Remove the change to the user context in process_blocking_lock_queue()
[samba.git] / source3 / smbd / blocking.c
1 /* 
2    Unix SMB/CIFS implementation.
3    Blocking Locking functions
4    Copyright (C) Jeremy Allison 1998-2003
5
6    This program is free software; you can redistribute it and/or modify
7    it under the terms of the GNU General Public License as published by
8    the Free Software Foundation; either version 3 of the License, or
9    (at your option) any later version.
10
11    This program is distributed in the hope that it will be useful,
12    but WITHOUT ANY WARRANTY; without even the implied warranty of
13    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
14    GNU General Public License for more details.
15
16    You should have received a copy of the GNU General Public License
17    along with this program.  If not, see <http://www.gnu.org/licenses/>.
18 */
19
20 #include "includes.h"
21 #undef DBGC_CLASS
22 #define DBGC_CLASS DBGC_LOCKING
23
24 /****************************************************************************
25  This is the structure to queue to implement blocking locks.
26  notify. It consists of the requesting SMB and the expiry time.
27 *****************************************************************************/
28
29 typedef struct blocking_lock_record {
30         struct blocking_lock_record *next;
31         struct blocking_lock_record *prev;
32         files_struct *fsp;
33         struct timeval expire_time;
34         int lock_num;
35         uint64_t offset;
36         uint64_t count;
37         uint32_t lock_pid;
38         uint32_t blocking_pid; /* PID that blocks us. */
39         enum brl_flavour lock_flav;
40         enum brl_type lock_type;
41         struct smb_request *req;
42 } blocking_lock_record;
43
44 /* dlink list we store pending lock records on. */
45 static blocking_lock_record *blocking_lock_queue;
46
47 /* dlink list we move cancelled lock records onto. */
48 static blocking_lock_record *blocking_lock_cancelled_queue;
49
50 /* The event that makes us process our blocking lock queue */
51 static struct timed_event *brl_timeout;
52
53 /****************************************************************************
54  Determine if this is a secondary element of a chained SMB.
55   **************************************************************************/
56
57 static bool in_chained_smb(void)
58 {
59         return (chain_size != 0);
60 }
61
62 static void received_unlock_msg(struct messaging_context *msg,
63                                 void *private_data,
64                                 uint32_t msg_type,
65                                 struct server_id server_id,
66                                 DATA_BLOB *data);
67 static void process_blocking_lock_queue(void);
68
69 static void brl_timeout_fn(struct event_context *event_ctx,
70                            struct timed_event *te,
71                            const struct timeval *now,
72                            void *private_data)
73 {
74         SMB_ASSERT(brl_timeout == te);
75         TALLOC_FREE(brl_timeout);
76
77         change_to_root_user();  /* TODO: Possibly run all timed events as
78                                  * root */
79
80         process_blocking_lock_queue();
81 }
82
83 /****************************************************************************
84  After a change to blocking_lock_queue, recalculate the timed_event for the
85  next processing.
86 ****************************************************************************/
87
88 static bool recalc_brl_timeout(void)
89 {
90         blocking_lock_record *brl;
91         struct timeval next_timeout;
92
93         TALLOC_FREE(brl_timeout);
94
95         next_timeout = timeval_zero();  
96
97         for (brl = blocking_lock_queue; brl; brl = brl->next) {
98                 if (timeval_is_zero(&brl->expire_time)) {
99                         /*
100                          * If we're blocked on pid 0xFFFFFFFF this is
101                          * a POSIX lock, so calculate a timeout of
102                          * 10 seconds into the future.
103                          */
104                         if (brl->blocking_pid == 0xFFFFFFFF) {
105                                 struct timeval psx_to = timeval_current_ofs(10, 0);
106                                 next_timeout = timeval_min(&next_timeout, &psx_to);
107                         }
108
109                         continue;
110                 }
111
112                 if (timeval_is_zero(&next_timeout)) {
113                         next_timeout = brl->expire_time;
114                 }
115                 else {
116                         next_timeout = timeval_min(&next_timeout,
117                                                    &brl->expire_time);
118                 }
119         }
120
121         if (timeval_is_zero(&next_timeout)) {
122                 return True;
123         }
124
125         if (!(brl_timeout = event_add_timed(smbd_event_context(), NULL,
126                                             next_timeout, "brl_timeout",
127                                             brl_timeout_fn, NULL))) {
128                 return False;
129         }
130
131         return True;
132 }
133
134
135 /****************************************************************************
