623441773c6a8e1109606564fb5c5c739b7e094a
[firefly-linux-kernel-4.4.55.git] / fs / cifs / connect.c
1 /*
2  *   fs/cifs/connect.c
3  *
4  *   Copyright (C) International Business Machines  Corp., 2002,2009
5  *   Author(s): Steve French (sfrench@us.ibm.com)
6  *
7  *   This library is free software; you can redistribute it and/or modify
8  *   it under the terms of the GNU Lesser General Public License as published
9  *   by the Free Software Foundation; either version 2.1 of the License, or
10  *   (at your option) any later version.
11  *
12  *   This library is distributed in the hope that it will be useful,
13  *   but WITHOUT ANY WARRANTY; without even the implied warranty of
14  *   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See
15  *   the GNU Lesser General Public License for more details.
16  *
17  *   You should have received a copy of the GNU Lesser General Public License
18  *   along with this library; if not, write to the Free Software
19  *   Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
20  */
21 #include <linux/fs.h>
22 #include <linux/net.h>
23 #include <linux/string.h>
24 #include <linux/list.h>
25 #include <linux/wait.h>
26 #include <linux/pagemap.h>
27 #include <linux/ctype.h>
28 #include <linux/utsname.h>
29 #include <linux/mempool.h>
30 #include <linux/delay.h>
31 #include <linux/completion.h>
32 #include <linux/kthread.h>
33 #include <linux/pagevec.h>
34 #include <linux/freezer.h>
35 #include <linux/namei.h>
36 #include <asm/uaccess.h>
37 #include <asm/processor.h>
38 #include <linux/inet.h>
39 #include <net/ipv6.h>
40 #include "cifspdu.h"
41 #include "cifsglob.h"
42 #include "cifsproto.h"
43 #include "cifs_unicode.h"
44 #include "cifs_debug.h"
45 #include "cifs_fs_sb.h"
46 #include "ntlmssp.h"
47 #include "nterr.h"
48 #include "rfc1002pdu.h"
49 #include "cn_cifs.h"
50
51 #define CIFS_PORT 445
52 #define RFC1001_PORT 139
53
54 extern void SMBNTencrypt(unsigned char *passwd, unsigned char *c8,
55                          unsigned char *p24);
56
57 extern mempool_t *cifs_req_poolp;
58
59 struct smb_vol {
60         char *username;
61         char *password;
62         char *domainname;
63         char *UNC;
64         char *UNCip;
65         char *iocharset;  /* local code page for mapping to and from Unicode */
66         char source_rfc1001_name[16]; /* netbios name of client */
67         char target_rfc1001_name[16]; /* netbios name of server for Win9x/ME */
68         uid_t linux_uid;
69         gid_t linux_gid;
70         mode_t file_mode;
71         mode_t dir_mode;
72         unsigned secFlg;
73         bool retry:1;
74         bool intr:1;
75         bool setuids:1;
76         bool override_uid:1;
77         bool override_gid:1;
78         bool dynperm:1;
79         bool noperm:1;
80         bool no_psx_acl:1; /* set if posix acl support should be disabled */
81         bool cifs_acl:1;
82         bool no_xattr:1;   /* set if xattr (EA) support should be disabled*/
83         bool server_ino:1; /* use inode numbers from server ie UniqueId */
84         bool direct_io:1;
85         bool remap:1;      /* set to remap seven reserved chars in filenames */
86         bool posix_paths:1; /* unset to not ask for posix pathnames. */
87         bool no_linux_ext:1;
88         bool sfu_emul:1;
89         bool nullauth:1;   /* attempt to authenticate with null user */
90         bool nocase:1;     /* request case insensitive filenames */
91         bool nobrl:1;      /* disable sending byte range locks to srv */
92         bool mand_lock:1;  /* send mandatory not posix byte range lock reqs */
93         bool seal:1;       /* request transport encryption on share */
94         bool nodfs:1;      /* Do not request DFS, even if available */
95         bool local_lease:1; /* check leases only on local system, not remote */
96         bool noblocksnd:1;
97         bool noautotune:1;
98         bool nostrictsync:1; /* do not force expensive SMBflush on every sync */
99         unsigned int rsize;
100         unsigned int wsize;
101         unsigned int sockopt;
102         unsigned short int port;
103         char *prepath;
104 };
105
106 static int ipv4_connect(struct TCP_Server_Info *server);
107 static int ipv6_connect(struct TCP_Server_Info *server);
108
109 /*
110  * cifs tcp session reconnection
111  *
112  * mark tcp session as reconnecting so temporarily locked
113  * mark all smb sessions as reconnecting for tcp session
114  * reconnect tcp session
115  * wake up waiters on reconnection? - (not needed currently)
116  */
117 static int
118 cifs_reconnect(struct TCP_Server_Info *server)
119 {
120         int rc = 0;
121         struct list_head *tmp, *tmp2;
122         struct cifsSesInfo *ses;
123         struct cifsTconInfo *tcon;
124         struct mid_q_entry *mid_entry;
125
126         spin_lock(&GlobalMid_Lock);
127         if (server->tcpStatus == CifsExiting) {
128                 /* the demux thread will exit normally
129                 next time through the loop */
130                 spin_unlock(&GlobalMid_Lock);
131                 return rc;
132         } else
133                 server->tcpStatus = CifsNeedReconnect;
134         spin_unlock(&GlobalMid_Lock);
135         server->maxBuf = 0;
136
137         cFYI(1, ("Reconnecting tcp session"));
138
139         /* before reconnecting the tcp session, mark the smb session (uid)
140                 and the tid bad so they are not used until reconnected */
141         read_lock(&cifs_tcp_ses_lock);
142         list_for_each(tmp, &server->smb_ses_list) {
143                 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
144                 ses->need_reconnect = true;
145                 ses->ipc_tid = 0;
146                 list_for_each(tmp2, &ses->tcon_list) {
147                         tcon = list_entry(tmp2, struct cifsTconInfo, tcon_list);
148                         tcon->need_reconnect = true;
149                 }
150         }
151         read_unlock(&cifs_tcp_ses_lock);
152         /* do not want to be sending data on a socket we are freeing */
153         mutex_lock(&server->srv_mutex);
154         if (server->ssocket) {
155                 cFYI(1, ("State: 0x%x Flags: 0x%lx", server->ssocket->state,
156                         server->ssocket->flags));
157                 kernel_sock_shutdown(server->ssocket, SHUT_WR);
158                 cFYI(1, ("Post shutdown state: 0x%x Flags: 0x%lx",
159                         server->ssocket->state,
160                         server->ssocket->flags));
161                 sock_release(server->ssocket);
162                 server->ssocket = NULL;
163         }
164
165         spin_lock(&GlobalMid_Lock);
166         list_for_each(tmp, &server->pending_mid_q) {
167                 mid_entry = list_entry(tmp, struct
168                                         mid_q_entry,
169                                         qhead);
170                 if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
171                                 /* Mark other intransit requests as needing
172                                    retry so we do not immediately mark the
173                                    session bad again (ie after we reconnect
174                                    below) as they timeout too */
175                         mid_entry->midState = MID_RETRY_NEEDED;
176                 }
177         }
178         spin_unlock(&GlobalMid_Lock);
179         mutex_unlock(&server->srv_mutex);
180
181         while ((server->tcpStatus != CifsExiting) &&
182                (server->tcpStatus != CifsGood)) {
183                 try_to_freeze();
184                 if (server->addr.sockAddr6.sin6_family == AF_INET6)
185                         rc = ipv6_connect(server);
186                 else
187                         rc = ipv4_connect(server);
188                 if (rc) {
189                         cFYI(1, ("reconnect error %d", rc));
190                         msleep(3000);
191                 } else {
192                         atomic_inc(&tcpSesReconnectCount);
193                         spin_lock(&GlobalMid_Lock);
194                         if (server->tcpStatus != CifsExiting)
195                                 server->tcpStatus = CifsGood;
196                         server->sequence_number = 0;
197                         spin_unlock(&GlobalMid_Lock);
198         /*              atomic_set(&server->inFlight,0);*/
199                         wake_up(&server->response_q);
200                 }
201         }
202         return rc;
203 }
204
205 /*
206         return codes:
207                 0       not a transact2, or all data present
208                 >0      transact2 with that much data missing
209                 -EINVAL = invalid transact2
210
211  */
212 static int check2ndT2(struct smb_hdr *pSMB, unsigned int maxBufSize)
213 {
214         struct smb_t2_rsp *pSMBt;
215         int total_data_size;
216         int data_in_this_rsp;
217         int remaining;
218
219         if (pSMB->Command != SMB_COM_TRANSACTION2)
220                 return 0;
221
222         /* check for plausible wct, bcc and t2 data and parm sizes */
223         /* check for parm and data offset going beyond end of smb */
224         if (pSMB->WordCount != 10) { /* coalesce_t2 depends on this */
225                 cFYI(1, ("invalid transact2 word count"));
226                 return -EINVAL;
227         }
228
229         pSMBt = (struct smb_t2_rsp *)pSMB;
230
231         total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
232         data_in_this_rsp = le16_to_cpu(pSMBt->t2_rsp.DataCount);
233
234         remaining = total_data_size - data_in_this_rsp;
235
236         if (remaining == 0)
237                 return 0;
238         else if (remaining < 0) {
239                 cFYI(1, ("total data %d smaller than data in frame %d",
240                         total_data_size, data_in_this_rsp));
241                 return -EINVAL;
242         } else {
243                 cFYI(1, ("missing %d bytes from transact2, check next response",
244                         remaining));
245                 if (total_data_size > maxBufSize) {
246                         cERROR(1, ("TotalDataSize %d is over maximum buffer %d",
247                                 total_data_size, maxBufSize));
248                         return -EINVAL;
249                 }
250                 return remaining;
251         }
252 }
253
254 static int coalesce_t2(struct smb_hdr *psecond, struct smb_hdr *pTargetSMB)
255 {
256         struct smb_t2_rsp *pSMB2 = (struct smb_t2_rsp *)psecond;
257         struct smb_t2_rsp *pSMBt  = (struct smb_t2_rsp *)pTargetSMB;
258         int total_data_size;
259         int total_in_buf;
260         int remaining;
261         int total_in_buf2;
262         char *data_area_of_target;
263         char *data_area_of_buf2;
264         __u16 byte_count;
265
266         total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
267
268         if (total_data_size != le16_to_cpu(pSMB2->t2_rsp.TotalDataCount)) {
269                 cFYI(1, ("total data size of primary and secondary t2 differ"));
270         }
271
272         total_in_buf = le16_to_cpu(pSMBt->t2_rsp.DataCount);
273
274         remaining = total_data_size - total_in_buf;
275
276         if (remaining < 0)
277                 return -EINVAL;
278
279         if (remaining == 0) /* nothing to do, ignore */
280                 return 0;
281
282         total_in_buf2 = le16_to_cpu(pSMB2->t2_rsp.DataCount);
283         if (remaining < total_in_buf2) {
284                 cFYI(1, ("transact2 2nd response contains too much data"));
285         }
286
287         /* find end of first SMB data area */
288         data_area_of_target = (char *)&pSMBt->hdr.Protocol +
289                                 le16_to_cpu(pSMBt->t2_rsp.DataOffset);
290         /* validate target area */
291
292         data_area_of_buf2 = (char *) &pSMB2->hdr.Protocol +
293                                         le16_to_cpu(pSMB2->t2_rsp.DataOffset);
294
295         data_area_of_target += total_in_buf;
296
297         /* copy second buffer into end of first buffer */
298         memcpy(data_area_of_target, data_area_of_buf2, total_in_buf2);
299         total_in_buf += total_in_buf2;
300         pSMBt->t2_rsp.DataCount = cpu_to_le16(total_in_buf);
301         byte_count = le16_to_cpu(BCC_LE(pTargetSMB));
302         byte_count += total_in_buf2;
303         BCC_LE(pTargetSMB) = cpu_to_le16(byte_count);
304
305         byte_count = pTargetSMB->smb_buf_length;
306         byte_count += total_in_buf2;
307
308         /* BB also add check that we are not beyond maximum buffer size */
309
310         pTargetSMB->smb_buf_length = byte_count;
311
312         if (remaining == total_in_buf2) {
313                 cFYI(1, ("found the last secondary response"));
314                 return 0; /* we are done */
315         } else /* more responses to go */
316                 return 1;
317
318 }
319
320 static int
321 cifs_demultiplex_thread(struct TCP_Server_Info *server)
322 {
323         int length;
324         unsigned int pdu_length, total_read;
325         struct smb_hdr *smb_buffer = NULL;
326         struct smb_hdr *bigbuf = NULL;
327         struct smb_hdr *smallbuf = NULL;
328         struct msghdr smb_msg;
329         struct kvec iov;
330         struct socket *csocket = server->ssocket;
331         struct list_head *tmp;
332         struct cifsSesInfo *ses;
333         struct task_struct *task_to_wake = NULL;
334         struct mid_q_entry *mid_entry;
335         char temp;
336         bool isLargeBuf = false;
337         bool isMultiRsp;
338         int reconnect;
339
340         current->flags |= PF_MEMALLOC;
341         cFYI(1, ("Demultiplex PID: %d", task_pid_nr(current)));
342
343         length = atomic_inc_return(&tcpSesAllocCount);
344         if (length > 1)
345                 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
346                                 GFP_KERNEL);
347
348         set_freezable();
349         while (server->tcpStatus != CifsExiting) {
350                 if (try_to_freeze())
351                         continue;
352                 if (bigbuf == NULL) {
353                         bigbuf = cifs_buf_get();
354                         if (!bigbuf) {
355                                 cERROR(1, ("No memory for large SMB response"));
356                                 msleep(3000);
357                                 /* retry will check if exiting */
358                                 continue;
359                         }
360                 } else if (isLargeBuf) {
361                         /* we are reusing a dirty large buf, clear its start */
362                         memset(bigbuf, 0, sizeof(struct smb_hdr));
363                 }
364
365                 if (smallbuf == NULL) {
366                         smallbuf = cifs_small_buf_get();
367                         if (!smallbuf) {
368                                 cERROR(1, ("No memory for SMB response"));
369                                 msleep(1000);
370                                 /* retry will check if exiting */
371                                 continue;
372                         }
373                         /* beginning of smb buffer is cleared in our buf_get */
374                 } else /* if existing small buf clear beginning */
375                         memset(smallbuf, 0, sizeof(struct smb_hdr));
376
377                 isLargeBuf = false;
378                 isMultiRsp = false;
379                 smb_buffer = smallbuf;
380                 iov.iov_base = smb_buffer;
381                 iov.iov_len = 4;
382                 smb_msg.msg_control = NULL;
383                 smb_msg.msg_controllen = 0;
384                 pdu_length = 4; /* enough to get RFC1001 header */
385 incomplete_rcv:
386                 length =
387                     kernel_recvmsg(csocket, &smb_msg,
388                                 &iov, 1, pdu_length, 0 /* BB other flags? */);
389
390                 if (server->tcpStatus == CifsExiting) {
391                         break;
392                 } else if (server->tcpStatus == CifsNeedReconnect) {
393                         cFYI(1, ("Reconnect after server stopped responding"));
394                         cifs_reconnect(server);
395                         cFYI(1, ("call to reconnect done"));
396                         csocket = server->ssocket;
397                         continue;
398                 } else if ((length == -ERESTARTSYS) || (length == -EAGAIN)) {
399                         msleep(1); /* minimum sleep to prevent looping
400                                 allowing socket to clear and app threads to set
401                                 tcpStatus CifsNeedReconnect if server hung */
402                         if (pdu_length < 4) {
403                                 iov.iov_base = (4 - pdu_length) +
404                                                         (char *)smb_buffer;
405                                 iov.iov_len = pdu_length;
406                                 smb_msg.msg_control = NULL;
407                                 smb_msg.msg_controllen = 0;
408                                 goto incomplete_rcv;
409                         } else
410                                 continue;
411                 } else if (length <= 0) {
412                         if (server->tcpStatus == CifsNew) {
413                                 cFYI(1, ("tcp session abend after SMBnegprot"));
414                                 /* some servers kill the TCP session rather than
415                                    returning an SMB negprot error, in which
416                                    case reconnecting here is not going to help,
417                                    and so simply return error to mount */
418                                 break;
419                         }
420                         if (!try_to_freeze() && (length == -EINTR)) {
421                                 cFYI(1, ("cifsd thread killed"));
422                                 break;
423                         }
