s3: smbd: Reformat caller of user_can_write_file().
[gd/samba-autobuild/.git] / source3 / smbd / dir.c
index 12edf80ee0290805539009368cd5d7ce72ceea2c..1ac273664f898f514a55a0843bd7f807d4d2bfd5 100644 (file)
@@ -83,7 +83,9 @@ static struct smb_Dir *OpenDir_fsp(TALLOC_CTX *mem_ctx, connection_struct *conn,
                        const char *mask,
                        uint32_t attr);
 
-static void DirCacheAdd(struct smb_Dir *dirp, const char *name, long offset);
+static void DirCacheAdd(struct smb_Dir *dir_hnd, const char *name, long offset);
+
+static int smb_Dir_destructor(struct smb_Dir *dir_hnd);
 
 #define INVALID_DPTR_KEY (-3)
 
@@ -107,81 +109,21 @@ bool init_dptrs(struct smbd_server_connection *sconn)
        return true;
 }
 
-/****************************************************************************
- Idle a dptr - the directory is closed but the control info is kept.
-****************************************************************************/
-
-static void dptr_idle(struct dptr_struct *dptr)
-{
-       if (dptr->dir_hnd) {
-               DEBUG(4,("Idling dptr dnum %d\n",dptr->dnum));
-               TALLOC_FREE(dptr->dir_hnd);
-               TALLOC_FREE(dptr->dptr_cache);
-               dptr->counter = 0;
-       }
-}
-
-/****************************************************************************
- Idle the oldest dptr.
-****************************************************************************/
-
-static void dptr_idleoldest(struct smbd_server_connection *sconn)
-{
-       struct dptr_struct *dptr;
-
-       /*
-        * Go to the end of the list.
-        */
-       dptr = DLIST_TAIL(sconn->searches.dirptrs);
-
-       if(!dptr) {
-               DEBUG(0,("No dptrs available to idle ?\n"));
-               return;
-       }
-
-       /*
-        * Idle the oldest pointer.
-        */
-
-       for(; dptr; dptr = DLIST_PREV(dptr)) {
-               if (dptr->dir_hnd) {
-                       dptr_idle(dptr);
-                       return;
-               }
-       }
-}
-
 /****************************************************************************
  Get the struct dptr_struct for a dir index.
 ****************************************************************************/
 
 static struct dptr_struct *dptr_get(struct smbd_server_connection *sconn,
-                                   int key, bool forclose)
+                                   int key)
 {
        struct dptr_struct *dptr;
 
-       for(dptr = sconn->searches.dirptrs; dptr; dptr = dptr->next) {
-               if(dptr->dnum == key) {
-                       if (!forclose && !dptr->dir_hnd) {
-                               if (sconn->searches.dirhandles_open >= MAX_OPEN_DIRECTORIES)
-                                       dptr_idleoldest(sconn);
-                               DEBUG(4,("dptr_get: Reopening dptr key %d\n",key));
-
-                               if (!(dptr->dir_hnd = OpenDir(NULL,
-                                                       dptr->conn,
-                                                       dptr->smb_dname,
-                                                       dptr->wcard,
-                                                       dptr->attr))) {
-                                       DEBUG(4,("dptr_get: Failed to "
-                                               "open %s (%s)\n",
-                                               dptr->smb_dname->base_name,
-                                               strerror(errno)));
-                                       return NULL;
-                               }
-                       }
-                       DLIST_PROMOTE(sconn->searches.dirptrs,dptr);
-                       return dptr;
+       for (dptr = sconn->searches.dirptrs; dptr != NULL; dptr = dptr->next) {
+               if(dptr->dnum != key) {
+                       continue;
                }
+               DLIST_PROMOTE(sconn->searches.dirptrs, dptr);
+               return dptr;
        }
        return(NULL);
 }
@@ -192,7 +134,7 @@ static struct dptr_struct *dptr_get(struct smbd_server_connection *sconn,
 
 const char *dptr_path(struct smbd_server_connection *sconn, int key)
 {
-       struct dptr_struct *dptr = dptr_get(sconn, key, false);
+       struct dptr_struct *dptr = dptr_get(sconn, key);
        if (dptr)
                return(dptr->smb_dname->base_name);
        return(NULL);
@@ -204,7 +146,7 @@ const char *dptr_path(struct smbd_server_connection *sconn, int key)
 
 const char *dptr_wcard(struct smbd_server_connection *sconn, int key)
 {
-       struct dptr_struct *dptr = dptr_get(sconn, key, false);
+       struct dptr_struct *dptr = dptr_get(sconn, key);
        if (dptr)
                return(dptr->wcard);
        return(NULL);
@@ -216,83 +158,12 @@ const char *dptr_wcard(struct smbd_server_connection *sconn, int key)
 
 uint16_t dptr_attr(struct smbd_server_connection *sconn, int key)
 {
-       struct dptr_struct *dptr = dptr_get(sconn, key, false);
+       struct dptr_struct *dptr = dptr_get(sconn, key);
        if (dptr)
                return(dptr->attr);
        return(0);
 }
 
-/****************************************************************************
- Close a dptr (internal func).
-****************************************************************************/
-
-static void dptr_close_internal(struct dptr_struct *dptr)
-{
-       struct smbd_server_connection *sconn = dptr->conn->sconn;
-
-       DEBUG(4,("closing dptr key %d\n",dptr->dnum));
-
-       if (sconn == NULL) {
-               goto done;
-       }
-
-       if (sconn->using_smb2) {
-               goto done;
-       }
-
-       DLIST_REMOVE(sconn->searches.dirptrs, dptr);
-
-       /*
-        * Free the dnum in the bitmap. Remember the dnum value is always 
-        * biased by one with respect to the bitmap.
-        */
-
-       if (!bitmap_query(sconn->searches.dptr_bmap, dptr->dnum - 1)) {
-               DEBUG(0,("dptr_close_internal : Error - closing dnum = %d and bitmap not set !\n",
-                       dptr->dnum ));
-       }
-
-       bitmap_clear(sconn->searches.dptr_bmap, dptr->dnum - 1);
-
-done:
-       TALLOC_FREE(dptr->dir_hnd);
-       TALLOC_FREE(dptr);
-}
-
-/****************************************************************************
- Close a dptr given a key.
-****************************************************************************/
-
-void dptr_close(struct smbd_server_connection *sconn, int *key)
-{
-       struct dptr_struct *dptr;
-
-       if(*key == INVALID_DPTR_KEY)
-               return;
-
-       /* OS/2 seems to use -1 to indicate "close all directories" */
-       if (*key == -1) {
-               struct dptr_struct *next;
-               for(dptr = sconn->searches.dirptrs; dptr; dptr = next) {
-                       next = dptr->next;
-                       dptr_close_internal(dptr);
-               }
-               *key = INVALID_DPTR_KEY;
-               return;
-       }
-
-       dptr = dptr_get(sconn, *key, true);
-
-       if (!dptr) {
-               DEBUG(0,("Invalid key %d given to dptr_close\n", *key));
-               return;
-       }
-
-       dptr_close_internal(dptr);
-
-       *key = INVALID_DPTR_KEY;
-}
-
 /****************************************************************************
  Close all dptrs for a cnum.
 ****************************************************************************/
@@ -309,139 +180,13 @@ void dptr_closecnum(connection_struct *conn)
        for(dptr = sconn->searches.dirptrs; dptr; dptr = next) {
                next = dptr->next;
                if (dptr->conn == conn) {
-                       dptr_close_internal(dptr);
+                       files_struct *fsp = dptr->dir_hnd->fsp;
+                       close_file(NULL, fsp, NORMAL_CLOSE);
+                       fsp = NULL;
                }
        }
 }
 