136  Function to push a blocking lock request onto the lock queue.
137 ****************************************************************************/
138
139 bool push_blocking_lock_request( struct byte_range_lock *br_lck,
140                 struct smb_request *req,
141                 files_struct *fsp,
142                 int lock_timeout,
143                 int lock_num,
144                 uint32_t lock_pid,
145                 enum brl_type lock_type,
146                 enum brl_flavour lock_flav,
147                 uint64_t offset,
148                 uint64_t count,
149                 uint32_t blocking_pid)
150 {
151         static bool set_lock_msg;
152         blocking_lock_record *blr;
153         NTSTATUS status;
154
155         if(in_chained_smb() ) {
156                 DEBUG(0,("push_blocking_lock_request: cannot queue a chained request (currently).\n"));
157                 return False;
158         }
159
160         /*
161          * Now queue an entry on the blocking lock queue. We setup
162          * the expiration time here.
163          */
164
165         blr = talloc(NULL, struct blocking_lock_record);
166         if (blr == NULL) {
167                 DEBUG(0,("push_blocking_lock_request: Malloc fail !\n" ));
168                 return False;
169         }
170
171         blr->next = NULL;
172         blr->prev = NULL;
173
174         blr->fsp = fsp;
175         if (lock_timeout == -1) {
176                 blr->expire_time.tv_sec = 0;
177                 blr->expire_time.tv_usec = 0; /* Never expire. */
178         } else {
179                 blr->expire_time = timeval_current_ofs(lock_timeout/1000,
180                                         (lock_timeout % 1000) * 1000);
181         }
182         blr->lock_num = lock_num;
183         blr->lock_pid = lock_pid;
184         blr->blocking_pid = blocking_pid;
185         blr->lock_flav = lock_flav;
186         blr->lock_type = lock_type;
187         blr->offset = offset;
188         blr->count = count;
189
190         /* Add a pending lock record for this. */
191         status = brl_lock(smbd_messaging_context(), br_lck,
192                         lock_pid,
193                         procid_self(),
194                         offset,
195                         count,
196                         lock_type == READ_LOCK ? PENDING_READ_LOCK : PENDING_WRITE_LOCK,
197                         blr->lock_flav,
198                         lock_timeout ? True : False, /* blocking_lock. */
199                         NULL);
200
201         if (!NT_STATUS_IS_OK(status)) {
202                 DEBUG(0,("push_blocking_lock_request: failed to add PENDING_LOCK record.\n"));
203                 DLIST_REMOVE(blocking_lock_queue, blr);
204                 TALLOC_FREE(blr);
205                 return False;
206         }
207
208         blr->req = talloc_move(blr, &req);
209
210         DLIST_ADD_END(blocking_lock_queue, blr, blocking_lock_record *);
211         recalc_brl_timeout();
212
213         /* Ensure we'll receive messages when this is unlocked. */
214         if (!set_lock_msg) {
215                 messaging_register(smbd_messaging_context(), NULL,
216                                    MSG_SMB_UNLOCK, received_unlock_msg);
217                 set_lock_msg = True;
218         }
219
220         DEBUG(3,("push_blocking_lock_request: lock request blocked with "
221                 "expiry time (%u sec. %u usec) (+%d msec) for fnum = %d, name = %s\n",
222                 (unsigned int)blr->expire_time.tv_sec,
223                 (unsigned int)blr->expire_time.tv_usec, lock_timeout,
224                 blr->fsp->fnum, blr->fsp->fsp_name ));
225
226         /* Push the MID of this packet on the signing queue. */
227         srv_defer_sign_response(blr->req->mid);
228
229         return True;
230 }
231
232 /****************************************************************************
233  Return a lockingX success SMB.
234 *****************************************************************************/
235
236 static void reply_lockingX_success(blocking_lock_record *blr)
237 {
238         reply_outbuf(blr->req, 2, 0);
239
240         /*
241          * As this message is a lockingX call we must handle
242          * any following chained message correctly.
243          * This is normally handled in construct_reply(),
244          * but as that calls switch_message, we can't use
245          * that here and must set up the chain info manually.