424                         cFYI(1, ("Reconnect after unexpected peek error %d",
425                                 length));
426                         cifs_reconnect(server);
427                         csocket = server->ssocket;
428                         wake_up(&server->response_q);
429                         continue;
430                 } else if (length < pdu_length) {
431                         cFYI(1, ("requested %d bytes but only got %d bytes",
432                                   pdu_length, length));
433                         pdu_length -= length;
434                         msleep(1);
435                         goto incomplete_rcv;
436                 }
437
438                 /* The right amount was read from socket - 4 bytes */
439                 /* so we can now interpret the length field */
440
441                 /* the first byte big endian of the length field,
442                 is actually not part of the length but the type
443                 with the most common, zero, as regular data */
444                 temp = *((char *) smb_buffer);
445
446                 /* Note that FC 1001 length is big endian on the wire,
447                 but we convert it here so it is always manipulated
448                 as host byte order */
449                 pdu_length = be32_to_cpu((__force __be32)smb_buffer->smb_buf_length);
450                 smb_buffer->smb_buf_length = pdu_length;
451
452                 cFYI(1, ("rfc1002 length 0x%x", pdu_length+4));
453
454                 if (temp == (char) RFC1002_SESSION_KEEP_ALIVE) {
455                         continue;
456                 } else if (temp == (char)RFC1002_POSITIVE_SESSION_RESPONSE) {
457                         cFYI(1, ("Good RFC 1002 session rsp"));
458                         continue;
459                 } else if (temp == (char)RFC1002_NEGATIVE_SESSION_RESPONSE) {
460                         /* we get this from Windows 98 instead of
461                            an error on SMB negprot response */
462                         cFYI(1, ("Negative RFC1002 Session Response Error 0x%x)",
463                                 pdu_length));
464                         if (server->tcpStatus == CifsNew) {
465                                 /* if nack on negprot (rather than
466                                 ret of smb negprot error) reconnecting
467                                 not going to help, ret error to mount */
468                                 break;
469                         } else {
470                                 /* give server a second to
471                                 clean up before reconnect attempt */
472                                 msleep(1000);
473                                 /* always try 445 first on reconnect
474                                 since we get NACK on some if we ever
475                                 connected to port 139 (the NACK is
476                                 since we do not begin with RFC1001
477                                 session initialize frame) */
478                                 server->addr.sockAddr.sin_port =
479                                         htons(CIFS_PORT);
480                                 cifs_reconnect(server);
481                                 csocket = server->ssocket;
482                                 wake_up(&server->response_q);
483                                 continue;
484                         }
485                 } else if (temp != (char) 0) {
486                         cERROR(1, ("Unknown RFC 1002 frame"));
487                         cifs_dump_mem(" Received Data: ", (char *)smb_buffer,
488                                       length);
489                         cifs_reconnect(server);
490                         csocket = server->ssocket;
491                         continue;
492                 }
493
494                 /* else we have an SMB response */
495                 if ((pdu_length > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE - 4) ||
496                             (pdu_length < sizeof(struct smb_hdr) - 1 - 4)) {
497                         cERROR(1, ("Invalid size SMB length %d pdu_length %d",
498                                         length, pdu_length+4));
499                         cifs_reconnect(server);
500                         csocket = server->ssocket;
501                         wake_up(&server->response_q);
502                         continue;
503                 }
504
505                 /* else length ok */
506                 reconnect = 0;
507
508                 if (pdu_length > MAX_CIFS_SMALL_BUFFER_SIZE - 4) {
509                         isLargeBuf = true;
510                         memcpy(bigbuf, smallbuf, 4);
511                         smb_buffer = bigbuf;
512                 }
513                 length = 0;
514                 iov.iov_base = 4 + (char *)smb_buffer;
515                 iov.iov_len = pdu_length;
516                 for (total_read = 0; total_read < pdu_length;
517                      total_read += length) {
518                         length = kernel_recvmsg(csocket, &smb_msg, &iov, 1,
519                                                 pdu_length - total_read, 0);
520                         if ((server->tcpStatus == CifsExiting) ||
521                             (length == -EINTR)) {
522                                 /* then will exit */
523                                 reconnect = 2;
524                                 break;
525                         } else if (server->tcpStatus == CifsNeedReconnect) {
526                                 cifs_reconnect(server);
527                                 csocket = server->ssocket;
528                                 /* Reconnect wakes up rspns q */
529                                 /* Now we will reread sock */
530                                 reconnect = 1;
531                                 break;
532                         } else if ((length == -ERESTARTSYS) ||
533                                    (length == -EAGAIN)) {
534                                 msleep(1); /* minimum sleep to prevent looping,
535                                               allowing socket to clear and app
536                                               threads to set tcpStatus
537                                               CifsNeedReconnect if server hung*/
538                                 length = 0;
539                                 continue;
540                         } else if (length <= 0) {
541                                 cERROR(1, ("Received no data, expecting %d",
542                                               pdu_length - total_read));
543                                 cifs_reconnect(server);
544                                 csocket = server->ssocket;
545                                 reconnect = 1;
546                                 break;
547                         }
548                 }
549                 if (reconnect == 2)
550                         break;
551                 else if (reconnect == 1)
552                         continue;
553
554                 length += 4; /* account for rfc1002 hdr */
555
556
557                 dump_smb(smb_buffer, length);
558                 if (checkSMB(smb_buffer, smb_buffer->Mid, total_read+4)) {
559                         cifs_dump_mem("Bad SMB: ", smb_buffer, 48);
560                         continue;
561                 }
562
563
564                 task_to_wake = NULL;
565                 spin_lock(&GlobalMid_Lock);
566                 list_for_each(tmp, &server->pending_mid_q) {
567                         mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
568
569                         if ((mid_entry->mid == smb_buffer->Mid) &&
570                             (mid_entry->midState == MID_REQUEST_SUBMITTED) &&
571                             (mid_entry->command == smb_buffer->Command)) {
572                                 if (check2ndT2(smb_buffer,server->maxBuf) > 0) {
573                                         /* We have a multipart transact2 resp */
574                                         isMultiRsp = true;
575                                         if (mid_entry->resp_buf) {
576                                                 /* merge response - fix up 1st*/
577                                                 if (coalesce_t2(smb_buffer,
578                                                         mid_entry->resp_buf)) {
579                                                         mid_entry->multiRsp =
580                                                                  true;
581                                                         break;
582                                                 } else {
583                                                         /* all parts received */
584                                                         mid_entry->multiEnd =
585                                                                  true;
586                                                         goto multi_t2_fnd;
587                                                 }
588                                         } else {
589                                                 if (!isLargeBuf) {
590                                                         cERROR(1,("1st trans2 resp needs bigbuf"));
591                                         /* BB maybe we can fix this up,  switch
592                                            to already allocated large buffer? */
593                                                 } else {
594                                                         /* Have first buffer */
595                                                         mid_entry->resp_buf =
596                                                                  smb_buffer;
597                                                         mid_entry->largeBuf =
598                                                                  true;
599                                                         bigbuf = NULL;
600                                                 }
601                                         }
602                                         break;
603                                 }
604                                 mid_entry->resp_buf = smb_buffer;
605                                 mid_entry->largeBuf = isLargeBuf;
606 multi_t2_fnd:
607                                 task_to_wake = mid_entry->tsk;
608                                 mid_entry->midState = MID_RESPONSE_RECEIVED;
609 #ifdef CONFIG_CIFS_STATS2
610                                 mid_entry->when_received = jiffies;
611 #endif
612                                 /* so we do not time out requests to  server
613                                 which is still responding (since server could
614                                 be busy but not dead) */
615                                 server->lstrp = jiffies;
616                                 break;
617                         }
618                 }
619                 spin_unlock(&GlobalMid_Lock);
620                 if (task_to_wake) {
621                         /* Was previous buf put in mpx struct for multi-rsp? */
622                         if (!isMultiRsp) {
623                                 /* smb buffer will be freed by user thread */
624                                 if (isLargeBuf)
625                                         bigbuf = NULL;
626                                 else
627                                         smallbuf = NULL;
628                         }
629                         wake_up_process(task_to_wake);
630                 } else if (!is_valid_oplock_break(smb_buffer, server) &&
631                            !isMultiRsp) {
632                         cERROR(1, ("No task to wake, unknown frame received! "
633                                    "NumMids %d", midCount.counter));
634                         cifs_dump_mem("Received Data is: ", (char *)smb_buffer,
635                                       sizeof(struct smb_hdr));
636 #ifdef CONFIG_CIFS_DEBUG2
637                         cifs_dump_detail(smb_buffer);
638                         cifs_dump_mids(server);
639 #endif /* CIFS_DEBUG2 */
640
641                 }
642         } /* end while !EXITING */
643
644         /* take it off the list, if it's not already */
645         write_lock(&cifs_tcp_ses_lock);
646         list_del_init(&server->tcp_ses_list);
647         write_unlock(&cifs_tcp_ses_lock);
648
649         spin_lock(&GlobalMid_Lock);
650         server->tcpStatus = CifsExiting;
651         spin_unlock(&GlobalMid_Lock);
652         wake_up_all(&server->response_q);
653
654         /* check if we have blocked requests that need to free */
655         /* Note that cifs_max_pending is normally 50, but
656         can be set at module install time to as little as two */
657         spin_lock(&GlobalMid_Lock);
658         if (atomic_read(&server->inFlight) >= cifs_max_pending)
659                 atomic_set(&server->inFlight, cifs_max_pending - 1);
660         /* We do not want to set the max_pending too low or we
661         could end up with the counter going negative */
662         spin_unlock(&GlobalMid_Lock);
663         /* Although there should not be any requests blocked on
664         this queue it can not hurt to be paranoid and try to wake up requests
665         that may haven been blocked when more than 50 at time were on the wire
666         to the same server - they now will see the session is in exit state
667         and get out of SendReceive.  */
668         wake_up_all(&server->request_q);
669         /* give those requests time to exit */
670         msleep(125);
671
672         if (server->ssocket) {
673                 sock_release(csocket);
674                 server->ssocket = NULL;
675         }
676         /* buffer usuallly freed in free_mid - need to free it here on exit */
677         cifs_buf_release(bigbuf);
678         if (smallbuf) /* no sense logging a debug message if NULL */
679                 cifs_small_buf_release(smallbuf);
680
681         /*
682          * BB: we shouldn't have to do any of this. It shouldn't be
683          * possible to exit from the thread with active SMB sessions
684          */
685         read_lock(&cifs_tcp_ses_lock);
686         if (list_empty(&server->pending_mid_q)) {
687                 /* loop through server session structures attached to this and
688                     mark them dead */
689                 list_for_each(tmp, &server->smb_ses_list) {
690                         ses = list_entry(tmp, struct cifsSesInfo,
691                                          smb_ses_list);
692                         ses->status = CifsExiting;
693                         ses->server = NULL;
694                 }
695                 read_unlock(&cifs_tcp_ses_lock);
696         } else {
697                 /* although we can not zero the server struct pointer yet,
698                 since there are active requests which may depnd on them,
699                 mark the corresponding SMB sessions as exiting too */
700                 list_for_each(tmp, &server->smb_ses_list) {
701                         ses = list_entry(tmp, struct cifsSesInfo,
702                                          smb_ses_list);
703                         ses->status = CifsExiting;
704                 }
705
706                 spin_lock(&GlobalMid_Lock);
707                 list_for_each(tmp, &server->pending_mid_q) {
708                 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
709                         if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
710                                 cFYI(1, ("Clearing Mid 0x%x - waking up ",
711                                          mid_entry->mid));
712                                 task_to_wake = mid_entry->tsk;
713                                 if (task_to_wake)
714                                         wake_up_process(task_to_wake);
715                         }
716                 }
717                 spin_unlock(&GlobalMid_Lock);
718                 read_unlock(&cifs_tcp_ses_lock);
719                 /* 1/8th of sec is more than enough time for them to exit */
720                 msleep(125);
721         }
722
723         if (!list_empty(&server->pending_mid_q)) {
724                 /* mpx threads have not exited yet give them
725                 at least the smb send timeout time for long ops */
726                 /* due to delays on oplock break requests, we need
727                 to wait at least 45 seconds before giving up
728                 on a request getting a response and going ahead
729                 and killing cifsd */
730                 cFYI(1, ("Wait for exit from demultiplex thread"));
731                 msleep(46000);
732                 /* if threads still have not exited they are probably never
733                 coming home not much else we can do but free the memory */
734         }
735
736         /* last chance to mark ses pointers invalid
737         if there are any pointing to this (e.g
738         if a crazy root user tried to kill cifsd
739         kernel thread explicitly this might happen) */
740         /* BB: This shouldn't be necessary, see above */
741         read_lock(&cifs_tcp_ses_lock);
742         list_for_each(tmp, &server->smb_ses_list) {
743                 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
744                 ses->server = NULL;
745         }
746         read_unlock(&cifs_tcp_ses_lock);
747
748         kfree(server->hostname);
749         task_to_wake = xchg(&server->tsk, NULL);
750         kfree(server);
751
752         length = atomic_dec_return(&tcpSesAllocCount);
753         if (length  > 0)
754                 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
755                                 GFP_KERNEL);
756
757         /* if server->tsk was NULL then wait for a signal before exiting */
758         if (!task_to_wake) {
759                 set_current_state(TASK_INTERRUPTIBLE);
760                 while (!signal_pending(current)) {
761                         schedule();
