Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-2.6
[sfrench/cifs-2.6.git] / fs / cifs / connect.c
1 /*
2  *   fs/cifs/connect.c
3  *
4  *   Copyright (C) International Business Machines  Corp., 2002,2009
5  *   Author(s): Steve French (sfrench@us.ibm.com)
6  *
7  *   This library is free software; you can redistribute it and/or modify
8  *   it under the terms of the GNU Lesser General Public License as published
9  *   by the Free Software Foundation; either version 2.1 of the License, or
10  *   (at your option) any later version.
11  *
12  *   This library is distributed in the hope that it will be useful,
13  *   but WITHOUT ANY WARRANTY; without even the implied warranty of
14  *   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See
15  *   the GNU Lesser General Public License for more details.
16  *
17  *   You should have received a copy of the GNU Lesser General Public License
18  *   along with this library; if not, write to the Free Software
19  *   Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
20  */
21 #include <linux/fs.h>
22 #include <linux/net.h>
23 #include <linux/string.h>
24 #include <linux/list.h>
25 #include <linux/wait.h>
26 #include <linux/pagemap.h>
27 #include <linux/ctype.h>
28 #include <linux/utsname.h>
29 #include <linux/mempool.h>
30 #include <linux/delay.h>
31 #include <linux/completion.h>
32 #include <linux/kthread.h>
33 #include <linux/pagevec.h>
34 #include <linux/freezer.h>
35 #include <linux/namei.h>
36 #include <asm/uaccess.h>
37 #include <asm/processor.h>
38 #include <linux/inet.h>
39 #include <net/ipv6.h>
40 #include "cifspdu.h"
41 #include "cifsglob.h"
42 #include "cifsproto.h"
43 #include "cifs_unicode.h"
44 #include "cifs_debug.h"
45 #include "cifs_fs_sb.h"
46 #include "ntlmssp.h"
47 #include "nterr.h"
48 #include "rfc1002pdu.h"
49 #include "cn_cifs.h"
50
51 #define CIFS_PORT 445
52 #define RFC1001_PORT 139
53
54 extern void SMBNTencrypt(unsigned char *passwd, unsigned char *c8,
55                          unsigned char *p24);
56
57 extern mempool_t *cifs_req_poolp;
58
59 struct smb_vol {
60         char *username;
61         char *password;
62         char *domainname;
63         char *UNC;
64         char *UNCip;
65         char *iocharset;  /* local code page for mapping to and from Unicode */
66         char source_rfc1001_name[16]; /* netbios name of client */
67         char target_rfc1001_name[16]; /* netbios name of server for Win9x/ME */
68         uid_t linux_uid;
69         gid_t linux_gid;
70         mode_t file_mode;
71         mode_t dir_mode;
72         unsigned secFlg;
73         bool retry:1;
74         bool intr:1;
75         bool setuids:1;
76         bool override_uid:1;
77         bool override_gid:1;
78         bool dynperm:1;
79         bool noperm:1;
80         bool no_psx_acl:1; /* set if posix acl support should be disabled */
81         bool cifs_acl:1;
82         bool no_xattr:1;   /* set if xattr (EA) support should be disabled*/
83         bool server_ino:1; /* use inode numbers from server ie UniqueId */
84         bool direct_io:1;
85         bool remap:1;      /* set to remap seven reserved chars in filenames */
86         bool posix_paths:1; /* unset to not ask for posix pathnames. */
87         bool no_linux_ext:1;
88         bool sfu_emul:1;
89         bool nullauth:1;   /* attempt to authenticate with null user */
90         bool nocase:1;     /* request case insensitive filenames */
91         bool nobrl:1;      /* disable sending byte range locks to srv */
92         bool mand_lock:1;  /* send mandatory not posix byte range lock reqs */
93         bool seal:1;       /* request transport encryption on share */
94         bool nodfs:1;      /* Do not request DFS, even if available */
95         bool local_lease:1; /* check leases only on local system, not remote */
96         bool noblocksnd:1;
97         bool noautotune:1;
98         bool nostrictsync:1; /* do not force expensive SMBflush on every sync */
99         unsigned int rsize;
100         unsigned int wsize;
101         unsigned int sockopt;
102         unsigned short int port;
103         char *prepath;
104 };
105
106 static int ipv4_connect(struct TCP_Server_Info *server);
107 static int ipv6_connect(struct TCP_Server_Info *server);
108
109 /*
110  * cifs tcp session reconnection
111  *
112  * mark tcp session as reconnecting so temporarily locked
113  * mark all smb sessions as reconnecting for tcp session
114  * reconnect tcp session
115  * wake up waiters on reconnection? - (not needed currently)
116  */
117 static int
118 cifs_reconnect(struct TCP_Server_Info *server)
119 {
120         int rc = 0;
121         struct list_head *tmp, *tmp2;
122         struct cifsSesInfo *ses;
123         struct cifsTconInfo *tcon;
124         struct mid_q_entry *mid_entry;
125
126         spin_lock(&GlobalMid_Lock);
127         if (server->tcpStatus == CifsExiting) {
128                 /* the demux thread will exit normally
129                 next time through the loop */
130                 spin_unlock(&GlobalMid_Lock);
131                 return rc;
132         } else
133                 server->tcpStatus = CifsNeedReconnect;
134         spin_unlock(&GlobalMid_Lock);
135         server->maxBuf = 0;
136
137         cFYI(1, ("Reconnecting tcp session"));
138
139         /* before reconnecting the tcp session, mark the smb session (uid)
140                 and the tid bad so they are not used until reconnected */
141         read_lock(&cifs_tcp_ses_lock);
142         list_for_each(tmp, &server->smb_ses_list) {
143                 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
144                 ses->need_reconnect = true;
145                 ses->ipc_tid = 0;
146                 list_for_each(tmp2, &ses->tcon_list) {
147                         tcon = list_entry(tmp2, struct cifsTconInfo, tcon_list);
148                         tcon->need_reconnect = true;
149                 }
150         }
151         read_unlock(&cifs_tcp_ses_lock);
152         /* do not want to be sending data on a socket we are freeing */
153         mutex_lock(&server->srv_mutex);
154         if (server->ssocket) {
155                 cFYI(1, ("State: 0x%x Flags: 0x%lx", server->ssocket->state,
156                         server->ssocket->flags));
157                 kernel_sock_shutdown(server->ssocket, SHUT_WR);
158                 cFYI(1, ("Post shutdown state: 0x%x Flags: 0x%lx",
159                         server->ssocket->state,
160                         server->ssocket->flags));
161                 sock_release(server->ssocket);
162                 server->ssocket = NULL;
163         }
164
165         spin_lock(&GlobalMid_Lock);
166         list_for_each(tmp, &server->pending_mid_q) {
167                 mid_entry = list_entry(tmp, struct
168                                         mid_q_entry,
169                                         qhead);
170                 if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
171                                 /* Mark other intransit requests as needing
172                                    retry so we do not immediately mark the
173                                    session bad again (ie after we reconnect
174                                    below) as they timeout too */
175                         mid_entry->midState = MID_RETRY_NEEDED;
176                 }
177         }
178         spin_unlock(&GlobalMid_Lock);
179         mutex_unlock(&server->srv_mutex);
180
181         while ((server->tcpStatus != CifsExiting) &&
182                (server->tcpStatus != CifsGood)) {
183                 try_to_freeze();
184                 if (server->addr.sockAddr6.sin6_family == AF_INET6)
185                         rc = ipv6_connect(server);
186                 else
187                         rc = ipv4_connect(server);
188                 if (rc) {
189                         cFYI(1, ("reconnect error %d", rc));
190                         msleep(3000);
191                 } else {
192                         atomic_inc(&tcpSesReconnectCount);
193                         spin_lock(&GlobalMid_Lock);
194                         if (server->tcpStatus != CifsExiting)
195                                 server->tcpStatus = CifsGood;
196                         server->sequence_number = 0;
197                         spin_unlock(&GlobalMid_Lock);
198         /*              atomic_set(&server->inFlight,0);*/
199                         wake_up(&server->response_q);
200                 }
201         }
202         return rc;
203 }
204
205 /*
206         return codes:
207                 0       not a transact2, or all data present
208                 >0      transact2 with that much data missing
209                 -EINVAL = invalid transact2
210
211  */
212 static int check2ndT2(struct smb_hdr *pSMB, unsigned int maxBufSize)
213 {
214         struct smb_t2_rsp *pSMBt;
215         int total_data_size;
216         int data_in_this_rsp;
217         int remaining;
218
219         if (pSMB->Command != SMB_COM_TRANSACTION2)
220                 return 0;
221
222         /* check for plausible wct, bcc and t2 data and parm sizes */
223         /* check for parm and data offset going beyond end of smb */
224         if (pSMB->WordCount != 10) { /* coalesce_t2 depends on this */
225                 cFYI(1, ("invalid transact2 word count"));
226                 return -EINVAL;
227         }
228
229         pSMBt = (struct smb_t2_rsp *)pSMB;
230
231         total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
232         data_in_this_rsp = le16_to_cpu(pSMBt->t2_rsp.DataCount);
233
234         remaining = total_data_size - data_in_this_rsp;
235
236         if (remaining == 0)
237                 return 0;
238         else if (remaining < 0) {
239                 cFYI(1, ("total data %d smaller than data in frame %d",
240                         total_data_size, data_in_this_rsp));
241                 return -EINVAL;
242         } else {
243                 cFYI(1, ("missing %d bytes from transact2, check next response",
244                         remaining));
245                 if (total_data_size > maxBufSize) {
246                         cERROR(1, ("TotalDataSize %d is over maximum buffer %d",
247                                 total_data_size, maxBufSize));
248                         return -EINVAL;
249                 }
250                 return remaining;
251         }
252 }
253
254 static int coalesce_t2(struct smb_hdr *psecond, struct smb_hdr *pTargetSMB)
255 {
256         struct smb_t2_rsp *pSMB2 = (struct smb_t2_rsp *)psecond;
257         struct smb_t2_rsp *pSMBt  = (struct smb_t2_rsp *)pTargetSMB;
258         int total_data_size;
259         int total_in_buf;
260         int remaining;
261         int total_in_buf2;
262         char *data_area_of_target;
263         char *data_area_of_buf2;
264         __u16 byte_count;
265
266         total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
267
268         if (total_data_size != le16_to_cpu(pSMB2->t2_rsp.TotalDataCount)) {
269                 cFYI(1, ("total data size of primary and secondary t2 differ"));
270         }
271
272         total_in_buf = le16_to_cpu(pSMBt->t2_rsp.DataCount);
273
274         remaining = total_data_size - total_in_buf;
275
276         if (remaining < 0)
277                 return -EINVAL;
278
279         if (remaining == 0) /* nothing to do, ignore */
280                 return 0;
281
282         total_in_buf2 = le16_to_cpu(pSMB2->t2_rsp.DataCount);
283         if (remaining < total_in_buf2) {
284                 cFYI(1, ("transact2 2nd response contains too much data"));
285         }
286
287         /* find end of first SMB data area */
288         data_area_of_target = (char *)&pSMBt->hdr.Protocol +
289                                 le16_to_cpu(pSMBt->t2_rsp.DataOffset);
290         /* validate target area */
291
292         data_area_of_buf2 = (char *) &pSMB2->hdr.Protocol +
293                                         le16_to_cpu(pSMB2->t2_rsp.DataOffset);
294
295         data_area_of_target += total_in_buf;
296
297         /* copy second buffer into end of first buffer */
298         memcpy(data_area_of_target, data_area_of_buf2, total_in_buf2);
299         total_in_buf += total_in_buf2;
300         pSMBt->t2_rsp.DataCount = cpu_to_le16(total_in_buf);
301         byte_count = le16_to_cpu(BCC_LE(pTargetSMB));
302         byte_count += total_in_buf2;
303         BCC_LE(pTargetSMB) = cpu_to_le16(byte_count);
304
305         byte_count = pTargetSMB->smb_buf_length;
306         byte_count += total_in_buf2;
307
308         /* BB also add check that we are not beyond maximum buffer size */
309
310         pTargetSMB->smb_buf_length = byte_count;
311
312         if (remaining == total_in_buf2) {
313                 cFYI(1, ("found the last secondary response"));
314                 return 0; /* we are done */
315         } else /* more responses to go */
316                 return 1;
317
318 }
319
320 static int
321 cifs_demultiplex_thread(struct TCP_Server_Info *server)
322 {
323         int length;
324         unsigned int pdu_length, total_read;
325         struct smb_hdr *smb_buffer = NULL;
326         struct smb_hdr *bigbuf = NULL;
327         struct smb_hdr *smallbuf = NULL;
328         struct msghdr smb_msg;
329         struct kvec iov;
330         struct socket *csocket = server->ssocket;
331         struct list_head *tmp;
332         struct cifsSesInfo *ses;
333         struct task_struct *task_to_wake = NULL;
334         struct mid_q_entry *mid_entry;
335         char temp;
336         bool isLargeBuf = false;
337         bool isMultiRsp;
338         int reconnect;
339
340         current->flags |= PF_MEMALLOC;
341         cFYI(1, ("Demultiplex PID: %d", task_pid_nr(current)));
342
343         length = atomic_inc_return(&tcpSesAllocCount);
344         if (length > 1)
345                 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
346                                 GFP_KERNEL);
347
348         set_freezable();
349         while (server->tcpStatus != CifsExiting) {
350                 if (try_to_freeze())
351                         continue;
352                 if (bigbuf == NULL) {
353                         bigbuf = cifs_buf_get();
354                         if (!bigbuf) {
355                                 cERROR(1, ("No memory for large SMB response"));
356                                 msleep(3000);
357                                 /* retry will check if exiting */
358                                 continue;
359                         }
360                 } else if (isLargeBuf) {
361                         /* we are reusing a dirty large buf, clear its start */
362                         memset(bigbuf, 0, sizeof(struct smb_hdr));
363                 }
364
365                 if (smallbuf == NULL) {
366                         smallbuf = cifs_small_buf_get();
367                         if (!smallbuf) {
368                                 cERROR(1, ("No memory for SMB response"));
369                                 msleep(1000);
370                                 /* retry will check if exiting */
371                                 continue;
372                         }
373                         /* beginning of smb buffer is cleared in our buf_get */
374                 } else /* if existing small buf clear beginning */
375                         memset(smallbuf, 0, sizeof(struct smb_hdr));
376
377                 isLargeBuf = false;
378                 isMultiRsp = false;
379                 smb_buffer = smallbuf;
380                 iov.iov_base = smb_buffer;
381                 iov.iov_len = 4;
382                 smb_msg.msg_control = NULL;
383                 smb_msg.msg_controllen = 0;
384                 pdu_length = 4; /* enough to get RFC1001 header */
385 incomplete_rcv:
386                 length =
387                     kernel_recvmsg(csocket, &smb_msg,
388                                 &iov, 1, pdu_length, 0 /* BB other flags? */);
389
390                 if (server->tcpStatus == CifsExiting) {
391                         break;
392                 } else if (server->tcpStatus == CifsNeedReconnect) {
393                         cFYI(1, ("Reconnect after server stopped responding"));
394                         cifs_reconnect(server);
395                         cFYI(1, ("call to reconnect done"));
396                         csocket = server->ssocket;
397                         continue;
398                 } else if ((length == -ERESTARTSYS) || (length == -EAGAIN)) {
399                         msleep(1); /* minimum sleep to prevent looping
400                                 allowing socket to clear and app threads to set
401                                 tcpStatus CifsNeedReconnect if server hung */
402                         if (pdu_length < 4) {
403                                 iov.iov_base = (4 - pdu_length) +
404                                                         (char *)smb_buffer;
405                                 iov.iov_len = pdu_length;
406                                 smb_msg.msg_control = NULL;
407                                 smb_msg.msg_controllen = 0;
408                                 goto incomplete_rcv;
409                         } else
410                                 continue;
411                 } else if (length <= 0) {
412                         if (server->tcpStatus == CifsNew) {
413                                 cFYI(1, ("tcp session abend after SMBnegprot"));
414                                 /* some servers kill the TCP session rather than
415                                    returning an SMB negprot error, in which
416                                    case reconnecting here is not going to help,
417                                    and so simply return error to mount */
418                                 break;
419                         }
420                         if (!try_to_freeze() && (length == -EINTR)) {
421                                 cFYI(1, ("cifsd thread killed"));
422                                 break;
423                         }
