY WARRANTY; without even the implied warranty of
  14  *   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See
  15  *   the GNU Lesser General Public License for more details.
  16  *
  17  *   You should have received a copy of the GNU Lesser General Public License
  18  *   along with this library; if not, write to the Free Software
  19  *   Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
  20  */
  21 #include <linux/fs.h>
  22 #include <linux/net.h>
  23 #include <linux/string.h>
  24 #include <linux/list.h>
  25 #include <linux/wait.h>
  26 #include <linux/pagemap.h>
  27 #include <linux/ctype.h>
  28 #include <linux/utsname.h>
  29 #include <linux/mempool.h>
  30 #include <linux/delay.h>
  31 #include <linux/completion.h>
  32 #include <linux/kthread.h>
  33 #include <linux/pagevec.h>
  34 #include <linux/freezer.h>
  35 #include <linux/namei.h>
  36 #include <asm/uaccess.h>
  37 #include <asm/processor.h>
  38 #include <linux/inet.h>
  39 #include <net/ipv6.h>
  40 #include "cifspdu.h"
  41 #include "cifsglob.h"
  42 #include "cifsproto.h"
  43 #include "cifs_unicode.h"
  44 #include "cifs_debug.h"
  45 #include "cifs_fs_sb.h"
  46 #include "ntlmssp.h"
  47 #include "nterr.h"
  48 #include "rfc1002pdu.h"
  49 #include "cn_cifs.h"
  50
  51 #define CIFS_PORT 445
  52 #define RFC1001_PORT 139
  53
  54 extern void SMBNTencrypt(unsigned char *passwd, unsigned char *c8,
  55                          unsigned char *p24);
  56
  57 extern mempool_t *cifs_req_poolp;
  58
  59 struct smb_vol {
  60         char *username;
  61         char *password;
  62         char *domainname;
  63         char *UNC;
  64         char *UNCip;
  65         char *iocharset;  /* local code page for mapping to and from Unicode */
  66         char source_rfc1001_name[16]; /* netbios name of client */
  67         char target_rfc1001_name[16]; /* netbios name of server for Win9x/ME */
  68         uid_t linux_uid;
  69         gid_t linux_gid;
  70         mode_t file_mode;
  71         mode_t dir_mode;
  72         unsigned secFlg;
  73         bool retry:1;
  74         bool intr:1;
  75         bool setuids:1;
  76         bool override_uid:1;
  77         bool override_gid:1;
  78         bool dynperm:1;
  79         bool noperm:1;
  80         bool no_psx_acl:1; /* set if posix acl support should be disabled */
  81         bool cifs_acl:1;
  82         bool no_xattr:1;   /* set if xattr (EA) support should be disabled*/
  83         bool server_ino:1; /* use inode numbers from server ie UniqueId */
  84         bool direct_io:1;
  85         bool remap:1;      /* set to remap seven reserved chars in filenames */
  86         bool posix_paths:1; /* unset to not ask for posix pathnames. */
  87         bool no_linux_ext:1;
  88         bool sfu_emul:1;
  89         bool nullauth:1;   /* attempt to authenticate with null user */
  90         bool nocase:1;     /* request case insensitive filenames */
  91         bool nobrl:1;      /* disable sending byte range locks to srv */
  92         bool mand_lock:1;  /* send mandatory not posix byte range lock reqs */
  93         bool seal:1;       /* request transport encryption on share */
  94         bool nodfs:1;      /* Do not request DFS, even if available */
  95         bool local_lease:1; /* check leases only on local system, not remote */
  96         bool noblocksnd:1;
  97         bool noautotune:1;
  98         bool nostrictsync:1; /* do not force expensive SMBflush on every sync */
  99         unsigned int rsize;
 100         unsigned int wsize;
 101         unsigned int sockopt;
 102         unsigned short int port;
 103         char *prepath;
 104 };
 105
 106 static int ipv4_connect(struct TCP_Server_Info *server);
 107 static int ipv6_connect(struct TCP_Server_Info *server);
 108
 109 /*
 110  * cifs tcp session reconnection
 111  *
 112  * mark tcp session as reconnecting so temporarily locked
 113  * mark all smb sessions as reconnecting for tcp session
 114  * reconnect tcp session
 115  * wake up waiters on reconnection? - (not needed currently)
 116  */
 117 static int
 118 cifs_reconnect(struct TCP_Server_Info *server)
 119 {
 120         int rc = 0;
 121         struct list_head *tmp, *tmp2;
 122         struct cifsSesInfo *ses;
 123         struct cifsTconInfo *tcon;
 124         struct mid_q_entry *mid_entry;
 125
 126         spin_lock(&GlobalMid_Lock);
 127         if (server->tcpStatus == CifsExiting) {
 128                 /* the demux thread will exit normally
 129                 next time through the loop */
 130                 spin_unlock(&GlobalMid_Lock);
 131                 return rc;
 132         } else
 133                 server->tcpStatus = CifsNeedReconnect;
 134         spin_unlock(&GlobalMid_Lock);
 135         server->maxBuf = 0;
 136
 137         cFYI(1, ("Reconnecting tcp session"));
 138
 139         /* before reconnecting the tcp session, mark the smb session (uid)
 140                 and the tid bad so they are not used until reconnected */
 141         read_lock(&cifs_tcp_ses_lock);
 142         list_for_each(tmp, &server->smb_ses_list) {
 143                 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
 144                 ses->need_reconnect = true;
 145                 ses->ipc_tid = 0;
 146                 list_for_each(tmp2, &ses->tcon_list) {
 147                         tcon = list_entry(tmp2, struct cifsTconInfo, tcon_list);
 148                         tcon->need_reconnect = true;
 149                 }
 150         }
 151         read_unlock(&cifs_tcp_ses_lock);
 152         /* do not want to be sending data on a socket we are freeing */
 153         mutex_lock(&server->srv_mutex);
 154         if (server->ssocket) {
 155                 cFYI(1, ("State: 0x%x Flags: 0x%lx", server->ssocket->state,
 156                         server->ssocket->flags));
 157                 kernel_sock_shutdown(server->ssocket, SHUT_WR);
 158                 cFYI(1, ("Post shutdown state: 0x%x Flags: 0x%lx",
 159                         server->ssocket->state,
 160                         server->ssocket->flags));
 161                 sock_release(server->ssocket);
 162                 server->ssocket = NULL;
 163         }
 164
 165         spin_lock(&GlobalMid_Lock);
 166         list_for_each(tmp, &server->pending_mid_q) {
 167                 mid_entry = list_entry(tmp, struct
 168                                         mid_q_entry,
 169                                         qhead);
 170                 if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
 171                                 /* Mark other intransit requests as needing
 172                                    retry so we do not immediately mark the
 173                                    session bad again (ie after we reconnect
 174                                    below) as they timeout too */
 175                         mid_entry->midState = MID_RETRY_NEEDED;
 176                 }
 177         }
 178         spin_unlock(&GlobalMid_Lock);
 179         mutex_unlock(&server->srv_mutex);
 180
 181         while ((server->tcpStatus != CifsExiting) &&
 182                (server->tcpStatus != CifsGood)) {
 183                 try_to_freeze();
 184                 if (server->addr.sockAddr6.sin6_family == AF_INET6)
 185                         rc = ipv6_connect(server);
 186                 else
 187                         rc = ipv4_connect(server);
 188                 if (rc) {
 189                         cFYI(1, ("reconnect error %d", rc));
 190                         msleep(3000);
 191                 } else {
 192                         atomic_inc(&tcpSesReconnectCount);
 193                         spin_lock(&GlobalMid_Lock);
 194                         if (server->tcpStatus != CifsExiting)
 195                                 server->tcpStatus = CifsGood;
 196                         server->sequence_number = 0;
 197                         spin_unlock(&GlobalMid_Lock);
 198         /*              atomic_set(&server->inFlight,0);*/
 199                         wake_up(&server->response_q);
 200                 }
 201         }
 202         return rc;
 203 }
 204
 205 /*
 206         return codes:
 207                 0       not a transact2, or all data present
 208                 >0      transact2 with that much data missing
 209                 -EINVAL = invalid transact2
 210
 211  */
 212 static int check2ndT2(struct smb_hdr *pSMB, unsigned int maxBufSize)
 213 {
 214         struct smb_t2_rsp *pSMBt;
 215         int total_data_size;
 216         int data_in_this_rsp;
 217         int remaining;
 218
 219         if (pSMB->Command != SMB_COM_TRANSACTION2)
 220                 return 0;
 221
 222         /* check for plausible wct, bcc and t2 data and parm sizes */
 223         /* check for parm and data offset going beyond end of smb */
 224         if (pSMB->WordCount != 10) { /* coalesce_t2 depends on this */
 225                 cFYI(1, ("invalid transact2 word count"));
 226                 return -EINVAL;
 227         }
 228
 229         pSMBt = (struct smb_t2_rsp *)pSMB;
 230
 231         total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
 232         data_in_this_rsp = le16_to_cpu(pSMBt->t2_rsp.DataCount);
 233
 234         remaining = total_data_size - data_in_this_rsp;
 235
 236         if (remaining == 0)
 237                 return 0;
 238         else if (remaining < 0) {
 239                 cFYI(1, ("total data %d smaller than data in frame %d",
 240                         total_data_size, data_in_this_rsp));
 241                 return -EINVAL;
 242         } else {
 243                 cFYI(1, ("missing %d bytes from transact2, check next response",
 244                         remaining));
 245                 if (total_data_size > maxBufSize) {
 246                         cERROR(1, ("TotalDataSize %d is over maximum buffer %d",
 247                                 total_data_size, maxBufSize));
 248                         return -EINVAL;
 249                 }
 250                 return remaining;
 251         }
 252 }
 253
 254 static int coalesce_t2(struct smb_hdr *psecond, struct smb_hdr *pTargetSMB)
 255 {
 256         struct smb_t2_rsp *pSMB2 = (struct smb_t2_rsp *)psecond;
 257         struct smb_t2_rsp *pSMBt  = (struct smb_t2_rsp *)pTargetSMB;
 258         int total_data_size;
 259         int total_in_buf;
 260         int remaining;
 261         int total_in_buf2;
 262         char *data_area_of_target;
 263         char *data_area_of_buf2;
 264         __u16 byte_count;
 265
 266         total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
 267
 268         if (total_data_size != le16_to_cpu(pSMB2->t2_rsp.TotalDataCount)) {
 269                 cFYI(1, ("total data size of primary and secondary t2 differ"));
 270         }
 271
 272         total_in_buf = le16_to_cpu(pSMBt->t2_rsp.DataCount);
 273
 274         remaining = total_data_size - total_in_buf;
 275
 276         if (remaining < 0)
 277                 return -EINVAL;
 278
 279         if (remaining == 0) /* nothing to do, ignore */
 280                 return 0;
 281
 282         total_in_buf2 = le16_to_cpu(pSMB2->t2_rsp.DataCount);
 283         if (remaining < total_in_buf2) {
 284                 cFYI(1, ("transact2 2nd response contains too much data"));
 285         }
 286
 287         /* find end of first SMB data area */
 288         data_area_of_target = (char *)&pSMBt->hdr.Protocol +
 289                                 le16_to_cpu(pSMBt->t2_rsp.DataOffset);
 290         /* validate target area */
 291
 292         data_area_of_buf2 = (char *) &pSMB2->hdr.Protocol +
 293                                         le16_to_cpu(pSMB2->t2_rsp.DataOffset);
 294
 295         data_area_of_target += total_in_buf;
 296
 297         /* copy second buffer into end of first buffer */
 298         memcpy(data_area_of_target, data_area_of_buf2, total_in_buf2);
 299         total_in_buf += total_in_buf2;
 300         pSMBt->t2_rsp.DataCount = cpu_to_le16(total_in_buf);
 301         byte_count = le16_to_cpu(BCC_LE(pTargetSMB));
 302         byte_count += total_in_buf2;
 303         BCC_LE(pTargetSMB) = cpu_to_le16(byte_count);
 304
 305         byte_count = pTargetSMB->smb_buf_length;
 306         byte_count += total_in_buf2;
 307
 308         /* BB also add check that we are not beyond maximum buffer size */
 309
 310         pTargetSMB->smb_buf_length = byte_count;
 311
 312         if (remaining == total_in_buf2) {
 313                 cFYI(1, ("found the last secondary response"));
 314                 return 0; /* we are done */
 315         } else /* more responses to go */
 316                 return 1;
 317
 318 }
 319
 320 static int
 321 cifs_demultiplex_thread(struct TCP_Server_Info *server)
 322 {
 323         int length;
 324         unsigned int pdu_length, total_read;
 325         struct smb_hdr *smb_buffer = NULL;
 326         struct smb_hdr *bigbuf = NULL;
 327         struct smb_hdr *smallbuf = NULL;
 328         struct msghdr smb_msg;
 329         struct kvec iov;
 330         struct socket *csocket = server->ssocket;
 331         struct list_head *tmp;
 332         struct cifsSesInfo *ses;
 333         struct task_struct *task_to_wake = NULL;
 334         struct mid_q_entry *mid_entry;
 335         char temp;
 336         bool isLargeBuf = false;
 337         bool isMultiRsp;
 338         int reconnect;
 339
 340         current->flags |= PF_MEMALLOC;
 341         cFYI(1, ("Demultiplex PID: %d", task_pid_nr(current)));
 342
 343         length = atomic_inc_return(&tcpSesAllocCount);
 344         if (length > 1)
 345                 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
 346                                 GFP_KERNEL);
 347
 348         set_freezable();
 349         while (server->tcpStatus != CifsExiting) {
 350                 if (try_to_freeze())
 351                         continue;
 352                 if (bigbuf == NULL) {
 353                         bigbuf = cifs_buf_get();
 354                         if (!bigbuf) {
 355                                 cERROR(1, ("No memory for large SMB response"));
 356                                 msleep(3000);
 357                                 /* retry will check if exiting */
 358                                 continue;
 359                         }
 360                 } else if (isLargeBuf) {
 361                         /* we are reusing a dirty large buf, clear its start */
 362                         memset(bigbuf, 0, sizeof(struct smb_hdr));
 363                 }
 364
 365                 if (smallbuf == NULL) {
 366                         smallbuf = cifs_small_buf_get();
 367                         if (!smallbuf) {
 368                                 cERROR(1, ("No memory for SMB response"));
 369                                 msleep(1000);
 370                                 /* retry will check if exiting */
 371                                 continue;
 372                         }
 373                         /* beginning of smb buffer is cleared in our buf_get */
 374                 } else /* if existing small buf clear beginning */
 375                         memset(smallbuf, 0, sizeof(struct smb_hdr));
 376
 377                 isLargeBuf = false;
 378                 isMultiRsp = false;
 379                 smb_buffer = smallbuf;
 380                 iov.iov_base = smb_buffer;
 381                 iov.iov_len = 4;
 382                 smb_msg.msg_control = NULL;
 383                 smb_msg.msg_controllen = 0;
 384                 pdu_length = 4; /* enough to get RFC1001 header */
 385 incomplete_rcv:
 386                 length =
 387                     kernel_recvmsg(csocket, &smb_msg,
 388                                 &iov, 1, pdu_length, 0 /* BB other flags? */);
 389
 390                 if (server->tcpStatus == CifsExiting) {
 391                         break;
 392                 } else if (server->tcpStatus == CifsNeedReconnect) {
 393                         cFYI(1, ("Reconnect after server stopped responding"));
 394                         cifs_reconnect(server);
 395                         cFYI(1, ("call to reconnect done"));
 396                         csocket = server->ssocket;
 397                         continue;
 398                 } else if ((length == -ERESTARTSYS) || (length == -EAGAIN)) {
 399                         msleep(1); /* minimum sleep to prevent looping
 400                                 allowing socket to clear and app threads to set
 401                                 tcpStatus CifsNeedReconnect if server hung */
 402                         if (pdu_length < 4) {
 403                                 iov.iov_base = (4 - pdu_length) +
 404                                                         (char *)smb_buffer;
 405                                 iov.iov_len = pdu_length;
 406                                 smb_msg.msg_control = NULL;
 407                                 smb_msg.msg_controllen = 0;
 408                                 goto incomplete_rcv;
 409                         } else
 410                                 continue;
 411                 } else if (length <= 0) {
 412                         if (server->tcpStatus == CifsNew) {
 413                                 cFYI(1, ("tcp session abend after SMBnegprot"));
 414                                 /* some servers kill the TCP session rather than
 415                                    returning an SMB negprot error, in which
 416                                    case reconnecting here is not going to help,
 417                                    and so simply return error to mount */
 418                                 break;
 419                         }
 420                         if (!try_to_freeze() && (length == -EINTR)) {
 421                                 cFYI(1, ("cifsd thread killed"));
 422                                 break;
 423                         }