762                         set_current_state(TASK_INTERRUPTIBLE);
763                 }
764                 set_current_state(TASK_RUNNING);
765         }
766
767         module_put_and_exit(0);
768 }
769
770 /* extract the host portion of the UNC string */
771 static char *
772 extract_hostname(const char *unc)
773 {
774         const char *src;
775         char *dst, *delim;
776         unsigned int len;
777
778         /* skip double chars at beginning of string */
779         /* BB: check validity of these bytes? */
780         src = unc + 2;
781
782         /* delimiter between hostname and sharename is always '\\' now */
783         delim = strchr(src, '\\');
784         if (!delim)
785                 return ERR_PTR(-EINVAL);
786
787         len = delim - src;
788         dst = kmalloc((len + 1), GFP_KERNEL);
789         if (dst == NULL)
790                 return ERR_PTR(-ENOMEM);
791
792         memcpy(dst, src, len);
793         dst[len] = '\0';
794
795         return dst;
796 }
797
798 static int
799 cifs_parse_mount_options(char *options, const char *devname,
800                          struct smb_vol *vol)
801 {
802         char *value, *data, *end;
803         unsigned int  temp_len, i, j;
804         char separator[2];
805         short int override_uid = -1;
806         short int override_gid = -1;
807         bool uid_specified = false;
808         bool gid_specified = false;
809
810         separator[0] = ',';
811         separator[1] = 0;
812
813         if (Local_System_Name[0] != 0)
814                 memcpy(vol->source_rfc1001_name, Local_System_Name, 15);
815         else {
816                 char *nodename = utsname()->nodename;
817                 int n = strnlen(nodename, 15);
818                 memset(vol->source_rfc1001_name, 0x20, 15);
819                 for (i = 0; i < n; i++) {
820                         /* does not have to be perfect mapping since field is
821                         informational, only used for servers that do not support
822                         port 445 and it can be overridden at mount time */
823                         vol->source_rfc1001_name[i] = toupper(nodename[i]);
824                 }
825         }
826         vol->source_rfc1001_name[15] = 0;
827         /* null target name indicates to use *SMBSERVR default called name
828            if we end up sending RFC1001 session initialize */
829         vol->target_rfc1001_name[0] = 0;
830         vol->linux_uid = current_uid();  /* use current_euid() instead? */
831         vol->linux_gid = current_gid();
832
833         /* default to only allowing write access to owner of the mount */
834         vol->dir_mode = vol->file_mode = S_IRUGO | S_IXUGO | S_IWUSR;
835
836         /* vol->retry default is 0 (i.e. "soft" limited retry not hard retry) */
837         /* default is always to request posix paths. */
838         vol->posix_paths = 1;
839         /* default to using server inode numbers where available */
840         vol->server_ino = 1;
841
842         if (!options)
843                 return 1;
844
845         end = options + strlen(options);
846         if (strncmp(options, "sep=", 4) == 0) {
847                 if (options[4] != 0) {
848                         separator[0] = options[4];
849                         options += 5;
850                 } else {
851                         cFYI(1, ("Null separator not allowed"));
852                 }
853         }
854
855         while ((data = strsep(&options, separator)) != NULL) {
856                 if (!*data)
857                         continue;
858                 if ((value = strchr(data, '=')) != NULL)
859                         *value++ = '\0';
860
861                 /* Have to parse this before we parse for "user" */
862                 if (strnicmp(data, "user_xattr", 10) == 0) {
863                         vol->no_xattr = 0;
864                 } else if (strnicmp(data, "nouser_xattr", 12) == 0) {
865                         vol->no_xattr = 1;
866                 } else if (strnicmp(data, "user", 4) == 0) {
867                         if (!value) {
868                                 printk(KERN_WARNING
869                                        "CIFS: invalid or missing username\n");
870                                 return 1;       /* needs_arg; */
871                         } else if (!*value) {
872                                 /* null user, ie anonymous, authentication */
873                                 vol->nullauth = 1;
874                         }
875                         if (strnlen(value, 200) < 200) {
876                                 vol->username = value;
877                         } else {
878                                 printk(KERN_WARNING "CIFS: username too long\n");
879                                 return 1;
880                         }
881                 } else if (strnicmp(data, "pass", 4) == 0) {
882                         if (!value) {
883                                 vol->password = NULL;
884                                 continue;
885                         } else if (value[0] == 0) {
886                                 /* check if string begins with double comma
887                                    since that would mean the password really
888                                    does start with a comma, and would not
889                                    indicate an empty string */
890                                 if (value[1] != separator[0]) {
891                                         vol->password = NULL;
892                                         continue;
893                                 }
894                         }
895                         temp_len = strlen(value);
896                         /* removed password length check, NTLM passwords
897                                 can be arbitrarily long */
898
899                         /* if comma in password, the string will be
900                         prematurely null terminated.  Commas in password are
901                         specified across the cifs mount interface by a double
902                         comma ie ,, and a comma used as in other cases ie ','
903                         as a parameter delimiter/separator is single and due
904                         to the strsep above is temporarily zeroed. */
905
906                         /* NB: password legally can have multiple commas and
907                         the only illegal character in a password is null */
908
909                         if ((value[temp_len] == 0) &&
910                             (value + temp_len < end) &&
911                             (value[temp_len+1] == separator[0])) {
912                                 /* reinsert comma */
913                                 value[temp_len] = separator[0];
914                                 temp_len += 2;  /* move after second comma */
915                                 while (value[temp_len] != 0)  {
916                                         if (value[temp_len] == separator[0]) {
917                                                 if (value[temp_len+1] ==
918                                                      separator[0]) {
919                                                 /* skip second comma */
920                                                         temp_len++;
921                                                 } else {
922                                                 /* single comma indicating start
923                                                          of next parm */
924                                                         break;
925                                                 }
926                                         }
927                                         temp_len++;
928                                 }
929                                 if (value[temp_len] == 0) {
930                                         options = NULL;
931                                 } else {
932                                         value[temp_len] = 0;
933                                         /* point option to start of next parm */
934                                         options = value + temp_len + 1;
935                                 }
936                                 /* go from value to value + temp_len condensing
937                                 double commas to singles. Note that this ends up
938                                 allocating a few bytes too many, which is ok */
939                                 vol->password = kzalloc(temp_len, GFP_KERNEL);
940                                 if (vol->password == NULL) {
941                                         printk(KERN_WARNING "CIFS: no memory "
942                                                             "for password\n");
943                                         return 1;
944                                 }
945                                 for (i = 0, j = 0; i < temp_len; i++, j++) {
946                                         vol->password[j] = value[i];
947                                         if (value[i] == separator[0]
948                                                 && value[i+1] == separator[0]) {
949                                                 /* skip second comma */
950                                                 i++;
951                                         }
952                                 }
953                                 vol->password[j] = 0;
954                         } else {
955                                 vol->password = kzalloc(temp_len+1, GFP_KERNEL);
956                                 if (vol->password == NULL) {
957                                         printk(KERN_WARNING "CIFS: no memory "
958                                                             "for password\n");
959                                         return 1;
960                                 }
961                                 strcpy(vol->password, value);
962                         }
963                 } else if (!strnicmp(data, "ip", 2) ||
964                            !strnicmp(data, "addr", 4)) {
965                         if (!value || !*value) {
966                                 vol->UNCip = NULL;
967                         } else if (strnlen(value, INET6_ADDRSTRLEN) <
968                                                         INET6_ADDRSTRLEN) {
969                                 vol->UNCip = value;
970                         } else {
971                                 printk(KERN_WARNING "CIFS: ip address "
972                                                     "too long\n");
973                                 return 1;
974                         }
975                 } else if (strnicmp(data, "sec", 3) == 0) {
976                         if (!value || !*value) {
977                                 cERROR(1, ("no security value specified"));
978                                 continue;
979                         } else if (strnicmp(value, "krb5i", 5) == 0) {
980                                 vol->secFlg |= CIFSSEC_MAY_KRB5 |
981                                         CIFSSEC_MUST_SIGN;
982                         } else if (strnicmp(value, "krb5p", 5) == 0) {
983                                 /* vol->secFlg |= CIFSSEC_MUST_SEAL |
984                                         CIFSSEC_MAY_KRB5; */
985                                 cERROR(1, ("Krb5 cifs privacy not supported"));
986                                 return 1;
987                         } else if (strnicmp(value, "krb5", 4) == 0) {
988                                 vol->secFlg |= CIFSSEC_MAY_KRB5;
989 #ifdef CONFIG_CIFS_EXPERIMENTAL
990                         } else if (strnicmp(value, "ntlmsspi", 8) == 0) {
991                                 vol->secFlg |= CIFSSEC_MAY_NTLMSSP |
992                                         CIFSSEC_MUST_SIGN;
993                         } else if (strnicmp(value, "ntlmssp", 7) == 0) {
994                                 vol->secFlg |= CIFSSEC_MAY_NTLMSSP;
995 #endif
996                         } else if (strnicmp(value, "ntlmv2i", 7) == 0) {
997                                 vol->secFlg |= CIFSSEC_MAY_NTLMV2 |
998                                         CIFSSEC_MUST_SIGN;
999                         } else if (strnicmp(value, "ntlmv2", 6) == 0) {
1000                                 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
1001                         } else if (strnicmp(value, "ntlmi", 5) == 0) {
1002                                 vol->secFlg |= CIFSSEC_MAY_NTLM |
1003                                         CIFSSEC_MUST_SIGN;
1004                         } else if (strnicmp(value, "ntlm", 4) == 0) {
1005                                 /* ntlm is default so can be turned off too */
1006                                 vol->secFlg |= CIFSSEC_MAY_NTLM;
1007                         } else if (strnicmp(value, "nontlm", 6) == 0) {
1008                                 /* BB is there a better way to do this? */
1009                                 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
1010 #ifdef CONFIG_CIFS_WEAK_PW_HASH
1011                         } else if (strnicmp(value, "lanman", 6) == 0) {
1012                                 vol->secFlg |= CIFSSEC_MAY_LANMAN;
1013 #endif
1014                         } else if (strnicmp(value, "none", 4) == 0) {
1015                                 vol->nullauth = 1;
1016                         } else {
1017                                 cERROR(1, ("bad security option: %s", value));
1018                                 return 1;
1019                         }
1020                 } else if ((strnicmp(data, "unc", 3) == 0)
1021                            || (strnicmp(data, "target", 6) == 0)
1022                            || (strnicmp(data, "path", 4) == 0)) {
1023                         if (!value || !*value) {
1024                                 printk(KERN_WARNING "CIFS: invalid path to "
1025                                                     "network resource\n");
1026                                 return 1;       /* needs_arg; */
1027                         }
1028                         if ((temp_len = strnlen(value, 300)) < 300) {
1029                                 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1030                                 if (vol->UNC == NULL)
1031                                         return 1;
1032                                 strcpy(vol->UNC, value);
1033                                 if (strncmp(vol->UNC, "//", 2) == 0) {
1034                                         vol->UNC[0] = '\\';
1035                                         vol->UNC[1] = '\\';
1036                                 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1037                                         printk(KERN_WARNING
1038                                                "CIFS: UNC Path does not begin "
1039                                                "with // or \\\\ \n");
1040                                         return 1;
1041                                 }
1042                         } else {
1043                                 printk(KERN_WARNING "CIFS: UNC name too long\n");
1044                                 return 1;
1045                         }
1046                 } else if ((strnicmp(data, "domain", 3) == 0)
1047                            || (strnicmp(data, "workgroup", 5) == 0)) {
1048                         if (!value || !*value) {
1049                                 printk(KERN_WARNING "CIFS: invalid domain name\n");
1050                                 return 1;       /* needs_arg; */
1051                         }
1052                         /* BB are there cases in which a comma can be valid in
1053                         a domain name and need special handling? */
1054                         if (strnlen(value, 256) < 256) {
1055                                 vol->domainname = value;
1056                                 cFYI(1, ("Domain name set"));
1057                         } else {
1058                                 printk(KERN_WARNING "CIFS: domain name too "
1059                                                     "long\n");
1060                                 return 1;
1061                         }
1062                 } else if (strnicmp(data, "prefixpath", 10) == 0) {
1063                         if (!value || !*value) {
1064                                 printk(KERN_WARNING
1065                                         "CIFS: invalid path prefix\n");
1066                                 return 1;       /* needs_argument */
1067                         }
1068                         if ((temp_len = strnlen(value, 1024)) < 1024) {
1069                                 if (value[0] != '/')
1070                                         temp_len++;  /* missing leading slash */
1071                                 vol->prepath = kmalloc(temp_len+1, GFP_KERNEL);
1072                                 if (vol->prepath == NULL)
1073                                         return 1;
1074                                 if (value[0] != '/') {
1075                                         vol->prepath[0] = '/';
1076                                         strcpy(vol->prepath+1, value);
1077                                 } else
1078                                         strcpy(vol->prepath, value);
1079                                 cFYI(1, ("prefix path %s", vol->prepath));
1080                         } else {
1081                                 printk(KERN_WARNING "CIFS: prefix too long\n");
1082                                 return 1;
1083                         }
1084                 } else if (strnicmp(data, "iocharset", 9) == 0) {
1085                         if (!value || !*value) {
1086                                 printk(KERN_WARNING "CIFS: invalid iocharset "
1087                                                     "specified\n");
1088                                 return 1;       /* needs_arg; */
1089                         }
1090                         if (strnlen(value, 65) < 65) {