424                         cFYI(1, ("Reconnect after unexpected peek error %d",
425                                 length));
426                         cifs_reconnect(server);
427                         csocket = server->ssocket;
428                         wake_up(&server->response_q);
429                         continue;
430                 } else if (length < pdu_length) {
431                         cFYI(1, ("requested %d bytes but only got %d bytes",
432                                   pdu_length, length));
433                         pdu_length -= length;
434                         msleep(1);
435                         goto incomplete_rcv;
436                 }
437
438                 /* The right amount was read from socket - 4 bytes */
439                 /* so we can now interpret the length field */
440
441                 /* the first byte big endian of the length field,
442                 is actually not part of the length but the type
443                 with the most common, zero, as regular data */
444                 temp = *((char *) smb_buffer);
445
446                 /* Note that FC 1001 length is big endian on the wire,
447                 but we convert it here so it is always manipulated
448                 as host byte order */
449                 pdu_length = be32_to_cpu((__force __be32)smb_buffer->smb_buf_length);
450                 smb_buffer->smb_buf_length = pdu_length;
451
452                 cFYI(1, ("rfc1002 length 0x%x", pdu_length+4));
453
454                 if (temp == (char) RFC1002_SESSION_KEEP_ALIVE) {
455                         continue;
456                 } else if (temp == (char)RFC1002_POSITIVE_SESSION_RESPONSE) {
457                         cFYI(1, ("Good RFC 1002 session rsp"));
458                         continue;
459                 } else if (temp == (char)RFC1002_NEGATIVE_SESSION_RESPONSE) {
460                         /* we get this from Windows 98 instead of
461                            an error on SMB negprot response */
462                         cFYI(1, ("Negative RFC1002 Session Response Error 0x%x)",
463                                 pdu_length));
464                         if (server->tcpStatus == CifsNew) {
465                                 /* if nack on negprot (rather than
466                                 ret of smb negprot error) reconnecting
467                                 not going to help, ret error to mount */
468                                 break;
469                         } else {
470                                 /* give server a second to
471                                 clean up before reconnect attempt */
472                                 msleep(1000);
473                                 /* always try 445 first on reconnect
474                                 since we get NACK on some if we ever
475                                 connected to port 139 (the NACK is
476                                 since we do not begin with RFC1001
477                                 session initialize frame) */
478                                 server->addr.sockAddr.sin_port =
479                                         htons(CIFS_PORT);
480                                 cifs_reconnect(server);
481                                 csocket = server->ssocket;
482                                 wake_up(&server->response_q);
483                                 continue;
484                         }
485                 } else if (temp != (char) 0) {
486                         cERROR(1, ("Unknown RFC 1002 frame"));
487                         cifs_dump_mem(" Received Data: ", (char *)smb_buffer,
488                                       length);
489                         cifs_reconnect(server);
490                         csocket = server->ssocket;
491                         continue;
492                 }
493
494                 /* else we have an SMB response */
495                 if ((pdu_length > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE - 4) ||
496                             (pdu_length < sizeof(struct smb_hdr) - 1 - 4)) {
497                         cERROR(1, ("Invalid size SMB length %d pdu_length %d",
498                                         length, pdu_length+4));
499                         cifs_reconnect(server);
500                         csocket = server->ssocket;
501                         wake_up(&server->response_q);
502                         continue;
503                 }
504
505                 /* else length ok */
506                 reconnect = 0;
507
508                 if (pdu_length > MAX_CIFS_SMALL_BUFFER_SIZE - 4) {
509                         isLargeBuf = true;
510                         memcpy(bigbuf, smallbuf, 4);
511                         smb_buffer = bigbuf;
512                 }
513                 length = 0;
514                 iov.iov_base = 4 + (char *)smb_buffer;
515                 iov.iov_len = pdu_length;
516                 for (total_read = 0; total_read < pdu_length;
517                      total_read += length) {
518                         length = kernel_recvmsg(csocket, &smb_msg, &iov, 1,
519                                                 pdu_length - total_read, 0);
520                         if ((server->tcpStatus == CifsExiting) ||
521                             (length == -EINTR)) {
522                                 /* then will exit */
523                                 reconnect = 2;
524                                 break;
525                         } else if (server->tcpStatus == CifsNeedReconnect) {
526                                 cifs_reconnect(server);
527                                 csocket = server->ssocket;
528                                 /* Reconnect wakes up rspns q */
529                                 /* Now we will reread sock */
530                                 reconnect = 1;
531                                 break;
532                         } else if ((length == -ERESTARTSYS) ||
533                                    (length == -EAGAIN)) {
534                                 msleep(1); /* minimum sleep to prevent looping,
535                                               allowing socket to clear and app
536                                               threads to set tcpStatus
537                                               CifsNeedReconnect if server hung*/
538                                 length = 0;
539                                 continue;
540                         } else if (length <= 0) {
541                                 cERROR(1, ("Received no data, expecting %d",
542                                               pdu_length - total_read));
543                                 cifs_reconnect(server);
544                                 csocket = server->ssocket;
545                                 reconnect = 1;
546                                 break;
547                         }
548                 }
549                 if (reconnect == 2)
550                         break;
551                 else if (reconnect == 1)
552                         continue;
553
554                 length += 4; /* account for rfc1002 hdr */
555
556
557                 dump_smb(smb_buffer, length);
558                 if (checkSMB(smb_buffer, smb_buffer->Mid, total_read+4)) {
559                         cifs_dump_mem("Bad SMB: ", smb_buffer, 48);
560                         continue;
561                 }
562
563
564                 task_to_wake = NULL;
565                 spin_lock(&GlobalMid_Lock);
566                 list_for_each(tmp, &server->pending_mid_q) {
567                         mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
568
569                         if ((mid_entry->mid == smb_buffer->Mid) &&
570                             (mid_entry->midState == MID_REQUEST_SUBMITTED) &&
571                             (mid_entry->command == smb_buffer->Command)) {
572                                 if (check2ndT2(smb_buffer,server->maxBuf) > 0) {
573                                         /* We have a multipart transact2 resp */
574                                         isMultiRsp = true;
575                                         if (mid_entry->resp_buf) {
576                                                 /* merge response - fix up 1st*/
577                                                 if (coalesce_t2(smb_buffer,
578                                                         mid_entry->resp_buf)) {
579                                                         mid_entry->multiRsp =
580                                                                  true;
581                                                         break;
582                                                 } else {
583                                                         /* all parts received */
584                                                         mid_entry->multiEnd =
585                                                                  true;
586                                                         goto multi_t2_fnd;
587                                                 }
588                                         } else {
589                                                 if (!isLargeBuf) {
590                                                         cERROR(1,("1st trans2 resp needs bigbuf"));
591                                         /* BB maybe we can fix this up,  switch
592                                            to already allocated large buffer? */
593                                                 } else {
594                                                         /* Have first buffer */
595                                                         mid_entry->resp_buf =
596                                                                  smb_buffer;
597                                                         mid_entry->largeBuf =
598                                                                  true;
599                                                         bigbuf = NULL;
600                                                 }
601                                         }
602                                         break;
603                                 }
604                                 mid_entry->resp_buf = smb_buffer;
605                                 mid_entry->largeBuf = isLargeBuf;
606 multi_t2_fnd:
607                                 task_to_wake = mid_entry->tsk;
608                                 mid_entry->midState = MID_RESPONSE_RECEIVED;
609 #ifdef CONFIG_CIFS_STATS2
610                                 mid_entry->when_received = jiffies;
611 #endif
612                                 /* so we do not time out requests to  server
613                                 which is still responding (since server could
614                                 be busy but not dead) */
615                                 server->lstrp = jiffies;
616                                 break;
617                         }
618                 }
619                 spin_unlock(&GlobalMid_Lock);
620                 if (task_to_wake) {
621                         /* Was previous buf put in mpx struct for multi-rsp? */
622                         if (!isMultiRsp) {
623                                 /* smb buffer will be freed by user thread */
624                                 if (isLargeBuf)
625                                         bigbuf = NULL;
626                                 else
627                                         smallbuf = NULL;
628                         }
629                         wake_up_process(task_to_wake);
630                 } else if (!is_valid_oplock_break(smb_buffer, server) &&
631                            !isMultiRsp) {
632                         cERROR(1, ("No task to wake, unknown frame received! "
633                                    "NumMids %d", midCount.counter));
634                         cifs_dump_mem("Received Data is: ", (char *)smb_buffer,
635                                       sizeof(struct smb_hdr));
636 #ifdef CONFIG_CIFS_DEBUG2
637                         cifs_dump_detail(smb_buffer);
638                         cifs_dump_mids(server);
639 #endif /* CIFS_DEBUG2 */
640
641                 }
642         } /* end while !EXITING */
643
644         /* take it off the list, if it's not already */
645         write_lock(&cifs_tcp_ses_lock);
646         list_del_init(&server->tcp_ses_list);
647         write_unlock(&cifs_tcp_ses_lock);
648
649         spin_lock(&GlobalMid_Lock);
650         server->tcpStatus = CifsExiting;
651         spin_unlock(&GlobalMid_Lock);
652         wake_up_all(&server->response_q);
653
654         /* check if we have blocked requests that need to free */
655         /* Note that cifs_max_pending is normally 50, but
656         can be set at module install time to as little as two */
657         spin_lock(&GlobalMid_Lock);
658         if (atomic_read(&server->inFlight) >= cifs_max_pending)
659                 atomic_set(&server->inFlight, cifs_max_pending - 1);
660         /* We do not want to set the max_pending too low or we
661         could end up with the counter going negative */
662         spin_unlock(&GlobalMid_Lock);
663         /* Although there should not be any requests blocked on
664         this queue it can not hurt to be paranoid and try to wake up requests
665         that may haven been blocked when more than 50 at time were on the wire
666         to the same server - they now will see the session is in exit state
667         and get out of SendReceive.  */
668         wake_up_all(&server->request_q);
669         /* give those requests time to exit */
670         msleep(125);
671
672         if (server->ssocket) {
673                 sock_release(csocket);
674                 server->ssocket = NULL;
675         }
676         /* buffer usuallly freed in free_mid - need to free it here on exit */
677         cifs_buf_release(bigbuf);
678         if (smallbuf) /* no sense logging a debug message if NULL */
679                 cifs_small_buf_release(smallbuf);
680
681         /*
682          * BB: we shouldn't have to do any of this. It shouldn't be
683          * possible to exit from the thread with active SMB sessions
684          */
685         read_lock(&cifs_tcp_ses_lock);
686         if (list_empty(&server->pending_mid_q)) {
687                 /* loop through server session structures attached to this and
688                     mark them dead */
689                 list_for_each(tmp, &server->smb_ses_list) {
690                         ses = list_entry(tmp, struct cifsSesInfo,
691                                          smb_ses_list);
692                         ses->status = CifsExiting;
693                         ses->server = NULL;
694                 }
695                 read_unlock(&cifs_tcp_ses_lock);
696         } else {
697                 /* although we can not zero the server struct pointer yet,
698                 since there are active requests which may depnd on them,
699                 mark the corresponding SMB sessions as exiting too */
700                 list_for_each(tmp, &server->smb_ses_list) {
701                         ses = list_entry(tmp, struct cifsSesInfo,
702                                          smb_ses_list);
703                         ses->status = CifsExiting;
704                 }
705
706                 spin_lock(&GlobalMid_Lock);
707                 list_for_each(tmp, &server->pending_mid_q) {
708                 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
709                         if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
710                                 cFYI(1, ("Clearing Mid 0x%x - waking up ",
711                                          mid_entry->mid));
712                                 task_to_wake = mid_entry->tsk;
713                                 if (task_to_wake)
714                                         wake_up_process(task_to_wake);
715                         }
716                 }
717                 spin_unlock(&GlobalMid_Lock);
718                 read_unlock(&cifs_tcp_ses_lock);
719                 /* 1/8th of sec is more than enough time for them to exit */
720                 msleep(125);
721         }
722
723         if (!list_empty(&server->pending_mid_q)) {
724                 /* mpx threads have not exited yet give them
725                 at least the smb send timeout time for long ops */
726                 /* due to delays on oplock break requests, we need
727                 to wait at least 45 seconds before giving up
728                 on a request getting a response and going ahead
729                 and killing cifsd */
730                 cFYI(1, ("Wait for exit from demultiplex thread"));
731                 msleep(46000);
732                 /* if threads still have not exited they are probably never
733                 coming home not much else we can do but free the memory */
734         }
735
736         /* last chance to mark ses pointers invalid
737         if there are any pointing to this (e.g
738         if a crazy root user tried to kill cifsd
739         kernel thread explicitly this might happen) */
740         /* BB: This shouldn't be necessary, see above */
741         read_lock(&cifs_tcp_ses_lock);
742         list_for_each(tmp, &server->smb_ses_list) {
743                 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
744                 ses->server = NULL;
745         }
746         read_unlock(&cifs_tcp_ses_lock);
747
748         kfree(server->hostname);
749         task_to_wake = xchg(&server->tsk, NULL);
750         kfree(server);
751
752         length = atomic_dec_return(&tcpSesAllocCount);
753         if (length  > 0)
754                 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
755                                 GFP_KERNEL);
756
757         /* if server->tsk was NULL then wait for a signal before exiting */
758         if (!task_to_wake) {
759                 set_current_state(TASK_INTERRUPTIBLE);
760                 while (!signal_pending(current)) {