 424                         cFYI(1, ("Reconnect after unexpected peek error %d",
 425                                 length));
 426                         cifs_reconnect(server);
 427                         csocket = server->ssocket;
 428                         wake_up(&server->response_q);
 429                         continue;
 430                 } else if (length < pdu_length) {
 431                         cFYI(1, ("requested %d bytes but only got %d bytes",
 432                                   pdu_length, length));
 433                         pdu_length -= length;
 434                         msleep(1);
 435                         goto incomplete_rcv;
 436                 }
 437
 438                 /* The right amount was read from socket - 4 bytes */
 439                 /* so we can now interpret the length field */
 440
 441                 /* the first byte big endian of the length field,
 442                 is actually not part of the length but the type
 443                 with the most common, zero, as regular data */
 444                 temp = *((char *) smb_buffer);
 445
 446                 /* Note that FC 1001 length is big endian on the wire,
 447                 but we convert it here so it is always manipulated
 448                 as host byte order */
 449                 pdu_length = be32_to_cpu((__force __be32)smb_buffer->smb_buf_length);
 450                 smb_buffer->smb_buf_length = pdu_length;
 451
 452                 cFYI(1, ("rfc1002 length 0x%x", pdu_length+4));
 453
 454                 if (temp == (char) RFC1002_SESSION_KEEP_ALIVE) {
 455                         continue;
 456                 } else if (temp == (char)RFC1002_POSITIVE_SESSION_RESPONSE) {
 457                         cFYI(1, ("Good RFC 1002 session rsp"));
 458                         continue;
 459                 } else if (temp == (char)RFC1002_NEGATIVE_SESSION_RESPONSE) {
 460                         /* we get this from Windows 98 instead of
 461                            an error on SMB negprot response */
 462                         cFYI(1, ("Negative RFC1002 Session Response Error 0x%x)",
 463                                 pdu_length));
 464                         if (server->tcpStatus == CifsNew) {
 465                                 /* if nack on negprot (rather than
 466                                 ret of smb negprot error) reconnecting
 467                                 not going to help, ret error to mount */
 468                                 break;
 469                         } else {
 470                                 /* give server a second to
 471                                 clean up before reconnect attempt */
 472                                 msleep(1000);
 473                                 /* always try 445 first on reconnect
 474                                 since we get NACK on some if we ever
 475                                 connected to port 139 (the NACK is
 476                                 since we do not begin with RFC1001
 477                                 session initialize frame) */
 478                                 server->addr.sockAddr.sin_port =
 479                                         htons(CIFS_PORT);
 480                                 cifs_reconnect(server);
 481                                 csocket = server->ssocket;
 482                                 wake_up(&server->response_q);
 483                                 continue;
 484                         }
 485                 } else if (temp != (char) 0) {
 486                         cERROR(1, ("Unknown RFC 1002 frame"));
 487                         cifs_dump_mem(" Received Data: ", (char *)smb_buffer,
 488                                       length);
 489                         cifs_reconnect(server);
 490                         csocket = server->ssocket;
 491                         continue;
 492                 }
 493
 494                 /* else we have an SMB response */
 495                 if ((pdu_length > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE - 4) ||
 496                             (pdu_length < sizeof(struct smb_hdr) - 1 - 4)) {
 497                         cERROR(1, ("Invalid size SMB length %d pdu_length %d",
 498                                         length, pdu_length+4));
 499                         cifs_reconnect(server);
 500                         csocket = server->ssocket;
 501                         wake_up(&server->response_q);
 502                         continue;
 503                 }
 504
 505                 /* else length ok */
 506                 reconnect = 0;
 507
 508                 if (pdu_length > MAX_CIFS_SMALL_BUFFER_SIZE - 4) {
 509                         isLargeBuf = true;
 510                         memcpy(bigbuf, smallbuf, 4);
 511                         smb_buffer = bigbuf;
 512                 }
 513                 length = 0;
 514                 iov.iov_base = 4 + (char *)smb_buffer;
 515                 iov.iov_len = pdu_length;
 516                 for (total_read = 0; total_read < pdu_length;
 517                      total_read += length) {
 518                         length = kernel_recvmsg(csocket, &smb_msg, &iov, 1,
 519                                                 pdu_length - total_read, 0);
 520                         if ((server->tcpStatus == CifsExiting) ||
 521                             (length == -EINTR)) {
 522                                 /* then will exit */
 523                                 reconnect = 2;
 524                                 break;
 525                         } else if (server->tcpStatus == CifsNeedReconnect) {
 526                                 cifs_reconnect(server);
 527                                 csocket = server->ssocket;
 528                                 /* Reconnect wakes up rspns q */
 529                                 /* Now we will reread sock */
 530                                 reconnect = 1;
 531                                 break;
 532                         } else if ((length == -ERESTARTSYS) ||
 533                                    (length == -EAGAIN)) {
 534                                 msleep(1); /* minimum sleep to prevent looping,
 535                                               allowing socket to clear and app
 536                                               threads to set tcpStatus
 537                                               CifsNeedReconnect if server hung*/
 538                                 length = 0;
 539                                 continue;
 540                         } else if (length <= 0) {
 541                                 cERROR(1, ("Received no data, expecting %d",
 542                                               pdu_length - total_read));
 543                                 cifs_reconnect(server);
 544                                 csocket = server->ssocket;
 545                                 reconnect = 1;
 546                                 break;
 547                         }
 548                 }
 549                 if (reconnect == 2)
 550                         break;
 551                 else if (reconnect == 1)
 552                         continue;
 553
 554                 length += 4; /* account for rfc1002 hdr */
 555
 556
 557                 dump_smb(smb_buffer, length);
 558                 if (checkSMB(smb_buffer, smb_buffer->Mid, total_read+4)) {
 559                         cifs_dump_mem("Bad SMB: ", smb_buffer, 48);
 560                         continue;
 561                 }
 562
 563
 564                 task_to_wake = NULL;
 565                 spin_lock(&GlobalMid_Lock);
 566                 list_for_each(tmp, &server->pending_mid_q) {
 567                         mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
 568
 569                         if ((mid_entry->mid == smb_buffer->Mid) &&
 570                             (mid_entry->midState == MID_REQUEST_SUBMITTED) &&
 571                             (mid_entry->command == smb_buffer->Command)) {
 572                                 if (check2ndT2(smb_buffer,server->maxBuf) > 0) {
 573                                         /* We have a multipart transact2 resp */
 574                                         isMultiRsp = true;
 575                                         if (mid_entry->resp_buf) {
 576                                                 /* merge response - fix up 1st*/
 577                                                 if (coalesce_t2(smb_buffer,
 578                                                         mid_entry->resp_buf)) {
 579                                                         mid_entry->multiRsp =
 580                                                                  true;
 581                                                         break;
 582                                                 } else {
 583                                                         /* all parts received */
 584                                                         mid_entry->multiEnd =
 585                                                                  true;
 586                                                         goto multi_t2_fnd;
 587                                                 }
 588                                         } else {
 589                                                 if (!isLargeBuf) {
 590                                                         cERROR(1,("1st trans2 resp needs bigbuf"));
 591                                         /* BB maybe we can fix this up,  switch
 592                                            to already allocated large buffer? */
 593                                                 } else {
 594                                                         /* Have first buffer */
 595                                                         mid_entry->resp_buf =
 596                                                                  smb_buffer;
 597                                                         mid_entry->largeBuf =
 598                                                                  true;
 599                                                         bigbuf = NULL;
 600                                                 }
 601                                         }
 602                                         break;
 603                                 }
 604                                 mid_entry->resp_buf = smb_buffer;
 605                                 mid_entry->largeBuf = isLargeBuf;
 606 multi_t2_fnd:
 607                                 task_to_wake = mid_entry->tsk;
 608                                 mid_entry->midState = MID_RESPONSE_RECEIVED;
 609 #ifdef CONFIG_CIFS_STATS2
 610                                 mid_entry->when_received = jiffies;
 611 #endif
 612                                 /* so we do not time out requests to  server
 613                                 which is still responding (since server could
 614                                 be busy but not dead) */
 615                                 server->lstrp = jiffies;
 616                                 break;
 617                         }
 618                 }
 619                 spin_unlock(&GlobalMid_Lock);
 620                 if (task_to_wake) {
 621                         /* Was previous buf put in mpx struct for multi-rsp? */
 622                         if (!isMultiRsp) {
 623                                 /* smb buffer will be freed by user thread */
 624                                 if (isLargeBuf)
 625                                         bigbuf = NULL;
 626                                 else
 627                                         smallbuf = NULL;
 628                         }
 629                         wake_up_process(task_to_wake);
 630                 } else if (!is_valid_oplock_break(smb_buffer, server) &&
 631                            !isMultiRsp) {
 632                         cERROR(1, ("No task to wake, unknown frame received! "
 633                                    "NumMids %d", midCount.counter));
 634                         cifs_dump_mem("Received Data is: ", (char *)smb_buffer,
 635                                       sizeof(struct smb_hdr));
 636 #ifdef CONFIG_CIFS_DEBUG2
 637                         cifs_dump_detail(smb_buffer);
 638                         cifs_dump_mids(server);
 639 #endif /* CIFS_DEBUG2 */
 640
 641                 }
 642         } /* end while !EXITING */
 643
 644         /* take it off the list, if it's not already */
 645         write_lock(&cifs_tcp_ses_lock);
 646         list_del_init(&server->tcp_ses_list);
 647         write_unlock(&cifs_tcp_ses_lock);
 648
 649         spin_lock(&GlobalMid_Lock);
 650         server->tcpStatus = CifsExiting;
 651         spin_unlock(&GlobalMid_Lock);
 652         wake_up_all(&server->response_q);
 653
 654         /* check if we have blocked requests that need to free */
 655         /* Note that cifs_max_pending is normally 50, but
 656         can be set at module install time to as little as two */
 657         spin_lock(&GlobalMid_Lock);
 658         if (atomic_read(&server->inFlight) >= cifs_max_pending)
 659                 atomic_set(&server->inFlight, cifs_max_pending - 1);
 660         /* We do not want to set the max_pending too low or we
 661         could end up with the counter going negative */
 662         spin_unlock(&GlobalMid_Lock);
 663         /* Although there should not be any requests blocked on
 664         this queue it can not hurt to be paranoid and try to wake up requests
 665         that may haven been blocked when more than 50 at time were on the wire
 666         to the same server - they now will see the session is in exit state
 667         and get out of SendReceive.  */
 668         wake_up_all(&server->request_q);
 669         /* give those requests time to exit */
 670         msleep(125);
 671
 672         if (server->ssocket) {
 673                 sock_release(csocket);
 674                 server->ssocket = NULL;
 675         }
 676         /* buffer usuallly freed in free_mid - need to free it here on exit */
 677         cifs_buf_release(bigbuf);
 678         if (smallbuf) /* no sense logging a debug message if NULL */
 679                 cifs_small_buf_release(smallbuf);
 680
 681         /*
 682          * BB: we shouldn't have to do any of this. It shouldn't be
 683          * possible to exit from the thread with active SMB sessions
 684          */
 685         read_lock(&cifs_tcp_ses_lock);
 686         if (list_empty(&server->pending_mid_q)) {
 687                 /* loop through server session structures attached to this and
 688                     mark them dead */
 689                 list_for_each(tmp, &server->smb_ses_list) {
 690                         ses = list_entry(tmp, struct cifsSesInfo,
 691                                          smb_ses_list);
 692                         ses->status = CifsExiting;
 693                         ses->server = NULL;
 694                 }
 695                 read_unlock(&cifs_tcp_ses_lock);
 696         } else {
 697                 /* although we can not zero the server struct pointer yet,
 698                 since there are active requests which may depnd on them,
 699                 mark the corresponding SMB sessions as exiting too */
 700                 list_for_each(tmp, &server->smb_ses_list) {
 701                         ses = list_entry(tmp, struct cifsSesInfo,
 702                                          smb_ses_list);
 703                         ses->status = CifsExiting;
 704                 }
 705
 706                 spin_lock(&GlobalMid_Lock);
 707                 list_for_each(tmp, &server->pending_mid_q) {
 708                 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
 709                         if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
 710                                 cFYI(1, ("Clearing Mid 0x%x - waking up ",
 711                                          mid_entry->mid));
 712                                 task_to_wake = mid_entry->tsk;
 713                                 if (task_to_wake)
 714                                         wake_up_process(task_to_wake);
 715                         }
 716                 }
 717                 spin_unlock(&GlobalMid_Lock);
 718                 read_unlock(&cifs_tcp_ses_lock);
 719                 /* 1/8th of sec is more than enough time for them to exit */
 720                 msleep(125);
 721         }
 722
 723         if (!list_empty(&server->pending_mid_q)) {
 724                 /* mpx threads have not exited yet give them
 725                 at least the smb send timeout time for long ops */
 726                 /* due to delays on oplock break requests, we need
 727                 to wait at least 45 seconds before giving up
 728                 on a request getting a response and going ahead
 729                 and killing cifsd */
 730                 cFYI(1, ("Wait for exit from demultiplex thread"));
 731                 msleep(46000);
 732                 /* if threads still have not exited they are probably never
 733                 coming home not much else we can do but free the memory */
 734         }
 735
 736         /* last chance to mark ses pointers invalid
 737         if there are any pointing to this (e.g
 738         if a crazy root user tried to kill cifsd
 739         kernel thread explicitly this might happen) */
 740         /* BB: This shouldn't be necessary, see above */
 741         read_lock(&cifs_tcp_ses_lock);
 742         list_for_each(tmp, &server->smb_ses_list) {
 743                 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
 744                 ses->server = NULL;
 745         }
 746         read_unlock(&cifs_tcp_ses_lock);
 747
 748         kfree(server->hostname);
 749         task_to_wake = xchg(&server->tsk, NULL);
 750         kfree(server);
 751
 752         length = atomic_dec_return(&tcpSesAllocCount);