1091                                 if (strnicmp(value, "default", 7))
1092                                         vol->iocharset = value;
1093                                 /* if iocharset not set then load_nls_default
1094                                    is used by caller */
1095                                 cFYI(1, ("iocharset set to %s", value));
1096                         } else {
1097                                 printk(KERN_WARNING "CIFS: iocharset name "
1098                                                     "too long.\n");
1099                                 return 1;
1100                         }
1101                 } else if (!strnicmp(data, "uid", 3) && value && *value) {
1102                         vol->linux_uid = simple_strtoul(value, &value, 0);
1103                         uid_specified = true;
1104                 } else if (!strnicmp(data, "forceuid", 8)) {
1105                         override_uid = 1;
1106                 } else if (!strnicmp(data, "noforceuid", 10)) {
1107                         override_uid = 0;
1108                 } else if (!strnicmp(data, "gid", 3) && value && *value) {
1109                         vol->linux_gid = simple_strtoul(value, &value, 0);
1110                         gid_specified = true;
1111                 } else if (!strnicmp(data, "forcegid", 8)) {
1112                         override_gid = 1;
1113                 } else if (!strnicmp(data, "noforcegid", 10)) {
1114                         override_gid = 0;
1115                 } else if (strnicmp(data, "file_mode", 4) == 0) {
1116                         if (value && *value) {
1117                                 vol->file_mode =
1118                                         simple_strtoul(value, &value, 0);
1119                         }
1120                 } else if (strnicmp(data, "dir_mode", 4) == 0) {
1121                         if (value && *value) {
1122                                 vol->dir_mode =
1123                                         simple_strtoul(value, &value, 0);
1124                         }
1125                 } else if (strnicmp(data, "dirmode", 4) == 0) {
1126                         if (value && *value) {
1127                                 vol->dir_mode =
1128                                         simple_strtoul(value, &value, 0);
1129                         }
1130                 } else if (strnicmp(data, "port", 4) == 0) {
1131                         if (value && *value) {
1132                                 vol->port =
1133                                         simple_strtoul(value, &value, 0);
1134                         }
1135                 } else if (strnicmp(data, "rsize", 5) == 0) {
1136                         if (value && *value) {
1137                                 vol->rsize =
1138                                         simple_strtoul(value, &value, 0);
1139                         }
1140                 } else if (strnicmp(data, "wsize", 5) == 0) {
1141                         if (value && *value) {
1142                                 vol->wsize =
1143                                         simple_strtoul(value, &value, 0);
1144                         }
1145                 } else if (strnicmp(data, "sockopt", 5) == 0) {
1146                         if (value && *value) {
1147                                 vol->sockopt =
1148                                         simple_strtoul(value, &value, 0);
1149                         }
1150                 } else if (strnicmp(data, "netbiosname", 4) == 0) {
1151                         if (!value || !*value || (*value == ' ')) {
1152                                 cFYI(1, ("invalid (empty) netbiosname"));
1153                         } else {
1154                                 memset(vol->source_rfc1001_name, 0x20, 15);
1155                                 for (i = 0; i < 15; i++) {
1156                                 /* BB are there cases in which a comma can be
1157                                 valid in this workstation netbios name (and need
1158                                 special handling)? */
1159
1160                                 /* We do not uppercase netbiosname for user */
1161                                         if (value[i] == 0)
1162                                                 break;
1163                                         else
1164                                                 vol->source_rfc1001_name[i] =
1165                                                                 value[i];
1166                                 }
1167                                 /* The string has 16th byte zero still from
1168                                 set at top of the function  */
1169                                 if ((i == 15) && (value[i] != 0))
1170                                         printk(KERN_WARNING "CIFS: netbiosname"
1171                                                 " longer than 15 truncated.\n");
1172                         }
1173                 } else if (strnicmp(data, "servern", 7) == 0) {
1174                         /* servernetbiosname specified override *SMBSERVER */
1175                         if (!value || !*value || (*value == ' ')) {
1176                                 cFYI(1, ("empty server netbiosname specified"));
1177                         } else {
1178                                 /* last byte, type, is 0x20 for servr type */
1179                                 memset(vol->target_rfc1001_name, 0x20, 16);
1180
1181                                 for (i = 0; i < 15; i++) {
1182                                 /* BB are there cases in which a comma can be
1183                                    valid in this workstation netbios name
1184                                    (and need special handling)? */
1185
1186                                 /* user or mount helper must uppercase
1187                                    the netbiosname */
1188                                         if (value[i] == 0)
1189                                                 break;
1190                                         else
1191                                                 vol->target_rfc1001_name[i] =
1192                                                                 value[i];
1193                                 }
1194                                 /* The string has 16th byte zero still from
1195                                    set at top of the function  */
1196                                 if ((i == 15) && (value[i] != 0))
1197                                         printk(KERN_WARNING "CIFS: server net"
1198                                         "biosname longer than 15 truncated.\n");
1199                         }
1200                 } else if (strnicmp(data, "credentials", 4) == 0) {
1201                         /* ignore */
1202                 } else if (strnicmp(data, "version", 3) == 0) {
1203                         /* ignore */
1204                 } else if (strnicmp(data, "guest", 5) == 0) {
1205                         /* ignore */
1206                 } else if (strnicmp(data, "rw", 2) == 0) {
1207                         /* ignore */
1208                 } else if (strnicmp(data, "ro", 2) == 0) {
1209                         /* ignore */
1210                 } else if (strnicmp(data, "noblocksend", 11) == 0) {
1211                         vol->noblocksnd = 1;
1212                 } else if (strnicmp(data, "noautotune", 10) == 0) {
1213                         vol->noautotune = 1;
1214                 } else if ((strnicmp(data, "suid", 4) == 0) ||
1215                                    (strnicmp(data, "nosuid", 6) == 0) ||
1216                                    (strnicmp(data, "exec", 4) == 0) ||
1217                                    (strnicmp(data, "noexec", 6) == 0) ||
1218                                    (strnicmp(data, "nodev", 5) == 0) ||
1219                                    (strnicmp(data, "noauto", 6) == 0) ||
1220                                    (strnicmp(data, "dev", 3) == 0)) {
1221                         /*  The mount tool or mount.cifs helper (if present)
1222                             uses these opts to set flags, and the flags are read
1223                             by the kernel vfs layer before we get here (ie
1224                             before read super) so there is no point trying to
1225                             parse these options again and set anything and it
1226                             is ok to just ignore them */
1227                         continue;
1228                 } else if (strnicmp(data, "hard", 4) == 0) {
1229                         vol->retry = 1;
1230                 } else if (strnicmp(data, "soft", 4) == 0) {
1231                         vol->retry = 0;
1232                 } else if (strnicmp(data, "perm", 4) == 0) {
1233                         vol->noperm = 0;
1234                 } else if (strnicmp(data, "noperm", 6) == 0) {
1235                         vol->noperm = 1;
1236                 } else if (strnicmp(data, "mapchars", 8) == 0) {
1237                         vol->remap = 1;
1238                 } else if (strnicmp(data, "nomapchars", 10) == 0) {
1239                         vol->remap = 0;
1240                 } else if (strnicmp(data, "sfu", 3) == 0) {
1241                         vol->sfu_emul = 1;
1242                 } else if (strnicmp(data, "nosfu", 5) == 0) {
1243                         vol->sfu_emul = 0;
1244                 } else if (strnicmp(data, "nodfs", 5) == 0) {
1245                         vol->nodfs = 1;
1246                 } else if (strnicmp(data, "posixpaths", 10) == 0) {
1247                         vol->posix_paths = 1;
1248                 } else if (strnicmp(data, "noposixpaths", 12) == 0) {
1249                         vol->posix_paths = 0;
1250                 } else if (strnicmp(data, "nounix", 6) == 0) {
1251                         vol->no_linux_ext = 1;
1252                 } else if (strnicmp(data, "nolinux", 7) == 0) {
1253                         vol->no_linux_ext = 1;
1254                 } else if ((strnicmp(data, "nocase", 6) == 0) ||
1255                            (strnicmp(data, "ignorecase", 10)  == 0)) {
1256                         vol->nocase = 1;
1257                 } else if (strnicmp(data, "brl", 3) == 0) {
1258                         vol->nobrl =  0;
1259                 } else if ((strnicmp(data, "nobrl", 5) == 0) ||
1260                            (strnicmp(data, "nolock", 6) == 0)) {
1261                         vol->nobrl =  1;
1262                         /* turn off mandatory locking in mode
1263                         if remote locking is turned off since the
1264                         local vfs will do advisory */
1265                         if (vol->file_mode ==
1266                                 (S_IALLUGO & ~(S_ISUID | S_IXGRP)))
1267                                 vol->file_mode = S_IALLUGO;
1268                 } else if (strnicmp(data, "forcemandatorylock", 9) == 0) {
1269                         /* will take the shorter form "forcemand" as well */
1270                         /* This mount option will force use of mandatory
1271                           (DOS/Windows style) byte range locks, instead of
1272                           using posix advisory byte range locks, even if the
1273                           Unix extensions are available and posix locks would
1274                           be supported otherwise. If Unix extensions are not
1275                           negotiated this has no effect since mandatory locks
1276                           would be used (mandatory locks is all that those
1277                           those servers support) */
1278                         vol->mand_lock = 1;
1279                 } else if (strnicmp(data, "setuids", 7) == 0) {
1280                         vol->setuids = 1;
1281                 } else if (strnicmp(data, "nosetuids", 9) == 0) {
1282                         vol->setuids = 0;
1283                 } else if (strnicmp(data, "dynperm", 7) == 0) {
1284                         vol->dynperm = true;
1285                 } else if (strnicmp(data, "nodynperm", 9) == 0) {
1286                         vol->dynperm = false;
1287                 } else if (strnicmp(data, "nohard", 6) == 0) {
1288                         vol->retry = 0;
1289                 } else if (strnicmp(data, "nosoft", 6) == 0) {
1290                         vol->retry = 1;
1291                 } else if (strnicmp(data, "nointr", 6) == 0) {
1292                         vol->intr = 0;
1293                 } else if (strnicmp(data, "intr", 4) == 0) {
1294                         vol->intr = 1;
1295                 } else if (strnicmp(data, "nostrictsync", 12) == 0) {
1296                         vol->nostrictsync = 1;
1297                 } else if (strnicmp(data, "strictsync", 10) == 0) {
1298                         vol->nostrictsync = 0;
1299                 } else if (strnicmp(data, "serverino", 7) == 0) {
1300                         vol->server_ino = 1;
1301                 } else if (strnicmp(data, "noserverino", 9) == 0) {
1302                         vol->server_ino = 0;
1303                 } else if (strnicmp(data, "cifsacl", 7) == 0) {
1304                         vol->cifs_acl = 1;
1305                 } else if (strnicmp(data, "nocifsacl", 9) == 0) {
1306                         vol->cifs_acl = 0;
1307                 } else if (strnicmp(data, "acl", 3) == 0) {
1308                         vol->no_psx_acl = 0;
1309                 } else if (strnicmp(data, "noacl", 5) == 0) {
1310                         vol->no_psx_acl = 1;
1311 #ifdef CONFIG_CIFS_EXPERIMENTAL
1312                 } else if (strnicmp(data, "locallease", 6) == 0) {
1313                         vol->local_lease = 1;
1314 #endif
1315                 } else if (strnicmp(data, "sign", 4) == 0) {
1316                         vol->secFlg |= CIFSSEC_MUST_SIGN;
1317                 } else if (strnicmp(data, "seal", 4) == 0) {
1318                         /* we do not do the following in secFlags because seal
1319                            is a per tree connection (mount) not a per socket
1320                            or per-smb connection option in the protocol */
1321                         /* vol->secFlg |= CIFSSEC_MUST_SEAL; */
1322                         vol->seal = 1;
1323                 } else if (strnicmp(data, "direct", 6) == 0) {
1324                         vol->direct_io = 1;
1325                 } else if (strnicmp(data, "forcedirectio", 13) == 0) {
1326                         vol->direct_io = 1;
1327                 } else if (strnicmp(data, "noac", 4) == 0) {
1328                         printk(KERN_WARNING "CIFS: Mount option noac not "
1329                                 "supported. Instead set "
1330                                 "/proc/fs/cifs/LookupCacheEnabled to 0\n");
1331                 } else
1332                         printk(KERN_WARNING "CIFS: Unknown mount option %s\n",
1333                                                 data);
1334         }
1335         if (vol->UNC == NULL) {
1336                 if (devname == NULL) {
1337                         printk(KERN_WARNING "CIFS: Missing UNC name for mount "
1338                                                 "target\n");
1339                         return 1;
1340                 }
1341                 if ((temp_len = strnlen(devname, 300)) < 300) {
1342                         vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1343                         if (vol->UNC == NULL)
1344                                 return 1;
1345                         strcpy(vol->UNC, devname);
1346                         if (strncmp(vol->UNC, "//", 2) == 0) {
1347                                 vol->UNC[0] = '\\';
1348                                 vol->UNC[1] = '\\';
1349                         } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1350                                 printk(KERN_WARNING "CIFS: UNC Path does not "
1351                                                     "begin with // or \\\\ \n");
1352                                 return 1;
1353                         }
1354                         value = strpbrk(vol->UNC+2, "/\\");
1355                         if (value)
1356                                 *value = '\\';
1357                 } else {
1358                         printk(KERN_WARNING "CIFS: UNC name too long\n");
1359                         return 1;
1360                 }
1361         }
1362         if (vol->UNCip == NULL)
1363                 vol->UNCip = &vol->UNC[2];
1364
1365         if (uid_specified)
1366                 vol->override_uid = override_uid;
1367         else if (override_uid == 1)
1368                 printk(KERN_NOTICE "CIFS: ignoring forceuid mount option "
1369                                    "specified with no uid= option.\n");
1370
1371         if (gid_specified)
1372                 vol->override_gid = override_gid;
1373         else if (override_gid == 1)
1374                 printk(KERN_NOTICE "CIFS: ignoring forcegid mount option "
1375                                    "specified with no gid= option.\n");
1376
1377         return 0;
1378 }
1379
1380 static struct TCP_Server_Info *
1381 cifs_find_tcp_session(struct sockaddr_storage *addr, unsigned short int port)
1382 {
1383         struct list_head *tmp;
1384         struct TCP_Server_Info *server;
1385         struct sockaddr_in *addr4 = (struct sockaddr_in *) addr;
1386         struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *) addr;
1387
1388         write_lock(&cifs_tcp_ses_lock);
1389         list_for_each(tmp, &cifs_tcp_ses_list) {
1390                 server = list_entry(tmp, struct TCP_Server_Info,
1391                                     tcp_ses_list);
1392                 /*
1393                  * the demux thread can exit on its own while still in CifsNew
1394                  * so don't accept any sockets in that state. Since the
1395                  * tcpStatus never changes back to CifsNew it's safe to check
1396                  * for this without a lock.