761                         schedule();
762                         set_current_state(TASK_INTERRUPTIBLE);
763                 }
764                 set_current_state(TASK_RUNNING);
765         }
766
767         module_put_and_exit(0);
768 }
769
770 /* extract the host portion of the UNC string */
771 static char *
772 extract_hostname(const char *unc)
773 {
774         const char *src;
775         char *dst, *delim;
776         unsigned int len;
777
778         /* skip double chars at beginning of string */
779         /* BB: check validity of these bytes? */
780         src = unc + 2;
781
782         /* delimiter between hostname and sharename is always '\\' now */
783         delim = strchr(src, '\\');
784         if (!delim)
785                 return ERR_PTR(-EINVAL);
786
787         len = delim - src;
788         dst = kmalloc((len + 1), GFP_KERNEL);
789         if (dst == NULL)
790                 return ERR_PTR(-ENOMEM);
791
792         memcpy(dst, src, len);
793         dst[len] = '\0';
794
795         return dst;
796 }
797
798 static int
799 cifs_parse_mount_options(char *options, const char *devname,
800                          struct smb_vol *vol)
801 {
802         char *value;
803         char *data;
804         unsigned int  temp_len, i, j;
805         char separator[2];
806         short int override_uid = -1;
807         short int override_gid = -1;
808         bool uid_specified = false;
809         bool gid_specified = false;
810
811         separator[0] = ',';
812         separator[1] = 0;
813
814         if (Local_System_Name[0] != 0)
815                 memcpy(vol->source_rfc1001_name, Local_System_Name, 15);
816         else {
817                 char *nodename = utsname()->nodename;
818                 int n = strnlen(nodename, 15);
819                 memset(vol->source_rfc1001_name, 0x20, 15);
820                 for (i = 0; i < n; i++) {
821                         /* does not have to be perfect mapping since field is
822                         informational, only used for servers that do not support
823                         port 445 and it can be overridden at mount time */
824                         vol->source_rfc1001_name[i] = toupper(nodename[i]);
825                 }
826         }
827         vol->source_rfc1001_name[15] = 0;
828         /* null target name indicates to use *SMBSERVR default called name
829            if we end up sending RFC1001 session initialize */
830         vol->target_rfc1001_name[0] = 0;
831         vol->linux_uid = current_uid();  /* use current_euid() instead? */
832         vol->linux_gid = current_gid();
833
834         /* default to only allowing write access to owner of the mount */
835         vol->dir_mode = vol->file_mode = S_IRUGO | S_IXUGO | S_IWUSR;
836
837         /* vol->retry default is 0 (i.e. "soft" limited retry not hard retry) */
838         /* default is always to request posix paths. */
839         vol->posix_paths = 1;
840         /* default to using server inode numbers where available */
841         vol->server_ino = 1;
842
843         if (!options)
844                 return 1;
845
846         if (strncmp(options, "sep=", 4) == 0) {
847                 if (options[4] != 0) {
848                         separator[0] = options[4];
849                         options += 5;
850                 } else {
851                         cFYI(1, ("Null separator not allowed"));
852                 }
853         }
854
855         while ((data = strsep(&options, separator)) != NULL) {
856                 if (!*data)
857                         continue;
858                 if ((value = strchr(data, '=')) != NULL)
859                         *value++ = '\0';
860
861                 /* Have to parse this before we parse for "user" */
862                 if (strnicmp(data, "user_xattr", 10) == 0) {
863                         vol->no_xattr = 0;
864                 } else if (strnicmp(data, "nouser_xattr", 12) == 0) {
865                         vol->no_xattr = 1;
866                 } else if (strnicmp(data, "user", 4) == 0) {
867                         if (!value) {
868                                 printk(KERN_WARNING
869                                        "CIFS: invalid or missing username\n");
870                                 return 1;       /* needs_arg; */
871                         } else if (!*value) {
872                                 /* null user, ie anonymous, authentication */
873                                 vol->nullauth = 1;
874                         }
875                         if (strnlen(value, 200) < 200) {
876                                 vol->username = value;
877                         } else {
878                                 printk(KERN_WARNING "CIFS: username too long\n");
879                                 return 1;
880                         }
881                 } else if (strnicmp(data, "pass", 4) == 0) {
882                         if (!value) {
883                                 vol->password = NULL;
884                                 continue;
885                         } else if (value[0] == 0) {
886                                 /* check if string begins with double comma
887                                    since that would mean the password really
888                                    does start with a comma, and would not
889                                    indicate an empty string */
890                                 if (value[1] != separator[0]) {
891                                         vol->password = NULL;
892                                         continue;
893                                 }
894                         }
895                         temp_len = strlen(value);
896                         /* removed password length check, NTLM passwords
897                                 can be arbitrarily long */
898
899                         /* if comma in password, the string will be
900                         prematurely null terminated.  Commas in password are
901                         specified across the cifs mount interface by a double
902                         comma ie ,, and a comma used as in other cases ie ','
903                         as a parameter delimiter/separator is single and due
904                         to the strsep above is temporarily zeroed. */
905
906                         /* NB: password legally can have multiple commas and
907                         the only illegal character in a password is null */
908
909                         if ((value[temp_len] == 0) &&
910                             (value[temp_len+1] == separator[0])) {
911                                 /* reinsert comma */
912                                 value[temp_len] = separator[0];
913                                 temp_len += 2;  /* move after second comma */
914                                 while (value[temp_len] != 0)  {
915                                         if (value[temp_len] == separator[0]) {
916                                                 if (value[temp_len+1] ==
917                                                      separator[0]) {
918                                                 /* skip second comma */
919                                                         temp_len++;
920                                                 } else {
921                                                 /* single comma indicating start
922                                                          of next parm */
923                                                         break;
924                                                 }
925                                         }
926                                         temp_len++;
927                                 }
928                                 if (value[temp_len] == 0) {
929                                         options = NULL;
930                                 } else {
931                                         value[temp_len] = 0;
932                                         /* point option to start of next parm */
933                                         options = value + temp_len + 1;
934                                 }
935                                 /* go from value to value + temp_len condensing
936                                 double commas to singles. Note that this ends up
937                                 allocating a few bytes too many, which is ok */
938                                 vol->password = kzalloc(temp_len, GFP_KERNEL);
939                                 if (vol->password == NULL) {
940                                         printk(KERN_WARNING "CIFS: no memory "
941                                                             "for password\n");
942                                         return 1;
943                                 }
944                                 for (i = 0, j = 0; i < temp_len; i++, j++) {
945                                         vol->password[j] = value[i];
946                                         if (value[i] == separator[0]
947                                                 && value[i+1] == separator[0]) {
948                                                 /* skip second comma */
949                                                 i++;
950                                         }
951                                 }
952                                 vol->password[j] = 0;
953                         } else {
954                                 vol->password = kzalloc(temp_len+1, GFP_KERNEL);
955                                 if (vol->password == NULL) {
956                                         printk(KERN_WARNING "CIFS: no memory "
957                                                             "for password\n");
958                                         return 1;
959                                 }
960                                 strcpy(vol->password, value);
961                         }
962                 } else if (!strnicmp(data, "ip", 2) ||
963                            !strnicmp(data, "addr", 4)) {
964                         if (!value || !*value) {
965                                 vol->UNCip = NULL;
966                         } else if (strnlen(value, INET6_ADDRSTRLEN) <
967                                                         INET6_ADDRSTRLEN) {
968                                 vol->UNCip = value;
969                         } else {
970                                 printk(KERN_WARNING "CIFS: ip address "
971                                                     "too long\n");
972                                 return 1;
973                         }
974                 } else if (strnicmp(data, "sec", 3) == 0) {
975                         if (!value || !*value) {
976                                 cERROR(1, ("no security value specified"));
977                                 continue;
978                         } else if (strnicmp(value, "krb5i", 5) == 0) {
979                                 vol->secFlg |= CIFSSEC_MAY_KRB5 |
980                                         CIFSSEC_MUST_SIGN;
981                         } else if (strnicmp(value, "krb5p", 5) == 0) {
982                                 /* vol->secFlg |= CIFSSEC_MUST_SEAL |
983                                         CIFSSEC_MAY_KRB5; */
984                                 cERROR(1, ("Krb5 cifs privacy not supported"));
985                                 return 1;
986                         } else if (strnicmp(value, "krb5", 4) == 0) {
987                                 vol->secFlg |= CIFSSEC_MAY_KRB5;
988 #ifdef CONFIG_CIFS_EXPERIMENTAL
989                         } else if (strnicmp(value, "ntlmsspi", 8) == 0) {
990                                 vol->secFlg |= CIFSSEC_MAY_NTLMSSP |
991                                         CIFSSEC_MUST_SIGN;
992                         } else if (strnicmp(value, "ntlmssp", 7) == 0) {
993                                 vol->secFlg |= CIFSSEC_MAY_NTLMSSP;
994 #endif
995                         } else if (strnicmp(value, "ntlmv2i", 7) == 0) {
996                                 vol->secFlg |= CIFSSEC_MAY_NTLMV2 |
997                                         CIFSSEC_MUST_SIGN;
998                         } else if (strnicmp(value, "ntlmv2", 6) == 0) {
999                                 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
1000                         } else if (strnicmp(value, "ntlmi", 5) == 0) {
1001                                 vol->secFlg |= CIFSSEC_MAY_NTLM |
1002                                         CIFSSEC_MUST_SIGN;
1003                         } else if (strnicmp(value, "ntlm", 4) == 0) {
1004                                 /* ntlm is default so can be turned off too */
1005                                 vol->secFlg |= CIFSSEC_MAY_NTLM;
1006                         } else if (strnicmp(value, "nontlm", 6) == 0) {
1007                                 /* BB is there a better way to do this? */
1008                                 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
1009 #ifdef CONFIG_CIFS_WEAK_PW_HASH
1010                         } else if (strnicmp(value, "lanman", 6) == 0) {
1011                                 vol->secFlg |= CIFSSEC_MAY_LANMAN;
1012 #endif
1013                         } else if (strnicmp(value, "none", 4) == 0) {
1014                                 vol->nullauth = 1;
1015                         } else {
1016                                 cERROR(1, ("bad security option: %s", value));
1017                                 return 1;
1018                         }
1019                 } else if ((strnicmp(data, "unc", 3) == 0)
1020                            || (strnicmp(data, "target", 6) == 0)
1021                            || (strnicmp(data, "path", 4) == 0)) {
1022                         if (!value || !*value) {
1023                                 printk(KERN_WARNING "CIFS: invalid path to "
1024                                                     "network resource\n");
1025                                 return 1;       /* needs_arg; */
1026                         }
1027                         if ((temp_len = strnlen(value, 300)) < 300) {
1028                                 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1029                                 if (vol->UNC == NULL)
1030                                         return 1;
1031                                 strcpy(vol->UNC, value);
1032                                 if (strncmp(vol->UNC, "//", 2) == 0) {
1033                                         vol->UNC[0] = '\\';
1034                                         vol->UNC[1] = '\\';
1035                                 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1036                                         printk(KERN_WARNING
1037                                                "CIFS: UNC Path does not begin "
1038                                                "with // or \\\\ \n");
1039                                         return 1;
1040                                 }
1041                         } else {
1042                                 printk(KERN_WARNING "CIFS: UNC name too long\n");
1043                                 return 1;
1044                         }
1045                 } else if ((strnicmp(data, "domain", 3) == 0)
1046                            || (strnicmp(data, "workgroup", 5) == 0)) {
1047                         if (!value || !*value) {
1048                                 printk(KERN_WARNING "CIFS: invalid domain name\n");
1049                                 return 1;       /* needs_arg; */
1050                         }
1051                         /* BB are there cases in which a comma can be valid in
1052                         a domain name and need special handling? */
1053                         if (strnlen(value, 256) < 256) {
1054                                 vol->domainname = value;
1055                                 cFYI(1, ("Domain name set"));
1056                         } else {
1057                                 printk(KERN_WARNING "CIFS: domain name too "
1058                                                     "long\n");
1059                                 return 1;
1060                         }
1061                 } else if (strnicmp(data, "prefixpath", 10) == 0) {
1062                         if (!value || !*value) {
1063                                 printk(KERN_WARNING
1064                                         "CIFS: invalid path prefix\n");
1065                                 return 1;       /* needs_argument */
1066                         }
1067                         if ((temp_len = strnlen(value, 1024)) < 1024) {
1068                                 if (value[0] != '/')
1069                                         temp_len++;  /* missing leading slash */
1070                                 vol->prepath = kmalloc(temp_len+1, GFP_KERNEL);
1071                                 if (vol->prepath == NULL)
1072                                         return 1;
1073                                 if (value[0] != '/') {
1074                                         vol->prepath[0] = '/';
1075                                         strcpy(vol->prepath+1, value);
1076                                 } else
1077                                         strcpy(vol->prepath, value);
1078                                 cFYI(1, ("prefix path %s", vol->prepath));
1079                         } else {
1080                                 printk(KERN_WARNING "CIFS: prefix too long\n");
1081                                 return 1;
1082                         }
1083                 } else if (strnicmp(data, "iocharset", 9) == 0) {
1084                         if (!value || !*value) {
1085                                 printk(KERN_WARNING "CIFS: invalid iocharset "
1086                                                     "specified\n");
1087                                 return 1;       /* needs_arg; */
1088                         }
1089                         if (strnlen(value, 65) < 65) {