 753         if (length  > 0)
 754                 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
 755                                 GFP_KERNEL);
 756
 757         /* if server->tsk was NULL then wait for a signal before exiting */
 758         if (!task_to_wake) {
 759                 set_current_state(TASK_INTERRUPTIBLE);
 760                 while (!signal_pending(current)) {
 761                         schedule();
 762                         set_current_state(TASK_INTERRUPTIBLE);
 763                 }
 764                 set_current_state(TASK_RUNNING);
 765         }
 766
 767         module_put_and_exit(0);
 768 }
 769
 770 /* extract the host portion of the UNC string */
 771 static char *
 772 extract_hostname(const char *unc)
 773 {
 774         const char *src;
 775         char *dst, *delim;
 776         unsigned int len;
 777
 778         /* skip double chars at beginning of string */
 779         /* BB: check validity of these bytes? */
 780         src = unc + 2;
 781
 782         /* delimiter between hostname and sharename is always '\\' now */
 783         delim = strchr(src, '\\');
 784         if (!delim)
 785                 return ERR_PTR(-EINVAL);
 786
 787         len = delim - src;
 788         dst = kmalloc((len + 1), GFP_KERNEL);
 789         if (dst == NULL)
 790                 return ERR_PTR(-ENOMEM);
 791
 792         memcpy(dst, src, len);
 793         dst[len] = '\0';
 794
 795         return dst;
 796 }
 797
 798 static int
 799 cifs_parse_mount_options(char *options, const char *devname,
 800                          struct smb_vol *vol)
 801 {
 802         char *value;
 803         char *data;
 804         unsigned int  temp_len, i, j;
 805         char separator[2];
 806
 807         separator[0] = ',';
 808         separator[1] = 0;
 809
 810         if (Local_System_Name[0] != 0)
 811                 memcpy(vol->source_rfc1001_name, Local_System_Name, 15);
 812         else {
 813                 char *nodename = utsname()->nodename;
 814                 int n = strnlen(nodename, 15);
 815                 memset(vol->source_rfc1001_name, 0x20, 15);
 816                 for (i = 0; i < n; i++) {
 817                         /* does not have to be perfect mapping since field is
 818                         informational, only used for servers that do not support
 819                         port 445 and it can be overridden at mount time */
 820                         vol->source_rfc1001_name[i] = toupper(nodename[i]);
 821                 }
 822         }
 823         vol->source_rfc1001_name[15] = 0;
 824         /* null target name indicates to use *SMBSERVR default called name
 825            if we end up sending RFC1001 session initialize */
 826         vol->target_rfc1001_name[0] = 0;
 827         vol->linux_uid = current_uid();  /* use current_euid() instead? */
 828         vol->linux_gid = current_gid();
 829
 830         /* default to only allowing write access to owner of the mount */
 831         vol->dir_mode = vol->file_mode = S_IRUGO | S_IXUGO | S_IWUSR;
 832
 833         /* vol->retry default is 0 (i.e. "soft" limited retry not hard retry) */
 834         /* default is always to request posix paths. */
 835         vol->posix_paths = 1;
 836         /* default to using server inode numbers where available */
 837         vol->server_ino = 1;
 838
 839         if (!options)
 840                 return 1;
 841
 842         if (strncmp(options, "sep=", 4) == 0) {
 843                 if (options[4] != 0) {
 844                         separator[0] = options[4];
 845                         options += 5;
 846                 } else {
 847                         cFYI(1, ("Null separator not allowed"));
 848                 }
 849         }
 850
 851         while ((data = strsep(&options, separator)) != NULL) {
 852                 if (!*data)
 853                         continue;
 854                 if ((value = strchr(data, '=')) != NULL)
 855                         *value++ = '\0';
 856
 857                 /* Have to parse this before we parse for "user" */
 858                 if (strnicmp(data, "user_xattr", 10) == 0) {
 859                         vol->no_xattr = 0;
 860                 } else if (strnicmp(data, "nouser_xattr", 12) == 0) {
 861                         vol->no_xattr = 1;
 862                 } else if (strnicmp(data, "user", 4) == 0) {
 863                         if (!value) {
 864                                 printk(KERN_WARNING
 865                                        "CIFS: invalid or missing username\n");
 866                                 return 1;       /* needs_arg; */
 867                         } else if (!*value) {
 868                                 /* null user, ie anonymous, authentication */
 869                                 vol->nullauth = 1;
 870                         }
 871                         if (strnlen(value, 200) < 200) {
 872                                 vol->username = value;
 873                         } else {
 874                                 printk(KERN_WARNING "CIFS: username too long\n");
 875                                 return 1;
 876                         }
 877                 } else if (strnicmp(data, "pass", 4) == 0) {
 878                         if (!value) {
 879                                 vol->password = NULL;
 880                                 continue;
 881                         } else if (value[0] == 0) {
 882                                 /* check if string begins with double comma
 883                                    since that would mean the password really
 884                                    does start with a comma, and would not
 885                                    indicate an empty string */
 886                                 if (value[1] != separator[0]) {
 887                                         vol->password = NULL;
 888                                         continue;
 889                                 }
 890                         }
 891                         temp_len = strlen(value);
 892                         /* removed password length check, NTLM passwords
 893                                 can be arbitrarily long */
 894
 895                         /* if comma in password, the string will be
 896                         prematurely null terminated.  Commas in password are
 897                         specified across the cifs mount interface by a double
 898                         comma ie ,, and a comma used as in other cases ie ','
 899                         as a parameter delimiter/separator is single and due
 900                         to the strsep above is temporarily zeroed. */
 901
 902                         /* NB: password legally can have multiple commas and
 903                         the only illegal character in a password is null */
 904
 905                         if ((value[temp_len] == 0) &&
 906                             (value[temp_len+1] == separator[0])) {
 907                                 /* reinsert comma */
 908                                 value[temp_len] = separator[0];
 909                                 temp_len += 2;  /* move after second comma */
 910                                 while (value[temp_len] != 0)  {
 911                                         if (value[temp_len] == separator[0]) {
 912                                                 if (value[temp_len+1] ==
 913                                                      separator[0]) {
 914                                                 /* skip second comma */
 915                                                         temp_len++;
 916                                                 } else {
 917                                                 /* single comma indicating start
 918                                                          of next parm */
 919                                                         break;
 920                                                 }
 921                                         }
 922                                         temp_len++;
 923                                 }
 924                                 if (value[temp_len] == 0) {
 925                                         options = NULL;
 926                                 } else {
 927                                         value[temp_len] = 0;
 928                                         /* point option to start of next parm */
 929                                         options = value + temp_len + 1;
 930                                 }
 931                                 /* go from value to value + temp_len condensing
 932                                 double commas to singles. Note that this ends up
 933                                 allocating a few bytes too many, which is ok */
 934                                 vol->password = kzalloc(temp_len, GFP_KERNEL);
 935                                 if (vol->password == NULL) {
 936                                         printk(KERN_WARNING "CIFS: no memory "
 937                                                             "for password\n");
 938                                         return 1;
 939                                 }
 940                                 for (i = 0, j = 0; i < temp_len; i++, j++) {
 941                                         vol->password[j] = value[i];
 942                                         if (value[i] == separator[0]
 943                                                 && value[i+1] == separator[0]) {
 944                                                 /* skip second comma */
 945                                                 i++;
 946                                         }
 947                                 }
 948                                 vol->password[j] = 0;
 949                         } else {
 950                                 vol->password = kzalloc(temp_len+1, GFP_KERNEL);
 951                                 if (vol->password == NULL) {
 952                                         printk(KERN_WARNING "CIFS: no memory "
 953                                                             "for password\n");
 954                                         return 1;
 955                                 }
 956                                 strcpy(vol->password, value);
 957                         }
 958                 } else if (!strnicmp(data, "ip", 2) ||
 959                            !strnicmp(data, "addr", 4)) {
 960                         if (!value || !*value) {
 961                                 vol->UNCip = NULL;
 962                         } else if (strnlen(value, INET6_ADDRSTRLEN) <
 963                                                         INET6_ADDRSTRLEN) {
 964                                 vol->UNCip = value;
 965                         } else {
 966                                 printk(KERN_WARNING "CIFS: ip address "
 967                                                     "too long\n");
 968                                 return 1;
 969                         }
 970                 } else if (strnicmp(data, "sec", 3) == 0) {
 971                         if (!value || !*value) {
 972                                 cERROR(1, ("no security value specified"));
 973                                 continue;
 974                         } else if (strnicmp(value, "krb5i", 5) == 0) {
 975                                 vol->secFlg |= CIFSSEC_MAY_KRB5 |
 976                                         CIFSSEC_MUST_SIGN;
 977                         } else if (strnicmp(value, "krb5p", 5) == 0) {
 978                                 /* vol->secFlg |= CIFSSEC_MUST_SEAL |
 979                                         CIFSSEC_MAY_KRB5; */
 980                                 cERROR(1, ("Krb5 cifs privacy not supported"));
 981                                 return 1;
 982                         } else if (strnicmp(value, "krb5", 4) == 0) {
 983                                 vol->secFlg |= CIFSSEC_MAY_KRB5;
 984 #ifdef CONFIG_CIFS_EXPERIMENTAL
 985                         } else if (strnicmp(value, "ntlmsspi", 8) == 0) {
 986                                 vol->secFlg |= CIFSSEC_MAY_NTLMSSP |
 987                                         CIFSSEC_MUST_SIGN;
 988                         } else if (strnicmp(value, "ntlmssp", 7) == 0) {
 989                                 vol->secFlg |= CIFSSEC_MAY_NTLMSSP;
 990 #endif
 991                         } else if (strnicmp(value, "ntlmv2i", 7) == 0) {
 992                                 vol->secFlg |= CIFSSEC_MAY_NTLMV2 |
 993                                         CIFSSEC_MUST_SIGN;
 994                         } else if (strnicmp(value, "ntlmv2", 6) == 0) {
 995                                 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
 996                         } else if (strnicmp(value, "ntlmi", 5) == 0) {
 997                                 vol->secFlg |= CIFSSEC_MAY_NTLM |
 998                                         CIFSSEC_MUST_SIGN;
 999                         } else if (strnicmp(value, "ntlm", 4) == 0) {
1000                                 /* ntlm is default so can be turned off too */
1001                                 vol->secFlg |= CIFSSEC_MAY_NTLM;
1002                         } else if (strnicmp(value, "nontlm", 6) == 0) {
1003                                 /* BB is there a better way to do this? */
1004                                 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
1005 #ifdef CONFIG_CIFS_WEAK_PW_HASH
1006                         } else if (strnicmp(value, "lanman", 6) == 0) {
1007                                 vol->secFlg |= CIFSSEC_MAY_LANMAN;
1008 #endif
1009                         } else if (strnicmp(value, "none", 4) == 0) {
1010                                 vol->nullauth = 1;
1011                         } else {
1012                                 cERROR(1, ("bad security option: %s", value));
1013                                 return 1;
1014                         }
1015                 } else if ((strnicmp(data, "unc", 3) == 0)
1016                            || (strnicmp(data, "target", 6) == 0)
1017                            || (strnicmp(data, "path", 4) == 0)) {
1018                         if (!value || !*value) {
1019                                 printk(KERN_WARNING "CIFS: invalid path to "
1020                                                     "network resource\n");
1021                                 return 1;       /* needs_arg; */
1022                         }
1023                         if ((temp_len = strnlen(value, 300)) < 300) {
1024                                 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1025                                 if (vol->UNC == NULL)
1026                                         return 1;
1027                                 strcpy(vol->UNC, value);
1028                                 if (strncmp(vol->UNC, "//", 2) == 0) {
1029                                         vol->UNC[0] = '\\';
1030                                         vol->UNC[1] = '\\';
1031                                 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1032                                         printk(KERN_WARNING
1033                                                "CIFS: UNC Path does not begin "
1034                                                "with // or \\\\ \n");
1035                                         return 1;
1036                                 }
1037                         } else {
1038                                 printk(KERN_WARNING "CIFS: UNC name too long\n");
1039                                 return 1;
1040                         }
1041                 } else if ((strnicmp(data, "domain", 3) == 0)
1042                            || (strnicmp(data, "workgroup", 5) == 0)) {
1043                         if (!value || !*value) {
1044                                 printk(KERN_WARNING "CIFS: invalid domain name\n");
1045                                 return 1;       /* needs_arg; */
1046                         }
1047                         /* BB are there cases in which a comma can be valid in
1048                         a domain name and need special handling? */
1049                         if (strnlen(value, 256) < 256) {
1050                                 vol->domainname = value;
1051                                 cFYI(1, ("Domain name set"));
1052                         } else {
1053                                 printk(KERN_WARNING "CIFS: domain name too "
1054                                                     "long\n");
1055                                 return 1;
1056                         }
1057                 } else if (strnicmp(data, "prefixpath", 10) == 0) {
1058                         if (!value || !*value) {
1059                                 printk(KERN_WARNING
1060                                         "CIFS: invalid path prefix\n");
1061                                 return 1;       /* needs_argument */
1062                         }
1063                         if ((temp_len = strnlen(value, 1024)) < 1024) {
1064                                 if (value[0] != '/')
1065                                         temp_len++;  /* missing leading slash */
1066                                 vol->prepath = kmalloc(temp_len+1, GFP_KERNEL);
1067                                 if (vol->prepath == NULL)
1068                                         return 1;
1069                                 if (value[0] != '/') {
1070                                         vol->prepath[0] = '/';
1071                                         strcpy(vol->prepath+1, value);
1072                                 } else
1073                                         strcpy(vol->prepath, value);
1074                                 cFYI(1, ("prefix path %s", vol->prepath));
1075                         } else {