-/****************************************************************************
- Idle all dptrs for a cnum.
-****************************************************************************/
-
-void dptr_idlecnum(connection_struct *conn)
-{
-       struct dptr_struct *dptr;
-       struct smbd_server_connection *sconn = conn->sconn;
-
-       if (sconn == NULL) {
-               return;
-       }
-
-       for(dptr = sconn->searches.dirptrs; dptr; dptr = dptr->next) {
-               if (dptr->conn == conn && dptr->dir_hnd) {
-                       dptr_idle(dptr);
-               }
-       }
-}
-
-/****************************************************************************
- Close a dptr that matches a given path, only if it matches the spid also.
-****************************************************************************/
-
-void dptr_closepath(struct smbd_server_connection *sconn,
-                   char *path,uint16_t spid)
-{
-       struct dptr_struct *dptr, *next;
-       for(dptr = sconn->searches.dirptrs; dptr; dptr = next) {
-               next = dptr->next;
-               if (spid == dptr->spid &&
-                               strequal(dptr->smb_dname->base_name,path)) {
-                       dptr_close_internal(dptr);
-               }
-       }
-}
-
-/****************************************************************************
- Try and close the oldest handle not marked for
- expect close in the hope that the client has
- finished with that one.
-****************************************************************************/
-
-static void dptr_close_oldest(struct smbd_server_connection *sconn,
-                             bool old)
-{
-       struct dptr_struct *dptr;
-
-       /*
-        * Go to the end of the list.
-        */
-       for(dptr = sconn->searches.dirptrs; dptr && dptr->next; dptr = dptr->next)
-               ;
-
-       if(!dptr) {
-               DEBUG(0,("No old dptrs available to close oldest ?\n"));
-               return;
-       }
-
-       /*
-        * If 'old' is true, close the oldest oldhandle dnum (ie. 1 < dnum < 256) that
-        * does not have expect_close set. If 'old' is false, close
-        * one of the new dnum handles.
-        */
-
-       for(; dptr; dptr = DLIST_PREV(dptr)) {
-               if ((old && (dptr->dnum < 256) && !dptr->expect_close) ||
-                       (!old && (dptr->dnum > 255))) {
-                               dptr_close_internal(dptr);
-                               return;
-               }
-       }
-}
-
-/****************************************************************************
- Safely do an OpenDir as root, ensuring we're in the right place.
-****************************************************************************/
-
-static struct smb_Dir *open_dir_with_privilege(connection_struct *conn,
-                                       struct smb_request *req,
-                                       const struct smb_filename *smb_dname,
-                                       const char *wcard,
-                                       uint32_t attr)
-{
-       struct smb_Dir *dir_hnd = NULL;
-       struct smb_filename *smb_fname_cwd;
-       char *saved_dir = vfs_GetWd(talloc_tos(), conn);
-       struct privilege_paths *priv_paths = req->priv_paths;
-       int ret;
-
-       if (saved_dir == NULL) {
-               return NULL;
-       }
-
-       if (vfs_ChDir(conn, smb_dname->base_name) == -1) {
-               return NULL;
-       }
-
-       /* Now check the stat value is the same. */
-       smb_fname_cwd = synthetic_smb_fname(talloc_tos(),
-                                       ".",
-                                       NULL,
-                                       NULL,
-                                       smb_dname->flags);
-       if (smb_fname_cwd == NULL) {
-               goto out;
-       }
-       ret = SMB_VFS_STAT(conn, smb_fname_cwd);
-       if (ret != 0) {
-               goto out;
-       }
-
-       if (!check_same_stat(&smb_fname_cwd->st, &priv_paths->parent_name.st)) {
-               DEBUG(0,("open_dir_with_privilege: stat mismatch between %s "
-                       "and %s\n",
-                       smb_dname->base_name,
-                       smb_fname_str_dbg(&priv_paths->parent_name)));
-               goto out;
-       }
-
-       dir_hnd = OpenDir(NULL, conn, smb_fname_cwd, wcard, attr);
-
-  out:
-
-       vfs_ChDir(conn, saved_dir);
-       return dir_hnd;
-}
-
 /****************************************************************************
  Create a new dir ptr. If the flag old_handle is true then we must allocate
  from the bitmap range 0 - 255 as old SMBsearch directory handles are only
@@ -454,7 +199,6 @@ static struct smb_Dir *open_dir_with_privilege(connection_struct *conn,
 NTSTATUS dptr_create(connection_struct *conn,
                struct smb_request *req,
                files_struct *fsp,
-               const struct smb_filename *smb_dname,
                bool old_handle,
                bool expect_close,
                uint16_t spid,
@@ -467,11 +211,7 @@ NTSTATUS dptr_create(connection_struct *conn,
        struct dptr_struct *dptr = NULL;
        struct smb_Dir *dir_hnd;
 
-       if (fsp && fsp->is_directory && fsp->fh->fd != -1) {
-               smb_dname = fsp->fsp_name;
-       }
-
-       DEBUG(5,("dptr_create dir=%s\n", smb_dname->base_name));
+       DBG_INFO("dir=%s\n", fsp_str_dbg(fsp));
 
        if (sconn == NULL) {
                DEBUG(0,("dptr_create: called with fake connection_struct\n"));
@@ -482,71 +222,17 @@ NTSTATUS dptr_create(connection_struct *conn,
                return NT_STATUS_INVALID_PARAMETER;
        }
 