1090                                 if (strnicmp(value, "default", 7))
1091                                         vol->iocharset = value;
1092                                 /* if iocharset not set then load_nls_default
1093                                    is used by caller */
1094                                 cFYI(1, ("iocharset set to %s", value));
1095                         } else {
1096                                 printk(KERN_WARNING "CIFS: iocharset name "
1097                                                     "too long.\n");
1098                                 return 1;
1099                         }
1100                 } else if (!strnicmp(data, "uid", 3) && value && *value) {
1101                         vol->linux_uid = simple_strtoul(value, &value, 0);
1102                         uid_specified = true;
1103                 } else if (!strnicmp(data, "forceuid", 8)) {
1104                         override_uid = 1;
1105                 } else if (!strnicmp(data, "noforceuid", 10)) {
1106                         override_uid = 0;
1107                 } else if (!strnicmp(data, "gid", 3) && value && *value) {
1108                         vol->linux_gid = simple_strtoul(value, &value, 0);
1109                         gid_specified = true;
1110                 } else if (!strnicmp(data, "forcegid", 8)) {
1111                         override_gid = 1;
1112                 } else if (!strnicmp(data, "noforcegid", 10)) {
1113                         override_gid = 0;
1114                 } else if (strnicmp(data, "file_mode", 4) == 0) {
1115                         if (value && *value) {
1116                                 vol->file_mode =
1117                                         simple_strtoul(value, &value, 0);
1118                         }
1119                 } else if (strnicmp(data, "dir_mode", 4) == 0) {
1120                         if (value && *value) {
1121                                 vol->dir_mode =
1122                                         simple_strtoul(value, &value, 0);
1123                         }
1124                 } else if (strnicmp(data, "dirmode", 4) == 0) {
1125                         if (value && *value) {
1126                                 vol->dir_mode =
1127                                         simple_strtoul(value, &value, 0);
1128                         }
1129                 } else if (strnicmp(data, "port", 4) == 0) {
1130                         if (value && *value) {
1131                                 vol->port =
1132                                         simple_strtoul(value, &value, 0);
1133                         }
1134                 } else if (strnicmp(data, "rsize", 5) == 0) {
1135                         if (value && *value) {
1136                                 vol->rsize =
1137                                         simple_strtoul(value, &value, 0);
1138                         }
1139                 } else if (strnicmp(data, "wsize", 5) == 0) {
1140                         if (value && *value) {
1141                                 vol->wsize =
1142                                         simple_strtoul(value, &value, 0);
1143                         }
1144                 } else if (strnicmp(data, "sockopt", 5) == 0) {
1145                         if (value && *value) {
1146                                 vol->sockopt =
1147                                         simple_strtoul(value, &value, 0);
1148                         }
1149                 } else if (strnicmp(data, "netbiosname", 4) == 0) {
1150                         if (!value || !*value || (*value == ' ')) {
1151                                 cFYI(1, ("invalid (empty) netbiosname"));
1152                         } else {
1153                                 memset(vol->source_rfc1001_name, 0x20, 15);
1154                                 for (i = 0; i < 15; i++) {
1155                                 /* BB are there cases in which a comma can be
1156                                 valid in this workstation netbios name (and need
1157                                 special handling)? */
1158
1159                                 /* We do not uppercase netbiosname for user */
1160                                         if (value[i] == 0)
1161                                                 break;
1162                                         else
1163                                                 vol->source_rfc1001_name[i] =
1164                                                                 value[i];
1165                                 }
1166                                 /* The string has 16th byte zero still from
1167                                 set at top of the function  */
1168                                 if ((i == 15) && (value[i] != 0))
1169                                         printk(KERN_WARNING "CIFS: netbiosname"
1170                                                 " longer than 15 truncated.\n");
1171                         }
1172                 } else if (strnicmp(data, "servern", 7) == 0) {
1173                         /* servernetbiosname specified override *SMBSERVER */
1174                         if (!value || !*value || (*value == ' ')) {
1175                                 cFYI(1, ("empty server netbiosname specified"));
1176                         } else {
1177                                 /* last byte, type, is 0x20 for servr type */
1178                                 memset(vol->target_rfc1001_name, 0x20, 16);
1179
1180                                 for (i = 0; i < 15; i++) {
1181                                 /* BB are there cases in which a comma can be
1182                                    valid in this workstation netbios name
1183                                    (and need special handling)? */
1184
1185                                 /* user or mount helper must uppercase
1186                                    the netbiosname */
1187                                         if (value[i] == 0)
1188                                                 break;
1189                                         else
1190                                                 vol->target_rfc1001_name[i] =
1191                                                                 value[i];
1192                                 }
1193                                 /* The string has 16th byte zero still from
1194                                    set at top of the function  */
1195                                 if ((i == 15) && (value[i] != 0))
1196                                         printk(KERN_WARNING "CIFS: server net"
1197                                         "biosname longer than 15 truncated.\n");
1198                         }
1199                 } else if (strnicmp(data, "credentials", 4) == 0) {
1200                         /* ignore */
1201                 } else if (strnicmp(data, "version", 3) == 0) {
1202                         /* ignore */
1203                 } else if (strnicmp(data, "guest", 5) == 0) {
1204                         /* ignore */
1205                 } else if (strnicmp(data, "rw", 2) == 0) {
1206                         /* ignore */
1207                 } else if (strnicmp(data, "ro", 2) == 0) {
1208                         /* ignore */
1209                 } else if (strnicmp(data, "noblocksend", 11) == 0) {
1210                         vol->noblocksnd = 1;
1211                 } else if (strnicmp(data, "noautotune", 10) == 0) {
1212                         vol->noautotune = 1;
1213                 } else if ((strnicmp(data, "suid", 4) == 0) ||
1214                                    (strnicmp(data, "nosuid", 6) == 0) ||
1215                                    (strnicmp(data, "exec", 4) == 0) ||
1216                                    (strnicmp(data, "noexec", 6) == 0) ||
1217                                    (strnicmp(data, "nodev", 5) == 0) ||
1218                                    (strnicmp(data, "noauto", 6) == 0) ||
1219                                    (strnicmp(data, "dev", 3) == 0)) {
1220                         /*  The mount tool or mount.cifs helper (if present)
1221                             uses these opts to set flags, and the flags are read
1222                             by the kernel vfs layer before we get here (ie
1223                             before read super) so there is no point trying to
1224                             parse these options again and set anything and it
1225                             is ok to just ignore them */
1226                         continue;
1227                 } else if (strnicmp(data, "hard", 4) == 0) {
1228                         vol->retry = 1;
1229                 } else if (strnicmp(data, "soft", 4) == 0) {
1230                         vol->retry = 0;
1231                 } else if (strnicmp(data, "perm", 4) == 0) {
1232                         vol->noperm = 0;
1233                 } else if (strnicmp(data, "noperm", 6) == 0) {
1234                         vol->noperm = 1;
1235                 } else if (strnicmp(data, "mapchars", 8) == 0) {
1236                         vol->remap = 1;
1237                 } else if (strnicmp(data, "nomapchars", 10) == 0) {
1238                         vol->remap = 0;
1239                 } else if (strnicmp(data, "sfu", 3) == 0) {
1240                         vol->sfu_emul = 1;
1241                 } else if (strnicmp(data, "nosfu", 5) == 0) {
1242                         vol->sfu_emul = 0;
1243                 } else if (strnicmp(data, "nodfs", 5) == 0) {
1244                         vol->nodfs = 1;
1245                 } else if (strnicmp(data, "posixpaths", 10) == 0) {
1246                         vol->posix_paths = 1;
1247                 } else if (strnicmp(data, "noposixpaths", 12) == 0) {
1248                         vol->posix_paths = 0;
1249                 } else if (strnicmp(data, "nounix", 6) == 0) {
1250                         vol->no_linux_ext = 1;
1251                 } else if (strnicmp(data, "nolinux", 7) == 0) {
1252                         vol->no_linux_ext = 1;
1253                 } else if ((strnicmp(data, "nocase", 6) == 0) ||
1254                            (strnicmp(data, "ignorecase", 10)  == 0)) {
1255                         vol->nocase = 1;
1256                 } else if (strnicmp(data, "brl", 3) == 0) {
1257                         vol->nobrl =  0;
1258                 } else if ((strnicmp(data, "nobrl", 5) == 0) ||
1259                            (strnicmp(data, "nolock", 6) == 0)) {
1260                         vol->nobrl =  1;
1261                         /* turn off mandatory locking in mode
1262                         if remote locking is turned off since the
1263                         local vfs will do advisory */
1264                         if (vol->file_mode ==
1265                                 (S_IALLUGO & ~(S_ISUID | S_IXGRP)))
1266                                 vol->file_mode = S_IALLUGO;
1267                 } else if (strnicmp(data, "forcemandatorylock", 9) == 0) {
1268                         /* will take the shorter form "forcemand" as well */
1269                         /* This mount option will force use of mandatory
1270                           (DOS/Windows style) byte range locks, instead of
1271                           using posix advisory byte range locks, even if the
1272                           Unix extensions are available and posix locks would
1273                           be supported otherwise. If Unix extensions are not
1274                           negotiated this has no effect since mandatory locks
1275                           would be used (mandatory locks is all that those
1276                           those servers support) */
1277                         vol->mand_lock = 1;
1278                 } else if (strnicmp(data, "setuids", 7) == 0) {
1279                         vol->setuids = 1;
1280                 } else if (strnicmp(data, "nosetuids", 9) == 0) {
1281                         vol->setuids = 0;
1282                 } else if (strnicmp(data, "dynperm", 7) == 0) {
1283                         vol->dynperm = true;
1284                 } else if (strnicmp(data, "nodynperm", 9) == 0) {
1285                         vol->dynperm = false;
1286                 } else if (strnicmp(data, "nohard", 6) == 0) {
1287                         vol->retry = 0;
1288                 } else if (strnicmp(data, "nosoft", 6) == 0) {
1289                         vol->retry = 1;
1290                 } else if (strnicmp(data, "nointr", 6) == 0) {
1291                         vol->intr = 0;
1292                 } else if (strnicmp(data, "intr", 4) == 0) {
1293                         vol->intr = 1;
1294                 } else if (strnicmp(data, "nostrictsync", 12) == 0) {
1295                         vol->nostrictsync = 1;
1296                 } else if (strnicmp(data, "strictsync", 10) == 0) {
1297                         vol->nostrictsync = 0;
1298                 } else if (strnicmp(data, "serverino", 7) == 0) {
1299                         vol->server_ino = 1;
1300                 } else if (strnicmp(data, "noserverino", 9) == 0) {
1301                         vol->server_ino = 0;
1302                 } else if (strnicmp(data, "cifsacl", 7) == 0) {
1303                         vol->cifs_acl = 1;
1304                 } else if (strnicmp(data, "nocifsacl", 9) == 0) {
1305                         vol->cifs_acl = 0;
1306                 } else if (strnicmp(data, "acl", 3) == 0) {
1307                         vol->no_psx_acl = 0;
1308                 } else if (strnicmp(data, "noacl", 5) == 0) {
1309                         vol->no_psx_acl = 1;
1310 #ifdef CONFIG_CIFS_EXPERIMENTAL
1311                 } else if (strnicmp(data, "locallease", 6) == 0) {
1312                         vol->local_lease = 1;
1313 #endif
1314                 } else if (strnicmp(data, "sign", 4) == 0) {
1315                         vol->secFlg |= CIFSSEC_MUST_SIGN;
1316                 } else if (strnicmp(data, "seal", 4) == 0) {
1317                         /* we do not do the following in secFlags because seal
1318                            is a per tree connection (mount) not a per socket
1319                            or per-smb connection option in the protocol */
1320                         /* vol->secFlg |= CIFSSEC_MUST_SEAL; */
1321                         vol->seal = 1;
1322                 } else if (strnicmp(data, "direct", 6) == 0) {
1323                         vol->direct_io = 1;
1324                 } else if (strnicmp(data, "forcedirectio", 13) == 0) {
1325                         vol->direct_io = 1;
1326                 } else if (strnicmp(data, "noac", 4) == 0) {
1327                         printk(KERN_WARNING "CIFS: Mount option noac not "
1328                                 "supported. Instead set "
1329                                 "/proc/fs/cifs/LookupCacheEnabled to 0\n");
1330                 } else
1331                         printk(KERN_WARNING "CIFS: Unknown mount option %s\n",
1332                                                 data);
1333         }
1334         if (vol->UNC == NULL) {
1335                 if (devname == NULL) {
1336                         printk(KERN_WARNING "CIFS: Missing UNC name for mount "
1337                                                 "target\n");
1338                         return 1;
1339                 }
1340                 if ((temp_len = strnlen(devname, 300)) < 300) {
1341                         vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1342                         if (vol->UNC == NULL)
1343                                 return 1;
1344                         strcpy(vol->UNC, devname);
1345                         if (strncmp(vol->UNC, "//", 2) == 0) {
1346                                 vol->UNC[0] = '\\';
1347                                 vol->UNC[1] = '\\';
1348                         } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1349                                 printk(KERN_WARNING "CIFS: UNC Path does not "
1350                                                     "begin with // or \\\\ \n");
1351                                 return 1;
1352                         }
1353                         value = strpbrk(vol->UNC+2, "/\\");
1354                         if (value)
1355                                 *value = '\\';
1356                 } else {
1357                         printk(KERN_WARNING "CIFS: UNC name too long\n");
1358                         return 1;
1359                 }
1360         }
1361         if (vol->UNCip == NULL)
1362                 vol->UNCip = &vol->UNC[2];
1363
1364         if (uid_specified)
1365                 vol->override_uid = override_uid;
1366         else if (override_uid == 1)
1367                 printk(KERN_NOTICE "CIFS: ignoring forceuid mount option "
1368                                    "specified with no uid= option.\n");
1369
1370         if (gid_specified)
1371                 vol->override_gid = override_gid;
1372         else if (override_gid == 1)
1373                 printk(KERN_NOTICE "CIFS: ignoring forcegid mount option "
1374                                    "specified with no gid= option.\n");
1375
1376         return 0;
1377 }
1378
1379 static struct TCP_Server_Info *
1380 cifs_find_tcp_session(struct sockaddr_storage *addr, unsigned short int port)
1381 {
1382         struct list_head *tmp;
1383         struct TCP_Server_Info *server;
1384         struct sockaddr_in *addr4 = (struct sockaddr_in *) addr;
1385         struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *) addr;
1386
1387         write_lock(&cifs_tcp_ses_lock);
1388         list_for_each(tmp, &cifs_tcp_ses_list) {
1389                 server = list_entry(tmp, struct TCP_Server_Info,
1390                                     tcp_ses_list);
1391                 /*
1392                  * the demux thread can exit on its own while still in CifsNew
1393                  * so don't accept any sockets in that state. Since the
1394                  * tcpStatus never changes back to CifsNew it's safe to check
1395                  * for this without a lock.