1076                                 printk(KERN_WARNING "CIFS: prefix too long\n");
1077                                 return 1;
1078                         }
1079                 } else if (strnicmp(data, "iocharset", 9) == 0) {
1080                         if (!value || !*value) {
1081                                 printk(KERN_WARNING "CIFS: invalid iocharset "
1082                                                     "specified\n");
1083                                 return 1;       /* needs_arg; */
1084                         }
1085                         if (strnlen(value, 65) < 65) {
1086                                 if (strnicmp(value, "default", 7))
1087                                         vol->iocharset = value;
1088                                 /* if iocharset not set then load_nls_default
1089                                    is used by caller */
1090                                 cFYI(1, ("iocharset set to %s", value));
1091                         } else {
1092                                 printk(KERN_WARNING "CIFS: iocharset name "
1093                                                     "too long.\n");
1094                                 return 1;
1095                         }
1096                 } else if (strnicmp(data, "uid", 3) == 0) {
1097                         if (value && *value)
1098                                 vol->linux_uid =
1099                                         simple_strtoul(value, &value, 0);
1100                 } else if (strnicmp(data, "forceuid", 8) == 0) {
1101                                 vol->override_uid = 1;
1102                 } else if (strnicmp(data, "gid", 3) == 0) {
1103                         if (value && *value)
1104                                 vol->linux_gid =
1105                                         simple_strtoul(value, &value, 0);
1106                 } else if (strnicmp(data, "forcegid", 8) == 0) {
1107                                 vol->override_gid = 1;
1108                 } else if (strnicmp(data, "file_mode", 4) == 0) {
1109                         if (value && *value) {
1110                                 vol->file_mode =
1111                                         simple_strtoul(value, &value, 0);
1112                         }
1113                 } else if (strnicmp(data, "dir_mode", 4) == 0) {
1114                         if (value && *value) {
1115                                 vol->dir_mode =
1116                                         simple_strtoul(value, &value, 0);
1117                         }
1118                 } else if (strnicmp(data, "dirmode", 4) == 0) {
1119                         if (value && *value) {
1120                                 vol->dir_mode =
1121                                         simple_strtoul(value, &value, 0);
1122                         }
1123                 } else if (strnicmp(data, "port", 4) == 0) {
1124                         if (value && *value) {
1125                                 vol->port =
1126                                         simple_strtoul(value, &value, 0);
1127                         }
1128                 } else if (strnicmp(data, "rsize", 5) == 0) {
1129                         if (value && *value) {
1130                                 vol->rsize =
1131                                         simple_strtoul(value, &value, 0);
1132                         }
1133                 } else if (strnicmp(data, "wsize", 5) == 0) {
1134                         if (value && *value) {
1135                                 vol->wsize =
1136                                         simple_strtoul(value, &value, 0);
1137                         }
1138                 } else if (strnicmp(data, "sockopt", 5) == 0) {
1139                         if (value && *value) {
1140                                 vol->sockopt =
1141                                         simple_strtoul(value, &value, 0);
1142                         }
1143                 } else if (strnicmp(data, "netbiosname", 4) == 0) {
1144                         if (!value || !*value || (*value == ' ')) {
1145                                 cFYI(1, ("invalid (empty) netbiosname"));
1146                         } else {
1147                                 memset(vol->source_rfc1001_name, 0x20, 15);
1148                                 for (i = 0; i < 15; i++) {
1149                                 /* BB are there cases in which a comma can be
1150                                 valid in this workstation netbios name (and need
1151                                 special handling)? */
1152
1153                                 /* We do not uppercase netbiosname for user */
1154                                         if (value[i] == 0)
1155                                                 break;
1156                                         else
1157                                                 vol->source_rfc1001_name[i] =
1158                                                                 value[i];
1159                                 }
1160                                 /* The string has 16th byte zero still from
1161                                 set at top of the function  */
1162                                 if ((i == 15) && (value[i] != 0))
1163                                         printk(KERN_WARNING "CIFS: netbiosname"
1164                                                 " longer than 15 truncated.\n");
1165                         }
1166                 } else if (strnicmp(data, "servern", 7) == 0) {
1167                         /* servernetbiosname specified override *SMBSERVER */
1168                         if (!value || !*value || (*value == ' ')) {
1169                                 cFYI(1, ("empty server netbiosname specified"));
1170                         } else {
1171                                 /* last byte, type, is 0x20 for servr type */
1172                                 memset(vol->target_rfc1001_name, 0x20, 16);
1173
1174                                 for (i = 0; i < 15; i++) {
1175                                 /* BB are there cases in which a comma can be
1176                                    valid in this workstation netbios name
1177                                    (and need special handling)? */
1178
1179                                 /* user or mount helper must uppercase
1180                                    the netbiosname */
1181                                         if (value[i] == 0)
1182                                                 break;
1183                                         else
1184                                                 vol->target_rfc1001_name[i] =
1185                                                                 value[i];
1186                                 }
1187                                 /* The string has 16th byte zero still from
1188                                    set at top of the function  */
1189                                 if ((i == 15) && (value[i] != 0))
1190                                         printk(KERN_WARNING "CIFS: server net"
1191                                         "biosname longer than 15 truncated.\n");
1192                         }
1193                 } else if (strnicmp(data, "credentials", 4) == 0) {
1194                         /* ignore */
1195                 } else if (strnicmp(data, "version", 3) == 0) {
1196                         /* ignore */
1197                 } else if (strnicmp(data, "guest", 5) == 0) {
1198                         /* ignore */
1199                 } else if (strnicmp(data, "rw", 2) == 0) {
1200                         /* ignore */
1201                 } else if (strnicmp(data, "ro", 2) == 0) {
1202                         /* ignore */
1203                 } else if (strnicmp(data, "noblocksend", 11) == 0) {
1204                         vol->noblocksnd = 1;
1205                 } else if (strnicmp(data, "noautotune", 10) == 0) {
1206                         vol->noautotune = 1;
1207                 } else if ((strnicmp(data, "suid", 4) == 0) ||
1208                                    (strnicmp(data, "nosuid", 6) == 0) ||
1209                                    (strnicmp(data, "exec", 4) == 0) ||
1210                                    (strnicmp(data, "noexec", 6) == 0) ||
1211                                    (strnicmp(data, "nodev", 5) == 0) ||
1212                                    (strnicmp(data, "noauto", 6) == 0) ||
1213                                    (strnicmp(data, "dev", 3) == 0)) {
1214                         /*  The mount tool or mount.cifs helper (if present)
1215                             uses these opts to set flags, and the flags are read
1216                             by the kernel vfs layer before we get here (ie
1217                             before read super) so there is no point trying to
1218                             parse these options again and set anything and it
1219                             is ok to just ignore them */
1220                         continue;
1221                 } else if (strnicmp(data, "hard", 4) == 0) {
1222                         vol->retry = 1;
1223                 } else if (strnicmp(data, "soft", 4) == 0) {
1224                         vol->retry = 0;
1225                 } else if (strnicmp(data, "perm", 4) == 0) {
1226                         vol->noperm = 0;
1227                 } else if (strnicmp(data, "noperm", 6) == 0) {
1228                         vol->noperm = 1;
1229                 } else if (strnicmp(data, "mapchars", 8) == 0) {
1230                         vol->remap = 1;
1231                 } else if (strnicmp(data, "nomapchars", 10) == 0) {
1232                         vol->remap = 0;
1233                 } else if (strnicmp(data, "sfu", 3) == 0) {
1234                         vol->sfu_emul = 1;
1235                 } else if (strnicmp(data, "nosfu", 5) == 0) {
1236                         vol->sfu_emul = 0;
1237                 } else if (strnicmp(data, "nodfs", 5) == 0) {
1238                         vol->nodfs = 1;
1239                 } else if (strnicmp(data, "posixpaths", 10) == 0) {
1240                         vol->posix_paths = 1;
1241                 } else if (strnicmp(data, "noposixpaths", 12) == 0) {
1242                         vol->posix_paths = 0;
1243                 } else if (strnicmp(data, "nounix", 6) == 0) {
1244                         vol->no_linux_ext = 1;
1245                 } else if (strnicmp(data, "nolinux", 7) == 0) {
1246                         vol->no_linux_ext = 1;
1247                 } else if ((strnicmp(data, "nocase", 6) == 0) ||
1248                            (strnicmp(data, "ignorecase", 10)  == 0)) {
1249                         vol->nocase = 1;
1250                 } else if (strnicmp(data, "brl", 3) == 0) {
1251                         vol->nobrl =  0;
1252                 } else if ((strnicmp(data, "nobrl", 5) == 0) ||
1253                            (strnicmp(data, "nolock", 6) == 0)) {
1254                         vol->nobrl =  1;
1255                         /* turn off mandatory locking in mode
1256                         if remote locking is turned off since the
1257                         local vfs will do advisory */
1258                         if (vol->file_mode ==
1259                                 (S_IALLUGO & ~(S_ISUID | S_IXGRP)))
1260                                 vol->file_mode = S_IALLUGO;
1261                 } else if (strnicmp(data, "forcemandatorylock", 9) == 0) {
1262                         /* will take the shorter form "forcemand" as well */
1263                         /* This mount option will force use of mandatory
1264                           (DOS/Windows style) byte range locks, instead of
1265                           using posix advisory byte range locks, even if the
1266                           Unix extensions are available and posix locks would
1267                           be supported otherwise. If Unix extensions are not
1268                           negotiated this has no effect since mandatory locks
1269                           would be used (mandatory locks is all that those
1270                           those servers support) */
1271                         vol->mand_lock = 1;
1272                 } else if (strnicmp(data, "setuids", 7) == 0) {
1273                         vol->setuids = 1;
1274                 } else if (strnicmp(data, "nosetuids", 9) == 0) {
1275                         vol->setuids = 0;
1276                 } else if (strnicmp(data, "dynperm", 7) == 0) {
1277                         vol->dynperm = true;
1278                 } else if (strnicmp(data, "nodynperm", 9) == 0) {
1279                         vol->dynperm = false;
1280                 } else if (strnicmp(data, "nohard", 6) == 0) {
1281                         vol->retry = 0;
1282                 } else if (strnicmp(data, "nosoft", 6) == 0) {
1283                         vol->retry = 1;
1284                 } else if (strnicmp(data, "nointr", 6) == 0) {
1285                         vol->intr = 0;
1286                 } else if (strnicmp(data, "intr", 4) == 0) {
1287                         vol->intr = 1;
1288                 } else if (strnicmp(data, "nostrictsync", 12) == 0) {
1289                         vol->nostrictsync = 1;
1290                 } else if (strnicmp(data, "strictsync", 10) == 0) {
1291                         vol->nostrictsync = 0;
1292                 } else if (strnicmp(data, "serverino", 7) == 0) {
1293                         vol->server_ino = 1;
1294                 } else if (strnicmp(data, "noserverino", 9) == 0) {
1295                         vol->server_ino = 0;
1296                 } else if (strnicmp(data, "cifsacl", 7) == 0) {
1297                         vol->cifs_acl = 1;
1298                 } else if (strnicmp(data, "nocifsacl", 9) == 0) {
1299                         vol->cifs_acl = 0;
1300                 } else if (strnicmp(data, "acl", 3) == 0) {
1301                         vol->no_psx_acl = 0;
1302                 } else if (strnicmp(data, "noacl", 5) == 0) {
1303                         vol->no_psx_acl = 1;
1304 #ifdef CONFIG_CIFS_EXPERIMENTAL
1305                 } else if (strnicmp(data, "locallease", 6) == 0) {
1306                         vol->local_lease = 1;
1307 #endif
1308                 } else if (strnicmp(data, "sign", 4) == 0) {
1309                         vol->secFlg |= CIFSSEC_MUST_SIGN;
1310                 } else if (strnicmp(data, "seal", 4) == 0) {
1311                         /* we do not do the following in secFlags because seal
1312                            is a per tree connection (mount) not a per socket
1313                            or per-smb connection option in the protocol */
1314                         /* vol->secFlg |= CIFSSEC_MUST_SEAL; */
1315                         vol->seal = 1;
1316                 } else if (strnicmp(data, "direct", 6) == 0) {
1317                         vol->direct_io = 1;
1318                 } else if (strnicmp(data, "forcedirectio", 13) == 0) {
1319                         vol->direct_io = 1;
1320                 } else if (strnicmp(data, "noac", 4) == 0) {
1321                         printk(KERN_WARNING "CIFS: Mount option noac not "
1322                                 "supported. Instead set "
1323                                 "/proc/fs/cifs/LookupCacheEnabled to 0\n");
1324                 } else
1325                         printk(KERN_WARNING "CIFS: Unknown mount option %s\n",
1326                                                 data);
1327         }
1328         if (vol->UNC == NULL) {
1329                 if (devname == NULL) {
1330                         printk(KERN_WARNING "CIFS: Missing UNC name for mount "
1331                                                 "target\n");
1332                         return 1;
1333                 }
1334                 if ((temp_len = strnlen(devname, 300)) < 300) {
1335                         vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1336                         if (vol->UNC == NULL)
1337                                 return 1;
1338                         strcpy(vol->UNC, devname);
1339                         if (strncmp(vol->UNC, "//", 2) == 0) {
1340                                 vol->UNC[0] = '\\';
1341                                 vol->UNC[1] = '\\';
1342                         } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1343                                 printk(KERN_WARNING "CIFS: UNC Path does not "
1344                                                     "begin with // or \\\\ \n");
1345                                 return 1;
1346                         }
1347                         value = strpbrk(vol->UNC+2, "/\\");
1348                         if (value)
1349                                 *value = '\\';
1350                 } else {
1351                         printk(KERN_WARNING "CIFS: UNC name too long\n");
1352                         return 1;
1353                 }
1354         }
1355         if (vol->UNCip == NULL)
1356                 vol->UNCip = &vol->UNC[2];
1357
1358         return 0;
1359 }
1360
1361 static struct TCP_Server_Info *
1362 cifs_find_tcp_session(struct sockaddr_storage *addr)
1363 {
1364         struct list_head *tmp;
1365         struct TCP_Server_Info *server;
1366         struct sockaddr_in *addr4 = (struct sockaddr_in *) addr;
1367         struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *) addr;
1368
1369         write_lock(&cifs_tcp_ses_lock);
1370         list_for_each(tmp, &cifs_tcp_ses_list) {
1371                 server = list_entry(tmp, struct TCP_Server_Info,
1372                                     tcp_ses_list);
1373                 /*
1374                  * the demux thread can exit on its own while still in CifsNew
1375                  * so don't accept any sockets in that state. Since the
1376                  * tcpStatus never changes back to CifsNew it's safe to check
1377                  * for this without a lock.