-       if (fsp) {
-               if (!(fsp->access_mask & SEC_DIR_LIST)) {
-                       DEBUG(5,("dptr_create: directory %s "
-                               "not open for LIST access\n",
-                               smb_dname->base_name));
-                       return NT_STATUS_ACCESS_DENIED;
-               }
-               dir_hnd = OpenDir_fsp(NULL, conn, fsp, wcard, attr);
-       } else {
-               int ret;
-               bool backup_intent = (req && req->priv_paths);
-               NTSTATUS status;
-               struct smb_filename *smb_dname_cp =
-                       cp_smb_filename(talloc_tos(), smb_dname);
-
-               if (smb_dname_cp == NULL) {
-                       return NT_STATUS_NO_MEMORY;
-               }
-
-               if (req != NULL && req->posix_pathnames) {
-                       ret = SMB_VFS_LSTAT(conn, smb_dname_cp);
-               } else {
-                       ret = SMB_VFS_STAT(conn, smb_dname_cp);
-               }
-               if (ret == -1) {
-                       status = map_nt_error_from_unix(errno);
-                       TALLOC_FREE(smb_dname_cp);
-                       return status;
-               }
-               if (!S_ISDIR(smb_dname_cp->st.st_ex_mode)) {
-                       TALLOC_FREE(smb_dname_cp);
-                       return NT_STATUS_NOT_A_DIRECTORY;
-               }
-               status = smbd_check_access_rights(conn,
-                                               smb_dname_cp,
-                                               backup_intent,
-                                               SEC_DIR_LIST);
-               if (!NT_STATUS_IS_OK(status)) {
-                       TALLOC_FREE(smb_dname_cp);
-                       return status;
-               }
-               if (backup_intent) {
-                       dir_hnd = open_dir_with_privilege(conn,
-                                               req,
-                                               smb_dname_cp,
-                                               wcard,
-                                               attr);
-               } else {
-                       dir_hnd = OpenDir(NULL,
-                                       conn,
-                                       smb_dname_cp,
-                                       wcard,
-                                       attr);
-               }
-               TALLOC_FREE(smb_dname_cp);
+       if (!(fsp->access_mask & SEC_DIR_LIST)) {
+               DBG_INFO("dptr_create: directory %s "
+                       "not open for LIST access\n",
+                       fsp_str_dbg(fsp));
+               return NT_STATUS_ACCESS_DENIED;
        }
-
+       dir_hnd = OpenDir_fsp(NULL, conn, fsp, wcard, attr);
        if (!dir_hnd) {
                return map_nt_error_from_unix(errno);
        }
 
-       if (sconn->searches.dirhandles_open >= MAX_OPEN_DIRECTORIES) {
-               dptr_idleoldest(sconn);
-       }
-
        dptr = talloc_zero(NULL, struct dptr_struct);
        if(!dptr) {
                DEBUG(0,("talloc fail in dptr_create.\n"));
@@ -554,8 +240,8 @@ NTSTATUS dptr_create(connection_struct *conn,
                return NT_STATUS_NO_MEMORY;
        }
 
-       dptr->smb_dname = cp_smb_filename(dptr, smb_dname);
-       if (!dptr->smb_dname) {
+       dptr->smb_dname = cp_smb_filename(dptr, fsp->fsp_name);
+       if (dptr->smb_dname == NULL) {
                TALLOC_FREE(dptr);
                TALLOC_FREE(dir_hnd);
                return NT_STATUS_NO_MEMORY;
@@ -593,23 +279,12 @@ NTSTATUS dptr_create(connection_struct *conn,
                dptr->dnum = bitmap_find(sconn->searches.dptr_bmap, 0);
 
                if(dptr->dnum == -1 || dptr->dnum > 254) {
-
-                       /*
-                        * Try and close the oldest handle not marked for
-                        * expect close in the hope that the client has
-                        * finished with that one.
-                        */
-
-                       dptr_close_oldest(sconn, true);
-
-                       /* Now try again... */
-                       dptr->dnum = bitmap_find(sconn->searches.dptr_bmap, 0);
-                       if(dptr->dnum == -1 || dptr->dnum > 254) {
-                               DEBUG(0,("dptr_create: returned %d: Error - all old dirptrs in use ?\n", dptr->dnum));
-                               TALLOC_FREE(dptr);
-                               TALLOC_FREE(dir_hnd);
-                               return NT_STATUS_TOO_MANY_OPENED_FILES;
-                       }
+                       DBG_ERR("returned %d: Error - all old "
+                               "dirptrs in use ?\n",
+                               dptr->dnum);
+                       TALLOC_FREE(dptr);
+                       TALLOC_FREE(dir_hnd);
+                       return NT_STATUS_TOO_MANY_OPENED_FILES;
                }
        } else {
 
@@ -621,25 +296,12 @@ NTSTATUS dptr_create(connection_struct *conn,
                dptr->dnum = bitmap_find(sconn->searches.dptr_bmap, 255);
 
                if(dptr->dnum == -1 || dptr->dnum < 255) {
-
-                       /*
-                        * Try and close the oldest handle close in the hope that
-                        * the client has finished with that one. This will only
-                        * happen in the case of the Win98 client bug where it leaks
-                        * directory handles.
-                        */
-
-                       dptr_close_oldest(sconn, false);
-
-                       /* Now try again... */
-                       dptr->dnum = bitmap_find(sconn->searches.dptr_bmap, 255);
-
-                       if(dptr->dnum == -1 || dptr->dnum < 255) {
-                               DEBUG(0,("dptr_create: returned %d: Error - all new dirptrs in use ?\n", dptr->dnum));
-                               TALLOC_FREE(dptr);
-                               TALLOC_FREE(dir_hnd);
-                               return NT_STATUS_TOO_MANY_OPENED_FILES;
-                       }
+                       DBG_ERR("returned %d: Error - all new "
+                               "dirptrs in use ?\n",
+                               dptr->dnum);
+                       TALLOC_FREE(dptr);
+                       TALLOC_FREE(dir_hnd);
+                       return NT_STATUS_TOO_MANY_OPENED_FILES;
                }
        }
 
@@ -650,10 +312,8 @@ NTSTATUS dptr_create(connection_struct *conn,
        DLIST_ADD(sconn->searches.dirptrs, dptr);
 
 done:
-       DEBUG(3,("creating new dirptr %d for path %s, expect_close = %d\n",
-               dptr->dnum,
-               dptr->smb_dname->base_name,
-               expect_close));
+       DBG_INFO("creating new dirptr [%d] for path [%s], expect_close = %d\n",
+                dptr->dnum, fsp_str_dbg(fsp), expect_close);
 