1396                  */
1397                 if (server->tcpStatus == CifsNew)
1398                         continue;
1399
1400                 switch (addr->ss_family) {
1401                 case AF_INET:
1402                         if (addr4->sin_addr.s_addr ==
1403                             server->addr.sockAddr.sin_addr.s_addr) {
1404                                 addr4->sin_port = htons(port);
1405                                 /* user overrode default port? */
1406                                 if (addr4->sin_port) {
1407                                         if (addr4->sin_port !=
1408                                             server->addr.sockAddr.sin_port)
1409                                                 continue;
1410                                 }
1411                                 break;
1412                         } else
1413                                 continue;
1414
1415                 case AF_INET6:
1416                         if (ipv6_addr_equal(&addr6->sin6_addr,
1417                             &server->addr.sockAddr6.sin6_addr) &&
1418                             (addr6->sin6_scope_id ==
1419                             server->addr.sockAddr6.sin6_scope_id)) {
1420                                 addr6->sin6_port = htons(port);
1421                                 /* user overrode default port? */
1422                                 if (addr6->sin6_port) {
1423                                         if (addr6->sin6_port !=
1424                                            server->addr.sockAddr6.sin6_port)
1425                                                 continue;
1426                                 }
1427                                 break;
1428                         } else
1429                                 continue;
1430                 }
1431
1432                 ++server->srv_count;
1433                 write_unlock(&cifs_tcp_ses_lock);
1434                 cFYI(1, ("Existing tcp session with server found"));
1435                 return server;
1436         }
1437         write_unlock(&cifs_tcp_ses_lock);
1438         return NULL;
1439 }
1440
1441 static void
1442 cifs_put_tcp_session(struct TCP_Server_Info *server)
1443 {
1444         struct task_struct *task;
1445
1446         write_lock(&cifs_tcp_ses_lock);
1447         if (--server->srv_count > 0) {
1448                 write_unlock(&cifs_tcp_ses_lock);
1449                 return;
1450         }
1451
1452         list_del_init(&server->tcp_ses_list);
1453         write_unlock(&cifs_tcp_ses_lock);
1454
1455         spin_lock(&GlobalMid_Lock);
1456         server->tcpStatus = CifsExiting;
1457         spin_unlock(&GlobalMid_Lock);
1458
1459         task = xchg(&server->tsk, NULL);
1460         if (task)
1461                 force_sig(SIGKILL, task);
1462 }
1463
1464 static struct TCP_Server_Info *
1465 cifs_get_tcp_session(struct smb_vol *volume_info)
1466 {
1467         struct TCP_Server_Info *tcp_ses = NULL;
1468         struct sockaddr_storage addr;
1469         struct sockaddr_in *sin_server = (struct sockaddr_in *) &addr;
1470         struct sockaddr_in6 *sin_server6 = (struct sockaddr_in6 *) &addr;
1471         int rc;
1472
1473         memset(&addr, 0, sizeof(struct sockaddr_storage));
1474
1475         cFYI(1, ("UNC: %s ip: %s", volume_info->UNC, volume_info->UNCip));
1476
1477         if (volume_info->UNCip && volume_info->UNC) {
1478                 rc = cifs_convert_address(volume_info->UNCip, &addr);
1479                 if (!rc) {
1480                         /* we failed translating address */
1481                         rc = -EINVAL;
1482                         goto out_err;
1483                 }
1484         } else if (volume_info->UNCip) {
1485                 /* BB using ip addr as tcp_ses name to connect to the
1486                    DFS root below */
1487                 cERROR(1, ("Connecting to DFS root not implemented yet"));
1488                 rc = -EINVAL;
1489                 goto out_err;
1490         } else /* which tcp_sess DFS root would we conect to */ {
1491                 cERROR(1,
1492                        ("CIFS mount error: No UNC path (e.g. -o "
1493                         "unc=//192.168.1.100/public) specified"));
1494                 rc = -EINVAL;
1495                 goto out_err;
1496         }
1497
1498         /* see if we already have a matching tcp_ses */
1499         tcp_ses = cifs_find_tcp_session(&addr, volume_info->port);
1500         if (tcp_ses)
1501                 return tcp_ses;
1502
1503         tcp_ses = kzalloc(sizeof(struct TCP_Server_Info), GFP_KERNEL);
1504         if (!tcp_ses) {
1505                 rc = -ENOMEM;
1506                 goto out_err;
1507         }
1508
1509         tcp_ses->hostname = extract_hostname(volume_info->UNC);
1510         if (IS_ERR(tcp_ses->hostname)) {
1511                 rc = PTR_ERR(tcp_ses->hostname);
1512                 goto out_err;
1513         }
1514
1515         tcp_ses->noblocksnd = volume_info->noblocksnd;
1516         tcp_ses->noautotune = volume_info->noautotune;
1517         atomic_set(&tcp_ses->inFlight, 0);
1518         init_waitqueue_head(&tcp_ses->response_q);
1519         init_waitqueue_head(&tcp_ses->request_q);
1520         INIT_LIST_HEAD(&tcp_ses->pending_mid_q);
1521         mutex_init(&tcp_ses->srv_mutex);
1522         memcpy(tcp_ses->workstation_RFC1001_name,
1523                 volume_info->source_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1524         memcpy(tcp_ses->server_RFC1001_name,
1525                 volume_info->target_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1526         tcp_ses->sequence_number = 0;
1527         INIT_LIST_HEAD(&tcp_ses->tcp_ses_list);
1528         INIT_LIST_HEAD(&tcp_ses->smb_ses_list);
1529
1530         /*
1531          * at this point we are the only ones with the pointer
1532          * to the struct since the kernel thread not created yet
1533          * no need to spinlock this init of tcpStatus or srv_count
1534          */
1535         tcp_ses->tcpStatus = CifsNew;
1536         ++tcp_ses->srv_count;
1537
1538         if (addr.ss_family == AF_INET6) {
1539                 cFYI(1, ("attempting ipv6 connect"));
1540                 /* BB should we allow ipv6 on port 139? */
1541                 /* other OS never observed in Wild doing 139 with v6 */
1542                 sin_server6->sin6_port = htons(volume_info->port);
1543                 memcpy(&tcp_ses->addr.sockAddr6, sin_server6,
1544                         sizeof(struct sockaddr_in6));
1545                 rc = ipv6_connect(tcp_ses);
1546         } else {
1547                 sin_server->sin_port = htons(volume_info->port);
1548                 memcpy(&tcp_ses->addr.sockAddr, sin_server,
1549                         sizeof(struct sockaddr_in));
1550                 rc = ipv4_connect(tcp_ses);
1551         }
1552         if (rc < 0) {
1553                 cERROR(1, ("Error connecting to socket. Aborting operation"));
1554                 goto out_err;
1555         }
1556
1557         /*
1558          * since we're in a cifs function already, we know that
1559          * this will succeed. No need for try_module_get().
1560          */
1561         __module_get(THIS_MODULE);
1562         tcp_ses->tsk = kthread_run((void *)(void *)cifs_demultiplex_thread,
1563                                   tcp_ses, "cifsd");
1564         if (IS_ERR(tcp_ses->tsk)) {
1565                 rc = PTR_ERR(tcp_ses->tsk);
1566                 cERROR(1, ("error %d create cifsd thread", rc));
1567                 module_put(THIS_MODULE);
1568                 goto out_err;
1569         }
1570
1571         /* thread spawned, put it on the list */
1572         write_lock(&cifs_tcp_ses_lock);
1573         list_add(&tcp_ses->tcp_ses_list, &cifs_tcp_ses_list);
1574         write_unlock(&cifs_tcp_ses_lock);
1575
1576         return tcp_ses;
1577
1578 out_err:
1579         if (tcp_ses) {
1580                 kfree(tcp_ses->hostname);
1581                 if (tcp_ses->ssocket)
1582                         sock_release(tcp_ses->ssocket);
1583                 kfree(tcp_ses);
1584         }
1585         return ERR_PTR(rc);
1586 }
1587
1588 static struct cifsSesInfo *
1589 cifs_find_smb_ses(struct TCP_Server_Info *server, char *username)
1590 {
1591         struct list_head *tmp;
1592         struct cifsSesInfo *ses;
1593
1594         write_lock(&cifs_tcp_ses_lock);
1595         list_for_each(tmp, &server->smb_ses_list) {
1596                 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
1597                 if (strncmp(ses->userName, username, MAX_USERNAME_SIZE))
1598                         continue;
1599
1600                 ++ses->ses_count;
1601                 write_unlock(&cifs_tcp_ses_lock);
1602                 return ses;
1603         }
1604         write_unlock(&cifs_tcp_ses_lock);
1605         return NULL;
1606 }
1607
1608 static void
1609 cifs_put_smb_ses(struct cifsSesInfo *ses)
1610 {
1611         int xid;
1612         struct TCP_Server_Info *server = ses->server;
1613
1614         write_lock(&cifs_tcp_ses_lock);
1615         if (--ses->ses_count > 0) {
1616                 write_unlock(&cifs_tcp_ses_lock);
1617                 return;
1618         }
1619
1620         list_del_init(&ses->smb_ses_list);
1621         write_unlock(&cifs_tcp_ses_lock);
1622
1623         if (ses->status == CifsGood) {
1624                 xid = GetXid();
1625                 CIFSSMBLogoff(xid, ses);
1626                 _FreeXid(xid);
1627         }
1628         sesInfoFree(ses);
1629         cifs_put_tcp_session(server);
1630 }
1631
1632 static struct cifsTconInfo *
1633 cifs_find_tcon(struct cifsSesInfo *ses, const char *unc)
1634 {
1635         struct list_head *tmp;
1636         struct cifsTconInfo *tcon;
1637
1638         write_lock(&cifs_tcp_ses_lock);
1639         list_for_each(tmp, &ses->tcon_list) {
1640                 tcon = list_entry(tmp, struct cifsTconInfo, tcon_list);
1641                 if (tcon->tidStatus == CifsExiting)
1642                         continue;
1643                 if (strncmp(tcon->treeName, unc, MAX_TREE_SIZE))
1644                         continue;
1645
1646                 ++tcon->tc_count;
1647                 write_unlock(&cifs_tcp_ses_lock);
1648                 return tcon;
1649         }
1650         write_unlock(&cifs_tcp_ses_lock);
1651         return NULL;
1652 }
1653
1654 static void
1655 cifs_put_tcon(struct cifsTconInfo *tcon)
1656 {
1657         int xid;
1658         struct cifsSesInfo *ses = tcon->ses;
1659
1660         write_lock(&cifs_tcp_ses_lock);
1661         if (--tcon->tc_count > 0) {
1662                 write_unlock(&cifs_tcp_ses_lock);
1663                 return;
1664         }
1665
1666         list_del_init(&tcon->tcon_list);
1667         write_unlock(&cifs_tcp_ses_lock);
1668
1669         xid = GetXid();
1670         CIFSSMBTDis(xid, tcon);
1671         _FreeXid(xid);
1672
1673         tconInfoFree(tcon);
1674         cifs_put_smb_ses(ses);
1675 }
1676
1677 int
1678 get_dfs_path(int xid, struct cifsSesInfo *pSesInfo, const char *old_path,
1679              const struct nls_table *nls_codepage, unsigned int *pnum_referrals,
1680              struct dfs_info3_param **preferrals, int remap)
1681 {
1682         char *temp_unc;
1683         int rc = 0;
1684
1685         *pnum_referrals = 0;
1686         *preferrals = NULL;
1687
1688         if (pSesInfo->ipc_tid == 0) {
1689                 temp_unc = kmalloc(2 /* for slashes */ +
1690                         strnlen(pSesInfo->serverName,
1691                                 SERVER_NAME_LEN_WITH_NULL * 2)
1692                                  + 1 + 4 /* slash IPC$ */  + 2,
1693                                 GFP_KERNEL);
1694                 if (temp_unc == NULL)
1695                         return -ENOMEM;
1696                 temp_unc[0] = '\\';
1697                 temp_unc[1] = '\\';
1698                 strcpy(temp_unc + 2, pSesInfo->serverName);
1699                 strcpy(temp_unc + 2 + strlen(pSesInfo->serverName), "\\IPC$");
1700                 rc = CIFSTCon(xid, pSesInfo, temp_unc, NULL, nls_codepage);
1701                 cFYI(1,
1702                      ("CIFS Tcon rc = %d ipc_tid = %d", rc, pSesInfo->ipc_tid));
1703                 kfree(temp_unc);
1704         }
1705         if (rc == 0)
1706                 rc = CIFSGetDFSRefer(xid, pSesInfo, old_path, preferrals,
1707                                      pnum_referrals, nls_codepage, remap);
1708         /* BB map targetUNCs to dfs_info3 structures, here or
1709                 in CIFSGetDFSRefer BB */
1710
1711         return rc;
1712 }
1713
1714 #ifdef CONFIG_DEBUG_LOCK_ALLOC
1715 static struct lock_class_key cifs_key[2];
1716 static struct lock_class_key cifs_slock_key[2];
1717
1718 static inline void
1719 cifs_reclassify_socket4(struct socket *sock)
1720 {
1721         struct sock *sk = sock->sk;
1722         BUG_ON(sock_owned_by_user(sk));
1723         sock_lock_init_class_and_name(sk, "slock-AF_INET-CIFS",
1724                 &cifs_slock_key[0], "sk_lock-AF_INET-CIFS", &cifs_key[0]);
1725 }
1726
1727 static inline void
1728 cifs_reclassify_socket6(struct socket *sock)
1729 {
1730         struct sock *sk = sock->sk;
1731         BUG_ON(sock_owned_by_user(sk));
1732         sock_lock_init_class_and_name(sk, "slock-AF_INET6-CIFS",
1733                 &cifs_slock_key[1], "sk_lock-AF_INET6-CIFS", &cifs_key[1]);
1734 }
1735 #else
1736 static inline void
1737 cifs_reclassify_socket4(struct socket *sock)
1738 {
1739 }
1740
1741 static inline void
1742 cifs_reclassify_socket6(struct socket *sock)
1743 {
1744 }
1745 #endif
1746
1747 /* See RFC1001 section 14 on representation of Netbios names */
1748 static void rfc1002mangle(char *target, char *source, unsigned int length)
1749 {
1750         unsigned int i, j;
1751
1752         for (i = 0, j = 0; i < (length); i++) {
1753                 /* mask a nibble at a time and encode */
1754                 target[j] = 'A' + (0x0F & (source[i] >> 4));
1755                 target[j+1] = 'A' + (0x0F & source[i]);
1756                 j += 2;
1757         }
1758
1759 }
1760
1761
1762 static int
1763 ipv4_connect(struct TCP_Server_Info *server)
1764 {
1765         int rc = 0;
1766         bool connected = false;
1767         __be16 orig_port = 0;
1768         struct socket *socket = server->ssocket;
1769
1770         if (socket == NULL) {
1771                 rc = sock_create_kern(PF_INET, SOCK_STREAM,
1772                                       IPPROTO_TCP, &socket);
1773                 if (rc < 0) {
1774                         cERROR(1, ("Error %d creating socket", rc));
1775                         return rc;
1776                 }
1777
1778                 /* BB other socket options to set KEEPALIVE, NODELAY? */
1779                 cFYI(1, ("Socket created"));
1780                 server->ssocket = socket;
1781                 socket->sk->sk_allocation = GFP_NOFS;
1782                 cifs_reclassify_socket4(socket);
1783         }
1784
1785         /* user overrode default port */
1786         if (server->addr.sockAddr.sin_port) {
1787                 rc = socket->ops->connect(socket, (struct sockaddr *)
1788                                           &server->addr.sockAddr,
1789                                           sizeof(struct sockaddr_in), 0);
1790                 if (rc >= 0)
1791                         connected = true;
1792         }
1793
1794         if (!connected) {
1795                 /* save original port so we can retry user specified port
1796                         later if fall back ports fail this time  */
1797                 orig_port = server->addr.sockAddr.sin_port;
1798
1799                 /* do not retry on the same port we just failed on */
1800                 if (server->addr.sockAddr.sin_port != htons(CIFS_PORT)) {
1801                         server->addr.sockAddr.sin_port = htons(CIFS_PORT);
1802                         rc = socket->ops->connect(socket,
1803                                                 (struct sockaddr *)
1804                                                 &server->addr.sockAddr,
1805                                                 sizeof(struct sockaddr_in), 0);
1806                         if (rc >= 0)
1807                                 connected = true;
1808                 }
1809         }
1810         if (!connected) {
1811                 server->addr.sockAddr.sin_port = htons(RFC1001_PORT);
1812                 rc = socket->ops->connect(socket, (struct sockaddr *)
1813                                               &server->addr.sockAddr,
1814                                               sizeof(struct sockaddr_in), 0);
1815                 if (rc >= 0)
1816                         connected = true;
1817         }
1818
1819         /* give up here - unless we want to retry on different
1820                 protocol families some day */
1821         if (!connected) {
1822                 if (orig_port)
1823                         server->addr.sockAddr.sin_port = orig_port;
1824                 cFYI(1, ("Error %d connecting to server via ipv4", rc));
1825                 sock_release(socket);
1826                 server->ssocket = NULL;
1827                 return rc;
1828         }
1829
1830
1831         /*
1832          * Eventually check for other socket options to change from
1833          *  the default. sock_setsockopt not used because it expects
1834          *  user space buffer
1835          */
1836         socket->sk->sk_rcvtimeo = 7 * HZ;
1837         socket->sk->sk_sndtimeo = 5 * HZ;
1838
1839         /* make the bufsizes depend on wsize/rsize and max requests */
1840         if (server->noautotune) {
1841                 if (socket->sk->sk_sndbuf < (200 * 1024))
1842                         socket->sk->sk_sndbuf = 200 * 1024;
1843                 if (socket->sk->sk_rcvbuf < (140 * 1024))
1844                         socket->sk->sk_rcvbuf = 140 * 1024;
1845         }
1846
1847          cFYI(1, ("sndbuf %d rcvbuf %d rcvtimeo 0x%lx",
1848                  socket->sk->sk_sndbuf,
1849                  socket->sk->sk_rcvbuf, socket->sk->sk_rcvtimeo));
1850
1851         /* send RFC1001 sessinit */
1852         if (server->addr.sockAddr.sin_port == htons(RFC1001_PORT)) {
1853                 /* some servers require RFC1001 sessinit before sending
1854                 negprot - BB check reconnection in case where second
1855                 sessinit is sent but no second negprot */
1856                 struct rfc1002_session_packet *ses_init_buf;
1857                 struct smb_hdr *smb_buf;
1858                 ses_init_buf = kzalloc(sizeof(struct rfc1002_session_packet),
1859                                        GFP_KERNEL);
1860                 if (ses_init_buf) {
1861                         ses_init_buf->trailer.session_req.called_len = 32;
1862                         if (server->server_RFC1001_name &&
1863                             server->server_RFC1001_name[0] != 0)
1864                                 rfc1002mangle(ses_init_buf->trailer.