246          */
247
248         chain_reply(blr->req);
249
250         if (!srv_send_smb(smbd_server_fd(), (char *)blr->req->outbuf,
251                         IS_CONN_ENCRYPTED(blr->fsp->conn))) {
252                 exit_server_cleanly("send_blocking_reply: srv_send_smb failed.");
253         }
254
255         TALLOC_FREE(blr->req->outbuf);
256 }
257
258 /****************************************************************************
259  Return a generic lock fail error blocking call.
260 *****************************************************************************/
261
262 static void generic_blocking_lock_error(blocking_lock_record *blr, NTSTATUS status)
263 {
264         /* whenever a timeout is given w2k maps LOCK_NOT_GRANTED to
265            FILE_LOCK_CONFLICT! (tridge) */
266         if (NT_STATUS_EQUAL(status, NT_STATUS_LOCK_NOT_GRANTED)) {
267                 status = NT_STATUS_FILE_LOCK_CONFLICT;
268         }
269
270         if (NT_STATUS_EQUAL(status, NT_STATUS_FILE_LOCK_CONFLICT)) {
271                 /* Store the last lock error. */
272                 files_struct *fsp = blr->fsp;
273
274                 if (fsp) {
275                         fsp->last_lock_failure.context.smbpid = blr->lock_pid;
276                         fsp->last_lock_failure.context.tid = fsp->conn->cnum;
277                         fsp->last_lock_failure.context.pid = procid_self();
278                         fsp->last_lock_failure.start = blr->offset;
279                         fsp->last_lock_failure.size = blr->count;
280                         fsp->last_lock_failure.fnum = fsp->fnum;
281                         fsp->last_lock_failure.lock_type = READ_LOCK; /* Don't care. */
282                         fsp->last_lock_failure.lock_flav = blr->lock_flav;
283                 }
284         }
285
286         reply_nterror(blr->req, status);
287         if (!srv_send_smb(smbd_server_fd(), (char *)blr->req->outbuf,
288                           blr->req->encrypted)) {
289                 exit_server_cleanly("generic_blocking_lock_error: srv_send_smb failed.");
290         }
291         TALLOC_FREE(blr->req->outbuf);
292 }
293
294 /****************************************************************************
295  Return a lock fail error for a lockingX call. Undo all the locks we have 
296  obtained first.
297 *****************************************************************************/
298
299 static void reply_lockingX_error(blocking_lock_record *blr, NTSTATUS status)
300 {
301         files_struct *fsp = blr->fsp;
302         uint16 num_ulocks = SVAL(blr->req->vwv+6, 0);
303         uint64_t count = (uint64_t)0, offset = (uint64_t) 0;
304         uint32 lock_pid;
305         unsigned char locktype = CVAL(blr->req->vwv+3, 0);
306         bool large_file_format = (locktype & LOCKING_ANDX_LARGE_FILES);
307         uint8_t *data;
308         int i;
309
310         data = (uint8_t *)blr->req->buf
311                 + ((large_file_format ? 20 : 10)*num_ulocks);
312
313         /* 
314          * Data now points at the beginning of the list
315          * of smb_lkrng structs.
316          */
317
318         /*
319          * Ensure we don't do a remove on the lock that just failed,
320          * as under POSIX rules, if we have a lock already there, we
321          * will delete it (and we shouldn't) .....
322          */
323
324         for(i = blr->lock_num - 1; i >= 0; i--) {
325                 bool err;
326
327                 lock_pid = get_lock_pid( data, i, large_file_format);
328                 count = get_lock_count( data, i, large_file_format);
329                 offset = get_lock_offset( data, i, large_file_format, &err);
330
331                 /*
332                  * We know err cannot be set as if it was the lock
333                  * request would never have been queued. JRA.