        *dptr_ret = dptr;
 
@@ -667,15 +327,40 @@ done:
 
 void dptr_CloseDir(files_struct *fsp)
 {
-       if (fsp->dptr) {
+       struct smbd_server_connection *sconn = NULL;
+
+       if (fsp->dptr == NULL) {
+               return;
+       }
+       sconn = fsp->dptr->conn->sconn;
+
+       /*
+        * The destructor for the struct smb_Dir (fsp->dptr->dir_hnd)
+        * now handles all resource deallocation.
+        */
+
+       DBG_INFO("closing dptr key %d\n", fsp->dptr->dnum);
+
+       if (sconn != NULL && !sconn->using_smb2) {
+               DLIST_REMOVE(sconn->searches.dirptrs, fsp->dptr);
+
                /*
-                * The destructor for the struct smb_Dir
-                * (fsp->dptr->dir_hnd) now handles
-                * all resource deallocation.
+                * Free the dnum in the bitmap. Remember the dnum value is
+                * always biased by one with respect to the bitmap.
                 */
-               dptr_close_internal(fsp->dptr);
-               fsp->dptr = NULL;
+
+               if (!bitmap_query(sconn->searches.dptr_bmap,
+                                 fsp->dptr->dnum - 1))
+               {
+                       DBG_ERR("closing dnum = %d and bitmap not set !\n",
+                               fsp->dptr->dnum);
+               }
+
+               bitmap_clear(sconn->searches.dptr_bmap, fsp->dptr->dnum - 1);
        }
+
+       TALLOC_FREE(fsp->dptr->dir_hnd);
+       TALLOC_FREE(fsp->dptr);
 }
 
 void dptr_SeekDir(struct dptr_struct *dptr, long offset)
@@ -723,7 +408,7 @@ static const char *dptr_normal_ReadDirName(struct dptr_struct *dptr,
        while ((name = ReadDirName(dptr->dir_hnd, poffset, pst, &talloced))
               != NULL) {
                if (is_visible_file(dptr->conn,
-                               dptr->smb_dname->base_name,
+                               dptr->dir_hnd,
                                name,
                                pst,
                                true)) {
@@ -781,7 +466,7 @@ static char *dptr_ReadDirName(TALLOC_CTX *ctx,
 
        /* First check if it should be visible. */
        if (!is_visible_file(dptr->conn,
-                       dptr->smb_dname->base_name,
+                       dptr->dir_hnd,
                        dptr->wcard,
                        pst,
                        true)) {
@@ -885,14 +570,6 @@ bool dptr_SearchDir(struct dptr_struct *dptr, const char *name, long *poffset, S
        return SearchDir(dptr->dir_hnd, name, poffset);
 }
 
-/****************************************************************************
- Initialize variables & state data at the beginning of all search SMB requests.
-****************************************************************************/
-void dptr_init_search_op(struct dptr_struct *dptr)
-{
-       SMB_VFS_INIT_SEARCH_OP(dptr->conn, dptr->dir_hnd->dir);
-}
-
 /****************************************************************************
  Map a native directory offset to a 32-bit cookie.
 ****************************************************************************/
@@ -971,7 +648,7 @@ bool dptr_fill(struct smbd_server_connection *sconn,
               char *buf1,unsigned int key)
 {
        unsigned char *buf = (unsigned char *)buf1;
-       struct dptr_struct *dptr = dptr_get(sconn, key, false);
+       struct dptr_struct *dptr = dptr_get(sconn, key);
        uint32_t wire_offset;
        if (!dptr) {
                DEBUG(1,("filling null dirptr %d\n",key));
@@ -1028,18 +705,19 @@ static long map_wire_to_dir_offset(struct dptr_struct *dptr, uint32_t wire_offse
 }
 
 /****************************************************************************
- Fetch the dir ptr and seek it given the 5 byte server field.
+ Return the associated fsp and seek the dir_hnd on it it given the 5 byte
+ server field.
 ****************************************************************************/
 
-struct dptr_struct *dptr_fetch(struct smbd_server_connection *sconn,
+files_struct *dptr_fetch_fsp(struct smbd_server_connection *sconn,
                               char *buf, int *num)
 {
        unsigned int key = *(unsigned char *)buf;
-       struct dptr_struct *dptr = dptr_get(sconn, key, false);
+       struct dptr_struct *dptr = dptr_get(sconn, key);
        uint32_t wire_offset;
        long seekoff;
 
-       if (!dptr) {
+       if (dptr == NULL) {
                DEBUG(3,("fetched null dirptr %d\n",key));
                return(NULL);
        }
@@ -1049,26 +727,24 @@ struct dptr_struct *dptr_fetch(struct smbd_server_connection *sconn,
        SeekDir(dptr->dir_hnd,seekoff);
        DEBUG(3,("fetching dirptr %d for path %s at offset %d\n",
                key, dptr->smb_dname->base_name, (int)seekoff));
-       return(dptr);
+       return dptr->dir_hnd->fsp;
 }
 
 /****************************************************************************
- Fetch the dir ptr.
+ Fetch the fsp associated with the dptr_num.
 ****************************************************************************/
 
-struct dptr_struct *dptr_fetch_lanman2(struct smbd_server_connection *sconn,
+files_struct *dptr_fetch_lanman2_fsp(struct smbd_server_connection *sconn,
                                       int dptr_num)
 {
-       struct dptr_struct *dptr  = dptr_get(sconn, dptr_num, false);
-
-       if (!dptr) {
-               DEBUG(3,("fetched null dirptr %d\n",dptr_num));
-               return(NULL);
+       struct dptr_struct *dptr  = dptr_get(sconn, dptr_num);
+       if (dptr == NULL) {
+               return NULL;
        }
-       DEBUG(3,("fetching dirptr %d for path %s\n",
+       DBG_NOTICE("fetching dirptr %d for path %s\n",
                dptr_num,
-               dptr->smb_dname->base_name));
-       return(dptr);
+               dptr->smb_dname->base_name);
+       return dptr->dir_hnd->fsp;
 }
 
 static bool mangle_mask_match(connection_struct *conn,
@@ -1089,6 +765,7 @@ bool smbd_dirptr_get_entry(TALLOC_CTX *ctx,
                           uint32_t dirtype,
                           bool dont_descend,
                           bool ask_sharemode,
+                          bool get_dosmode,
                           bool (*match_fn)(TALLOC_CTX *ctx,
                                            void *private_data,
                                            const char *dname,
@@ -1097,6 +774,7 @@ bool smbd_dirptr_get_entry(TALLOC_CTX *ctx,
                           bool (*mode_fn)(TALLOC_CTX *ctx,
                                           void *private_data,
                                           struct smb_filename *smb_fname,
+                                          bool get_dosmode,
                                           uint32_t *_mode),
                           void *private_data,
                           char **_fname,
@@ -1191,7 +869,7 @@ bool smbd_dirptr_get_entry(TALLOC_CTX *ctx,
                        .base_name = pathreal, .st = sbuf
                };
 