1865                                                 session_req.called_name,
1866                                               server->server_RFC1001_name,
1867                                               RFC1001_NAME_LEN_WITH_NULL);
1868                         else
1869                                 rfc1002mangle(ses_init_buf->trailer.
1870                                                 session_req.called_name,
1871                                               DEFAULT_CIFS_CALLED_NAME,
1872                                               RFC1001_NAME_LEN_WITH_NULL);
1873
1874                         ses_init_buf->trailer.session_req.calling_len = 32;
1875
1876                         /* calling name ends in null (byte 16) from old smb
1877                         convention. */
1878                         if (server->workstation_RFC1001_name &&
1879                             server->workstation_RFC1001_name[0] != 0)
1880                                 rfc1002mangle(ses_init_buf->trailer.
1881                                                 session_req.calling_name,
1882                                               server->workstation_RFC1001_name,
1883                                               RFC1001_NAME_LEN_WITH_NULL);
1884                         else
1885                                 rfc1002mangle(ses_init_buf->trailer.
1886                                                 session_req.calling_name,
1887                                               "LINUX_CIFS_CLNT",
1888                                               RFC1001_NAME_LEN_WITH_NULL);
1889
1890                         ses_init_buf->trailer.session_req.scope1 = 0;
1891                         ses_init_buf->trailer.session_req.scope2 = 0;
1892                         smb_buf = (struct smb_hdr *)ses_init_buf;
1893                         /* sizeof RFC1002_SESSION_REQUEST with no scope */
1894                         smb_buf->smb_buf_length = 0x81000044;
1895                         rc = smb_send(server, smb_buf, 0x44);
1896                         kfree(ses_init_buf);
1897                         msleep(1); /* RFC1001 layer in at least one server
1898                                       requires very short break before negprot
1899                                       presumably because not expecting negprot
1900                                       to follow so fast.  This is a simple
1901                                       solution that works without
1902                                       complicating the code and causes no
1903                                       significant slowing down on mount
1904                                       for everyone else */
1905                 }
1906                 /* else the negprot may still work without this
1907                 even though malloc failed */
1908
1909         }
1910
1911         return rc;
1912 }
1913
1914 static int
1915 ipv6_connect(struct TCP_Server_Info *server)
1916 {
1917         int rc = 0;
1918         bool connected = false;
1919         __be16 orig_port = 0;
1920         struct socket *socket = server->ssocket;
1921
1922         if (socket == NULL) {
1923                 rc = sock_create_kern(PF_INET6, SOCK_STREAM,
1924                                       IPPROTO_TCP, &socket);
1925                 if (rc < 0) {
1926                         cERROR(1, ("Error %d creating ipv6 socket", rc));
1927                         socket = NULL;
1928                         return rc;
1929                 }
1930
1931                 /* BB other socket options to set KEEPALIVE, NODELAY? */
1932                 cFYI(1, ("ipv6 Socket created"));
1933                 server->ssocket = socket;
1934                 socket->sk->sk_allocation = GFP_NOFS;
1935                 cifs_reclassify_socket6(socket);
1936         }
1937
1938         /* user overrode default port */
1939         if (server->addr.sockAddr6.sin6_port) {
1940                 rc = socket->ops->connect(socket,
1941                                 (struct sockaddr *) &server->addr.sockAddr6,
1942                                 sizeof(struct sockaddr_in6), 0);
1943                 if (rc >= 0)
1944                         connected = true;
1945         }
1946
1947         if (!connected) {
1948                 /* save original port so we can retry user specified port
1949                         later if fall back ports fail this time  */
1950
1951                 orig_port = server->addr.sockAddr6.sin6_port;
1952                 /* do not retry on the same port we just failed on */
1953                 if (server->addr.sockAddr6.sin6_port != htons(CIFS_PORT)) {
1954                         server->addr.sockAddr6.sin6_port = htons(CIFS_PORT);
1955                         rc = socket->ops->connect(socket, (struct sockaddr *)
1956                                         &server->addr.sockAddr6,
1957                                         sizeof(struct sockaddr_in6), 0);
1958                         if (rc >= 0)
1959                                 connected = true;
1960                 }
1961         }
1962         if (!connected) {
1963                 server->addr.sockAddr6.sin6_port = htons(RFC1001_PORT);
1964                 rc = socket->ops->connect(socket, (struct sockaddr *)
1965                                 &server->addr.sockAddr6,
1966                                 sizeof(struct sockaddr_in6), 0);
1967                 if (rc >= 0)
1968                         connected = true;
1969         }
1970
1971         /* give up here - unless we want to retry on different
1972                 protocol families some day */
1973         if (!connected) {
1974                 if (orig_port)
1975                         server->addr.sockAddr6.sin6_port = orig_port;
1976                 cFYI(1, ("Error %d connecting to server via ipv6", rc));
1977                 sock_release(socket);
1978                 server->ssocket = NULL;
1979                 return rc;
1980         }
1981
1982         /*
1983          * Eventually check for other socket options to change from
1984          * the default. sock_setsockopt not used because it expects
1985          * user space buffer
1986          */
1987         socket->sk->sk_rcvtimeo = 7 * HZ;
1988         socket->sk->sk_sndtimeo = 5 * HZ;
1989         server->ssocket = socket;
1990
1991         return rc;
1992 }
1993
1994 void reset_cifs_unix_caps(int xid, struct cifsTconInfo *tcon,
1995                           struct super_block *sb, struct smb_vol *vol_info)
1996 {
1997         /* if we are reconnecting then should we check to see if
1998          * any requested capabilities changed locally e.g. via
1999          * remount but we can not do much about it here
2000          * if they have (even if we could detect it by the following)
2001          * Perhaps we could add a backpointer to array of sb from tcon
2002          * or if we change to make all sb to same share the same
2003          * sb as NFS - then we only have one backpointer to sb.
2004          * What if we wanted to mount the server share twice once with
2005          * and once without posixacls or posix paths? */
2006         __u64 saved_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2007
2008         if (vol_info && vol_info->no_linux_ext) {
2009                 tcon->fsUnixInfo.Capability = 0;
2010                 tcon->unix_ext = 0; /* Unix Extensions disabled */
2011                 cFYI(1, ("Linux protocol extensions disabled"));
2012                 return;
2013         } else if (vol_info)
2014                 tcon->unix_ext = 1; /* Unix Extensions supported */
2015
2016         if (tcon->unix_ext == 0) {
2017                 cFYI(1, ("Unix extensions disabled so not set on reconnect"));
2018                 return;
2019         }
2020
2021         if (!CIFSSMBQFSUnixInfo(xid, tcon)) {
2022                 __u64 cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
2023
2024                 /* check for reconnect case in which we do not
2025                    want to change the mount behavior if we can avoid it */
2026                 if (vol_info == NULL) {
2027                         /* turn off POSIX ACL and PATHNAMES if not set
2028                            originally at mount time */
2029                         if ((saved_cap & CIFS_UNIX_POSIX_ACL_CAP) == 0)
2030                                 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2031                         if ((saved_cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2032                                 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2033                                         cERROR(1, ("POSIXPATH support change"));
2034                                 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2035                         } else if ((cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2036                                 cERROR(1, ("possible reconnect error"));
2037                                 cERROR(1,
2038                                         ("server disabled POSIX path support"));
2039                         }
2040                 }
2041
2042                 cap &= CIFS_UNIX_CAP_MASK;
2043                 if (vol_info && vol_info->no_psx_acl)
2044                         cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2045                 else if (CIFS_UNIX_POSIX_ACL_CAP & cap) {
2046                         cFYI(1, ("negotiated posix acl support"));
2047                         if (sb)
2048                                 sb->s_flags |= MS_POSIXACL;
2049                 }
2050
2051                 if (vol_info && vol_info->posix_paths == 0)
2052                         cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2053                 else if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) {
2054                         cFYI(1, ("negotiate posix pathnames"));
2055                         if (sb)
2056                                 CIFS_SB(sb)->mnt_cifs_flags |=
2057                                         CIFS_MOUNT_POSIX_PATHS;
2058                 }
2059
2060                 /* We might be setting the path sep back to a different
2061                 form if we are reconnecting and the server switched its
2062                 posix path capability for this share */
2063                 if (sb && (CIFS_SB(sb)->prepathlen > 0))
2064                         CIFS_SB(sb)->prepath[0] = CIFS_DIR_SEP(CIFS_SB(sb));
2065
2066                 if (sb && (CIFS_SB(sb)->rsize > 127 * 1024)) {
2067                         if ((cap & CIFS_UNIX_LARGE_READ_CAP) == 0) {
2068                                 CIFS_SB(sb)->rsize = 127 * 1024;
2069                                 cFYI(DBG2,
2070                                         ("larger reads not supported by srv"));
2071                         }
2072                 }
2073
2074
2075                 cFYI(1, ("Negotiate caps 0x%x", (int)cap));
2076 #ifdef CONFIG_CIFS_DEBUG2
2077                 if (cap & CIFS_UNIX_FCNTL_CAP)
2078                         cFYI(1, ("FCNTL cap"));
2079                 if (cap & CIFS_UNIX_EXTATTR_CAP)
2080                         cFYI(1, ("EXTATTR cap"));
2081                 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2082                         cFYI(1, ("POSIX path cap"));
2083                 if (cap & CIFS_UNIX_XATTR_CAP)
2084                         cFYI(1, ("XATTR cap"));
2085                 if (cap & CIFS_UNIX_POSIX_ACL_CAP)
2086                         cFYI(1, ("POSIX ACL cap"));
2087                 if (cap & CIFS_UNIX_LARGE_READ_CAP)
2088                         cFYI(1, ("very large read cap"));
2089                 if (cap & CIFS_UNIX_LARGE_WRITE_CAP)
2090                         cFYI(1, ("very large write cap"));
2091 #endif /* CIFS_DEBUG2 */
2092                 if (CIFSSMBSetFSUnixInfo(xid, tcon, cap)) {
2093                         if (vol_info == NULL) {
2094                                 cFYI(1, ("resetting capabilities failed"));
2095                         } else
2096                                 cERROR(1, ("Negotiating Unix capabilities "
2097                                            "with the server failed.  Consider "
2098                                            "mounting with the Unix Extensions\n"
2099                                            "disabled, if problems are found, "
2100                                            "by specifying the nounix mount "
2101                                            "option."));
2102
2103                 }
2104         }
2105 }
2106
2107 static void
2108 convert_delimiter(char *path, char delim)
2109 {
2110         int i;
2111         char old_delim;
2112
2113         if (path == NULL)
2114                 return;
2115
2116         if (delim == '/')
2117                 old_delim = '\\';
2118         else
2119                 old_delim = '/';
2120
2121         for (i = 0; path[i] != '\0'; i++) {
2122                 if (path[i] == old_delim)
2123                         path[i] = delim;
2124         }
2125 }
2126
2127 static void setup_cifs_sb(struct smb_vol *pvolume_info,
2128                           struct cifs_sb_info *cifs_sb)
2129 {
2130         if (pvolume_info->rsize > CIFSMaxBufSize) {
2131                 cERROR(1, ("rsize %d too large, using MaxBufSize",
2132                         pvolume_info->rsize));
2133                 cifs_sb->rsize = CIFSMaxBufSize;
2134         } else if ((pvolume_info->rsize) &&
2135                         (pvolume_info->rsize <= CIFSMaxBufSize))
2136                 cifs_sb->rsize = pvolume_info->rsize;
2137         else /* default */
2138                 cifs_sb->rsize = CIFSMaxBufSize;
2139
2140         if (pvolume_info->wsize > PAGEVEC_SIZE * PAGE_CACHE_SIZE) {
2141                 cERROR(1, ("wsize %d too large, using 4096 instead",
2142                           pvolume_info->wsize));
2143                 cifs_sb->wsize = 4096;
2144         } else if (pvolume_info->wsize)
2145                 cifs_sb->wsize = pvolume_info->wsize;
2146         else
2147                 cifs_sb->wsize = min_t(const int,
2148                                         PAGEVEC_SIZE * PAGE_CACHE_SIZE,
2149                                         127*1024);
2150                 /* old default of CIFSMaxBufSize was too small now
2151                    that SMB Write2 can send multiple pages in kvec.