334                  */
335
336                 do_unlock(smbd_messaging_context(),
337                         fsp,
338                         lock_pid,
339                         count,
340                         offset,
341                         WINDOWS_LOCK);
342         }
343
344         generic_blocking_lock_error(blr, status);
345 }
346
347 /****************************************************************************
348  Return a lock fail error.
349 *****************************************************************************/
350
351 static void blocking_lock_reply_error(blocking_lock_record *blr, NTSTATUS status)
352 {
353         switch(blr->req->cmd) {
354         case SMBlockingX:
355                 reply_lockingX_error(blr, status);
356                 break;
357         case SMBtrans2:
358         case SMBtranss2:
359                 reply_nterror(blr->req, status);
360
361                 /*
362                  * construct_reply_common has done us the favor to pre-fill
363                  * the command field with SMBtranss2 which is wrong :-)
364                  */
365                 SCVAL(blr->req->outbuf,smb_com,SMBtrans2);
366
367                 if (!srv_send_smb(smbd_server_fd(),
368                                   (char *)blr->req->outbuf,
369                                   IS_CONN_ENCRYPTED(blr->fsp->conn))) {
370                         exit_server_cleanly("blocking_lock_reply_error: "
371                                             "srv_send_smb failed.");
372                 }
373                 TALLOC_FREE(blr->req->outbuf);
374                 break;
375         default:
376                 DEBUG(0,("blocking_lock_reply_error: PANIC - unknown type on blocking lock queue - exiting.!\n"));
377                 exit_server("PANIC - unknown type on blocking lock queue");
378         }
379 }
380
381 /****************************************************************************
382  Attempt to finish off getting all pending blocking locks for a lockingX call.
383  Returns True if we want to be removed from the list.
384 *****************************************************************************/
385
386 static bool process_lockingX(blocking_lock_record *blr)
387 {
388         unsigned char locktype = CVAL(blr->req->vwv+3, 0);
389         files_struct *fsp = blr->fsp;
390         uint16 num_ulocks = SVAL(blr->req->vwv+6, 0);
391         uint16 num_locks = SVAL(blr->req->vwv+7, 0);
392         uint64_t count = (uint64_t)0, offset = (uint64_t)0;
393         uint32 lock_pid;
394         bool large_file_format = (locktype & LOCKING_ANDX_LARGE_FILES);
395         uint8_t *data;
396         NTSTATUS status = NT_STATUS_OK;
397
398         data = (uint8_t *)blr->req->buf
399                 + ((large_file_format ? 20 : 10)*num_ulocks);
400
401         /* 
402          * Data now points at the beginning of the list
403          * of smb_lkrng structs.
404          */
405
406         for(; blr->lock_num < num_locks; blr->lock_num++) {
407                 struct byte_range_lock *br_lck = NULL;
408                 bool err;
409
410                 lock_pid = get_lock_pid( data, blr->lock_num, large_file_format);
411                 count = get_lock_count( data, blr->lock_num, large_file_format);
412                 offset = get_lock_offset( data, blr->lock_num, large_file_format, &err);
413
414                 /*
415                  * We know err cannot be set as if it was the lock
416                  * request would never have been queued. JRA.
417                  */
418                 errno = 0;
419                 br_lck = do_lock(smbd_messaging_context(),
420                                 fsp,
421                                 lock_pid,
422                                 count,
423                                 offset, 
424                                 ((locktype & LOCKING_ANDX_SHARED_LOCK) ?
425                                         READ_LOCK : WRITE_LOCK),
426                                 WINDOWS_LOCK,
427                                 True,
428                                 &status,
429                                 &blr->blocking_pid);
430
431                 TALLOC_FREE(br_lck);
432
433                 if (NT_STATUS_IS_ERR(status)) {
434                         break;
435                 }
436         }
437
438         if(blr->lock_num == num_locks) {
439                 /*
440                  * Success - we got all the locks.
441                  */
442
443                 DEBUG(3,("process_lockingX file = %s, fnum=%d type=%d num_locks=%d\n",
444                          fsp->fsp_name, fsp->fnum, (unsigned int)locktype, num_locks) );
445
446                 reply_lockingX_success(blr);
447                 return True;
448         }
449
450         if (!NT_STATUS_EQUAL(status,NT_STATUS_LOCK_NOT_GRANTED) &&
451             !NT_STATUS_EQUAL(status,NT_STATUS_FILE_LOCK_CONFLICT)) {
452                 /*
453                  * We have other than a "can't get lock"
454                  * error. Free any locks we had and return an error.
455                  * Return True so we get dequeued.
456                  */
457                 blocking_lock_reply_error(blr, status);
458                 return True;
459         }
460
461         /*
462          * Still can't get all the locks - keep waiting.