-               ok = mode_fn(ctx, private_data, &smb_fname, &mode);
+               ok = mode_fn(ctx, private_data, &smb_fname, get_dosmode, &mode);
                if (!ok) {
                        TALLOC_FREE(dname);
                        TALLOC_FREE(fname);
@@ -1208,14 +886,14 @@ bool smbd_dirptr_get_entry(TALLOC_CTX *ctx,
                        continue;
                }
 
-               if (ask_sharemode) {
+               if (ask_sharemode && !S_ISDIR(smb_fname.st.st_ex_mode)) {
                        struct timespec write_time_ts;
                        struct file_id fileid;
 
                        fileid = vfs_file_id_from_sbuf(conn,
                                                       &smb_fname.st);
                        get_file_infos(fileid, 0, NULL, &write_time_ts);
-                       if (!null_timespec(write_time_ts)) {
+                       if (!is_omit_timespec(&write_time_ts)) {
                                update_stat_ex_mtime(&smb_fname.st,
                                                     write_time_ts);
                        }
@@ -1226,7 +904,15 @@ bool smbd_dirptr_get_entry(TALLOC_CTX *ctx,
                        mask, smb_fname_str_dbg(&smb_fname),
                        dname, fname));
 
-               DirCacheAdd(dirptr->dir_hnd, dname, cur_offset);
+               if (!conn->sconn->using_smb2) {
+                       /*
+                        * The dircache is only needed for SMB1 because SMB1
+                        * uses a name for the resume wheras SMB2 always
+                        * continues from the next position (unless it's told to
+                        * restart or close-and-reopen the listing).
+                        */
+                       DirCacheAdd(dirptr->dir_hnd, dname, cur_offset);
+               }
 
                TALLOC_FREE(dname);
 
@@ -1312,6 +998,7 @@ static bool smbd_dirptr_8_3_match_fn(TALLOC_CTX *ctx,
 static bool smbd_dirptr_8_3_mode_fn(TALLOC_CTX *ctx,
                                    void *private_data,
                                    struct smb_filename *smb_fname,
+                                   bool get_dosmode,
                                    uint32_t *_mode)
 {
        connection_struct *conn = (connection_struct *)private_data;
@@ -1355,6 +1042,7 @@ bool get_dir_entry(TALLOC_CTX *ctx,
                                   dirtype,
                                   check_descend,
                                   ask_sharemode,
+                                  true,
                                   smbd_dirptr_8_3_match_fn,
                                   smbd_dirptr_8_3_mode_fn,
                                   conn,
@@ -1520,13 +1208,18 @@ static bool file_is_special(connection_struct *conn,
  NOTE: A successful return is no guarantee of the file's existence.
 ********************************************************************/
 
-bool is_visible_file(connection_struct *conn, const char *dir_path,
-                    const char *name, SMB_STRUCT_STAT *pst, bool use_veto)
+bool is_visible_file(connection_struct *conn,
+               struct smb_Dir *dir_hnd,
+               const char *name,
+               SMB_STRUCT_STAT *pst,
+               bool use_veto)
 {
        bool hide_unreadable = lp_hide_unreadable(SNUM(conn));
        bool hide_unwriteable = lp_hide_unwriteable_files(SNUM(conn));
        bool hide_special = lp_hide_special_files(SNUM(conn));
+       int hide_new_files_timeout = lp_hide_new_files_timeout(SNUM(conn));
        char *entry = NULL;
+       struct smb_filename *dir_path = dir_hnd->fsp->fsp_name;
        struct smb_filename *smb_fname_base = NULL;
        bool ret = false;
 
@@ -1540,8 +1233,15 @@ bool is_visible_file(connection_struct *conn, const char *dir_path,
                return False;
        }
 
-       if (hide_unreadable || hide_unwriteable || hide_special) {
-               entry = talloc_asprintf(talloc_tos(), "%s/%s", dir_path, name);
+       if (hide_unreadable ||
+           hide_unwriteable ||
+           hide_special ||
+           (hide_new_files_timeout != 0))
+       {
+               entry = talloc_asprintf(talloc_tos(),
+                                       "%s/%s",
+                                       dir_path->base_name,
+                                       name);
                if (!entry) {
                        ret = false;
                        goto out;
@@ -1579,8 +1279,10 @@ bool is_visible_file(connection_struct *conn, const char *dir_path,
                        goto out;
                }
                /* Honour _hide unwriteable_ option */
-               if (hide_unwriteable && !user_can_write_file(conn,
-                                                            smb_fname_base)) {
+               if (hide_unwriteable &&
+                   !user_can_write_file(conn,
+                               smb_fname_base))
+               {
                        DEBUG(10,("is_visible_file: file %s is unwritable.\n",
                                 entry ));
                        ret = false;
@@ -1593,6 +1295,17 @@ bool is_visible_file(connection_struct *conn, const char *dir_path,
                        ret = false;
                        goto out;
                }
+
+               if (hide_new_files_timeout != 0) {
+
+                       double age = timespec_elapsed(
+                               &smb_fname_base->st.st_ex_mtime);
+
+                       if (age < (double)hide_new_files_timeout) {
+                               ret = false;
+                               goto out;
+                       }
+               }
        }
 
        ret = true;
@@ -1602,27 +1315,17 @@ bool is_visible_file(connection_struct *conn, const char *dir_path,
        return ret;
 }
 