1378                  */
1379                 if (server->tcpStatus == CifsNew)
1380                         continue;
1381
1382                 if (addr->ss_family == AF_INET &&
1383                     (addr4->sin_addr.s_addr !=
1384                      server->addr.sockAddr.sin_addr.s_addr))
1385                         continue;
1386                 else if (addr->ss_family == AF_INET6 &&
1387                          (!ipv6_addr_equal(&server->addr.sockAddr6.sin6_addr,
1388                                            &addr6->sin6_addr) ||
1389                           server->addr.sockAddr6.sin6_scope_id !=
1390                                            addr6->sin6_scope_id))
1391                         continue;
1392
1393                 ++server->srv_count;
1394                 write_unlock(&cifs_tcp_ses_lock);
1395                 cFYI(1, ("Existing tcp session with server found"));
1396                 return server;
1397         }
1398         write_unlock(&cifs_tcp_ses_lock);
1399         return NULL;
1400 }
1401
1402 static void
1403 cifs_put_tcp_session(struct TCP_Server_Info *server)
1404 {
1405         struct task_struct *task;
1406
1407         write_lock(&cifs_tcp_ses_lock);
1408         if (--server->srv_count > 0) {
1409                 write_unlock(&cifs_tcp_ses_lock);
1410                 return;
1411         }
1412
1413         list_del_init(&server->tcp_ses_list);
1414         write_unlock(&cifs_tcp_ses_lock);
1415
1416         spin_lock(&GlobalMid_Lock);
1417         server->tcpStatus = CifsExiting;
1418         spin_unlock(&GlobalMid_Lock);
1419
1420         task = xchg(&server->tsk, NULL);
1421         if (task)
1422                 force_sig(SIGKILL, task);
1423 }
1424
1425 static struct TCP_Server_Info *
1426 cifs_get_tcp_session(struct smb_vol *volume_info)
1427 {
1428         struct TCP_Server_Info *tcp_ses = NULL;
1429         struct sockaddr_storage addr;
1430         struct sockaddr_in *sin_server = (struct sockaddr_in *) &addr;
1431         struct sockaddr_in6 *sin_server6 = (struct sockaddr_in6 *) &addr;
1432         int rc;
1433
1434         memset(&addr, 0, sizeof(struct sockaddr_storage));
1435
1436         cFYI(1, ("UNC: %s ip: %s", volume_info->UNC, volume_info->UNCip));
1437
1438         if (volume_info->UNCip && volume_info->UNC) {
1439                 rc = cifs_convert_address(volume_info->UNCip, &addr);
1440                 if (!rc) {
1441                         /* we failed translating address */
1442                         rc = -EINVAL;
1443                         goto out_err;
1444                 }
1445         } else if (volume_info->UNCip) {
1446                 /* BB using ip addr as tcp_ses name to connect to the
1447                    DFS root below */
1448                 cERROR(1, ("Connecting to DFS root not implemented yet"));
1449                 rc = -EINVAL;
1450                 goto out_err;
1451         } else /* which tcp_sess DFS root would we conect to */ {
1452                 cERROR(1,
1453                        ("CIFS mount error: No UNC path (e.g. -o "
1454                         "unc=//192.168.1.100/public) specified"));
1455                 rc = -EINVAL;
1456                 goto out_err;
1457         }
1458
1459         /* see if we already have a matching tcp_ses */
1460         tcp_ses = cifs_find_tcp_session(&addr);
1461         if (tcp_ses)
1462                 return tcp_ses;
1463
1464         tcp_ses = kzalloc(sizeof(struct TCP_Server_Info), GFP_KERNEL);
1465         if (!tcp_ses) {
1466                 rc = -ENOMEM;
1467                 goto out_err;
1468         }
1469
1470         tcp_ses->hostname = extract_hostname(volume_info->UNC);
1471         if (IS_ERR(tcp_ses->hostname)) {
1472                 rc = PTR_ERR(tcp_ses->hostname);
1473                 goto out_err;
1474         }
1475
1476         tcp_ses->noblocksnd = volume_info->noblocksnd;
1477         tcp_ses->noautotune = volume_info->noautotune;
1478         atomic_set(&tcp_ses->inFlight, 0);
1479         init_waitqueue_head(&tcp_ses->response_q);
1480         init_waitqueue_head(&tcp_ses->request_q);
1481         INIT_LIST_HEAD(&tcp_ses->pending_mid_q);
1482         mutex_init(&tcp_ses->srv_mutex);
1483         memcpy(tcp_ses->workstation_RFC1001_name,
1484                 volume_info->source_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1485         memcpy(tcp_ses->server_RFC1001_name,
1486                 volume_info->target_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1487         tcp_ses->sequence_number = 0;
1488         INIT_LIST_HEAD(&tcp_ses->tcp_ses_list);
1489         INIT_LIST_HEAD(&tcp_ses->smb_ses_list);
1490
1491         /*
1492          * at this point we are the only ones with the pointer
1493          * to the struct since the kernel thread not created yet
1494          * no need to spinlock this init of tcpStatus or srv_count
1495          */
1496         tcp_ses->tcpStatus = CifsNew;
1497         ++tcp_ses->srv_count;
1498
1499         if (addr.ss_family == AF_INET6) {
1500                 cFYI(1, ("attempting ipv6 connect"));
1501                 /* BB should we allow ipv6 on port 139? */
1502                 /* other OS never observed in Wild doing 139 with v6 */
1503                 sin_server6->sin6_port = htons(volume_info->port);
1504                 memcpy(&tcp_ses->addr.sockAddr6, sin_server6,
1505                         sizeof(struct sockaddr_in6));
1506                 rc = ipv6_connect(tcp_ses);
1507         } else {
1508                 sin_server->sin_port = htons(volume_info->port);
1509                 memcpy(&tcp_ses->addr.sockAddr, sin_server,
1510                         sizeof(struct sockaddr_in));
1511                 rc = ipv4_connect(tcp_ses);
1512         }
1513         if (rc < 0) {
1514                 cERROR(1, ("Error connecting to socket. Aborting operation"));
1515                 goto out_err;
1516         }
1517
1518         /*
1519          * since we're in a cifs function already, we know that
1520          * this will succeed. No need for try_module_get().
1521          */
1522         __module_get(THIS_MODULE);
1523         tcp_ses->tsk = kthread_run((void *)(void *)cifs_demultiplex_thread,
1524                                   tcp_ses, "cifsd");
1525         if (IS_ERR(tcp_ses->tsk)) {
1526                 rc = PTR_ERR(tcp_ses->tsk);
1527                 cERROR(1, ("error %d create cifsd thread", rc));
1528                 module_put(THIS_MODULE);
1529                 goto out_err;
1530         }
1531
1532         /* thread spawned, put it on the list */
1533         write_lock(&cifs_tcp_ses_lock);
1534         list_add(&tcp_ses->tcp_ses_list, &cifs_tcp_ses_list);
1535         write_unlock(&cifs_tcp_ses_lock);
1536
1537         return tcp_ses;
1538
1539 out_err:
1540         if (tcp_ses) {
1541                 kfree(tcp_ses->hostname);
1542                 if (tcp_ses->ssocket)
1543                         sock_release(tcp_ses->ssocket);
1544                 kfree(tcp_ses);
1545         }
1546         return ERR_PTR(rc);
1547 }
1548
1549 static struct cifsSesInfo *
1550 cifs_find_smb_ses(struct TCP_Server_Info *server, char *username)
1551 {
1552         struct list_head *tmp;
1553         struct cifsSesInfo *ses;
1554
1555         write_lock(&cifs_tcp_ses_lock);
1556         list_for_each(tmp, &server->smb_ses_list) {
1557                 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
1558                 if (strncmp(ses->userName, username, MAX_USERNAME_SIZE))
1559                         continue;
1560
1561                 ++ses->ses_count;
1562                 write_unlock(&cifs_tcp_ses_lock);
1563                 return ses;
1564         }
1565         write_unlock(&cifs_tcp_ses_lock);
1566         return NULL;
1567 }
1568
1569 static void
1570 cifs_put_smb_ses(struct cifsSesInfo *ses)
1571 {
1572         int xid;
1573         struct TCP_Server_Info *server = ses->server;
1574
1575         write_lock(&cifs_tcp_ses_lock);
1576         if (--ses->ses_count > 0) {
1577                 write_unlock(&cifs_tcp_ses_lock);
1578                 return;
1579         }
1580
1581         list_del_init(&ses->smb_ses_list);
1582         write_unlock(&cifs_tcp_ses_lock);
1583
1584         if (ses->status == CifsGood) {
1585                 xid = GetXid();
1586                 CIFSSMBLogoff(xid, ses);
1587                 _FreeXid(xid);
1588         }
1589         sesInfoFree(ses);
1590         cifs_put_tcp_session(server);
1591 }
1592
1593 static struct cifsTconInfo *
1594 cifs_find_tcon(struct cifsSesInfo *ses, const char *unc)
1595 {
1596         struct list_head *tmp;
1597         struct cifsTconInfo *tcon;
1598
1599         write_lock(&cifs_tcp_ses_lock);
1600         list_for_each(tmp, &ses->tcon_list) {
1601                 tcon = list_entry(tmp, struct cifsTconInfo, tcon_list);
1602                 if (tcon->tidStatus == CifsExiting)
1603                         continue;
1604                 if (strncmp(tcon->treeName, unc, MAX_TREE_SIZE))
1605                         continue;
1606
1607                 ++tcon->tc_count;
1608                 write_unlock(&cifs_tcp_ses_lock);
1609                 return tcon;
1610         }
1611         write_unlock(&cifs_tcp_ses_lock);
1612         return NULL;
1613 }
1614
1615 static void
1616 cifs_put_tcon(struct cifsTconInfo *tcon)
1617 {
1618         int xid;
1619         struct cifsSesInfo *ses = tcon->ses;
1620
1621         write_lock(&cifs_tcp_ses_lock);
1622         if (--tcon->tc_count > 0) {
1623                 write_unlock(&cifs_tcp_ses_lock);
1624                 return;
1625         }
1626
1627         list_del_init(&tcon->tcon_list);
1628         write_unlock(&cifs_tcp_ses_lock);
1629
1630         xid = GetXid();
1631         CIFSSMBTDis(xid, tcon);
1632         _FreeXid(xid);
1633
1634         DeleteTconOplockQEntries(tcon);
1635         tconInfoFree(tcon);
1636         cifs_put_smb_ses(ses);
1637 }
1638
1639 int
1640 get_dfs_path(int xid, struct cifsSesInfo *pSesInfo, const char *old_path,
1641              const struct nls_table *nls_codepage, unsigned int *pnum_referrals,
1642              struct dfs_info3_param **preferrals, int remap)
1643 {
1644         char *temp_unc;
1645         int rc = 0;
1646
1647         *pnum_referrals = 0;
1648         *preferrals = NULL;
1649
1650         if (pSesInfo->ipc_tid == 0) {
1651                 temp_unc = kmalloc(2 /* for slashes */ +
1652                         strnlen(pSesInfo->serverName,
1653                                 SERVER_NAME_LEN_WITH_NULL * 2)
1654                                  + 1 + 4 /* slash IPC$ */  + 2,
1655                                 GFP_KERNEL);
1656                 if (temp_unc == NULL)
1657                         return -ENOMEM;
1658                 temp_unc[0] = '\\';
1659                 temp_unc[1] = '\\';
1660                 strcpy(temp_unc + 2, pSesInfo->serverName);
1661                 strcpy(temp_unc + 2 + strlen(pSesInfo->serverName), "\\IPC$");
1662                 rc = CIFSTCon(xid, pSesInfo, temp_unc, NULL, nls_codepage);
1663                 cFYI(1,
1664                      ("CIFS Tcon rc = %d ipc_tid = %d", rc, pSesInfo->ipc_tid));
1665                 kfree(temp_unc);
1666         }
1667         if (rc == 0)
1668                 rc = CIFSGetDFSRefer(xid, pSesInfo, old_path, preferrals,
1669                                      pnum_referrals, nls_codepage, remap);
1670         /* BB map targetUNCs to dfs_info3 structures, here or
1671                 in CIFSGetDFSRefer BB */
1672
1673         return rc;
1674 }
1675
1676 #ifdef CONFIG_DEBUG_LOCK_ALLOC
1677 static struct lock_class_key cifs_key[2];
1678 static struct lock_class_key cifs_slock_key[2];
1679
1680 static inline void
1681 cifs_reclassify_socket4(struct socket *sock)
1682 {
1683         struct sock *sk = sock->sk;
1684         BUG_ON(sock_owned_by_user(sk));
1685         sock_lock_init_class_and_name(sk, "slock-AF_INET-CIFS",
1686                 &cifs_slock_key[0], "sk_lock-AF_INET-CIFS", &cifs_key[0]);
1687 }
1688
1689 static inline void
1690 cifs_reclassify_socket6(struct socket *sock)
1691 {
1692         struct sock *sk = sock->sk;
1693         BUG_ON(sock_owned_by_user(sk));
1694         sock_lock_init_class_and_name(sk, "slock-AF_INET6-CIFS",
1695                 &cifs_slock_key[1], "sk_lock-AF_INET6-CIFS", &cifs_key[1]);
1696 }
1697 #else
1698 static inline void
1699 cifs_reclassify_socket4(struct socket *sock)
1700 {
1701 }
1702
1703 static inline void
1704 cifs_reclassify_socket6(struct socket *sock)
1705 {
1706 }
1707 #endif
1708
1709 /* See RFC1001 section 14 on representation of Netbios names */
1710 static void rfc1002mangle(char *target, char *source, unsigned int length)
1711 {
1712         unsigned int i, j;
1713
1714         for (i = 0, j = 0; i < (length); i++) {
1715                 /* mask a nibble at a time and encode */
1716                 target[j] = 'A' + (0x0F & (source[i] >> 4));
1717                 target[j+1] = 'A' + (0x0F & source[i]);
1718                 j += 2;
1719         }
1720
1721 }
1722
1723
1724 static int
1725 ipv4_connect(struct TCP_Server_Info *server)
1726 {
1727         int rc = 0;
1728         bool connected = false;
1729         __be16 orig_port = 0;
1730         struct socket *socket = server->ssocket;
1731
1732         if (socket == NULL) {
1733                 rc = sock_create_kern(PF_INET, SOCK_STREAM,
1734                                       IPPROTO_TCP, &socket);
1735                 if (rc < 0) {
1736                         cERROR(1, ("Error %d creating socket", rc));
1737                         return rc;
1738                 }
1739
1740                 /* BB other socket options to set KEEPALIVE, NODELAY? */
1741                 cFYI(1, ("Socket created"));
1742                 server->ssocket = socket;
1743                 socket->sk->sk_allocation = GFP_NOFS;
1744                 cifs_reclassify_socket4(socket);
1745         }
1746
1747         /* user overrode default port */
1748         if (server->addr.sockAddr.sin_port) {
1749                 rc = socket->ops->connect(socket, (struct sockaddr *)
1750                                           &server->addr.sockAddr,
1751                                           sizeof(struct sockaddr_in), 0);
1752                 if (rc >= 0)
1753                         connected = true;
1754         }
1755
1756         if (!connected) {
1757                 /* save original port so we can retry user specified port
1758                         later if fall back ports fail this time  */
1759                 orig_port = server->addr.sockAddr.sin_port;
1760
1761                 /* do not retry on the same port we just failed on */
1762                 if (server->addr.sockAddr.sin_port != htons(CIFS_PORT)) {
1763                         server->addr.sockAddr.sin_port = htons(CIFS_PORT);
1764                         rc = socket->ops->connect(socket,
1765                                                 (struct sockaddr *)
1766                                                 &server->addr.sockAddr,
1767                                                 sizeof(struct sockaddr_in), 0);
1768                         if (rc >= 0)
1769                                 connected = true;
1770                 }
1771         }
1772         if (!connected) {
1773                 server->addr.sockAddr.sin_port = htons(RFC1001_PORT);
1774                 rc = socket->ops->connect(socket, (struct sockaddr *)
1775                                               &server->addr.sockAddr,
1776                                               sizeof(struct sockaddr_in), 0);
1777                 if (rc >= 0)
1778                         connected = true;
1779         }
1780
1781         /* give up here - unless we want to retry on different
1782                 protocol families some day */
1783         if (!connected) {
1784                 if (orig_port)
1785                         server->addr.sockAddr.sin_port = orig_port;
1786                 cFYI(1, ("Error %d connecting to server via ipv4", rc));
1787                 sock_release(socket);
1788                 server->ssocket = NULL;
1789                 return rc;
1790         }
1791
1792
1793         /*
1794          * Eventually check for other socket options to change from
1795          *  the default. sock_setsockopt not used because it expects
1796          *  user space buffer
1797          */
1798         socket->sk->sk_rcvtimeo = 7 * HZ;
1799         socket->sk->sk_sndtimeo = 5 * HZ;
1800
1801         /* make the bufsizes depend on wsize/rsize and max requests */
1802         if (server->noautotune) {
1803                 if (socket->sk->sk_sndbuf < (200 * 1024))
1804                         socket->sk->sk_sndbuf = 200 * 1024;
1805                 if (socket->sk->sk_rcvbuf < (140 * 1024))
1806                         socket->sk->sk_rcvbuf = 140 * 1024;
1807         }
1808
1809          cFYI(1, ("sndbuf %d rcvbuf %d rcvtimeo 0x%lx",
1810                  socket->sk->sk_sndbuf,
1811                  socket->sk->sk_rcvbuf, socket->sk->sk_rcvtimeo));
1812
1813         /* send RFC1001 sessinit */
1814         if (server->addr.sockAddr.sin_port == htons(RFC1001_PORT)) {
1815                 /* some servers require RFC1001 sessinit before sending
1816                 negprot - BB check reconnection in case where second
1817                 sessinit is sent but no second negprot */
1818                 struct rfc1002_session_packet *ses_init_buf;
1819                 struct smb_hdr *smb_buf;
1820                 ses_init_buf = kzalloc(sizeof(struct rfc1002_session_packet),
1821                                        GFP_KERNEL);
1822                 if (ses_init_buf) {
1823                         ses_init_buf->trailer.session_req.called_len = 32;
1824                         if (server->server_RFC1001_name &&
1825                             server->server_RFC1001_name[0] != 0)
1826                                 rfc1002mangle(ses_init_buf->trailer.