463          */
464
465         DEBUG(10,("process_lockingX: only got %d locks of %d needed for file %s, fnum = %d. \
466 Waiting....\n", 
467                   blr->lock_num, num_locks, fsp->fsp_name, fsp->fnum));
468
469         return False;
470 }
471
472 /****************************************************************************
473  Attempt to get the posix lock request from a SMBtrans2 call.
474  Returns True if we want to be removed from the list.
475 *****************************************************************************/
476
477 static bool process_trans2(blocking_lock_record *blr)
478 {
479         char params[2];
480         NTSTATUS status;
481         struct byte_range_lock *br_lck = do_lock(smbd_messaging_context(),
482                                                 blr->fsp,
483                                                 blr->lock_pid,
484                                                 blr->count,
485                                                 blr->offset,
486                                                 blr->lock_type,
487                                                 blr->lock_flav,
488                                                 True,
489                                                 &status,
490                                                 &blr->blocking_pid);
491         TALLOC_FREE(br_lck);
492
493         if (!NT_STATUS_IS_OK(status)) {
494                 if (ERROR_WAS_LOCK_DENIED(status)) {
495                         /* Still can't get the lock, just keep waiting. */
496                         return False;
497                 }       
498                 /*
499                  * We have other than a "can't get lock"
500                  * error. Send an error and return True so we get dequeued.
501                  */
502                 blocking_lock_reply_error(blr, status);
503                 return True;
504         }
505
506         /* We finally got the lock, return success. */
507
508         SCVAL(blr->req->inbuf, smb_com, SMBtrans2);
509         SSVAL(params,0,0);
510         /* Fake up max_data_bytes here - we know it fits. */
511         send_trans2_replies(blr->fsp->conn, blr->req, params, 2, NULL, 0, 0xffff);
512         return True;
513 }
514
515
516 /****************************************************************************
517  Process a blocking lock SMB.
518  Returns True if we want to be removed from the list.
519 *****************************************************************************/
520
521 static bool blocking_lock_record_process(blocking_lock_record *blr)
522 {
523         switch(blr->req->cmd) {
524                 case SMBlockingX:
525                         return process_lockingX(blr);
526                 case SMBtrans2:
527                 case SMBtranss2:
528                         return process_trans2(blr);
529                 default:
530                         DEBUG(0,("blocking_lock_record_process: PANIC - unknown type on blocking lock queue - exiting.!\n"));
531                         exit_server("PANIC - unknown type on blocking lock queue");
532         }
533         return False; /* Keep compiler happy. */
534 }
535
536 /****************************************************************************
537  Cancel entries by fnum from the blocking lock pending queue.
538 *****************************************************************************/
539
540 void cancel_pending_lock_requests_by_fid(files_struct *fsp, struct byte_range_lock *br_lck)
541 {
542         blocking_lock_record *blr, *next = NULL;
543
544         for(blr = blocking_lock_queue; blr; blr = next) {
545                 unsigned char locktype = 0;
546
547                 next = blr->next;
548                 if (blr->fsp->fnum != fsp->fnum) {
549                         continue;
550                 }
551
552                 if (blr->req->cmd == SMBlockingX) {
553                         locktype = CVAL(blr->req->vwv+3, 0);
554                 }
555
556                 DEBUG(10, ("remove_pending_lock_requests_by_fid - removing "
557                            "request type %d for file %s fnum = %d\n",
558                            blr->req->cmd, fsp->fsp_name, fsp->fnum));
559
560                 brl_lock_cancel(br_lck,
561                                 blr->lock_pid,
562                                 procid_self(),
563                                 blr->offset,
564                                 blr->count,
565                                 blr->lock_flav);
566
567                 blocking_lock_cancel(fsp,
568                                      blr->lock_pid,
569                                      blr->offset,
570                                      blr->count,
571                                      blr->lock_flav,
572                                      locktype,
573                                      NT_STATUS_RANGE_NOT_LOCKED);
574
575                 /* We're closing the file fsp here, so ensure
576                  * we don't have a dangling pointer. */
577                 blr->fsp = NULL;
578         }
579 }
580
581 /****************************************************************************