2152                    RFC1001 does not describe what happens when frame
2153                    bigger than 128K is sent so use that as max in
2154                    conjunction with 52K kvec constraint on arch with 4K
2155                    page size  */
2156
2157         if (cifs_sb->rsize < 2048) {
2158                 cifs_sb->rsize = 2048;
2159                 /* Windows ME may prefer this */
2160                 cFYI(1, ("readsize set to minimum: 2048"));
2161         }
2162         /* calculate prepath */
2163         cifs_sb->prepath = pvolume_info->prepath;
2164         if (cifs_sb->prepath) {
2165                 cifs_sb->prepathlen = strlen(cifs_sb->prepath);
2166                 /* we can not convert the / to \ in the path
2167                 separators in the prefixpath yet because we do not
2168                 know (until reset_cifs_unix_caps is called later)
2169                 whether POSIX PATH CAP is available. We normalize
2170                 the / to \ after reset_cifs_unix_caps is called */
2171                 pvolume_info->prepath = NULL;
2172         } else
2173                 cifs_sb->prepathlen = 0;
2174         cifs_sb->mnt_uid = pvolume_info->linux_uid;
2175         cifs_sb->mnt_gid = pvolume_info->linux_gid;
2176         cifs_sb->mnt_file_mode = pvolume_info->file_mode;
2177         cifs_sb->mnt_dir_mode = pvolume_info->dir_mode;
2178         cFYI(1, ("file mode: 0x%x  dir mode: 0x%x",
2179                 cifs_sb->mnt_file_mode, cifs_sb->mnt_dir_mode));
2180
2181         if (pvolume_info->noperm)
2182                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_PERM;
2183         if (pvolume_info->setuids)
2184                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SET_UID;
2185         if (pvolume_info->server_ino)
2186                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SERVER_INUM;
2187         if (pvolume_info->remap)
2188                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MAP_SPECIAL_CHR;
2189         if (pvolume_info->no_xattr)
2190                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_XATTR;
2191         if (pvolume_info->sfu_emul)
2192                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_UNX_EMUL;
2193         if (pvolume_info->nobrl)
2194                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_BRL;
2195         if (pvolume_info->nostrictsync)
2196                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOSSYNC;
2197         if (pvolume_info->mand_lock)
2198                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOPOSIXBRL;
2199         if (pvolume_info->cifs_acl)
2200                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_ACL;
2201         if (pvolume_info->override_uid)
2202                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_UID;
2203         if (pvolume_info->override_gid)
2204                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_GID;
2205         if (pvolume_info->dynperm)
2206                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DYNPERM;
2207         if (pvolume_info->direct_io) {
2208                 cFYI(1, ("mounting share using direct i/o"));
2209                 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DIRECT_IO;
2210         }
2211
2212         if ((pvolume_info->cifs_acl) && (pvolume_info->dynperm))
2213                 cERROR(1, ("mount option dynperm ignored if cifsacl "
2214                            "mount option supported"));
2215 }
2216
2217 static int
2218 is_path_accessible(int xid, struct cifsTconInfo *tcon,
2219                    struct cifs_sb_info *cifs_sb, const char *full_path)
2220 {
2221         int rc;
2222         __u64 inode_num;
2223         FILE_ALL_INFO *pfile_info;
2224
2225         rc = CIFSGetSrvInodeNumber(xid, tcon, full_path, &inode_num,
2226                                    cifs_sb->local_nls,
2227                                    cifs_sb->mnt_cifs_flags &
2228                                                 CIFS_MOUNT_MAP_SPECIAL_CHR);
2229         if (rc != -EOPNOTSUPP)
2230                 return rc;
2231
2232         pfile_info = kmalloc(sizeof(FILE_ALL_INFO), GFP_KERNEL);
2233         if (pfile_info == NULL)
2234                 return -ENOMEM;
2235
2236         rc = CIFSSMBQPathInfo(xid, tcon, full_path, pfile_info,
2237                               0 /* not legacy */, cifs_sb->local_nls,
2238                               cifs_sb->mnt_cifs_flags &
2239                                 CIFS_MOUNT_MAP_SPECIAL_CHR);
2240         kfree(pfile_info);
2241         return rc;
2242 }
2243
2244 static void
2245 cleanup_volume_info(struct smb_vol **pvolume_info)
2246 {
2247         struct smb_vol *volume_info;
2248
2249         if (!pvolume_info && !*pvolume_info)
2250                 return;
2251
2252         volume_info = *pvolume_info;
2253         kzfree(volume_info->password);
2254         kfree(volume_info->UNC);
2255         kfree(volume_info->prepath);
2256         kfree(volume_info);
2257         *pvolume_info = NULL;
2258         return;
2259 }
2260
2261 #ifdef CONFIG_CIFS_DFS_UPCALL
2262 /* build_path_to_root returns full path to root when
2263  * we do not have an exiting connection (tcon) */
2264 static char *
2265 build_unc_path_to_root(const struct smb_vol *volume_info,
2266                 const struct cifs_sb_info *cifs_sb)
2267 {
2268         char *full_path;
2269
2270         int unc_len = strnlen(volume_info->UNC, MAX_TREE_SIZE + 1);
2271         full_path = kmalloc(unc_len + cifs_sb->prepathlen + 1, GFP_KERNEL);
2272         if (full_path == NULL)
2273                 return ERR_PTR(-ENOMEM);
2274
2275         strncpy(full_path, volume_info->UNC, unc_len);
2276         if (cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) {
2277                 int i;
2278                 for (i = 0; i < unc_len; i++) {
2279                         if (full_path[i] == '\\')
2280                                 full_path[i] = '/';
2281                 }
2282         }
2283
2284         if (cifs_sb->prepathlen)
2285                 strncpy(full_path + unc_len, cifs_sb->prepath,
2286                                 cifs_sb->prepathlen);
2287
2288         full_path[unc_len + cifs_sb->prepathlen] = 0; /* add trailing null */
2289         return full_path;
2290 }
2291 #endif
2292
2293 int
2294 cifs_mount(struct super_block *sb, struct cifs_sb_info *cifs_sb,
2295                 char *mount_data_global, const char *devname)
2296 {
2297         int rc = 0;
2298         int xid;
2299         struct smb_vol *volume_info;
2300         struct cifsSesInfo *pSesInfo = NULL;
2301         struct cifsTconInfo *tcon = NULL;
2302         struct TCP_Server_Info *srvTcp = NULL;
2303         char   *full_path;
2304         char *mount_data = mount_data_global;
2305 #ifdef CONFIG_CIFS_DFS_UPCALL
2306         struct dfs_info3_param *referrals = NULL;
2307         unsigned int num_referrals = 0;
2308         int referral_walks_count = 0;
2309 try_mount_again:
2310 #endif
2311         full_path = NULL;
2312
2313         xid = GetXid();
2314
2315         volume_info = kzalloc(sizeof(struct smb_vol), GFP_KERNEL);
2316         if (!volume_info) {
2317                 rc = -ENOMEM;
2318                 goto out;
2319         }
2320
2321         if (cifs_parse_mount_options(mount_data, devname, volume_info)) {
2322                 rc = -EINVAL;
2323                 goto out;
2324         }
2325
2326         if (volume_info->nullauth) {
2327                 cFYI(1, ("null user"));
2328                 volume_info->username = "";
2329         } else if (volume_info->username) {
2330                 /* BB fixme parse for domain name here */
2331                 cFYI(1, ("Username: %s", volume_info->username));
2332         } else {
2333                 cifserror("No username specified");
2334         /* In userspace mount helper we can get user name from alternate
2335            locations such as env variables and files on disk */
2336                 rc = -EINVAL;
2337                 goto out;
2338         }
2339
2340
2341         /* this is needed for ASCII cp to Unicode converts */
2342         if (volume_info->iocharset == NULL) {
2343                 cifs_sb->local_nls = load_nls_default();
2344         /* load_nls_default can not return null */
2345         } else {
2346                 cifs_sb->local_nls = load_nls(volume_info->iocharset);
2347                 if (cifs_sb->local_nls == NULL) {
2348                         cERROR(1, ("CIFS mount error: iocharset %s not found",
2349                                  volume_info->iocharset));
2350                         rc = -ELIBACC;
2351                         goto out;
2352                 }
2353         }
2354
2355         /* get a reference to a tcp session */
2356         srvTcp = cifs_get_tcp_session(volume_info);
2357         if (IS_ERR(srvTcp)) {
2358                 rc = PTR_ERR(srvTcp);
2359                 goto out;
2360         }
2361
2362         pSesInfo = cifs_find_smb_ses(srvTcp, volume_info->username);
2363         if (pSesInfo) {
2364                 cFYI(1, ("Existing smb sess found (status=%d)",
2365                         pSesInfo->status));
2366                 /*
2367                  * The existing SMB session already has a reference to srvTcp,
2368                  * so we can put back the extra one we got before
2369                  */
2370                 cifs_put_tcp_session(srvTcp);
2371
2372                 down(&pSesInfo->sesSem);
2373                 if (pSesInfo->need_reconnect) {
2374                         cFYI(1, ("Session needs reconnect"));
2375                         rc = cifs_setup_session(xid, pSesInfo,
2376                                                 cifs_sb->local_nls);
2377                 }
2378                 up(&pSesInfo->sesSem);
2379         } else if (!rc) {
2380                 cFYI(1, ("Existing smb sess not found"));
2381                 pSesInfo = sesInfoAlloc();
2382                 if (pSesInfo == NULL) {
2383                         rc = -ENOMEM;
2384                         goto mount_fail_check;
2385                 }
2386
2387                 /* new SMB session uses our srvTcp ref */
2388                 pSesInfo->server = srvTcp;
2389                 if (srvTcp->addr.sockAddr6.sin6_family == AF_INET6)
2390                         sprintf(pSesInfo->serverName, "%pI6",
2391                                 &srvTcp->addr.sockAddr6.sin6_addr);
2392                 else
2393                         sprintf(pSesInfo->serverName, "%pI4",
2394                                 &srvTcp->addr.sockAddr.sin_addr.s_addr);
2395
2396                 write_lock(&cifs_tcp_ses_lock);
2397                 list_add(&pSesInfo->smb_ses_list, &srvTcp->smb_ses_list);
2398                 write_unlock(&cifs_tcp_ses_lock);
2399
2400                 /* volume_info->password freed at unmount */
2401                 if (volume_info->password) {
2402                         pSesInfo->password = kstrdup(volume_info->password,
2403                                                      GFP_KERNEL);
2404                         if (!pSesInfo->password) {
2405                                 rc = -ENOMEM;
2406                                 goto mount_fail_check;
2407                         }
2408                 }
2409                 if (volume_info->username)
2410                         strncpy(pSesInfo->userName, volume_info->username,
2411                                 MAX_USERNAME_SIZE);
2412                 if (volume_info->domainname) {
2413                         int len = strlen(volume_info->domainname);
2414                         pSesInfo->domainName = kmalloc(len + 1, GFP_KERNEL);
2415                         if (pSesInfo->domainName)
2416                                 strcpy(pSesInfo->domainName,
2417                                         volume_info->domainname);
2418                 }
2419                 pSesInfo->linux_uid = volume_info->linux_uid;
2420                 pSesInfo->overrideSecFlg = volume_info->secFlg;
2421                 down(&pSesInfo->sesSem);
2422
2423                 /* BB FIXME need to pass vol->secFlgs BB */
2424                 rc = cifs_setup_session(xid, pSesInfo,
2425                                         cifs_sb->local_nls);
2426                 up(&pSesInfo->sesSem);
2427         }
2428
2429         /* search for existing tcon to this server share */
2430         if (!rc) {
2431                 setup_cifs_sb(volume_info, cifs_sb);
2432
2433                 tcon = cifs_find_tcon(pSesInfo, volume_info->UNC);
2434                 if (tcon) {
2435                         cFYI(1, ("Found match on UNC path"));
2436                         /* existing tcon already has a reference */
2437                         cifs_put_smb_ses(pSesInfo);
2438                         if (tcon->seal != volume_info->seal)
2439                                 cERROR(1, ("transport encryption setting "
2440                                            "conflicts with existing tid"));
2441                 } else {
2442                         tcon = tconInfoAlloc();
2443                         if (tcon == NULL) {
2444                                 rc = -ENOMEM;
2445                                 goto mount_fail_check;
2446                         }
2447
2448                         tcon->ses = pSesInfo;
2449                         if (volume_info->password) {
2450                                 tcon->password = kstrdup(volume_info->password,
2451                                                          GFP_KERNEL);
2452                                 if (!tcon->password) {
2453                                         rc = -ENOMEM;
2454                                         goto mount_fail_check;
2455                                 }
2456                         }
2457
2458                         if ((strchr(volume_info->UNC + 3, '\\') == NULL)
2459                             && (strchr(volume_info->UNC + 3, '/') == NULL)) {
2460                                 cERROR(1, ("Missing share name"));
2461                                 rc = -ENODEV;
2462                                 goto mount_fail_check;
2463                         } else {
2464                                 /* BB Do we need to wrap sesSem around
2465                                  * this TCon call and Unix SetFS as
2466                                  * we do on SessSetup and reconnect? */
2467                                 rc = CIFSTCon(xid, pSesInfo, volume_info->UNC,
2468                                               tcon, cifs_sb->local_nls);
2469                                 cFYI(1, ("CIFS Tcon rc = %d", rc));
2470                                 if (volume_info->nodfs) {
2471                                         tcon->Flags &= ~SMB_SHARE_IS_IN_DFS;
2472                                         cFYI(1, ("DFS disabled (%d)",
2473                                                 tcon->Flags));
2474                                 }
2475                         }
2476                         if (rc)
2477                                 goto remote_path_check;
2478                         tcon->seal = volume_info->seal;
2479                         write_lock(&cifs_tcp_ses_lock);
2480                         list_add(&tcon->tcon_list, &pSesInfo->tcon_list);
2481                         write_unlock(&cifs_tcp_ses_lock);
2482                 }
2483
2484                 /* we can have only one retry value for a connection
2485                    to a share so for resources mounted more than once
2486                    to the same server share the last value passed in
2487                    for the retry flag is used */
2488                 tcon->retry = volume_info->retry;
2489                 tcon->nocase = volume_info->nocase;
2490                 tcon->local_lease = volume_info->local_lease;
2491         }
2492         if (pSesInfo) {
2493                 if (pSesInfo->capabilities & CAP_LARGE_FILES)
2494                         sb->s_maxbytes = MAX_LFS_FILESIZE;
2495                 else
2496                         sb->s_maxbytes = MAX_NON_LFS;
2497         }
2498
2499         /* BB FIXME fix time_gran to be larger for LANMAN sessions */
2500         sb->s_time_gran = 100;
2501
2502         if (rc)
2503                 goto remote_path_check;
2504
2505         cifs_sb->tcon = tcon;
2506
2507         /* do not care if following two calls succeed - informational */
2508         if (!tcon->ipc) {
2509                 CIFSSMBQFSDeviceInfo(xid, tcon);
2510                 CIFSSMBQFSAttributeInfo(xid, tcon);
2511         }
2512
2513         /* tell server which Unix caps we support */
2514         if (tcon->ses->capabilities & CAP_UNIX)
2515                 /* reset of caps checks mount to see if unix extensions
2516                    disabled for just this mount */
2517                 reset_cifs_unix_caps(xid, tcon, sb, volume_info);
2518         else
2519                 tcon->unix_ext = 0; /* server does not support them */
2520
2521         /* convert forward to back slashes in prepath here if needed */
2522         if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2523                 convert_delimiter(cifs_sb->prepath, CIFS_DIR_SEP(cifs_sb));
2524
2525         if ((tcon->unix_ext == 0) && (cifs_sb->rsize > (1024 * 127))) {
2526                 cifs_sb->rsize = 1024 * 127;
2527                 cFYI(DBG2, ("no very large read support, rsize now 127K"));
2528         }
2529         if (!(tcon->ses->capabilities & CAP_LARGE_WRITE_X))
2530                 cifs_sb->wsize = min(cifs_sb->wsize,
2531                                (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2532         if (!(tcon->ses->capabilities & CAP_LARGE_READ_X))
2533                 cifs_sb->rsize = min(cifs_sb->rsize,
2534                                (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2535
2536 remote_path_check:
2537         /* check if a whole path (including prepath) is not remote */
2538         if (!rc && cifs_sb->prepathlen && tcon) {
2539                 /* build_path_to_root works only when we have a valid tcon */
2540                 full_path = cifs_build_path_to_root(cifs_sb);
2541                 if (full_path == NULL) {
2542                         rc = -ENOMEM;
2543                         goto mount_fail_check;
2544                 }
2545                 rc = is_path_accessible(xid, tcon, cifs_sb, full_path);
2546                 if (rc != -EREMOTE) {
2547                         kfree(full_path);
2548                         goto mount_fail_check;
2549                 }
2550                 kfree(full_path);
2551         }
2552
2553         /* get referral if needed */
2554         if (rc == -EREMOTE) {
2555 #ifdef CONFIG_CIFS_DFS_UPCALL
2556                 if (referral_walks_count > MAX_NESTED_LINKS) {
2557                         /*
2558                          * BB: when we implement proper loop detection,
2559                          *     we will remove this check. But now we need it
2560                          *     to prevent an indefinite loop if 'DFS tree' is
2561                          *     misconfigured (i.e. has loops).