-static int smb_Dir_destructor(struct smb_Dir *dirp)
+static int smb_Dir_destructor(struct smb_Dir *dir_hnd)
 {
-       if (dirp->dir != NULL) {
-               SMB_VFS_CLOSEDIR(dirp->conn,dirp->dir);
-               if (dirp->fsp != NULL) {
-                       /*
-                        * The SMB_VFS_CLOSEDIR above
-                        * closes the underlying fd inside
-                        * dirp->fsp.
-                        */
-                       dirp->fsp->fh->fd = -1;
-                       if (dirp->fsp->dptr != NULL) {
-                               SMB_ASSERT(dirp->fsp->dptr->dir_hnd == dirp);
-                               dirp->fsp->dptr->dir_hnd = NULL;
-                       }
-                       dirp->fsp = NULL;
-               }
-       }
-       if (dirp->conn->sconn && !dirp->conn->sconn->using_smb2) {
-               dirp->conn->sconn->searches.dirhandles_open--;
+       files_struct *fsp = dir_hnd->fsp;
+
+       SMB_VFS_CLOSEDIR(dir_hnd->conn, dir_hnd->dir);
+       fsp->fh->fd = -1;
+       if (fsp->dptr != NULL) {
+               SMB_ASSERT(fsp->dptr->dir_hnd == dir_hnd);
+               fsp->dptr->dir_hnd = NULL;
        }
+       dir_hnd->fsp = NULL;
        return 0;
 }
 
@@ -1630,124 +1333,43 @@ static int smb_Dir_destructor(struct smb_Dir *dirp)
  Open a directory.
 ********************************************************************/
 
-static struct smb_Dir *OpenDir_internal(TALLOC_CTX *mem_ctx,
-                       connection_struct *conn,
-                       const struct smb_filename *smb_dname,
-                       const char *mask,
-                       uint32_t attr)
+static int smb_Dir_OpenDir_destructor(struct smb_Dir *dir_hnd)
 {
-       struct smb_Dir *dirp = talloc_zero(mem_ctx, struct smb_Dir);
-       struct smbd_server_connection *sconn = conn->sconn;
-
-       if (!dirp) {
-               return NULL;
-       }
-
-       dirp->dir = SMB_VFS_OPENDIR(conn, smb_dname, mask, attr);
+       files_struct *fsp = dir_hnd->fsp;
 
-       if (!dirp->dir) {
-               DEBUG(5,("OpenDir: Can't open %s. %s\n",
-                       smb_dname->base_name,
-                       strerror(errno) ));
-               goto fail;
-       }
-
-       dirp->conn = conn;
-       dirp->name_cache_size = lp_directory_name_cache_size(SNUM(conn));
-
-       if (sconn && !sconn->using_smb2) {
-               sconn->searches.dirhandles_open++;
-       }
-       talloc_set_destructor(dirp, smb_Dir_destructor);
-
-       return dirp;
-
-  fail:
-       TALLOC_FREE(dirp);
-       return NULL;
+       smb_Dir_destructor(dir_hnd);
+       file_free(NULL, fsp);
+       return 0;
 }
 
-/****************************************************************************
- Open a directory handle by pathname, ensuring it's under the share path.
-****************************************************************************/
-
-static struct smb_Dir *open_dir_safely(TALLOC_CTX *ctx,
-                                       connection_struct *conn,
-                                       const struct smb_filename *smb_dname,
-                                       const char *wcard,
-                                       uint32_t attr)
+struct smb_Dir *OpenDir(TALLOC_CTX *mem_ctx,
+                       connection_struct *conn,
+                       const struct smb_filename *smb_dname,
+                       const char *mask,
+                       uint32_t attr)
 {
+       struct files_struct *fsp = NULL;
        struct smb_Dir *dir_hnd = NULL;
-       struct smb_filename *smb_fname_cwd = NULL;
-       char *saved_dir = vfs_GetWd(ctx, conn);
        NTSTATUS status;
 
-       if (saved_dir == NULL) {
-               return NULL;
-       }
-
-       if (vfs_ChDir(conn, smb_dname->base_name) == -1) {
-               goto out;
-       }
-
-       smb_fname_cwd = synthetic_smb_fname(talloc_tos(),
-                                       ".",
-                                       NULL,
-                                       NULL,
-                                       smb_dname->flags);
-       if (smb_fname_cwd == NULL) {
-               goto out;
-       }
-
-       /*
-        * Now the directory is pinned, use
-        * REALPATH to ensure we can access it.
-        */
-       status = check_name(conn, ".");
+       status = open_internal_dirfsp_at(conn, conn->cwd_fsp, smb_dname, &fsp);
        if (!NT_STATUS_IS_OK(status)) {
-               goto out;
+               return NULL;
        }
 
-       dir_hnd = OpenDir_internal(ctx,
-                               conn,
-                               smb_fname_cwd,
-                               wcard,
-                               attr);
-
+       dir_hnd = OpenDir_fsp(mem_ctx, conn, fsp, mask, attr);
        if (dir_hnd == NULL) {
-               goto out;
+               return NULL;
        }
 
        /*
-        * OpenDir_internal only gets "." as the dir name.
-        * Store the real dir name here.
+        * This overwrites the destructor set by smb_Dir_OpenDir_destructor(),
+        * but smb_Dir_OpenDir_destructor() calls the OpenDir_fsp() destructor.
         */
-
-       dir_hnd->dir_smb_fname = cp_smb_filename(dir_hnd, smb_dname);
-       if (!dir_hnd->dir_smb_fname) {
-               TALLOC_FREE(dir_hnd);
-               errno = ENOMEM;
-       }
-
-  out:
-
-       vfs_ChDir(conn, saved_dir);
-       TALLOC_FREE(saved_dir);
+       talloc_set_destructor(dir_hnd, smb_Dir_OpenDir_destructor);
        return dir_hnd;
 }
 
-struct smb_Dir *OpenDir(TALLOC_CTX *mem_ctx, connection_struct *conn,
-                       const struct smb_filename *smb_dname,
-                       const char *mask,
-                       uint32_t attr)
-{
-       return open_dir_safely(mem_ctx,
-                               conn,
-                               smb_dname,
-                               mask,
-                               attr);
-}
-
 /*******************************************************************
  Open a directory from an fsp.
 ********************************************************************/
@@ -1757,14 +1379,13 @@ static struct smb_Dir *OpenDir_fsp(TALLOC_CTX *mem_ctx, connection_struct *conn,
                        const char *mask,
                        uint32_t attr)
 {
-       struct smb_Dir *dirp = talloc_zero(mem_ctx, struct smb_Dir);
-       struct smbd_server_connection *sconn = conn->sconn;
+       struct smb_Dir *dir_hnd = talloc_zero(mem_ctx, struct smb_Dir);
 
-       if (!dirp) {
+       if (!dir_hnd) {
                goto fail;
        }
 
-       if (!fsp->is_directory) {
+       if (!fsp->fsp_flags.is_directory) {
                errno = EBADF;
                goto fail;
        }
@@ -1774,52 +1395,37 @@ static struct smb_Dir *OpenDir_fsp(TALLOC_CTX *mem_ctx, connection_struct *conn,
                goto fail;
        }
 