1827                                                 session_req.called_name,
1828                                               server->server_RFC1001_name,
1829                                               RFC1001_NAME_LEN_WITH_NULL);
1830                         else
1831                                 rfc1002mangle(ses_init_buf->trailer.
1832                                                 session_req.called_name,
1833                                               DEFAULT_CIFS_CALLED_NAME,
1834                                               RFC1001_NAME_LEN_WITH_NULL);
1835
1836                         ses_init_buf->trailer.session_req.calling_len = 32;
1837
1838                         /* calling name ends in null (byte 16) from old smb
1839                         convention. */
1840                         if (server->workstation_RFC1001_name &&
1841                             server->workstation_RFC1001_name[0] != 0)
1842                                 rfc1002mangle(ses_init_buf->trailer.
1843                                                 session_req.calling_name,
1844                                               server->workstation_RFC1001_name,
1845                                               RFC1001_NAME_LEN_WITH_NULL);
1846                         else
1847                                 rfc1002mangle(ses_init_buf->trailer.
1848                                                 session_req.calling_name,
1849                                               "LINUX_CIFS_CLNT",
1850                                               RFC1001_NAME_LEN_WITH_NULL);
1851
1852                         ses_init_buf->trailer.session_req.scope1 = 0;
1853                         ses_init_buf->trailer.session_req.scope2 = 0;
1854                         smb_buf = (struct smb_hdr *)ses_init_buf;
1855                         /* sizeof RFC1002_SESSION_REQUEST with no scope */
1856                         smb_buf->smb_buf_length = 0x81000044;
1857                         rc = smb_send(server, smb_buf, 0x44);
1858                         kfree(ses_init_buf);
1859                         msleep(1); /* RFC1001 layer in at least one server
1860                                       requires very short break before negprot
1861                                       presumably because not expecting negprot
1862                                       to follow so fast.  This is a simple
1863                                       solution that works without
1864                                       complicating the code and causes no
1865                                       significant slowing down on mount
1866                                       for everyone else */
1867                 }
1868                 /* else the negprot may still work without this
1869                 even though malloc failed */
1870
1871         }
1872
1873         return rc;
1874 }
1875
1876 static int
1877 ipv6_connect(struct TCP_Server_Info *server)
1878 {
1879         int rc = 0;
1880         bool connected = false;
1881         __be16 orig_port = 0;
1882         struct socket *socket = server->ssocket;
1883
1884         if (socket == NULL) {
1885                 rc = sock_create_kern(PF_INET6, SOCK_STREAM,
1886                                       IPPROTO_TCP, &socket);
1887                 if (rc < 0) {
1888                         cERROR(1, ("Error %d creating ipv6 socket", rc));
1889                         socket = NULL;
1890                         return rc;
1891                 }
1892
1893                 /* BB other socket options to set KEEPALIVE, NODELAY? */
1894                 cFYI(1, ("ipv6 Socket created"));
1895                 server->ssocket = socket;
1896                 socket->sk->sk_allocation = GFP_NOFS;
1897                 cifs_reclassify_socket6(socket);
1898         }
1899
1900         /* user overrode default port */
1901         if (server->addr.sockAddr6.sin6_port) {
1902                 rc = socket->ops->connect(socket,
1903                                 (struct sockaddr *) &server->addr.sockAddr6,
1904                                 sizeof(struct sockaddr_in6), 0);
1905                 if (rc >= 0)
1906                         connected = true;
1907         }
1908
1909         if (!connected) {
1910                 /* save original port so we can retry user specified port
1911                         later if fall back ports fail this time  */
1912
1913                 orig_port = server->addr.sockAddr6.sin6_port;
1914                 /* do not retry on the same port we just failed on */
1915                 if (server->addr.sockAddr6.sin6_port != htons(CIFS_PORT)) {
1916                         server->addr.sockAddr6.sin6_port = htons(CIFS_PORT);
1917                         rc = socket->ops->connect(socket, (struct sockaddr *)
1918                                         &server->addr.sockAddr6,
1919                                         sizeof(struct sockaddr_in6), 0);
1920                         if (rc >= 0)
1921                                 connected = true;
1922                 }
1923         }
1924         if (!connected) {
1925                 server->addr.sockAddr6.sin6_port = htons(RFC1001_PORT);
1926                 rc = socket->ops->connect(socket, (struct sockaddr *)
1927                                 &server->addr.sockAddr6,
1928                                 sizeof(struct sockaddr_in6), 0);
1929                 if (rc >= 0)
1930                         connected = true;
1931         }
1932
1933         /* give up here - unless we want to retry on different
1934                 protocol families some day */
1935         if (!connected) {
1936                 if (orig_port)
1937                         server->addr.sockAddr6.sin6_port = orig_port;
1938                 cFYI(1, ("Error %d connecting to server via ipv6", rc));
1939                 sock_release(socket);
1940                 server->ssocket = NULL;
1941                 return rc;
1942         }
1943
1944         /*
1945          * Eventually check for other socket options to change from
1946          * the default. sock_setsockopt not used because it expects
1947          * user space buffer
1948          */
1949         socket->sk->sk_rcvtimeo = 7 * HZ;
1950         socket->sk->sk_sndtimeo = 5 * HZ;
1951         server->ssocket = socket;
1952
1953         return rc;
1954 }
1955
1956 void reset_cifs_unix_caps(int xid, struct cifsTconInfo *tcon,
1957                           struct super_block *sb, struct smb_vol *vol_info)
1958 {
1959         /* if we are reconnecting then should we check to see if
1960          * any requested capabilities changed locally e.g. via
1961          * remount but we can not do much about it here
1962          * if they have (even if we could detect it by the following)
1963          * Perhaps we could add a backpointer to array of sb from tcon
1964          * or if we change to make all sb to same share the same
1965          * sb as NFS - then we only have one backpointer to sb.
1966          * What if we wanted to mount the server share twice once with
1967          * and once without posixacls or posix paths? */
1968         __u64 saved_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
1969
1970         if (vol_info && vol_info->no_linux_ext) {
1971                 tcon->fsUnixInfo.Capability = 0;
1972                 tcon->unix_ext = 0; /* Unix Extensions disabled */
1973                 cFYI(1, ("Linux protocol extensions disabled"));
1974                 return;
1975         } else if (vol_info)
1976                 tcon->unix_ext = 1; /* Unix Extensions supported */
1977
1978         if (tcon->unix_ext == 0) {
1979                 cFYI(1, ("Unix extensions disabled so not set on reconnect"));
1980                 return;
1981         }
1982
1983         if (!CIFSSMBQFSUnixInfo(xid, tcon)) {
1984                 __u64 cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
1985
1986                 /* check for reconnect case in which we do not
1987                    want to change the mount behavior if we can avoid it */
1988                 if (vol_info == NULL) {
1989                         /* turn off POSIX ACL and PATHNAMES if not set
1990                            originally at mount time */
1991                         if ((saved_cap & CIFS_UNIX_POSIX_ACL_CAP) == 0)
1992                                 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
1993                         if ((saved_cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
1994                                 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
1995                                         cERROR(1, ("POSIXPATH support change"));
1996                                 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
1997                         } else if ((cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
1998                                 cERROR(1, ("possible reconnect error"));
1999                                 cERROR(1,
2000                                         ("server disabled POSIX path support"));
2001                         }
2002                 }
2003
2004                 cap &= CIFS_UNIX_CAP_MASK;
2005                 if (vol_info && vol_info->no_psx_acl)
2006                         cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2007                 else if (CIFS_UNIX_POSIX_ACL_CAP & cap) {
2008                         cFYI(1, ("negotiated posix acl support"));
2009                         if (sb)
2010                                 sb->s_flags |= MS_POSIXACL;
2011                 }
2012
2013                 if (vol_info && vol_info->posix_paths == 0)
2014                         cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2015                 else if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) {
2016                         cFYI(1, ("negotiate posix pathnames"));
2017                         if (sb)
2018                                 CIFS_SB(sb)->mnt_cifs_flags |=
2019                                         CIFS_MOUNT_POSIX_PATHS;
2020                 }
2021
2022                 /* We might be setting the path sep back to a different
2023                 form if we are reconnecting and the server switched its
2024                 posix path capability for this share */
2025                 if (sb && (CIFS_SB(sb)->prepathlen > 0))
2026                         CIFS_SB(sb)->prepath[0] = CIFS_DIR_SEP(CIFS_SB(sb));
2027
2028                 if (sb && (CIFS_SB(sb)->rsize > 127 * 1024)) {
2029                         if ((cap & CIFS_UNIX_LARGE_READ_CAP) == 0) {
2030                                 CIFS_SB(sb)->rsize = 127 * 1024;
2031                                 cFYI(DBG2,
2032                                         ("larger reads not supported by srv"));
2033                         }
2034                 }
2035
2036
2037                 cFYI(1, ("Negotiate caps 0x%x", (int)cap));
2038 #ifdef CONFIG_CIFS_DEBUG2
2039                 if (cap & CIFS_UNIX_FCNTL_CAP)
2040                         cFYI(1, ("FCNTL cap"));
2041                 if (cap & CIFS_UNIX_EXTATTR_CAP)
2042                         cFYI(1, ("EXTATTR cap"));
2043                 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2044                         cFYI(1, ("POSIX path cap"));
2045                 if (cap & CIFS_UNIX_XATTR_CAP)
2046                         cFYI(1, ("XATTR cap"));
2047                 if (cap & CIFS_UNIX_POSIX_ACL_CAP)
2048                         cFYI(1, ("POSIX ACL cap"));
2049                 if (cap & CIFS_UNIX_LARGE_READ_CAP)
2050                         cFYI(1, ("very large read cap"));
2051                 if (cap & CIFS_UNIX_LARGE_WRITE_CAP)
2052                         cFYI(1, ("very large write cap"));
2053 #endif /* CIFS_DEBUG2 */
2054                 if (CIFSSMBSetFSUnixInfo(xid, tcon, cap)) {
2055                         if (vol_info == NULL) {
2056                                 cFYI(1, ("resetting capabilities failed"));
2057                         } else
2058                                 cERROR(1, ("Negotiating Unix capabilities "
2059                                            "with the server failed.  Consider "
2060                                            "mounting with the Unix Extensions\n"
2061                                            "disabled, if problems are found, "
2062                                            "by specifying the nounix mount "
2063                                            "option."));
2064
2065                 }
2066         }
2067 }
2068
2069 static void
2070 convert_delimiter(char *path, char delim)
2071 {
2072         int i;
2073         char old_delim;
2074
2075         if (path == NULL)
2076                 return;
2077
2078         if (delim == '/')
2079                 old_delim = '\\';
2080         else
2081                 old_delim = '/';
2082
2083         for (i = 0; path[i] != '\0'; i++) {
2084                 if (path[i] == old_delim)
2085                         path[i] = delim;
2086         }
2087 }
2088
2089 static void setup_cifs_sb(struct smb_vol *pvolume_info,
2090                           struct cifs_sb_info *cifs_sb)
2091 {
2092         if (pvolume_info->rsize > CIFSMaxBufSize) {
2093                 cERROR(1, ("rsize %d too large, using MaxBufSize",
2094                         pvolume_info->rsize));
2095                 cifs_sb->rsize = CIFSMaxBufSize;
2096         } else if ((pvolume_info->rsize) &&
2097                         (pvolume_info->rsize <= CIFSMaxBufSize))
2098                 cifs_sb->rsize = pvolume_info->rsize;
2099         else /* default */
2100                 cifs_sb->rsize = CIFSMaxBufSize;
2101
2102         if (pvolume_info->wsize > PAGEVEC_SIZE * PAGE_CACHE_SIZE) {
2103                 cERROR(1, ("wsize %d too large, using 4096 instead",
2104                           pvolume_info->wsize));
2105                 cifs_sb->wsize = 4096;
2106         } else if (pvolume_info->wsize)
2107                 cifs_sb->wsize = pvolume_info->wsize;
2108         else
2109                 cifs_sb->wsize = min_t(const int,
2110                                         PAGEVEC_SIZE * PAGE_CACHE_SIZE,
2111                                         127*1024);
2112                 /* old default of CIFSMaxBufSize was too small now
2113                    that SMB Write2 can send multiple pages in kvec.