1397                  */
1398                 if (server->tcpStatus == CifsNew)
1399                         continue;
1400
1401                 switch (addr->ss_family) {
1402                 case AF_INET:
1403                         if (addr4->sin_addr.s_addr ==
1404                             server->addr.sockAddr.sin_addr.s_addr) {
1405                                 addr4->sin_port = htons(port);
1406                                 /* user overrode default port? */
1407                                 if (addr4->sin_port) {
1408                                         if (addr4->sin_port !=
1409                                             server->addr.sockAddr.sin_port)
1410                                                 continue;
1411                                 }
1412                                 break;
1413                         } else
1414                                 continue;
1415
1416                 case AF_INET6:
1417                         if (ipv6_addr_equal(&addr6->sin6_addr,
1418                             &server->addr.sockAddr6.sin6_addr) &&
1419                             (addr6->sin6_scope_id ==
1420                             server->addr.sockAddr6.sin6_scope_id)) {
1421                                 addr6->sin6_port = htons(port);
1422                                 /* user overrode default port? */
1423                                 if (addr6->sin6_port) {
1424                                         if (addr6->sin6_port !=
1425                                            server->addr.sockAddr6.sin6_port)
1426                                                 continue;
1427                                 }
1428                                 break;
1429                         } else
1430                                 continue;
1431                 }
1432
1433                 ++server->srv_count;
1434                 write_unlock(&cifs_tcp_ses_lock);
1435                 cFYI(1, ("Existing tcp session with server found"));
1436                 return server;
1437         }
1438         write_unlock(&cifs_tcp_ses_lock);
1439         return NULL;
1440 }
1441
1442 static void
1443 cifs_put_tcp_session(struct TCP_Server_Info *server)
1444 {
1445         struct task_struct *task;
1446
1447         write_lock(&cifs_tcp_ses_lock);
1448         if (--server->srv_count > 0) {
1449                 write_unlock(&cifs_tcp_ses_lock);
1450                 return;
1451         }
1452
1453         list_del_init(&server->tcp_ses_list);
1454         write_unlock(&cifs_tcp_ses_lock);
1455
1456         spin_lock(&GlobalMid_Lock);
1457         server->tcpStatus = CifsExiting;
1458         spin_unlock(&GlobalMid_Lock);
1459
1460         task = xchg(&server->tsk, NULL);
1461         if (task)
1462                 force_sig(SIGKILL, task);
1463 }
1464
1465 static struct TCP_Server_Info *
1466 cifs_get_tcp_session(struct smb_vol *volume_info)
1467 {
1468         struct TCP_Server_Info *tcp_ses = NULL;
1469         struct sockaddr_storage addr;
1470         struct sockaddr_in *sin_server = (struct sockaddr_in *) &addr;
1471         struct sockaddr_in6 *sin_server6 = (struct sockaddr_in6 *) &addr;
1472         int rc;
1473
1474         memset(&addr, 0, sizeof(struct sockaddr_storage));
1475
1476         cFYI(1, ("UNC: %s ip: %s", volume_info->UNC, volume_info->UNCip));
1477
1478         if (volume_info->UNCip && volume_info->UNC) {
1479                 rc = cifs_convert_address(volume_info->UNCip, &addr);
1480                 if (!rc) {
1481                         /* we failed translating address */
1482                         rc = -EINVAL;
1483                         goto out_err;
1484                 }
1485         } else if (volume_info->UNCip) {
1486                 /* BB using ip addr as tcp_ses name to connect to the
1487                    DFS root below */
1488                 cERROR(1, ("Connecting to DFS root not implemented yet"));
1489                 rc = -EINVAL;
1490                 goto out_err;
1491         } else /* which tcp_sess DFS root would we conect to */ {
1492                 cERROR(1,
1493                        ("CIFS mount error: No UNC path (e.g. -o "
1494                         "unc=//192.168.1.100/public) specified"));
1495                 rc = -EINVAL;
1496                 goto out_err;
1497         }
1498
1499         /* see if we already have a matching tcp_ses */
1500         tcp_ses = cifs_find_tcp_session(&addr, volume_info->port);
1501         if (tcp_ses)
1502                 return tcp_ses;
1503
1504         tcp_ses = kzalloc(sizeof(struct TCP_Server_Info), GFP_KERNEL);
1505         if (!tcp_ses) {
1506                 rc = -ENOMEM;
1507                 goto out_err;
1508         }
1509
1510         tcp_ses->hostname = extract_hostname(volume_info->UNC);
1511         if (IS_ERR(tcp_ses->hostname)) {
1512                 rc = PTR_ERR(tcp_ses->hostname);
1513                 goto out_err;
1514         }
1515
1516         tcp_ses->noblocksnd = volume_info->noblocksnd;
1517         tcp_ses->noautotune = volume_info->noautotune;
1518         atomic_set(&tcp_ses->inFlight, 0);
1519         init_waitqueue_head(&tcp_ses->response_q);
1520         init_waitqueue_head(&tcp_ses->request_q);
1521         INIT_LIST_HEAD(&tcp_ses->pending_mid_q);
1522         mutex_init(&tcp_ses->srv_mutex);
1523         memcpy(tcp_ses->workstation_RFC1001_name,
1524                 volume_info->source_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1525         memcpy(tcp_ses->server_RFC1001_name,
1526                 volume_info->target_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1527         tcp_ses->sequence_number = 0;
1528         INIT_LIST_HEAD(&tcp_ses->tcp_ses_list);
1529         INIT_LIST_HEAD(&tcp_ses->smb_ses_list);
1530
1531         /*
1532          * at this point we are the only ones with the pointer
1533          * to the struct since the kernel thread not created yet
1534          * no need to spinlock this init of tcpStatus or srv_count
1535          */
1536         tcp_ses->tcpStatus = CifsNew;
1537         ++tcp_ses->srv_count;
1538
1539         if (addr.ss_family == AF_INET6) {
1540                 cFYI(1, ("attempting ipv6 connect"));
1541                 /* BB should we allow ipv6 on port 139? */
1542                 /* other OS never observed in Wild doing 139 with v6 */
1543                 sin_server6->sin6_port = htons(volume_info->port);
1544                 memcpy(&tcp_ses->addr.sockAddr6, sin_server6,
1545                         sizeof(struct sockaddr_in6));
1546                 rc = ipv6_connect(tcp_ses);
1547         } else {
1548                 sin_server->sin_port = htons(volume_info->port);
1549                 memcpy(&tcp_ses->addr.sockAddr, sin_server,
1550                         sizeof(struct sockaddr_in));
1551                 rc = ipv4_connect(tcp_ses);
1552         }
1553         if (rc < 0) {
1554                 cERROR(1, ("Error connecting to socket. Aborting operation"));
1555                 goto out_err;
1556         }
1557
1558         /*
1559          * since we're in a cifs function already, we know that
1560          * this will succeed. No need for try_module_get().
1561          */
1562         __module_get(THIS_MODULE);
1563         tcp_ses->tsk = kthread_run((void *)(void *)cifs_demultiplex_thread,
1564                                   tcp_ses, "cifsd");
1565         if (IS_ERR(tcp_ses->tsk)) {
1566                 rc = PTR_ERR(tcp_ses->tsk);
1567                 cERROR(1, ("error %d create cifsd thread", rc));
1568                 module_put(THIS_MODULE);
1569                 goto out_err;
1570         }
1571
1572         /* thread spawned, put it on the list */
1573         write_lock(&cifs_tcp_ses_lock);
1574         list_add(&tcp_ses->tcp_ses_list, &cifs_tcp_ses_list);
1575         write_unlock(&cifs_tcp_ses_lock);
1576
1577         return tcp_ses;
1578
1579 out_err:
1580         if (tcp_ses) {
1581                 if (!IS_ERR(tcp_ses->hostname))
1582                         kfree(tcp_ses->hostname);
1583                 if (tcp_ses->ssocket)
1584                         sock_release(tcp_ses->ssocket);
1585                 kfree(tcp_ses);
1586         }
1587         return ERR_PTR(rc);
1588 }
1589
1590 static struct cifsSesInfo *
1591 cifs_find_smb_ses(struct TCP_Server_Info *server, char *username)
1592 {
1593         struct list_head *tmp;
1594         struct cifsSesInfo *ses;
1595
1596         write_lock(&cifs_tcp_ses_lock);
1597         list_for_each(tmp, &server->smb_ses_list) {
1598                 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
1599                 if (strncmp(ses->userName, username, MAX_USERNAME_SIZE))
1600                         continue;
1601
1602                 ++ses->ses_count;
1603                 write_unlock(&cifs_tcp_ses_lock);
1604                 return ses;
1605         }
1606         write_unlock(&cifs_tcp_ses_lock);
1607         return NULL;
1608 }
1609
1610 static void
1611 cifs_put_smb_ses(struct cifsSesInfo *ses)
1612 {
1613         int xid;
1614         struct TCP_Server_Info *server = ses->server;
1615
1616         write_lock(&cifs_tcp_ses_lock);
1617         if (--ses->ses_count > 0) {
1618                 write_unlock(&cifs_tcp_ses_lock);
1619                 return;
1620         }
1621
1622         list_del_init(&ses->smb_ses_list);
1623         write_unlock(&cifs_tcp_ses_lock);
1624
1625         if (ses->status == CifsGood) {
1626                 xid = GetXid();
1627                 CIFSSMBLogoff(xid, ses);
1628                 _FreeXid(xid);
1629         }
1630         sesInfoFree(ses);
1631         cifs_put_tcp_session(server);
1632 }
1633
1634 static struct cifsTconInfo *
1635 cifs_find_tcon(struct cifsSesInfo *ses, const char *unc)
1636 {
1637         struct list_head *tmp;
1638         struct cifsTconInfo *tcon;
1639
1640         write_lock(&cifs_tcp_ses_lock);
1641         list_for_each(tmp, &ses->tcon_list) {
1642                 tcon = list_entry(tmp, struct cifsTconInfo, tcon_list);
1643                 if (tcon->tidStatus == CifsExiting)
1644                         continue;
1645                 if (strncmp(tcon->treeName, unc, MAX_TREE_SIZE))
1646                         continue;
1647
1648                 ++tcon->tc_count;
1649                 write_unlock(&cifs_tcp_ses_lock);
1650                 return tcon;
1651         }
1652         write_unlock(&cifs_tcp_ses_lock);
1653         return NULL;
1654 }
1655
1656 static void
1657 cifs_put_tcon(struct cifsTconInfo *tcon)
1658 {
1659         int xid;
1660         struct cifsSesInfo *ses = tcon->ses;
1661
1662         write_lock(&cifs_tcp_ses_lock);
1663         if (--tcon->tc_count > 0) {
1664                 write_unlock(&cifs_tcp_ses_lock);
1665                 return;
1666         }
1667
1668         list_del_init(&tcon->tcon_list);
1669         write_unlock(&cifs_tcp_ses_lock);
1670
1671         xid = GetXid();
1672         CIFSSMBTDis(xid, tcon);
1673         _FreeXid(xid);
1674
1675         tconInfoFree(tcon);
1676         cifs_put_smb_ses(ses);
1677 }
1678
1679 int
1680 get_dfs_path(int xid, struct cifsSesInfo *pSesInfo, const char *old_path,
1681              const struct nls_table *nls_codepage, unsigned int *pnum_referrals,
1682              struct dfs_info3_param **preferrals, int remap)
1683 {
1684         char *temp_unc;
1685         int rc = 0;
1686
1687         *pnum_referrals = 0;
1688         *preferrals = NULL;
1689
1690         if (pSesInfo->ipc_tid == 0) {
1691                 temp_unc = kmalloc(2 /* for slashes */ +
1692                         strnlen(pSesInfo->serverName,
1693                                 SERVER_NAME_LEN_WITH_NULL * 2)
1694                                  + 1 + 4 /* slash IPC$ */  + 2,
1695                                 GFP_KERNEL);
1696                 if (temp_unc == NULL)
1697                         return -ENOMEM;
1698                 temp_unc[0] = '\\';
1699                 temp_unc[1] = '\\';
1700                 strcpy(temp_unc + 2, pSesInfo->serverName);
1701                 strcpy(temp_unc + 2 + strlen(pSesInfo->serverName), "\\IPC$");
1702                 rc = CIFSTCon(xid, pSesInfo, temp_unc, NULL, nls_codepage);
1703                 cFYI(1,
1704                      ("CIFS Tcon rc = %d ipc_tid = %d", rc, pSesInfo->ipc_tid));
1705                 kfree(temp_unc);
1706         }
1707         if (rc == 0)
1708                 rc = CIFSGetDFSRefer(xid, pSesInfo, old_path, preferrals,
1709                                      pnum_referrals, nls_codepage, remap);
1710         /* BB map targetUNCs to dfs_info3 structures, here or
1711                 in CIFSGetDFSRefer BB */
1712
1713         return rc;
1714 }
1715
1716 #ifdef CONFIG_DEBUG_LOCK_ALLOC
1717 static struct lock_class_key cifs_key[2];
1718 static struct lock_class_key cifs_slock_key[2];
1719
1720 static inline void
1721 cifs_reclassify_socket4(struct socket *sock)
1722 {
1723         struct sock *sk = sock->sk;
1724         BUG_ON(sock_owned_by_user(sk));
1725         sock_lock_init_class_and_name(sk, "slock-AF_INET-CIFS",
1726                 &cifs_slock_key[0], "sk_lock-AF_INET-CIFS", &cifs_key[0]);
1727 }
1728
1729 static inline void
1730 cifs_reclassify_socket6(struct socket *sock)
1731 {
1732         struct sock *sk = sock->sk;
1733         BUG_ON(sock_owned_by_user(sk));
1734         sock_lock_init_class_and_name(sk, "slock-AF_INET6-CIFS",
1735                 &cifs_slock_key[1], "sk_lock-AF_INET6-CIFS", &cifs_key[1]);
1736 }
1737 #else
1738 static inline void
1739 cifs_reclassify_socket4(struct socket *sock)
1740 {
1741 }
1742
1743 static inline void
1744 cifs_reclassify_socket6(struct socket *sock)
1745 {
1746 }
1747 #endif
1748
1749 /* See RFC1001 section 14 on representation of Netbios names */
1750 static void rfc1002mangle(char *target, char *source, unsigned int length)
1751 {
1752         unsigned int i, j;
1753
1754         for (i = 0, j = 0; i < (length); i++) {
1755                 /* mask a nibble at a time and encode */
1756                 target[j] = 'A' + (0x0F & (source[i] >> 4));
1757                 target[j+1] = 'A' + (0x0F & source[i]);
1758                 j += 2;
1759         }
1760
1761 }
1762
1763
1764 static int
1765 ipv4_connect(struct TCP_Server_Info *server)
1766 {
1767         int rc = 0;
1768         bool connected = false;
1769         __be16 orig_port = 0;
1770         struct socket *socket = server->ssocket;
1771
1772         if (socket == NULL) {
1773                 rc = sock_create_kern(PF_INET, SOCK_STREAM,
1774                                       IPPROTO_TCP, &socket);
1775                 if (rc < 0) {
1776                         cERROR(1, ("Error %d creating socket", rc));
1777                         return rc;
1778                 }
1779
1780                 /* BB other socket options to set KEEPALIVE, NODELAY? */
1781                 cFYI(1, ("Socket created"));
1782                 server->ssocket = socket;
1783                 socket->sk->sk_allocation = GFP_NOFS;
1784                 cifs_reclassify_socket4(socket);
1785         }
1786
1787         /* user overrode default port */
1788         if (server->addr.sockAddr.sin_port) {
1789                 rc = socket->ops->connect(socket, (struct sockaddr *)
1790                                           &server->addr.sockAddr,
1791                                           sizeof(struct sockaddr_in), 0);
1792                 if (rc >= 0)
1793                         connected = true;
1794         }
1795
1796         if (!connected) {
1797                 /* save original port so we can retry user specified port
1798                         later if fall back ports fail this time  */
1799                 orig_port = server->addr.sockAddr.sin_port;
1800
1801                 /* do not retry on the same port we just failed on */
1802                 if (server->addr.sockAddr.sin_port != htons(CIFS_PORT)) {
1803                         server->addr.sockAddr.sin_port = htons(CIFS_PORT);
1804                         rc = socket->ops->connect(socket,
1805                                                 (struct sockaddr *)
1806                                                 &server->addr.sockAddr,
1807                                                 sizeof(struct sockaddr_in), 0);
1808                         if (rc >= 0)
1809                                 connected = true;
1810                 }
1811         }
1812         if (!connected) {
1813                 server->addr.sockAddr.sin_port = htons(RFC1001_PORT);
1814                 rc = socket->ops->connect(socket, (struct sockaddr *)
1815                                               &server->addr.sockAddr,
1816                                               sizeof(struct sockaddr_in), 0);
1817                 if (rc >= 0)
1818                         connected = true;
1819         }
1820
1821         /* give up here - unless we want to retry on different
1822                 protocol families some day */
1823         if (!connected) {
1824                 if (orig_port)
1825                         server->addr.sockAddr.sin_port = orig_port;
1826                 cFYI(1, ("Error %d connecting to server via ipv4", rc));
1827                 sock_release(socket);
1828                 server->ssocket = NULL;
1829                 return rc;
1830         }
1831
1832
1833         /*
1834          * Eventually check for other socket options to change from
1835          *  the default. sock_setsockopt not used because it expects
1836          *  user space buffer
1837          */
1838         socket->sk->sk_rcvtimeo = 7 * HZ;
1839         socket->sk->sk_sndtimeo = 5 * HZ;
1840
1841         /* make the bufsizes depend on wsize/rsize and max requests */
1842         if (server->noautotune) {
1843                 if (socket->sk->sk_sndbuf < (200 * 1024))
1844                         socket->sk->sk_sndbuf = 200 * 1024;
1845                 if (socket->sk->sk_rcvbuf < (140 * 1024))
1846                         socket->sk->sk_rcvbuf = 140 * 1024;
1847         }
1848
1849          cFYI(1, ("sndbuf %d rcvbuf %d rcvtimeo 0x%lx",
1850                  socket->sk->sk_sndbuf,
1851                  socket->sk->sk_rcvbuf, socket->sk->sk_rcvtimeo));
1852
1853         /* send RFC1001 sessinit */
1854         if (server->addr.sockAddr.sin_port == htons(RFC1001_PORT)) {
1855                 /* some servers require RFC1001 sessinit before sending
1856                 negprot - BB check reconnection in case where second
1857                 sessinit is sent but no second negprot */
1858                 struct rfc1002_session_packet *ses_init_buf;
1859                 struct smb_hdr *smb_buf;
1860                 ses_init_buf = kzalloc(sizeof(struct rfc1002_session_packet),
1861                                        GFP_KERNEL);
1862                 if (ses_init_buf) {
1863                         ses_init_buf->trailer.session_req.called_len = 32;
1864                         if (server->server_RFC1001_name &&
1865                             server->server_RFC1001_name[0] != 0)
1866                                 rfc1002mangle(ses_init_buf->trailer.