-       dirp->conn = conn;
-       dirp->name_cache_size = lp_directory_name_cache_size(SNUM(conn));
-
-       dirp->dir_smb_fname = cp_smb_filename(dirp, fsp->fsp_name);
-       if (!dirp->dir_smb_fname) {
-               errno = ENOMEM;
-               goto fail;
-       }
+       dir_hnd->conn = conn;
 
-       if (sconn && !sconn->using_smb2) {
-               sconn->searches.dirhandles_open++;
-       }
-       talloc_set_destructor(dirp, smb_Dir_destructor);
-
-       dirp->dir = SMB_VFS_FDOPENDIR(fsp, mask, attr);
-       if (dirp->dir != NULL) {
-               dirp->fsp = fsp;
-       } else {
-               DEBUG(10,("OpenDir_fsp: SMB_VFS_FDOPENDIR on %s returned "
-                       "NULL (%s)\n",
-                       dirp->dir_smb_fname->base_name,
-                       strerror(errno)));
-               if (errno != ENOSYS) {
-                       return NULL;
-               }
+       if (!conn->sconn->using_smb2) {
+               /*
+                * The dircache is only needed for SMB1 because SMB1 uses a name
+                * for the resume wheras SMB2 always continues from the next
+                * position (unless it's told to restart or close-and-reopen the
+                * listing).
+                */
+               dir_hnd->name_cache_size =
+                       lp_directory_name_cache_size(SNUM(conn));
        }
 
-       if (dirp->dir == NULL) {
-               /* FDOPENDIR didn't work. Use OPENDIR instead. */
-               dirp->dir = SMB_VFS_OPENDIR(conn,
-                                       dirp->dir_smb_fname,
-                                       mask,
-                                       attr);
+       dir_hnd->dir_smb_fname = cp_smb_filename(dir_hnd, fsp->fsp_name);
+       if (!dir_hnd->dir_smb_fname) {
+               errno = ENOMEM;
+               goto fail;
        }
 
-       if (!dirp->dir) {
-               DEBUG(5,("OpenDir_fsp: Can't open %s. %s\n",
-                       dirp->dir_smb_fname->base_name,
-                       strerror(errno) ));
+       dir_hnd->dir = SMB_VFS_FDOPENDIR(fsp, mask, attr);
+       if (dir_hnd->dir == NULL) {
                goto fail;
        }
+       dir_hnd->fsp = fsp;
+
+       talloc_set_destructor(dir_hnd, smb_Dir_destructor);
 
-       return dirp;
+       return dir_hnd;
 
   fail:
-       TALLOC_FREE(dirp);
+       TALLOC_FREE(dir_hnd);
        return NULL;
 }
 
@@ -1830,38 +1436,38 @@ static struct smb_Dir *OpenDir_fsp(TALLOC_CTX *mem_ctx, connection_struct *conn,
  Don't check for veto or invisible files.
 ********************************************************************/
 
-const char *ReadDirName(struct smb_Dir *dirp, long *poffset,
+const char *ReadDirName(struct smb_Dir *dir_hnd, long *poffset,
                        SMB_STRUCT_STAT *sbuf, char **ptalloced)
 {
        const char *n;
        char *talloced = NULL;
-       connection_struct *conn = dirp->conn;
+       connection_struct *conn = dir_hnd->conn;
 
        /* Cheat to allow . and .. to be the first entries returned. */
        if (((*poffset == START_OF_DIRECTORY_OFFSET) ||
-            (*poffset == DOT_DOT_DIRECTORY_OFFSET)) && (dirp->file_number < 2))
+            (*poffset == DOT_DOT_DIRECTORY_OFFSET)) && (dir_hnd->file_number < 2))
        {
-               if (dirp->file_number == 0) {
+               if (dir_hnd->file_number == 0) {
                        n = ".";
-                       *poffset = dirp->offset = START_OF_DIRECTORY_OFFSET;
+                       *poffset = dir_hnd->offset = START_OF_DIRECTORY_OFFSET;
                } else {
                        n = "..";
-                       *poffset = dirp->offset = DOT_DOT_DIRECTORY_OFFSET;
+                       *poffset = dir_hnd->offset = DOT_DOT_DIRECTORY_OFFSET;
                }
-               dirp->file_number++;
+               dir_hnd->file_number++;
                *ptalloced = NULL;
                return n;
        }
 
        if (*poffset == END_OF_DIRECTORY_OFFSET) {
-               *poffset = dirp->offset = END_OF_DIRECTORY_OFFSET;
+               *poffset = dir_hnd->offset = END_OF_DIRECTORY_OFFSET;
                return NULL;
        }
 
        /* A real offset, seek to it. */
-       SeekDir(dirp, *poffset);
+       SeekDir(dir_hnd, *poffset);
 
-       while ((n = vfs_readdirname(conn, dirp->dir, sbuf, &talloced))) {
+       while ((n = vfs_readdirname(conn, dir_hnd->dir, sbuf, &talloced))) {
                /* Ignore . and .. - we've already returned them. */
                if (*n == '.') {
                        if ((n[1] == '\0') || (n[1] == '.' && n[2] == '\0')) {
@@ -1869,12 +1475,12 @@ const char *ReadDirName(struct smb_Dir *dirp, long *poffset,
                                continue;
                        }
                }
-               *poffset = dirp->offset = SMB_VFS_TELLDIR(conn, dirp->dir);
+               *poffset = dir_hnd->offset = SMB_VFS_TELLDIR(conn, dir_hnd->dir);
                *ptalloced = talloced;
-               dirp->file_number++;
+               dir_hnd->file_number++;
                return n;
        }
-       *poffset = dirp->offset = END_OF_DIRECTORY_OFFSET;
+       *poffset = dir_hnd->offset = END_OF_DIRECTORY_OFFSET;
        *ptalloced = NULL;
        return NULL;
 }
@@ -1883,11 +1489,11 @@ const char *ReadDirName(struct smb_Dir *dirp, long *poffset,
  Rewind to the start.
 ********************************************************************/
 
-void RewindDir(struct smb_Dir *dirp, long *poffset)
+void RewindDir(struct smb_Dir *dir_hnd, long *poffset)
 {
-       SMB_VFS_REWINDDIR(dirp->conn, dirp->dir);
-       dirp->file_number = 0;
-       dirp->offset = START_OF_DIRECTORY_OFFSET;
+       SMB_VFS_REWINDDIR(dir_hnd->conn, dir_hnd->dir);
+       dir_hnd->file_number = 0;
+       dir_hnd->offset = START_OF_DIRECTORY_OFFSET;
        *poffset = START_OF_DIRECTORY_OFFSET;
 }
 