2114                    RFC1001 does not describe what happens when frame
2115                    bigger than 128K is sent so use that as max in
2116                    conjunction with 52K kvec constraint on arch with 4K
2117                    page size  */
2118
2119         if (cifs_sb->rsize < 2048) {
2120                 cifs_sb->rsize = 2048;
2121                 /* Windows ME may prefer this */
2122                 cFYI(1, ("readsize set to minimum: 2048"));
2123         }
2124         /* calculate prepath */
2125         cifs_sb->prepath = pvolume_info->prepath;
2126         if (cifs_sb->prepath) {
2127                 cifs_sb->prepathlen = strlen(cifs_sb->prepath);
2128                 /* we can not convert the / to \ in the path
2129                 separators in the prefixpath yet because we do not
2130                 know (until reset_cifs_unix_caps is called later)
2131                 whether POSIX PATH CAP is available. We normalize
2132                 the / to \ after reset_cifs_unix_caps is called */
2133                 pvolume_info->prepath = NULL;
2134         } else
2135                 cifs_sb->prepathlen = 0;
2136         cifs_sb->mnt_uid = pvolume_info->linux_uid;
2137         cifs_sb->mnt_gid = pvolume_info->linux_gid;
2138         cifs_sb->mnt_file_mode = pvolume_info->file_mode;
2139         cifs_sb->mnt_dir_mode = pvolume_info->dir_mode;
2140         cFYI(1, ("file mode: 0x%x  dir mode: 0x%x",
2141                 cifs_sb->mnt_file_mode, cifs_sb->mnt_dir_mode));
2142
2143         if (pvolume_info->noperm)
2144                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_PERM;
2145         if (pvolume_info->setuids)
2146                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SET_UID;
2147         if (pvolume_info->server_ino)
2148                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SERVER_INUM;
2149         if (pvolume_info->remap)
2150                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MAP_SPECIAL_CHR;
2151         if (pvolume_info->no_xattr)
2152                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_XATTR;
2153         if (pvolume_info->sfu_emul)
2154                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_UNX_EMUL;
2155         if (pvolume_info->nobrl)
2156                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_BRL;
2157         if (pvolume_info->nostrictsync)
2158                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOSSYNC;
2159         if (pvolume_info->mand_lock)
2160                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOPOSIXBRL;
2161         if (pvolume_info->cifs_acl)
2162                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_ACL;
2163         if (pvolume_info->override_uid)
2164                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_UID;
2165         if (pvolume_info->override_gid)
2166                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_GID;
2167         if (pvolume_info->dynperm)
2168                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DYNPERM;
2169         if (pvolume_info->direct_io) {
2170                 cFYI(1, ("mounting share using direct i/o"));
2171                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DIRECT_IO;
2172         }
2173
2174         if ((pvolume_info->cifs_acl) && (pvolume_info->dynperm))
2175                 cERROR(1, ("mount option dynperm ignored if cifsacl "
2176                            "mount option supported"));
2177 }
2178
2179 static int
2180 is_path_accessible(int xid, struct cifsTconInfo *tcon,
2181                    struct cifs_sb_info *cifs_sb, const char *full_path)
2182 {
2183         int rc;
2184         __u64 inode_num;
2185         FILE_ALL_INFO *pfile_info;
2186
2187         rc = CIFSGetSrvInodeNumber(xid, tcon, full_path, &inode_num,
2188                                    cifs_sb->local_nls,
2189                                    cifs_sb->mnt_cifs_flags &
2190                                                 CIFS_MOUNT_MAP_SPECIAL_CHR);
2191         if (rc != -EOPNOTSUPP)
2192                 return rc;
2193
2194         pfile_info = kmalloc(sizeof(FILE_ALL_INFO), GFP_KERNEL);
2195         if (pfile_info == NULL)
2196                 return -ENOMEM;
2197
2198         rc = CIFSSMBQPathInfo(xid, tcon, full_path, pfile_info,
2199                               0 /* not legacy */, cifs_sb->local_nls,
2200                               cifs_sb->mnt_cifs_flags &
2201                                 CIFS_MOUNT_MAP_SPECIAL_CHR);
2202         kfree(pfile_info);
2203         return rc;
2204 }
2205
2206 static void
2207 cleanup_volume_info(struct smb_vol **pvolume_info)
2208 {
2209         struct smb_vol *volume_info;
2210
2211         if (!pvolume_info && !*pvolume_info)
2212                 return;
2213
2214         volume_info = *pvolume_info;
2215         kzfree(volume_info->password);
2216         kfree(volume_info->UNC);
2217         kfree(volume_info->prepath);
2218         kfree(volume_info);
2219         *pvolume_info = NULL;
2220         return;
2221 }
2222
2223 #ifdef CONFIG_CIFS_DFS_UPCALL
2224 /* build_path_to_root returns full path to root when
2225  * we do not have an exiting connection (tcon) */
2226 static char *
2227 build_unc_path_to_root(const struct smb_vol *volume_info,
2228                 const struct cifs_sb_info *cifs_sb)
2229 {
2230         char *full_path;
2231
2232         int unc_len = strnlen(volume_info->UNC, MAX_TREE_SIZE + 1);
2233         full_path = kmalloc(unc_len + cifs_sb->prepathlen + 1, GFP_KERNEL);
2234         if (full_path == NULL)
2235                 return ERR_PTR(-ENOMEM);
2236
2237         strncpy(full_path, volume_info->UNC, unc_len);
2238         if (cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) {
2239                 int i;
2240                 for (i = 0; i < unc_len; i++) {
2241                         if (full_path[i] == '\\')
2242                                 full_path[i] = '/';
2243                 }
2244         }
2245
2246         if (cifs_sb->prepathlen)
2247                 strncpy(full_path + unc_len, cifs_sb->prepath,
2248                                 cifs_sb->prepathlen);
2249
2250         full_path[unc_len + cifs_sb->prepathlen] = 0; /* add trailing null */
2251         return full_path;
2252 }
2253 #endif
2254
2255 int
2256 cifs_mount(struct super_block *sb, struct cifs_sb_info *cifs_sb,
2257                 char *mount_data_global, const char *devname)
2258 {
2259         int rc = 0;
2260         int xid;
2261         struct smb_vol *volume_info;
2262         struct cifsSesInfo *pSesInfo = NULL;
2263         struct cifsTconInfo *tcon = NULL;
2264         struct TCP_Server_Info *srvTcp = NULL;
2265         char   *full_path;
2266         char *mount_data = mount_data_global;
2267 #ifdef CONFIG_CIFS_DFS_UPCALL
2268         struct dfs_info3_param *referrals = NULL;
2269         unsigned int num_referrals = 0;
2270         int referral_walks_count = 0;
2271 try_mount_again:
2272 #endif
2273         full_path = NULL;
2274
2275         xid = GetXid();
2276
2277         volume_info = kzalloc(sizeof(struct smb_vol), GFP_KERNEL);
2278         if (!volume_info) {
2279                 rc = -ENOMEM;
2280                 goto out;
2281         }
2282
2283         if (cifs_parse_mount_options(mount_data, devname, volume_info)) {
2284                 rc = -EINVAL;
2285                 goto out;
2286         }
2287
2288         if (volume_info->nullauth) {
2289                 cFYI(1, ("null user"));
2290                 volume_info->username = "";
2291         } else if (volume_info->username) {
2292                 /* BB fixme parse for domain name here */
2293                 cFYI(1, ("Username: %s", volume_info->username));
2294         } else {
2295                 cifserror("No username specified");
2296         /* In userspace mount helper we can get user name from alternate
2297            locations such as env variables and files on disk */
2298                 rc = -EINVAL;
2299                 goto out;
2300         }
2301
2302
2303         /* this is needed for ASCII cp to Unicode converts */
2304         if (volume_info->iocharset == NULL) {
2305                 cifs_sb->local_nls = load_nls_default();
2306         /* load_nls_default can not return null */
2307         } else {
2308                 cifs_sb->local_nls = load_nls(volume_info->iocharset);
2309                 if (cifs_sb->local_nls == NULL) {
2310                         cERROR(1, ("CIFS mount error: iocharset %s not found",
2311                                  volume_info->iocharset));
2312                         rc = -ELIBACC;
2313                         goto out;
2314                 }
2315         }
2316
2317         /* get a reference to a tcp session */
2318         srvTcp = cifs_get_tcp_session(volume_info);
2319         if (IS_ERR(srvTcp)) {
2320                 rc = PTR_ERR(srvTcp);
2321                 goto out;
2322         }
2323
2324         pSesInfo = cifs_find_smb_ses(srvTcp, volume_info->username);
2325         if (pSesInfo) {
2326                 cFYI(1, ("Existing smb sess found (status=%d)",
2327                         pSesInfo->status));
2328                 /*
2329                  * The existing SMB session already has a reference to srvTcp,
2330                  * so we can put back the extra one we got before
2331                  */
2332                 cifs_put_tcp_session(srvTcp);
2333
2334                 down(&pSesInfo->sesSem);
2335                 if (pSesInfo->need_reconnect) {
2336                         cFYI(1, ("Session needs reconnect"));
2337                         rc = cifs_setup_session(xid, pSesInfo,
2338                                                 cifs_sb->local_nls);
2339                 }
2340                 up(&pSesInfo->sesSem);
2341         } else if (!rc) {
2342                 cFYI(1, ("Existing smb sess not found"));
2343                 pSesInfo = sesInfoAlloc();
2344                 if (pSesInfo == NULL) {
2345                         rc = -ENOMEM;
2346                         goto mount_fail_check;
2347                 }
2348
2349                 /* new SMB session uses our srvTcp ref */
2350                 pSesInfo->server = srvTcp;
2351                 if (srvTcp->addr.sockAddr6.sin6_family == AF_INET6)
2352                         sprintf(pSesInfo->serverName, "%pI6",
2353                                 &srvTcp->addr.sockAddr6.sin6_addr);
2354                 else
2355                         sprintf(pSesInfo->serverName, "%pI4",
2356                                 &srvTcp->addr.sockAddr.sin_addr.s_addr);
2357
2358                 write_lock(&cifs_tcp_ses_lock);
2359                 list_add(&pSesInfo->smb_ses_list, &srvTcp->smb_ses_list);
2360                 write_unlock(&cifs_tcp_ses_lock);
2361
2362                 /* volume_info->password freed at unmount */
2363                 if (volume_info->password) {
2364                         pSesInfo->password = kstrdup(volume_info->password,
2365                                                      GFP_KERNEL);
2366                         if (!pSesInfo->password) {
2367                                 rc = -ENOMEM;
2368                                 goto mount_fail_check;
2369                         }
2370                 }
2371                 if (volume_info->username)
2372                         strncpy(pSesInfo->userName, volume_info->username,
2373                                 MAX_USERNAME_SIZE);
2374                 if (volume_info->domainname) {
2375                         int len = strlen(volume_info->domainname);
2376                         pSesInfo->domainName = kmalloc(len + 1, GFP_KERNEL);
2377                         if (pSesInfo->domainName)
2378                                 strcpy(pSesInfo->domainName,
2379                                         volume_info->domainname);
2380                 }
2381                 pSesInfo->linux_uid = volume_info->linux_uid;
2382                 pSesInfo->overrideSecFlg = volume_info->secFlg;
2383                 down(&pSesInfo->sesSem);
2384
2385                 /* BB FIXME need to pass vol->secFlgs BB */
2386                 rc = cifs_setup_session(xid, pSesInfo,
2387                                         cifs_sb->local_nls);
2388                 up(&pSesInfo->sesSem);
2389         }
2390
2391         /* search for existing tcon to this server share */
2392         if (!rc) {
2393                 setup_cifs_sb(volume_info, cifs_sb);
2394
2395                 tcon = cifs_find_tcon(pSesInfo, volume_info->UNC);
2396                 if (tcon) {
2397                         cFYI(1, ("Found match on UNC path"));
2398                         /* existing tcon already has a reference */
2399                         cifs_put_smb_ses(pSesInfo);
2400                         if (tcon->seal != volume_info->seal)
2401                                 cERROR(1, ("transport encryption setting "
2402                                            "conflicts with existing tid"));
2403                 } else {
2404                         tcon = tconInfoAlloc();
2405                         if (tcon == NULL) {
2406                                 rc = -ENOMEM;
2407                                 goto mount_fail_check;
2408                         }
2409
2410                         tcon->ses = pSesInfo;
2411                         if (volume_info->password) {
2412                                 tcon->password = kstrdup(volume_info->password,
2413                                                          GFP_KERNEL);
2414                                 if (!tcon->password) {
2415                                         rc = -ENOMEM;
2416                                         goto mount_fail_check;
2417                                 }
2418                         }
2419
2420                         if ((strchr(volume_info->UNC + 3, '\\') == NULL)
2421                             && (strchr(volume_info->UNC + 3, '/') == NULL)) {
2422                                 cERROR(1, ("Missing share name"));
2423                                 rc = -ENODEV;
2424                                 goto mount_fail_check;
2425                         } else {
2426                                 /* BB Do we need to wrap sesSem around
2427                                  * this TCon call and Unix SetFS as
2428                                  * we do on SessSetup and reconnect? */
2429                                 rc = CIFSTCon(xid, pSesInfo, volume_info->UNC,
2430                                               tcon, cifs_sb->local_nls);
2431                                 cFYI(1, ("CIFS Tcon rc = %d", rc));
2432                                 if (volume_info->nodfs) {
2433                                         tcon->Flags &= ~SMB_SHARE_IS_IN_DFS;
2434                                         cFYI(1, ("DFS disabled (%d)",
2435                                                 tcon->Flags));
2436                                 }
2437                         }
2438                         if (rc)
2439                                 goto remote_path_check;
2440                         tcon->seal = volume_info->seal;
2441                         write_lock(&cifs_tcp_ses_lock);
2442                         list_add(&tcon->tcon_list, &pSesInfo->tcon_list);
2443                         write_unlock(&cifs_tcp_ses_lock);
2444                 }
2445
2446                 /* we can have only one retry value for a connection
2447                    to a share so for resources mounted more than once
2448                    to the same server share the last value passed in
2449                    for the retry flag is used */
2450                 tcon->retry = volume_info->retry;
2451                 tcon->nocase = volume_info->nocase;
2452                 tcon->local_lease = volume_info->local_lease;
2453         }
2454         if (pSesInfo) {
2455                 if (pSesInfo->capabilities & CAP_LARGE_FILES) {
2456                         sb->s_maxbytes = (u64) 1 << 63;
2457                 } else
2458                         sb->s_maxbytes = (u64) 1 << 31; /* 2 GB */
2459         }
2460
2461         /* BB FIXME fix time_gran to be larger for LANMAN sessions */
2462         sb->s_time_gran = 100;
2463
2464         if (rc)
2465                 goto remote_path_check;
2466
2467         cifs_sb->tcon = tcon;
2468
2469         /* do not care if following two calls succeed - informational */
2470         if (!tcon->ipc) {
2471                 CIFSSMBQFSDeviceInfo(xid, tcon);
2472                 CIFSSMBQFSAttributeInfo(xid, tcon);
2473         }
2474
2475         /* tell server which Unix caps we support */
2476         if (tcon->ses->capabilities & CAP_UNIX)
2477                 /* reset of caps checks mount to see if unix extensions
2478                    disabled for just this mount */
2479                 reset_cifs_unix_caps(xid, tcon, sb, volume_info);
2480         else
2481                 tcon->unix_ext = 0; /* server does not support them */
2482
2483         /* convert forward to back slashes in prepath here if needed */
2484         if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2485                 convert_delimiter(cifs_sb->prepath, CIFS_DIR_SEP(cifs_sb));
2486
2487         if ((tcon->unix_ext == 0) && (cifs_sb->rsize > (1024 * 127))) {
2488                 cifs_sb->rsize = 1024 * 127;
2489                 cFYI(DBG2, ("no very large read support, rsize now 127K"));
2490         }
2491         if (!(tcon->ses->capabilities & CAP_LARGE_WRITE_X))
2492                 cifs_sb->wsize = min(cifs_sb->wsize,
2493                                (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2494         if (!(tcon->ses->capabilities & CAP_LARGE_READ_X))
2495                 cifs_sb->rsize = min(cifs_sb->rsize,
2496                                (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2497
2498 remote_path_check:
2499         /* check if a whole path (including prepath) is not remote */
2500         if (!rc && cifs_sb->prepathlen && tcon) {
2501                 /* build_path_to_root works only when we have a valid tcon */
2502                 full_path = cifs_build_path_to_root(cifs_sb);
2503                 if (full_path == NULL) {
2504                         rc = -ENOMEM;
2505                         goto mount_fail_check;
2506                 }
2507                 rc = is_path_accessible(xid, tcon, cifs_sb, full_path);
2508                 if (rc != -EREMOTE) {
2509                         kfree(full_path);
2510                         goto mount_fail_check;
2511                 }
2512                 kfree(full_path);
2513         }
2514
2515         /* get referral if needed */
2516         if (rc == -EREMOTE) {
2517 #ifdef CONFIG_CIFS_DFS_UPCALL
2518                 if (referral_walks_count > MAX_NESTED_LINKS) {
2519                         /*
2520                          * BB: when we implement proper loop detection,
2521                          *     we will remove this check. But now we need it
2522                          *     to prevent an indefinite loop if 'DFS tree' is
2523                          *     misconfigured (i.e. has loops).