1867                                                 session_req.called_name,
1868                                               server->server_RFC1001_name,
1869                                               RFC1001_NAME_LEN_WITH_NULL);
1870                         else
1871                                 rfc1002mangle(ses_init_buf->trailer.
1872                                                 session_req.called_name,
1873                                               DEFAULT_CIFS_CALLED_NAME,
1874                                               RFC1001_NAME_LEN_WITH_NULL);
1875
1876                         ses_init_buf->trailer.session_req.calling_len = 32;
1877
1878                         /* calling name ends in null (byte 16) from old smb
1879                         convention. */
1880                         if (server->workstation_RFC1001_name &&
1881                             server->workstation_RFC1001_name[0] != 0)
1882                                 rfc1002mangle(ses_init_buf->trailer.
1883                                                 session_req.calling_name,
1884                                               server->workstation_RFC1001_name,
1885                                               RFC1001_NAME_LEN_WITH_NULL);
1886                         else
1887                                 rfc1002mangle(ses_init_buf->trailer.
1888                                                 session_req.calling_name,
1889                                               "LINUX_CIFS_CLNT",
1890                                               RFC1001_NAME_LEN_WITH_NULL);
1891
1892                         ses_init_buf->trailer.session_req.scope1 = 0;
1893                         ses_init_buf->trailer.session_req.scope2 = 0;
1894                         smb_buf = (struct smb_hdr *)ses_init_buf;
1895                         /* sizeof RFC1002_SESSION_REQUEST with no scope */
1896                         smb_buf->smb_buf_length = 0x81000044;
1897                         rc = smb_send(server, smb_buf, 0x44);
1898                         kfree(ses_init_buf);
1899                         msleep(1); /* RFC1001 layer in at least one server
1900                                       requires very short break before negprot
1901                                       presumably because not expecting negprot
1902                                       to follow so fast.  This is a simple
1903                                       solution that works without
1904                                       complicating the code and causes no
1905                                       significant slowing down on mount
1906                                       for everyone else */
1907                 }
1908                 /* else the negprot may still work without this
1909                 even though malloc failed */
1910
1911         }
1912
1913         return rc;
1914 }
1915
1916 static int
1917 ipv6_connect(struct TCP_Server_Info *server)
1918 {
1919         int rc = 0;
1920         bool connected = false;
1921         __be16 orig_port = 0;
1922         struct socket *socket = server->ssocket;
1923
1924         if (socket == NULL) {
1925                 rc = sock_create_kern(PF_INET6, SOCK_STREAM,
1926                                       IPPROTO_TCP, &socket);
1927                 if (rc < 0) {
1928                         cERROR(1, ("Error %d creating ipv6 socket", rc));
1929                         socket = NULL;
1930                         return rc;
1931                 }
1932
1933                 /* BB other socket options to set KEEPALIVE, NODELAY? */
1934                 cFYI(1, ("ipv6 Socket created"));
1935                 server->ssocket = socket;
1936                 socket->sk->sk_allocation = GFP_NOFS;
1937                 cifs_reclassify_socket6(socket);
1938         }
1939
1940         /* user overrode default port */
1941         if (server->addr.sockAddr6.sin6_port) {
1942                 rc = socket->ops->connect(socket,
1943                                 (struct sockaddr *) &server->addr.sockAddr6,
1944                                 sizeof(struct sockaddr_in6), 0);
1945                 if (rc >= 0)
1946                         connected = true;
1947         }
1948
1949         if (!connected) {
1950                 /* save original port so we can retry user specified port
1951                         later if fall back ports fail this time  */
1952
1953                 orig_port = server->addr.sockAddr6.sin6_port;
1954                 /* do not retry on the same port we just failed on */
1955                 if (server->addr.sockAddr6.sin6_port != htons(CIFS_PORT)) {
1956                         server->addr.sockAddr6.sin6_port = htons(CIFS_PORT);
1957                         rc = socket->ops->connect(socket, (struct sockaddr *)
1958                                         &server->addr.sockAddr6,
1959                                         sizeof(struct sockaddr_in6), 0);
1960                         if (rc >= 0)
1961                                 connected = true;
1962                 }
1963         }
1964         if (!connected) {
1965                 server->addr.sockAddr6.sin6_port = htons(RFC1001_PORT);
1966                 rc = socket->ops->connect(socket, (struct sockaddr *)
1967                                 &server->addr.sockAddr6,
1968                                 sizeof(struct sockaddr_in6), 0);
1969                 if (rc >= 0)
1970                         connected = true;
1971         }
1972
1973         /* give up here - unless we want to retry on different
1974                 protocol families some day */
1975         if (!connected) {
1976                 if (orig_port)
1977                         server->addr.sockAddr6.sin6_port = orig_port;
1978                 cFYI(1, ("Error %d connecting to server via ipv6", rc));
1979                 sock_release(socket);
1980                 server->ssocket = NULL;
1981                 return rc;
1982         }
1983
1984         /*
1985          * Eventually check for other socket options to change from
1986          * the default. sock_setsockopt not used because it expects
1987          * user space buffer
1988          */
1989         socket->sk->sk_rcvtimeo = 7 * HZ;
1990         socket->sk->sk_sndtimeo = 5 * HZ;
1991         server->ssocket = socket;
1992
1993         return rc;
1994 }
1995
1996 void reset_cifs_unix_caps(int xid, struct cifsTconInfo *tcon,
1997                           struct super_block *sb, struct smb_vol *vol_info)
1998 {
1999         /* if we are reconnecting then should we check to see if
2000          * any requested capabilities changed locally e.g. via
2001          * remount but we can not do much about it here
2002          * if they have (even if we could detect it by the following)
2003          * Perhaps we could add a backpointer to array of sb from tcon
2004          * or if we change to make all sb to same share the same
2005          * sb as NFS - then we only have one backpointer to sb.
2006          * What if we wanted to mount the server share twice once with
2007          * and once without posixacls or posix paths? */
2008         __u64 saved_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2009
2010         if (vol_info && vol_info->no_linux_ext) {
2011                 tcon->fsUnixInfo.Capability = 0;
2012                 tcon->unix_ext = 0; /* Unix Extensions disabled */
2013                 cFYI(1, ("Linux protocol extensions disabled"));
2014                 return;
2015         } else if (vol_info)
2016                 tcon->unix_ext = 1; /* Unix Extensions supported */
2017
2018         if (tcon->unix_ext == 0) {
2019                 cFYI(1, ("Unix extensions disabled so not set on reconnect"));
2020                 return;
2021         }
2022
2023         if (!CIFSSMBQFSUnixInfo(xid, tcon)) {
2024                 __u64 cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2025
2026                 /* check for reconnect case in which we do not
2027                    want to change the mount behavior if we can avoid it */
2028                 if (vol_info == NULL) {
2029                         /* turn off POSIX ACL and PATHNAMES if not set
2030                            originally at mount time */
2031                         if ((saved_cap & CIFS_UNIX_POSIX_ACL_CAP) == 0)
2032                                 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2033                         if ((saved_cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2034                                 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2035                                         cERROR(1, ("POSIXPATH support change"));
2036                                 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2037                         } else if ((cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2038                                 cERROR(1, ("possible reconnect error"));
2039                                 cERROR(1,
2040                                         ("server disabled POSIX path support"));
2041                         }
2042                 }
2043
2044                 cap &= CIFS_UNIX_CAP_MASK;
2045                 if (vol_info && vol_info->no_psx_acl)
2046                         cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2047                 else if (CIFS_UNIX_POSIX_ACL_CAP & cap) {
2048                         cFYI(1, ("negotiated posix acl support"));
2049                         if (sb)
2050                                 sb->s_flags |= MS_POSIXACL;
2051                 }
2052
2053                 if (vol_info && vol_info->posix_paths == 0)
2054                         cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2055                 else if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) {
2056                         cFYI(1, ("negotiate posix pathnames"));
2057                         if (sb)
2058                                 CIFS_SB(sb)->mnt_cifs_flags |=
2059                                         CIFS_MOUNT_POSIX_PATHS;
2060                 }
2061
2062                 /* We might be setting the path sep back to a different
2063                 form if we are reconnecting and the server switched its
2064                 posix path capability for this share */
2065                 if (sb && (CIFS_SB(sb)->prepathlen > 0))
2066                         CIFS_SB(sb)->prepath[0] = CIFS_DIR_SEP(CIFS_SB(sb));
2067
2068                 if (sb && (CIFS_SB(sb)->rsize > 127 * 1024)) {
2069                         if ((cap & CIFS_UNIX_LARGE_READ_CAP) == 0) {
2070                                 CIFS_SB(sb)->rsize = 127 * 1024;
2071                                 cFYI(DBG2,
2072                                         ("larger reads not supported by srv"));
2073                         }
2074                 }
2075
2076
2077                 cFYI(1, ("Negotiate caps 0x%x", (int)cap));
2078 #ifdef CONFIG_CIFS_DEBUG2
2079                 if (cap & CIFS_UNIX_FCNTL_CAP)
2080                         cFYI(1, ("FCNTL cap"));
2081                 if (cap & CIFS_UNIX_EXTATTR_CAP)
2082                         cFYI(1, ("EXTATTR cap"));
2083                 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2084                         cFYI(1, ("POSIX path cap"));
2085                 if (cap & CIFS_UNIX_XATTR_CAP)
2086                         cFYI(1, ("XATTR cap"));
2087                 if (cap & CIFS_UNIX_POSIX_ACL_CAP)
2088                         cFYI(1, ("POSIX ACL cap"));
2089                 if (cap & CIFS_UNIX_LARGE_READ_CAP)
2090                         cFYI(1, ("very large read cap"));
2091                 if (cap & CIFS_UNIX_LARGE_WRITE_CAP)
2092                         cFYI(1, ("very large write cap"));
2093 #endif /* CIFS_DEBUG2 */
2094                 if (CIFSSMBSetFSUnixInfo(xid, tcon, cap)) {
2095                         if (vol_info == NULL) {
2096                                 cFYI(1, ("resetting capabilities failed"));
2097                         } else
2098                                 cERROR(1, ("Negotiating Unix capabilities "
2099                                            "with the server failed.  Consider "
2100                                            "mounting with the Unix Extensions\n"
2101                                            "disabled, if problems are found, "
2102                                            "by specifying the nounix mount "
2103                                            "option."));
2104
2105                 }
2106         }
2107 }
2108
2109 static void
2110 convert_delimiter(char *path, char delim)
2111 {
2112         int i;
2113         char old_delim;
2114
2115         if (path == NULL)
2116                 return;
2117
2118         if (delim == '/')
2119                 old_delim = '\\';
2120         else
2121                 old_delim = '/';
2122
2123         for (i = 0; path[i] != '\0'; i++) {
2124                 if (path[i] == old_delim)
2125                         path[i] = delim;
2126         }
2127 }
2128
2129 static void setup_cifs_sb(struct smb_vol *pvolume_info,
2130                           struct cifs_sb_info *cifs_sb)
2131 {
2132         if (pvolume_info->rsize > CIFSMaxBufSize) {
2133                 cERROR(1, ("rsize %d too large, using MaxBufSize",
2134                         pvolume_info->rsize));
2135                 cifs_sb->rsize = CIFSMaxBufSize;
2136         } else if ((pvolume_info->rsize) &&
2137                         (pvolume_info->rsize <= CIFSMaxBufSize))
2138                 cifs_sb->rsize = pvolume_info->rsize;
2139         else /* default */
2140                 cifs_sb->rsize = CIFSMaxBufSize;
2141
2142         if (pvolume_info->wsize > PAGEVEC_SIZE * PAGE_CACHE_SIZE) {
2143                 cERROR(1, ("wsize %d too large, using 4096 instead",
2144                           pvolume_info->wsize));
2145                 cifs_sb->wsize = 4096;
2146         } else if (pvolume_info->wsize)
2147                 cifs_sb->wsize = pvolume_info->wsize;
2148         else
2149                 cifs_sb->wsize = min_t(const int,
2150                                         PAGEVEC_SIZE * PAGE_CACHE_SIZE,
2151                                         127*1024);
2152                 /* old default of CIFSMaxBufSize was too small now
2153                    that SMB Write2 can send multiple pages in kvec.