@@ -1928,37 +1534,38 @@ void SeekDir(struct smb_Dir *dirp, long offset)
  Tell a dir position.
 ********************************************************************/
 
-long TellDir(struct smb_Dir *dirp)
+long TellDir(struct smb_Dir *dir_hnd)
 {
-       return(dirp->offset);
+       return(dir_hnd->offset);
 }
 
 /*******************************************************************
  Add an entry into the dcache.
 ********************************************************************/
 
-static void DirCacheAdd(struct smb_Dir *dirp, const char *name, long offset)
+static void DirCacheAdd(struct smb_Dir *dir_hnd, const char *name, long offset)
 {
        struct name_cache_entry *e;
 
-       if (dirp->name_cache_size == 0) {
+       if (dir_hnd->name_cache_size == 0) {
                return;
        }
 
-       if (dirp->name_cache == NULL) {
-               dirp->name_cache = talloc_zero_array(
-                       dirp, struct name_cache_entry, dirp->name_cache_size);
+       if (dir_hnd->name_cache == NULL) {
+               dir_hnd->name_cache = talloc_zero_array(dir_hnd,
+                                               struct name_cache_entry,
+                                               dir_hnd->name_cache_size);
 
-               if (dirp->name_cache == NULL) {
+               if (dir_hnd->name_cache == NULL) {
                        return;
                }
        }
 
-       dirp->name_cache_index = (dirp->name_cache_index+1) %
-                                       dirp->name_cache_size;
-       e = &dirp->name_cache[dirp->name_cache_index];
+       dir_hnd->name_cache_index = (dir_hnd->name_cache_index+1) %
+                                       dir_hnd->name_cache_size;
+       e = &dir_hnd->name_cache[dir_hnd->name_cache_index];
        TALLOC_FREE(e->name);
-       e->name = talloc_strdup(dirp, name);
+       e->name = talloc_strdup(dir_hnd, name);
        e->offset = offset;
 }
 
@@ -1967,38 +1574,39 @@ static void DirCacheAdd(struct smb_Dir *dirp, const char *name, long offset)
  Don't check for veto or invisible files.
 ********************************************************************/
 
-bool SearchDir(struct smb_Dir *dirp, const char *name, long *poffset)
+bool SearchDir(struct smb_Dir *dir_hnd, const char *name, long *poffset)
 {
        int i;
        const char *entry = NULL;
        char *talloced = NULL;
-       connection_struct *conn = dirp->conn;
+       connection_struct *conn = dir_hnd->conn;
 
        /* Search back in the name cache. */
-       if (dirp->name_cache_size && dirp->name_cache) {
-               for (i = dirp->name_cache_index; i >= 0; i--) {
-                       struct name_cache_entry *e = &dirp->name_cache[i];
+       if (dir_hnd->name_cache_size && dir_hnd->name_cache) {
+               for (i = dir_hnd->name_cache_index; i >= 0; i--) {
+                       struct name_cache_entry *e = &dir_hnd->name_cache[i];
                        if (e->name && (conn->case_sensitive ? (strcmp(e->name, name) == 0) : strequal(e->name, name))) {
                                *poffset = e->offset;
-                               SeekDir(dirp, e->offset);
+                               SeekDir(dir_hnd, e->offset);
                                return True;
                        }
                }
-               for (i = dirp->name_cache_size - 1; i > dirp->name_cache_index; i--) {
-                       struct name_cache_entry *e = &dirp->name_cache[i];
+               for (i = dir_hnd->name_cache_size - 1;
+                               i > dir_hnd->name_cache_index; i--) {
+                       struct name_cache_entry *e = &dir_hnd->name_cache[i];
                        if (e->name && (conn->case_sensitive ? (strcmp(e->name, name) == 0) : strequal(e->name, name))) {
                                *poffset = e->offset;
-                               SeekDir(dirp, e->offset);
+                               SeekDir(dir_hnd, e->offset);
                                return True;
                        }
                }
        }
 
        /* Not found in the name cache. Rewind directory and start from scratch. */
-       SMB_VFS_REWINDDIR(conn, dirp->dir);
-       dirp->file_number = 0;
+       SMB_VFS_REWINDDIR(conn, dir_hnd->dir);
+       dir_hnd->file_number = 0;
        *poffset = START_OF_DIRECTORY_OFFSET;
-       while ((entry = ReadDirName(dirp, poffset, NULL, &talloced))) {
+       while ((entry = ReadDirName(dir_hnd, poffset, NULL, &talloced))) {
                if (conn->case_sensitive ? (strcmp(entry, name) == 0) : strequal(entry, name)) {
                        TALLOC_FREE(talloced);
                        return True;
@@ -2035,24 +1643,29 @@ static int files_below_forall_fn(struct file_id fid,
                /*
                 * Filter files above dirpath
                 */
-               return 0;
+               goto out;
        }
        if (fullpath[state->dirpath_len] != '/') {
                /*
                 * Filter file that don't have a path separator at the end of
                 * dirpath's length
                 */
-               return 0;
+               goto out;
        }
 
        if (memcmp(state->dirpath, fullpath, state->dirpath_len) != 0) {
                /*
                 * Not a parent
                 */
-               return 0;
+               goto out;
        }
 
+       TALLOC_FREE(to_free);
        return state->fn(fid, data, state->private_data);
+
+out:
+       TALLOC_FREE(to_free);
+       return 0;
 }
 
 static int files_below_forall(connection_struct *conn,
@@ -2128,13 +1741,12 @@ NTSTATUS can_delete_directory_fsp(files_struct *fsp)
        NTSTATUS status = NT_STATUS_OK;
        long dirpos = 0;
        const char *dname = NULL;
-       const char *dirname = fsp->fsp_name->base_name;
        char *talloced = NULL;
        SMB_STRUCT_STAT st;
        struct connection_struct *conn = fsp->conn;
-       struct smb_Dir *dir_hnd = OpenDir_fsp(talloc_tos(),
+       struct smb_Dir *dir_hnd = OpenDir(talloc_tos(),
                                        conn,
-                                       fsp,
+                                       fsp->fsp_name,
                                        NULL,
                                        0);
 
@@ -2151,7 +1763,11 @@ NTSTATUS can_delete_directory_fsp(files_struct *fsp)
                        }
                }
 
-               if (!is_visible_file(conn, dirname, dname, &st, True)) {
+               if (!is_visible_file(conn,
+                               dir_hnd,
+                               dname,
+                               &st,
+                               True)) {
                        TALLOC_FREE(talloced);
                        continue;
                }