582  Delete entries by mid from the blocking lock pending queue. Always send reply.
583 *****************************************************************************/
584
585 void remove_pending_lock_requests_by_mid(int mid)
586 {
587         blocking_lock_record *blr, *next = NULL;
588
589         for(blr = blocking_lock_queue; blr; blr = next) {
590                 files_struct *fsp;
591                 struct byte_range_lock *br_lck;
592
593                 next = blr->next;
594
595                 if (blr->req->mid != mid) {
596                         continue;
597                 }
598
599                 fsp = blr->fsp;
600                 br_lck = brl_get_locks(talloc_tos(), fsp);
601
602                 if (br_lck) {
603                         DEBUG(10, ("remove_pending_lock_requests_by_mid - "
604                                    "removing request type %d for file %s fnum "
605                                    "= %d\n", blr->req->cmd, fsp->fsp_name,
606                                    fsp->fnum ));
607
608                         brl_lock_cancel(br_lck,
609                                         blr->lock_pid,
610                                         procid_self(),
611                                         blr->offset,
612                                         blr->count,
613                                         blr->lock_flav);
614                         TALLOC_FREE(br_lck);
615                 }
616
617                 blocking_lock_reply_error(blr,NT_STATUS_FILE_LOCK_CONFLICT);
618                 DLIST_REMOVE(blocking_lock_queue, blr);
619                 TALLOC_FREE(blr);
620         }
621 }
622
623 /****************************************************************************
624  Is this mid a blocking lock request on the queue ?
625 *****************************************************************************/
626
627 bool blocking_lock_was_deferred(int mid)
628 {
629         blocking_lock_record *blr, *next = NULL;
630
631         for(blr = blocking_lock_queue; blr; blr = next) {
632                 next = blr->next;
633                 if(blr->req->mid == mid) {
634                         return True;
635                 }
636         }
637         return False;
638 }
639
640 /****************************************************************************
641   Set a flag as an unlock request affects one of our pending locks.
642 *****************************************************************************/
643
644 static void received_unlock_msg(struct messaging_context *msg,
645                                 void *private_data,
646                                 uint32_t msg_type,
647                                 struct server_id server_id,
648                                 DATA_BLOB *data)
649 {
650         DEBUG(10,("received_unlock_msg\n"));
651         process_blocking_lock_queue();
652 }
653
654 /****************************************************************************
655  Process the blocking lock queue. Note that this is only called as root.
656 *****************************************************************************/
657
658 static void process_blocking_lock_queue(void)
659 {
660         struct timeval tv_curr = timeval_current();
661         blocking_lock_record *blr, *next = NULL;
662         bool recalc_timeout = False;
663
664         /*
665          * Go through the queue and see if we can get any of the locks.
666          */
667
668         for (blr = blocking_lock_queue; blr; blr = next) {
669
670                 next = blr->next;
671
672                 /*
673                  * Go through the remaining locks and try and obtain them.
674                  * The call returns True if all locks were obtained successfully
675                  * and False if we still need to wait.
676                  */
677
678                 if(blocking_lock_record_process(blr)) {
679                         struct byte_range_lock *br_lck = brl_get_locks(
680                                 talloc_tos(), blr->fsp);
681
682                         if (br_lck) {
683                                 brl_lock_cancel(br_lck,
684                                         blr->lock_pid,
685                                         procid_self(),
686                                         blr->offset,
687                                         blr->count,
688                                         blr->lock_flav);
689                                 TALLOC_FREE(br_lck);
690                         }
691
692                         DLIST_REMOVE(blocking_lock_queue, blr);
693                         TALLOC_FREE(blr);
694                         recalc_timeout = True;
695                         continue;
696                 }
697
698                 /*
699                  * We couldn't get the locks for this record on the list.
700                  * If the time has expired, return a lock error.
701                  */
702
703                 if (!timeval_is_zero(&blr->expire_time) && timeval_compare(&blr->expire_time, &tv_curr) <= 0) {
704                         struct byte_range_lock *br_lck = brl_get_locks(
705                                 talloc_tos(), blr->fsp);
706
707                         /*
708                          * Lock expired - throw away all previously
709                          * obtained locks and return lock error.