2154                    RFC1001 does not describe what happens when frame
2155                    bigger than 128K is sent so use that as max in
2156                    conjunction with 52K kvec constraint on arch with 4K
2157                    page size  */
2158
2159         if (cifs_sb->rsize < 2048) {
2160                 cifs_sb->rsize = 2048;
2161                 /* Windows ME may prefer this */
2162                 cFYI(1, ("readsize set to minimum: 2048"));
2163         }
2164         /* calculate prepath */
2165         cifs_sb->prepath = pvolume_info->prepath;
2166         if (cifs_sb->prepath) {
2167                 cifs_sb->prepathlen = strlen(cifs_sb->prepath);
2168                 /* we can not convert the / to \ in the path
2169                 separators in the prefixpath yet because we do not
2170                 know (until reset_cifs_unix_caps is called later)
2171                 whether POSIX PATH CAP is available. We normalize
2172                 the / to \ after reset_cifs_unix_caps is called */
2173                 pvolume_info->prepath = NULL;
2174         } else
2175                 cifs_sb->prepathlen = 0;
2176         cifs_sb->mnt_uid = pvolume_info->linux_uid;
2177         cifs_sb->mnt_gid = pvolume_info->linux_gid;
2178         cifs_sb->mnt_file_mode = pvolume_info->file_mode;
2179         cifs_sb->mnt_dir_mode = pvolume_info->dir_mode;
2180         cFYI(1, ("file mode: 0x%x  dir mode: 0x%x",
2181                 cifs_sb->mnt_file_mode, cifs_sb->mnt_dir_mode));
2182
2183         if (pvolume_info->noperm)
2184                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_PERM;
2185         if (pvolume_info->setuids)
2186                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SET_UID;
2187         if (pvolume_info->server_ino)
2188                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SERVER_INUM;
2189         if (pvolume_info->remap)
2190                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MAP_SPECIAL_CHR;
2191         if (pvolume_info->no_xattr)
2192                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_XATTR;
2193         if (pvolume_info->sfu_emul)
2194                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_UNX_EMUL;
2195         if (pvolume_info->nobrl)
2196                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_BRL;
2197         if (pvolume_info->nostrictsync)
2198                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOSSYNC;
2199         if (pvolume_info->mand_lock)
2200                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOPOSIXBRL;
2201         if (pvolume_info->cifs_acl)
2202                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_ACL;
2203         if (pvolume_info->override_uid)
2204                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_UID;
2205         if (pvolume_info->override_gid)
2206                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_GID;
2207         if (pvolume_info->dynperm)
2208                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DYNPERM;
2209         if (pvolume_info->direct_io) {
2210                 cFYI(1, ("mounting share using direct i/o"));
2211                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DIRECT_IO;
2212         }
2213
2214         if ((pvolume_info->cifs_acl) && (pvolume_info->dynperm))
2215                 cERROR(1, ("mount option dynperm ignored if cifsacl "
2216                            "mount option supported"));
2217 }
2218
2219 static int
2220 is_path_accessible(int xid, struct cifsTconInfo *tcon,
2221                    struct cifs_sb_info *cifs_sb, const char *full_path)
2222 {
2223         int rc;
2224         FILE_ALL_INFO *pfile_info;
2225
2226         pfile_info = kmalloc(sizeof(FILE_ALL_INFO), GFP_KERNEL);
2227         if (pfile_info == NULL)
2228                 return -ENOMEM;
2229
2230         rc = CIFSSMBQPathInfo(xid, tcon, full_path, pfile_info,
2231                               0 /* not legacy */, cifs_sb->local_nls,
2232                               cifs_sb->mnt_cifs_flags &
2233                                 CIFS_MOUNT_MAP_SPECIAL_CHR);
2234
2235         if (rc == -EOPNOTSUPP || rc == -EINVAL)
2236                 rc = SMBQueryInformation(xid, tcon, full_path, pfile_info,
2237                                 cifs_sb->local_nls, cifs_sb->mnt_cifs_flags &
2238                                   CIFS_MOUNT_MAP_SPECIAL_CHR);
2239         kfree(pfile_info);
2240         return rc;
2241 }
2242
2243 static void
2244 cleanup_volume_info(struct smb_vol **pvolume_info)
2245 {
2246         struct smb_vol *volume_info;
2247
2248         if (!pvolume_info && !*pvolume_info)
2249                 return;
2250
2251         volume_info = *pvolume_info;
2252         kzfree(volume_info->password);
2253         kfree(volume_info->UNC);
2254         kfree(volume_info->prepath);
2255         kfree(volume_info);
2256         *pvolume_info = NULL;
2257         return;
2258 }
2259
2260 #ifdef CONFIG_CIFS_DFS_UPCALL
2261 /* build_path_to_root returns full path to root when
2262  * we do not have an exiting connection (tcon) */
2263 static char *
2264 build_unc_path_to_root(const struct smb_vol *volume_info,
2265                 const struct cifs_sb_info *cifs_sb)
2266 {
2267         char *full_path;
2268
2269         int unc_len = strnlen(volume_info->UNC, MAX_TREE_SIZE + 1);
2270         full_path = kmalloc(unc_len + cifs_sb->prepathlen + 1, GFP_KERNEL);
2271         if (full_path == NULL)
2272                 return ERR_PTR(-ENOMEM);
2273
2274         strncpy(full_path, volume_info->UNC, unc_len);
2275         if (cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) {
2276                 int i;
2277                 for (i = 0; i < unc_len; i++) {
2278                         if (full_path[i] == '\\')
2279                                 full_path[i] = '/';
2280                 }
2281         }
2282
2283         if (cifs_sb->prepathlen)
2284                 strncpy(full_path + unc_len, cifs_sb->prepath,
2285                                 cifs_sb->prepathlen);
2286
2287         full_path[unc_len + cifs_sb->prepathlen] = 0; /* add trailing null */
2288         return full_path;
2289 }
2290 #endif
2291
2292 int
2293 cifs_mount(struct super_block *sb, struct cifs_sb_info *cifs_sb,
2294                 char *mount_data_global, const char *devname)
2295 {
2296         int rc;
2297         int xid;
2298         struct smb_vol *volume_info;
2299         struct cifsSesInfo *pSesInfo;
2300         struct cifsTconInfo *tcon;
2301         struct TCP_Server_Info *srvTcp;
2302         char   *full_path;
2303         char *mount_data = mount_data_global;
2304 #ifdef CONFIG_CIFS_DFS_UPCALL
2305         struct dfs_info3_param *referrals = NULL;
2306         unsigned int num_referrals = 0;
2307         int referral_walks_count = 0;
2308 try_mount_again:
2309 #endif
2310         rc = 0;
2311         tcon = NULL;
2312         pSesInfo = NULL;
2313         srvTcp = NULL;
2314         full_path = NULL;
2315
2316         xid = GetXid();
2317
2318         volume_info = kzalloc(sizeof(struct smb_vol), GFP_KERNEL);
2319         if (!volume_info) {
2320                 rc = -ENOMEM;
2321                 goto out;
2322         }
2323
2324         if (cifs_parse_mount_options(mount_data, devname, volume_info)) {
2325                 rc = -EINVAL;
2326                 goto out;
2327         }
2328
2329         if (volume_info->nullauth) {
2330                 cFYI(1, ("null user"));
2331                 volume_info->username = "";
2332         } else if (volume_info->username) {
2333                 /* BB fixme parse for domain name here */
2334                 cFYI(1, ("Username: %s", volume_info->username));
2335         } else {
2336                 cifserror("No username specified");
2337         /* In userspace mount helper we can get user name from alternate
2338            locations such as env variables and files on disk */
2339                 rc = -EINVAL;
2340                 goto out;
2341         }
2342
2343
2344         /* this is needed for ASCII cp to Unicode converts */
2345         if (volume_info->iocharset == NULL) {
2346                 cifs_sb->local_nls = load_nls_default();
2347         /* load_nls_default can not return null */
2348         } else {
2349                 cifs_sb->local_nls = load_nls(volume_info->iocharset);
2350                 if (cifs_sb->local_nls == NULL) {
2351                         cERROR(1, ("CIFS mount error: iocharset %s not found",
2352                                  volume_info->iocharset));
2353                         rc = -ELIBACC;
2354                         goto out;
2355                 }
2356         }
2357
2358         /* get a reference to a tcp session */
2359         srvTcp = cifs_get_tcp_session(volume_info);
2360         if (IS_ERR(srvTcp)) {
2361                 rc = PTR_ERR(srvTcp);
2362                 goto out;
2363         }
2364
2365         pSesInfo = cifs_find_smb_ses(srvTcp, volume_info->username);
2366         if (pSesInfo) {
2367                 cFYI(1, ("Existing smb sess found (status=%d)",
2368                         pSesInfo->status));
2369                 /*
2370                  * The existing SMB session already has a reference to srvTcp,
2371                  * so we can put back the extra one we got before
2372                  */
2373                 cifs_put_tcp_session(srvTcp);
2374
2375                 down(&pSesInfo->sesSem);
2376                 if (pSesInfo->need_reconnect) {
2377                         cFYI(1, ("Session needs reconnect"));
2378                         rc = cifs_setup_session(xid, pSesInfo,
2379                                                 cifs_sb->local_nls);
2380                 }
2381                 up(&pSesInfo->sesSem);
2382         } else if (!rc) {
2383                 cFYI(1, ("Existing smb sess not found"));
2384                 pSesInfo = sesInfoAlloc();
2385                 if (pSesInfo == NULL) {
2386                         rc = -ENOMEM;
2387                         goto mount_fail_check;
2388                 }
2389
2390                 /* new SMB session uses our srvTcp ref */
2391                 pSesInfo->server = srvTcp;
2392                 if (srvTcp->addr.sockAddr6.sin6_family == AF_INET6)
2393                         sprintf(pSesInfo->serverName, "%pI6",
2394                                 &srvTcp->addr.sockAddr6.sin6_addr);
2395                 else
2396                         sprintf(pSesInfo->serverName, "%pI4",
2397                                 &srvTcp->addr.sockAddr.sin_addr.s_addr);
2398
2399                 write_lock(&cifs_tcp_ses_lock);
2400                 list_add(&pSesInfo->smb_ses_list, &srvTcp->smb_ses_list);
2401                 write_unlock(&cifs_tcp_ses_lock);
2402
2403                 /* volume_info->password freed at unmount */
2404                 if (volume_info->password) {
2405                         pSesInfo->password = kstrdup(volume_info->password,
2406                                                      GFP_KERNEL);
2407                         if (!pSesInfo->password) {
2408                                 rc = -ENOMEM;
2409                                 goto mount_fail_check;
2410                         }
2411                 }
2412                 if (volume_info->username)
2413                         strncpy(pSesInfo->userName, volume_info->username,
2414                                 MAX_USERNAME_SIZE);
2415                 if (volume_info->domainname) {
2416                         int len = strlen(volume_info->domainname);
2417                         pSesInfo->domainName = kmalloc(len + 1, GFP_KERNEL);
2418                         if (pSesInfo->domainName)
2419                                 strcpy(pSesInfo->domainName,
2420                                         volume_info->domainname);
2421                 }
2422                 pSesInfo->linux_uid = volume_info->linux_uid;
2423                 pSesInfo->overrideSecFlg = volume_info->secFlg;
2424                 down(&pSesInfo->sesSem);
2425
2426                 /* BB FIXME need to pass vol->secFlgs BB */
2427                 rc = cifs_setup_session(xid, pSesInfo,
2428                                         cifs_sb->local_nls);
2429                 up(&pSesInfo->sesSem);
2430         }
2431
2432         /* search for existing tcon to this server share */
2433         if (!rc) {
2434                 setup_cifs_sb(volume_info, cifs_sb);
2435
2436                 tcon = cifs_find_tcon(pSesInfo, volume_info->UNC);
2437                 if (tcon) {
2438                         cFYI(1, ("Found match on UNC path"));
2439                         /* existing tcon already has a reference */
2440                         cifs_put_smb_ses(pSesInfo);
2441                         if (tcon->seal != volume_info->seal)
2442                                 cERROR(1, ("transport encryption setting "
2443                                            "conflicts with existing tid"));
2444                 } else {
2445                         tcon = tconInfoAlloc();
2446                         if (tcon == NULL) {
2447                                 rc = -ENOMEM;
2448                                 goto mount_fail_check;
2449                         }
2450
2451                         tcon->ses = pSesInfo;
2452                         if (volume_info->password) {
2453                                 tcon->password = kstrdup(volume_info->password,
2454                                                          GFP_KERNEL);
2455                                 if (!tcon->password) {
2456                                         rc = -ENOMEM;
2457                                         goto mount_fail_check;
2458                                 }
2459                         }
2460
2461                         if ((strchr(volume_info->UNC + 3, '\\') == NULL)
2462                             && (strchr(volume_info->UNC + 3, '/') == NULL)) {
2463                                 cERROR(1, ("Missing share name"));
2464                                 rc = -ENODEV;
2465                                 goto mount_fail_check;
2466                         } else {
2467                                 /* BB Do we need to wrap sesSem around
2468                                  * this TCon call and Unix SetFS as
2469                                  * we do on SessSetup and reconnect? */
2470                                 rc = CIFSTCon(xid, pSesInfo, volume_info->UNC,
2471                                               tcon, cifs_sb->local_nls);
2472                                 cFYI(1, ("CIFS Tcon rc = %d", rc));
2473                                 if (volume_info->nodfs) {
2474                                         tcon->Flags &= ~SMB_SHARE_IS_IN_DFS;
2475                                         cFYI(1, ("DFS disabled (%d)",
2476                                                 tcon->Flags));
2477                                 }
2478                         }
2479                         if (rc)
2480                                 goto remote_path_check;
2481                         tcon->seal = volume_info->seal;
2482                         write_lock(&cifs_tcp_ses_lock);
2483                         list_add(&tcon->tcon_list, &pSesInfo->tcon_list);
2484                         write_unlock(&cifs_tcp_ses_lock);
2485                 }
2486
2487                 /* we can have only one retry value for a connection
2488                    to a share so for resources mounted more than once
2489                    to the same server share the last value passed in
2490                    for the retry flag is used */
2491                 tcon->retry = volume_info->retry;
2492                 tcon->nocase = volume_info->nocase;
2493                 tcon->local_lease = volume_info->local_lease;
2494         }
2495         if (pSesInfo) {
2496                 if (pSesInfo->capabilities & CAP_LARGE_FILES)
2497                         sb->s_maxbytes = MAX_LFS_FILESIZE;
2498                 else
2499                         sb->s_maxbytes = MAX_NON_LFS;
2500         }
2501
2502         /* BB FIXME fix time_gran to be larger for LANMAN sessions */
2503         sb->s_time_gran = 100;
2504
2505         if (rc)
2506                 goto remote_path_check;
2507
2508         cifs_sb->tcon = tcon;
2509
2510         /* do not care if following two calls succeed - informational */
2511         if (!tcon->ipc) {
2512                 CIFSSMBQFSDeviceInfo(xid, tcon);
2513                 CIFSSMBQFSAttributeInfo(xid, tcon);
2514         }
2515
2516         /* tell server which Unix caps we support */
2517         if (tcon->ses->capabilities & CAP_UNIX)
2518                 /* reset of caps checks mount to see if unix extensions
2519                    disabled for just this mount */
2520                 reset_cifs_unix_caps(xid, tcon, sb, volume_info);
2521         else
2522                 tcon->unix_ext = 0; /* server does not support them */
2523
2524         /* convert forward to back slashes in prepath here if needed */
2525         if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2526                 convert_delimiter(cifs_sb->prepath, CIFS_DIR_SEP(cifs_sb));
2527
2528         if ((tcon->unix_ext == 0) && (cifs_sb->rsize > (1024 * 127))) {
2529                 cifs_sb->rsize = 1024 * 127;
2530                 cFYI(DBG2, ("no very large read support, rsize now 127K"));
2531         }
2532         if (!(tcon->ses->capabilities & CAP_LARGE_WRITE_X))
2533                 cifs_sb->wsize = min(cifs_sb->wsize,
2534                                (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2535         if (!(tcon->ses->capabilities & CAP_LARGE_READ_X))
2536                 cifs_sb->rsize = min(cifs_sb->rsize,
2537                                (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2538
2539 remote_path_check:
2540         /* check if a whole path (including prepath) is not remote */
2541         if (!rc && tcon) {
2542                 /* build_path_to_root works only when we have a valid tcon */
2543                 full_path = cifs_build_path_to_root(cifs_sb);
2544                 if (full_path == NULL) {
2545                         rc = -ENOMEM;
2546                         goto mount_fail_check;
2547                 }
2548                 rc = is_path_accessible(xid, tcon, cifs_sb, full_path);
2549                 if (rc != -EREMOTE) {
2550                         kfree(full_path);
2551                         goto mount_fail_check;
2552                 }
2553                 kfree(full_path);
2554         }
2555
2556         /* get referral if needed */
2557         if (rc == -EREMOTE) {
2558 #ifdef CONFIG_CIFS_DFS_UPCALL
2559                 if (referral_walks_count > MAX_NESTED_LINKS) {
2560                         /*
2561                          * BB: when we implement proper loop detection,
2562                          *     we will remove this check. But now we need it
2563                          *     to prevent an indefinite loop if 'DFS tree' is
2564                          *     misconfigured (i.e. has loops).