2524                          */
2525                         rc = -ELOOP;
2526                         goto mount_fail_check;
2527                 }
2528                 /* convert forward to back slashes in prepath here if needed */
2529                 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2530                         convert_delimiter(cifs_sb->prepath,
2531                                         CIFS_DIR_SEP(cifs_sb));
2532                 full_path = build_unc_path_to_root(volume_info, cifs_sb);
2533                 if (IS_ERR(full_path)) {
2534                         rc = PTR_ERR(full_path);
2535                         goto mount_fail_check;
2536                 }
2537
2538                 cFYI(1, ("Getting referral for: %s", full_path));
2539                 rc = get_dfs_path(xid, pSesInfo , full_path + 1,
2540                         cifs_sb->local_nls, &num_referrals, &referrals,
2541                         cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
2542                 if (!rc && num_referrals > 0) {
2543                         char *fake_devname = NULL;
2544
2545                         if (mount_data != mount_data_global)
2546                                 kfree(mount_data);
2547                         mount_data = cifs_compose_mount_options(
2548                                         cifs_sb->mountdata, full_path + 1,
2549                                         referrals, &fake_devname);
2550                         kfree(fake_devname);
2551                         free_dfs_info_array(referrals, num_referrals);
2552
2553                         if (tcon)
2554                                 cifs_put_tcon(tcon);
2555                         else if (pSesInfo)
2556                                 cifs_put_smb_ses(pSesInfo);
2557
2558                         cleanup_volume_info(&volume_info);
2559                         FreeXid(xid);
2560                         kfree(full_path);
2561                         referral_walks_count++;
2562                         goto try_mount_again;
2563                 }
2564 #else /* No DFS support, return error on mount */
2565                 rc = -EOPNOTSUPP;
2566 #endif
2567         }
2568
2569 mount_fail_check:
2570         /* on error free sesinfo and tcon struct if needed */
2571         if (rc) {
2572                 if (mount_data != mount_data_global)
2573                         kfree(mount_data);
2574                 /* If find_unc succeeded then rc == 0 so we can not end */
2575                 /* up accidently freeing someone elses tcon struct */
2576                 if (tcon)
2577                         cifs_put_tcon(tcon);
2578                 else if (pSesInfo)
2579                         cifs_put_smb_ses(pSesInfo);
2580                 else
2581                         cifs_put_tcp_session(srvTcp);
2582                 goto out;
2583         }
2584
2585         /* volume_info->password is freed above when existing session found
2586         (in which case it is not needed anymore) but when new sesion is created
2587         the password ptr is put in the new session structure (in which case the
2588         password will be freed at unmount time) */
2589 out:
2590         /* zero out password before freeing */
2591         cleanup_volume_info(&volume_info);
2592         FreeXid(xid);
2593         return rc;
2594 }
2595
2596 int
2597 CIFSTCon(unsigned int xid, struct cifsSesInfo *ses,
2598          const char *tree, struct cifsTconInfo *tcon,
2599          const struct nls_table *nls_codepage)
2600 {
2601         struct smb_hdr *smb_buffer;
2602         struct smb_hdr *smb_buffer_response;
2603         TCONX_REQ *pSMB;
2604         TCONX_RSP *pSMBr;
2605         unsigned char *bcc_ptr;
2606         int rc = 0;
2607         int length, bytes_left;
2608         __u16 count;
2609
2610         if (ses == NULL)
2611                 return -EIO;
2612
2613         smb_buffer = cifs_buf_get();
2614         if (smb_buffer == NULL) {
2615                 return -ENOMEM;
2616         }
2617         smb_buffer_response = smb_buffer;
2618
2619         header_assemble(smb_buffer, SMB_COM_TREE_CONNECT_ANDX,
2620                         NULL /*no tid */ , 4 /*wct */ );
2621
2622         smb_buffer->Mid = GetNextMid(ses->server);
2623         smb_buffer->Uid = ses->Suid;
2624         pSMB = (TCONX_REQ *) smb_buffer;
2625         pSMBr = (TCONX_RSP *) smb_buffer_response;
2626
2627         pSMB->AndXCommand = 0xFF;
2628         pSMB->Flags = cpu_to_le16(TCON_EXTENDED_SECINFO);
2629         bcc_ptr = &pSMB->Password[0];
2630         if ((ses->server->secMode) & SECMODE_USER) {
2631                 pSMB->PasswordLength = cpu_to_le16(1);  /* minimum */
2632                 *bcc_ptr = 0; /* password is null byte */
2633                 bcc_ptr++;              /* skip password */
2634                 /* already aligned so no need to do it below */
2635         } else {
2636                 pSMB->PasswordLength = cpu_to_le16(CIFS_SESS_KEY_SIZE);
2637                 /* BB FIXME add code to fail this if NTLMv2 or Kerberos
2638                    specified as required (when that support is added to
2639                    the vfs in the future) as only NTLM or the much
2640                    weaker LANMAN (which we do not send by default) is accepted
2641                    by Samba (not sure whether other servers allow
2642                    NTLMv2 password here) */
2643 #ifdef CONFIG_CIFS_WEAK_PW_HASH
2644                 if ((extended_security & CIFSSEC_MAY_LANMAN) &&
2645                     (ses->server->secType == LANMAN))
2646                         calc_lanman_hash(tcon->password, ses->server->cryptKey,
2647                                          ses->server->secMode &
2648                                             SECMODE_PW_ENCRYPT ? true : false,
2649                                          bcc_ptr);
2650                 else
2651 #endif /* CIFS_WEAK_PW_HASH */
2652                 SMBNTencrypt(tcon->password, ses->server->cryptKey,
2653                              bcc_ptr);
2654
2655                 bcc_ptr += CIFS_SESS_KEY_SIZE;
2656                 if (ses->capabilities & CAP_UNICODE) {
2657                         /* must align unicode strings */
2658                         *bcc_ptr = 0; /* null byte password */
2659                         bcc_ptr++;
2660                 }
2661         }
2662
2663         if (ses->server->secMode &
2664                         (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
2665                 smb_buffer->Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
2666
2667         if (ses->capabilities & CAP_STATUS32) {
2668                 smb_buffer->Flags2 |= SMBFLG2_ERR_STATUS;
2669         }
2670         if (ses->capabilities & CAP_DFS) {
2671                 smb_buffer->Flags2 |= SMBFLG2_DFS;
2672         }
2673         if (ses->capabilities & CAP_UNICODE) {
2674                 smb_buffer->Flags2 |= SMBFLG2_UNICODE;
2675                 length =
2676                     cifs_strtoUCS((__le16 *) bcc_ptr, tree,
2677                         6 /* max utf8 char length in bytes */ *
2678                         (/* server len*/ + 256 /* share len */), nls_codepage);
2679                 bcc_ptr += 2 * length;  /* convert num 16 bit words to bytes */
2680                 bcc_ptr += 2;   /* skip trailing null */
2681         } else {                /* ASCII */
2682                 strcpy(bcc_ptr, tree);
2683                 bcc_ptr += strlen(tree) + 1;
2684         }
2685         strcpy(bcc_ptr, "?????");
2686         bcc_ptr += strlen("?????");
2687         bcc_ptr += 1;
2688         count = bcc_ptr - &pSMB->Password[0];
2689         pSMB->hdr.smb_buf_length += count;
2690         pSMB->ByteCount = cpu_to_le16(count);
2691
2692         rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response, &length,
2693                          CIFS_STD_OP);
2694
2695         /* above now done in SendReceive */
2696         if ((rc == 0) && (tcon != NULL)) {
2697                 bool is_unicode;
2698
2699                 tcon->tidStatus = CifsGood;
2700                 tcon->need_reconnect = false;
2701                 tcon->tid = smb_buffer_response->Tid;
2702                 bcc_ptr = pByteArea(smb_buffer_response);
2703                 bytes_left = BCC(smb_buffer_response);
2704                 length = strnlen(bcc_ptr, bytes_left - 2);
2705                 if (smb_buffer->Flags2 & SMBFLG2_UNICODE)
2706                         is_unicode = true;
2707                 else
2708                         is_unicode = false;
2709
2710
2711                 /* skip service field (NB: this field is always ASCII) */
2712                 if (length == 3) {
2713                         if ((bcc_ptr[0] == 'I') && (bcc_ptr[1] == 'P') &&
2714                             (bcc_ptr[2] == 'C')) {
2715                                 cFYI(1, ("IPC connection"));
2716                                 tcon->ipc = 1;
2717                         }
2718                 } else if (length == 2) {
2719                         if ((bcc_ptr[0] == 'A') && (bcc_ptr[1] == ':')) {
2720                                 /* the most common case */
2721                                 cFYI(1, ("disk share connection"));
2722                         }
2723                 }
2724                 bcc_ptr += length + 1;
2725                 bytes_left -= (length + 1);
2726                 strncpy(tcon->treeName, tree, MAX_TREE_SIZE);
2727
2728                 /* mostly informational -- no need to fail on error here */
2729                 tcon->nativeFileSystem = cifs_strndup_from_ucs(bcc_ptr,
2730                                                       bytes_left, is_unicode,
2731                                                       nls_codepage);
2732
2733                 cFYI(1, ("nativeFileSystem=%s", tcon->nativeFileSystem));
2734
2735                 if ((smb_buffer_response->WordCount == 3) ||
2736                          (smb_buffer_response->WordCount == 7))
2737                         /* field is in same location */
2738                         tcon->Flags = le16_to_cpu(pSMBr->OptionalSupport);
2739                 else
2740                         tcon->Flags = 0;
2741                 cFYI(1, ("Tcon flags: 0x%x ", tcon->Flags));
2742         } else if ((rc == 0) && tcon == NULL) {
2743                 /* all we need to save for IPC$ connection */
2744                 ses->ipc_tid = smb_buffer_response->Tid;
2745         }
2746
2747         cifs_buf_release(smb_buffer);
2748         return rc;
2749 }
2750
2751 int
2752 cifs_umount(struct super_block *sb, struct cifs_sb_info *cifs_sb)
2753 {
2754         int rc = 0;
2755         char *tmp;
2756
2757         if (cifs_sb->tcon)
2758                 cifs_put_tcon(cifs_sb->tcon);
2759
2760         cifs_sb->tcon = NULL;
2761         tmp = cifs_sb->prepath;
2762         cifs_sb->prepathlen = 0;
2763         cifs_sb->prepath = NULL;
2764         kfree(tmp);
2765
2766         return rc;
2767 }
2768
2769 int cifs_setup_session(unsigned int xid, struct cifsSesInfo *pSesInfo,
2770                                            struct nls_table *nls_info)
2771 {
2772         int rc = 0;
2773         int first_time = 0;
2774         struct TCP_Server_Info *server = pSesInfo->server;
2775
2776         /* what if server changes its buffer size after dropping the session? */
2777         if (server->maxBuf == 0) /* no need to send on reconnect */ {
2778                 rc = CIFSSMBNegotiate(xid, pSesInfo);
2779                 if (rc == -EAGAIN) {
2780                         /* retry only once on 1st time connection */
2781                         rc = CIFSSMBNegotiate(xid, pSesInfo);
2782                         if (rc == -EAGAIN)
2783                                 rc = -EHOSTDOWN;
2784                 }
2785                 if (rc == 0) {
2786                         spin_lock(&GlobalMid_Lock);
2787                         if (server->tcpStatus != CifsExiting)
2788                                 server->tcpStatus = CifsGood;
2789                         else
2790                                 rc = -EHOSTDOWN;
2791                         spin_unlock(&GlobalMid_Lock);
2792
2793                 }
2794                 first_time = 1;
2795         }
2796
2797         if (rc)
2798                 goto ss_err_exit;
2799
2800         pSesInfo->flags = 0;
2801         pSesInfo->capabilities = server->capabilities;
2802         if (linuxExtEnabled == 0)
2803                 pSesInfo->capabilities &= (~CAP_UNIX);
2804
2805         cFYI(1, ("Security Mode: 0x%x Capabilities: 0x%x TimeAdjust: %d",
2806                  server->secMode, server->capabilities, server->timeAdj));
2807
2808         rc = CIFS_SessSetup(xid, pSesInfo, first_time, nls_info);
2809         if (rc) {
2810                 cERROR(1, ("Send error in SessSetup = %d", rc));
2811         } else {
2812                 cFYI(1, ("CIFS Session Established successfully"));
2813                 spin_lock(&GlobalMid_Lock);
2814                 pSesInfo->status = CifsGood;
2815                 pSesInfo->need_reconnect = false;
2816                 spin_unlock(&GlobalMid_Lock);
2817         }
2818
2819 ss_err_exit:
2820         return rc;
2821 }
2822