710                          */
711
712                         if (br_lck) {
713                                 DEBUG(5,("process_blocking_lock_queue: "
714                                          "pending lock fnum = %d for file %s "
715                                          "timed out.\n", blr->fsp->fnum,
716                                          blr->fsp->fsp_name ));
717
718                                 brl_lock_cancel(br_lck,
719                                         blr->lock_pid,
720                                         procid_self(),
721                                         blr->offset,
722                                         blr->count,
723                                         blr->lock_flav);
724                                 TALLOC_FREE(br_lck);
725                         }
726
727                         blocking_lock_reply_error(blr,NT_STATUS_FILE_LOCK_CONFLICT);
728                         DLIST_REMOVE(blocking_lock_queue, blr);
729                         TALLOC_FREE(blr);
730                         recalc_timeout = True;
731                 }
732         }
733
734         if (recalc_timeout) {
735                 recalc_brl_timeout();
736         }
737 }
738
739 /****************************************************************************
740  Handle a cancel message. Lock already moved onto the cancel queue.
741 *****************************************************************************/
742
743 #define MSG_BLOCKING_LOCK_CANCEL_SIZE (sizeof(blocking_lock_record *) + sizeof(NTSTATUS))
744
745 static void process_blocking_lock_cancel_message(struct messaging_context *ctx,
746                                                  void *private_data,
747                                                  uint32_t msg_type,
748                                                  struct server_id server_id,
749                                                  DATA_BLOB *data)
750 {
751         NTSTATUS err;
752         const char *msg = (const char *)data->data;
753         blocking_lock_record *blr;
754
755         if (data->data == NULL) {
756                 smb_panic("process_blocking_lock_cancel_message: null msg");
757         }
758
759         if (data->length != MSG_BLOCKING_LOCK_CANCEL_SIZE) {
760                 DEBUG(0, ("process_blocking_lock_cancel_message: "
761                           "Got invalid msg len %d\n", (int)data->length));
762                 smb_panic("process_blocking_lock_cancel_message: bad msg");
763         }
764
765         memcpy(&blr, msg, sizeof(blr));
766         memcpy(&err, &msg[sizeof(blr)], sizeof(NTSTATUS));
767
768         DEBUG(10,("process_blocking_lock_cancel_message: returning error %s\n",
769                 nt_errstr(err) ));
770
771         blocking_lock_reply_error(blr, err);
772         DLIST_REMOVE(blocking_lock_cancelled_queue, blr);
773         TALLOC_FREE(blr);
774 }
775
776 /****************************************************************************
777  Send ourselves a blocking lock cancelled message. Handled asynchronously above.
778 *****************************************************************************/
779
780 bool blocking_lock_cancel(files_struct *fsp,
781                         uint32 lock_pid,
782                         uint64_t offset,
783                         uint64_t count,
784                         enum brl_flavour lock_flav,
785                         unsigned char locktype,
786                         NTSTATUS err)
787 {
788         static bool initialized;
789         char msg[MSG_BLOCKING_LOCK_CANCEL_SIZE];
790         blocking_lock_record *blr;
791
792         if (!initialized) {
793                 /* Register our message. */
794                 messaging_register(smbd_messaging_context(), NULL,
795                                    MSG_SMB_BLOCKING_LOCK_CANCEL,
796                                    process_blocking_lock_cancel_message);
797
798                 initialized = True;
799         }
800
801         for (blr = blocking_lock_queue; blr; blr = blr->next) {
802                 if (fsp == blr->fsp &&
803                                 lock_pid == blr->lock_pid &&
804                                 offset == blr->offset &&
805                                 count == blr->count &&
806                                 lock_flav == blr->lock_flav) {
807                         break;
808                 }
809         }
810
811         if (!blr) {
812                 return False;
813         }
814
815         /* Check the flags are right. */
816         if (blr->req->cmd == SMBlockingX &&
817                 (locktype & LOCKING_ANDX_LARGE_FILES) !=
818                         (CVAL(blr->req->vwv+3, 0) & LOCKING_ANDX_LARGE_FILES)) {
819                 return False;
820         }
821
822         /* Move to cancelled queue. */
823         DLIST_REMOVE(blocking_lock_queue, blr);
824         DLIST_ADD(blocking_lock_cancelled_queue, blr);
825
826         /* Create the message. */
827         memcpy(msg, &blr, sizeof(blr));
828         memcpy(&msg[sizeof(blr)], &err, sizeof(NTSTATUS));
829
830         messaging_send_buf(smbd_messaging_context(), procid_self(),
831                            MSG_SMB_BLOCKING_LOCK_CANCEL,
832                            (uint8 *)&msg, sizeof(msg));
833
834         return True;
835 }