2565                          */
2566                         rc = -ELOOP;
2567                         goto mount_fail_check;
2568                 }
2569                 /* convert forward to back slashes in prepath here if needed */
2570                 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2571                         convert_delimiter(cifs_sb->prepath,
2572                                         CIFS_DIR_SEP(cifs_sb));
2573                 full_path = build_unc_path_to_root(volume_info, cifs_sb);
2574                 if (IS_ERR(full_path)) {
2575                         rc = PTR_ERR(full_path);
2576                         goto mount_fail_check;
2577                 }
2578
2579                 cFYI(1, ("Getting referral for: %s", full_path));
2580                 rc = get_dfs_path(xid, pSesInfo , full_path + 1,
2581                         cifs_sb->local_nls, &num_referrals, &referrals,
2582                         cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
2583                 if (!rc && num_referrals > 0) {
2584                         char *fake_devname = NULL;
2585
2586                         if (mount_data != mount_data_global)
2587                                 kfree(mount_data);
2588
2589                         mount_data = cifs_compose_mount_options(
2590                                         cifs_sb->mountdata, full_path + 1,
2591                                         referrals, &fake_devname);
2592
2593                         free_dfs_info_array(referrals, num_referrals);
2594                         kfree(fake_devname);
2595                         kfree(full_path);
2596
2597                         if (IS_ERR(mount_data)) {
2598                                 rc = PTR_ERR(mount_data);
2599                                 mount_data = NULL;
2600                                 goto mount_fail_check;
2601                         }
2602
2603                         if (tcon)
2604                                 cifs_put_tcon(tcon);
2605                         else if (pSesInfo)
2606                                 cifs_put_smb_ses(pSesInfo);
2607
2608                         cleanup_volume_info(&volume_info);
2609                         referral_walks_count++;
2610                         FreeXid(xid);
2611                         goto try_mount_again;
2612                 }
2613 #else /* No DFS support, return error on mount */
2614                 rc = -EOPNOTSUPP;
2615 #endif
2616         }
2617
2618 mount_fail_check:
2619         /* on error free sesinfo and tcon struct if needed */
2620         if (rc) {
2621                 if (mount_data != mount_data_global)
2622                         kfree(mount_data);
2623                 /* If find_unc succeeded then rc == 0 so we can not end */
2624                 /* up accidently freeing someone elses tcon struct */
2625                 if (tcon)
2626                         cifs_put_tcon(tcon);
2627                 else if (pSesInfo)
2628                         cifs_put_smb_ses(pSesInfo);
2629                 else
2630                         cifs_put_tcp_session(srvTcp);
2631                 goto out;
2632         }
2633
2634         /* volume_info->password is freed above when existing session found
2635         (in which case it is not needed anymore) but when new sesion is created
2636         the password ptr is put in the new session structure (in which case the
2637         password will be freed at unmount time) */
2638 out:
2639         /* zero out password before freeing */
2640         cleanup_volume_info(&volume_info);
2641         FreeXid(xid);
2642         return rc;
2643 }
2644
2645 int
2646 CIFSTCon(unsigned int xid, struct cifsSesInfo *ses,
2647          const char *tree, struct cifsTconInfo *tcon,
2648          const struct nls_table *nls_codepage)
2649 {
2650         struct smb_hdr *smb_buffer;
2651         struct smb_hdr *smb_buffer_response;
2652         TCONX_REQ *pSMB;
2653         TCONX_RSP *pSMBr;
2654         unsigned char *bcc_ptr;
2655         int rc = 0;
2656         int length, bytes_left;
2657         __u16 count;
2658
2659         if (ses == NULL)
2660                 return -EIO;
2661
2662         smb_buffer = cifs_buf_get();
2663         if (smb_buffer == NULL)
2664                 return -ENOMEM;
2665
2666         smb_buffer_response = smb_buffer;
2667
2668         header_assemble(smb_buffer, SMB_COM_TREE_CONNECT_ANDX,
2669                         NULL /*no tid */ , 4 /*wct */ );
2670
2671         smb_buffer->Mid = GetNextMid(ses->server);
2672         smb_buffer->Uid = ses->Suid;
2673         pSMB = (TCONX_REQ *) smb_buffer;
2674         pSMBr = (TCONX_RSP *) smb_buffer_response;
2675
2676         pSMB->AndXCommand = 0xFF;
2677         pSMB->Flags = cpu_to_le16(TCON_EXTENDED_SECINFO);
2678         bcc_ptr = &pSMB->Password[0];
2679         if ((ses->server->secMode) & SECMODE_USER) {
2680                 pSMB->PasswordLength = cpu_to_le16(1);  /* minimum */
2681                 *bcc_ptr = 0; /* password is null byte */
2682                 bcc_ptr++;              /* skip password */
2683                 /* already aligned so no need to do it below */
2684         } else {
2685                 pSMB->PasswordLength = cpu_to_le16(CIFS_SESS_KEY_SIZE);
2686                 /* BB FIXME add code to fail this if NTLMv2 or Kerberos
2687                    specified as required (when that support is added to
2688                    the vfs in the future) as only NTLM or the much
2689                    weaker LANMAN (which we do not send by default) is accepted
2690                    by Samba (not sure whether other servers allow
2691                    NTLMv2 password here) */
2692 #ifdef CONFIG_CIFS_WEAK_PW_HASH
2693                 if ((extended_security & CIFSSEC_MAY_LANMAN) &&
2694                     (ses->server->secType == LANMAN))
2695                         calc_lanman_hash(tcon->password, ses->server->cryptKey,
2696                                          ses->server->secMode &
2697                                             SECMODE_PW_ENCRYPT ? true : false,
2698                                          bcc_ptr);
2699                 else
2700 #endif /* CIFS_WEAK_PW_HASH */
2701                 SMBNTencrypt(tcon->password, ses->server->cryptKey,
2702                              bcc_ptr);
2703
2704                 bcc_ptr += CIFS_SESS_KEY_SIZE;
2705                 if (ses->capabilities & CAP_UNICODE) {
2706                         /* must align unicode strings */
2707                         *bcc_ptr = 0; /* null byte password */
2708                         bcc_ptr++;
2709                 }
2710         }
2711
2712         if (ses->server->secMode &
2713                         (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
2714                 smb_buffer->Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
2715
2716         if (ses->capabilities & CAP_STATUS32) {
2717                 smb_buffer->Flags2 |= SMBFLG2_ERR_STATUS;
2718         }
2719         if (ses->capabilities & CAP_DFS) {
2720                 smb_buffer->Flags2 |= SMBFLG2_DFS;
2721         }
2722         if (ses->capabilities & CAP_UNICODE) {
2723                 smb_buffer->Flags2 |= SMBFLG2_UNICODE;
2724                 length =
2725                     cifs_strtoUCS((__le16 *) bcc_ptr, tree,
2726                         6 /* max utf8 char length in bytes */ *
2727                         (/* server len*/ + 256 /* share len */), nls_codepage);
2728                 bcc_ptr += 2 * length;  /* convert num 16 bit words to bytes */
2729                 bcc_ptr += 2;   /* skip trailing null */
2730         } else {                /* ASCII */
2731                 strcpy(bcc_ptr, tree);
2732                 bcc_ptr += strlen(tree) + 1;
2733         }
2734         strcpy(bcc_ptr, "?????");
2735         bcc_ptr += strlen("?????");
2736         bcc_ptr += 1;
2737         count = bcc_ptr - &pSMB->Password[0];
2738         pSMB->hdr.smb_buf_length += count;
2739         pSMB->ByteCount = cpu_to_le16(count);
2740
2741         rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response, &length,
2742                          CIFS_STD_OP);
2743
2744         /* above now done in SendReceive */
2745         if ((rc == 0) && (tcon != NULL)) {
2746                 bool is_unicode;
2747
2748                 tcon->tidStatus = CifsGood;
2749                 tcon->need_reconnect = false;
2750                 tcon->tid = smb_buffer_response->Tid;
2751                 bcc_ptr = pByteArea(smb_buffer_response);
2752                 bytes_left = BCC(smb_buffer_response);
2753                 length = strnlen(bcc_ptr, bytes_left - 2);
2754                 if (smb_buffer->Flags2 & SMBFLG2_UNICODE)
2755                         is_unicode = true;
2756                 else
2757                         is_unicode = false;
2758
2759
2760                 /* skip service field (NB: this field is always ASCII) */
2761                 if (length == 3) {
2762                         if ((bcc_ptr[0] == 'I') && (bcc_ptr[1] == 'P') &&
2763                             (bcc_ptr[2] == 'C')) {
2764                                 cFYI(1, ("IPC connection"));
2765                                 tcon->ipc = 1;
2766                         }
2767                 } else if (length == 2) {
2768                         if ((bcc_ptr[0] == 'A') && (bcc_ptr[1] == ':')) {
2769                                 /* the most common case */
2770                                 cFYI(1, ("disk share connection"));
2771                         }
2772                 }
2773                 bcc_ptr += length + 1;
2774                 bytes_left -= (length + 1);
2775                 strncpy(tcon->treeName, tree, MAX_TREE_SIZE);
2776
2777                 /* mostly informational -- no need to fail on error here */
2778                 kfree(tcon->nativeFileSystem);
2779                 tcon->nativeFileSystem = cifs_strndup_from_ucs(bcc_ptr,
2780                                                       bytes_left, is_unicode,
2781                                                       nls_codepage);
2782
2783                 cFYI(1, ("nativeFileSystem=%s", tcon->nativeFileSystem));
2784
2785                 if ((smb_buffer_response->WordCount == 3) ||
2786                          (smb_buffer_response->WordCount == 7))
2787                         /* field is in same location */
2788                         tcon->Flags = le16_to_cpu(pSMBr->OptionalSupport);
2789                 else
2790                         tcon->Flags = 0;
2791                 cFYI(1, ("Tcon flags: 0x%x ", tcon->Flags));
2792         } else if ((rc == 0) && tcon == NULL) {
2793                 /* all we need to save for IPC$ connection */
2794                 ses->ipc_tid = smb_buffer_response->Tid;
2795         }
2796
2797         cifs_buf_release(smb_buffer);
2798         return rc;
2799 }
2800
2801 int
2802 cifs_umount(struct super_block *sb, struct cifs_sb_info *cifs_sb)
2803 {
2804         int rc = 0;
2805         char *tmp;
2806
2807         if (cifs_sb->tcon)
2808                 cifs_put_tcon(cifs_sb->tcon);
2809
2810         cifs_sb->tcon = NULL;
2811         tmp = cifs_sb->prepath;
2812         cifs_sb->prepathlen = 0;
2813         cifs_sb->prepath = NULL;
2814         kfree(tmp);
2815
2816         return rc;
2817 }
2818
2819 int cifs_setup_session(unsigned int xid, struct cifsSesInfo *pSesInfo,
2820                                            struct nls_table *nls_info)
2821 {
2822         int rc = 0;
2823         int first_time = 0;
2824         struct TCP_Server_Info *server = pSesInfo->server;
2825
2826         /* what if server changes its buffer size after dropping the session? */
2827         if (server->maxBuf == 0) /* no need to send on reconnect */ {
2828                 rc = CIFSSMBNegotiate(xid, pSesInfo);
2829                 if (rc == -EAGAIN) {
2830                         /* retry only once on 1st time connection */
2831                         rc = CIFSSMBNegotiate(xid, pSesInfo);
2832                         if (rc == -EAGAIN)
2833                                 rc = -EHOSTDOWN;
2834                 }
2835                 if (rc == 0) {
2836                         spin_lock(&GlobalMid_Lock);
2837                         if (server->tcpStatus != CifsExiting)
2838                                 server->tcpStatus = CifsGood;
2839                         else
2840                                 rc = -EHOSTDOWN;
2841                         spin_unlock(&GlobalMid_Lock);
2842
2843                 }
2844                 first_time = 1;
2845         }
2846
2847         if (rc)
2848                 goto ss_err_exit;
2849
2850         pSesInfo->flags = 0;
2851         pSesInfo->capabilities = server->capabilities;
2852         if (linuxExtEnabled == 0)
2853                 pSesInfo->capabilities &= (~CAP_UNIX);
2854
2855         cFYI(1, ("Security Mode: 0x%x Capabilities: 0x%x TimeAdjust: %d",
2856                  server->secMode, server->capabilities, server->timeAdj));
2857
2858         rc = CIFS_SessSetup(xid, pSesInfo, first_time, nls_info);
2859         if (rc) {
2860                 cERROR(1, ("Send error in SessSetup = %d", rc));
2861         } else {
2862                 cFYI(1, ("CIFS Session Established successfully"));
2863                 spin_lock(&GlobalMid_Lock);
2864                 pSesInfo->status = CifsGood;
2865                 pSesInfo->need_reconnect = false;
2866                 spin_unlock(&GlobalMid_Lock);
2867         }
2868
2869 ss_err_exit:
2870         return rc;
2871 }
2872