2562                          */
2563                         rc = -ELOOP;
2564                         goto mount_fail_check;
2565                 }
2566                 /* convert forward to back slashes in prepath here if needed */
2567                 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2568                         convert_delimiter(cifs_sb->prepath,
2569                                         CIFS_DIR_SEP(cifs_sb));
2570                 full_path = build_unc_path_to_root(volume_info, cifs_sb);
2571                 if (IS_ERR(full_path)) {
2572                         rc = PTR_ERR(full_path);
2573                         goto mount_fail_check;
2574                 }
2575
2576                 cFYI(1, ("Getting referral for: %s", full_path));
2577                 rc = get_dfs_path(xid, pSesInfo , full_path + 1,
2578                         cifs_sb->local_nls, &num_referrals, &referrals,
2579                         cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
2580                 if (!rc && num_referrals > 0) {
2581                         char *fake_devname = NULL;
2582
2583                         if (mount_data != mount_data_global)
2584                                 kfree(mount_data);
2585
2586                         mount_data = cifs_compose_mount_options(
2587                                         cifs_sb->mountdata, full_path + 1,
2588                                         referrals, &fake_devname);
2589
2590                         free_dfs_info_array(referrals, num_referrals);
2591                         kfree(fake_devname);
2592                         kfree(full_path);
2593
2594                         if (IS_ERR(mount_data)) {
2595                                 rc = PTR_ERR(mount_data);
2596                                 mount_data = NULL;
2597                                 goto mount_fail_check;
2598                         }
2599
2600                         if (tcon)
2601                                 cifs_put_tcon(tcon);
2602                         else if (pSesInfo)
2603                                 cifs_put_smb_ses(pSesInfo);
2604
2605                         cleanup_volume_info(&volume_info);
2606                         referral_walks_count++;
2607                         goto try_mount_again;
2608                 }
2609 #else /* No DFS support, return error on mount */
2610                 rc = -EOPNOTSUPP;
2611 #endif
2612         }
2613
2614 mount_fail_check:
2615         /* on error free sesinfo and tcon struct if needed */
2616         if (rc) {
2617                 if (mount_data != mount_data_global)
2618                         kfree(mount_data);
2619                 /* If find_unc succeeded then rc == 0 so we can not end */
2620                 /* up accidently freeing someone elses tcon struct */
2621                 if (tcon)
2622                         cifs_put_tcon(tcon);
2623                 else if (pSesInfo)
2624                         cifs_put_smb_ses(pSesInfo);
2625                 else
2626                         cifs_put_tcp_session(srvTcp);
2627                 goto out;
2628         }
2629
2630         /* volume_info->password is freed above when existing session found
2631         (in which case it is not needed anymore) but when new sesion is created
2632         the password ptr is put in the new session structure (in which case the
2633         password will be freed at unmount time) */
2634 out:
2635         /* zero out password before freeing */
2636         cleanup_volume_info(&volume_info);
2637         FreeXid(xid);
2638         return rc;
2639 }
2640
2641 int
2642 CIFSTCon(unsigned int xid, struct cifsSesInfo *ses,
2643          const char *tree, struct cifsTconInfo *tcon,
2644          const struct nls_table *nls_codepage)
2645 {
2646         struct smb_hdr *smb_buffer;
2647         struct smb_hdr *smb_buffer_response;
2648         TCONX_REQ *pSMB;
2649         TCONX_RSP *pSMBr;
2650         unsigned char *bcc_ptr;
2651         int rc = 0;
2652         int length, bytes_left;
2653         __u16 count;
2654
2655         if (ses == NULL)
2656                 return -EIO;
2657
2658         smb_buffer = cifs_buf_get();
2659         if (smb_buffer == NULL)
2660                 return -ENOMEM;
2661
2662         smb_buffer_response = smb_buffer;
2663
2664         header_assemble(smb_buffer, SMB_COM_TREE_CONNECT_ANDX,
2665                         NULL /*no tid */ , 4 /*wct */ );
2666
2667         smb_buffer->Mid = GetNextMid(ses->server);
2668         smb_buffer->Uid = ses->Suid;
2669         pSMB = (TCONX_REQ *) smb_buffer;
2670         pSMBr = (TCONX_RSP *) smb_buffer_response;
2671
2672         pSMB->AndXCommand = 0xFF;
2673         pSMB->Flags = cpu_to_le16(TCON_EXTENDED_SECINFO);
2674         bcc_ptr = &pSMB->Password[0];
2675         if ((ses->server->secMode) & SECMODE_USER) {
2676                 pSMB->PasswordLength = cpu_to_le16(1);  /* minimum */
2677                 *bcc_ptr = 0; /* password is null byte */
2678                 bcc_ptr++;              /* skip password */
2679                 /* already aligned so no need to do it below */
2680         } else {
2681                 pSMB->PasswordLength = cpu_to_le16(CIFS_SESS_KEY_SIZE);
2682                 /* BB FIXME add code to fail this if NTLMv2 or Kerberos
2683                    specified as required (when that support is added to
2684                    the vfs in the future) as only NTLM or the much
2685                    weaker LANMAN (which we do not send by default) is accepted
2686                    by Samba (not sure whether other servers allow
2687                    NTLMv2 password here) */
2688 #ifdef CONFIG_CIFS_WEAK_PW_HASH
2689                 if ((extended_security & CIFSSEC_MAY_LANMAN) &&
2690                     (ses->server->secType == LANMAN))
2691                         calc_lanman_hash(tcon->password, ses->server->cryptKey,
2692                                          ses->server->secMode &
2693                                             SECMODE_PW_ENCRYPT ? true : false,
2694                                          bcc_ptr);
2695                 else
2696 #endif /* CIFS_WEAK_PW_HASH */
2697                 SMBNTencrypt(tcon->password, ses->server->cryptKey,
2698                              bcc_ptr);
2699
2700                 bcc_ptr += CIFS_SESS_KEY_SIZE;
2701                 if (ses->capabilities & CAP_UNICODE) {
2702                         /* must align unicode strings */
2703                         *bcc_ptr = 0; /* null byte password */
2704                         bcc_ptr++;
2705                 }
2706         }
2707
2708         if (ses->server->secMode &
2709                         (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
2710                 smb_buffer->Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
2711
2712         if (ses->capabilities & CAP_STATUS32) {
2713                 smb_buffer->Flags2 |= SMBFLG2_ERR_STATUS;
2714         }
2715         if (ses->capabilities & CAP_DFS) {
2716                 smb_buffer->Flags2 |= SMBFLG2_DFS;
2717         }
2718         if (ses->capabilities & CAP_UNICODE) {
2719                 smb_buffer->Flags2 |= SMBFLG2_UNICODE;
2720                 length =
2721                     cifs_strtoUCS((__le16 *) bcc_ptr, tree,
2722                         6 /* max utf8 char length in bytes */ *
2723                         (/* server len*/ + 256 /* share len */), nls_codepage);
2724                 bcc_ptr += 2 * length;  /* convert num 16 bit words to bytes */
2725                 bcc_ptr += 2;   /* skip trailing null */
2726         } else {                /* ASCII */
2727                 strcpy(bcc_ptr, tree);
2728                 bcc_ptr += strlen(tree) + 1;
2729         }
2730         strcpy(bcc_ptr, "?????");
2731         bcc_ptr += strlen("?????");
2732         bcc_ptr += 1;
2733         count = bcc_ptr - &pSMB->Password[0];
2734         pSMB->hdr.smb_buf_length += count;
2735         pSMB->ByteCount = cpu_to_le16(count);
2736
2737         rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response, &length,
2738                          CIFS_STD_OP);
2739
2740         /* above now done in SendReceive */
2741         if ((rc == 0) && (tcon != NULL)) {
2742                 bool is_unicode;
2743
2744                 tcon->tidStatus = CifsGood;
2745                 tcon->need_reconnect = false;
2746                 tcon->tid = smb_buffer_response->Tid;
2747                 bcc_ptr = pByteArea(smb_buffer_response);
2748                 bytes_left = BCC(smb_buffer_response);
2749                 length = strnlen(bcc_ptr, bytes_left - 2);
2750                 if (smb_buffer->Flags2 & SMBFLG2_UNICODE)
2751                         is_unicode = true;
2752                 else
2753                         is_unicode = false;
2754
2755
2756                 /* skip service field (NB: this field is always ASCII) */
2757                 if (length == 3) {
2758                         if ((bcc_ptr[0] == 'I') && (bcc_ptr[1] == 'P') &&
2759                             (bcc_ptr[2] == 'C')) {
2760                                 cFYI(1, ("IPC connection"));
2761                                 tcon->ipc = 1;
2762                         }
2763                 } else if (length == 2) {
2764                         if ((bcc_ptr[0] == 'A') && (bcc_ptr[1] == ':')) {
2765                                 /* the most common case */
2766                                 cFYI(1, ("disk share connection"));
2767                         }
2768                 }
2769                 bcc_ptr += length + 1;
2770                 bytes_left -= (length + 1);
2771                 strncpy(tcon->treeName, tree, MAX_TREE_SIZE);
2772
2773                 /* mostly informational -- no need to fail on error here */
2774                 kfree(tcon->nativeFileSystem);
2775                 tcon->nativeFileSystem = cifs_strndup_from_ucs(bcc_ptr,
2776                                                       bytes_left, is_unicode,
2777                                                       nls_codepage);
2778
2779                 cFYI(1, ("nativeFileSystem=%s", tcon->nativeFileSystem));
2780
2781                 if ((smb_buffer_response->WordCount == 3) ||
2782                          (smb_buffer_response->WordCount == 7))
2783                         /* field is in same location */
2784                         tcon->Flags = le16_to_cpu(pSMBr->OptionalSupport);
2785                 else
2786                         tcon->Flags = 0;
2787                 cFYI(1, ("Tcon flags: 0x%x ", tcon->Flags));
2788         } else if ((rc == 0) && tcon == NULL) {
2789                 /* all we need to save for IPC$ connection */
2790                 ses->ipc_tid = smb_buffer_response->Tid;
2791         }
2792
2793         cifs_buf_release(smb_buffer);
2794         return rc;
2795 }
2796
2797 int
2798 cifs_umount(struct super_block *sb, struct cifs_sb_info *cifs_sb)
2799 {
2800         int rc = 0;
2801         char *tmp;
2802
2803         if (cifs_sb->tcon)
2804                 cifs_put_tcon(cifs_sb->tcon);
2805
2806         cifs_sb->tcon = NULL;
2807         tmp = cifs_sb->prepath;
2808         cifs_sb->prepathlen = 0;
2809         cifs_sb->prepath = NULL;
2810         kfree(tmp);
2811
2812         return rc;
2813 }
2814
2815 int cifs_setup_session(unsigned int xid, struct cifsSesInfo *pSesInfo,
2816                                            struct nls_table *nls_info)
2817 {
2818         int rc = 0;
2819         int first_time = 0;
2820         struct TCP_Server_Info *server = pSesInfo->server;
2821
2822         /* what if server changes its buffer size after dropping the session? */
2823         if (server->maxBuf == 0) /* no need to send on reconnect */ {
2824                 rc = CIFSSMBNegotiate(xid, pSesInfo);
2825                 if (rc == -EAGAIN) {
2826                         /* retry only once on 1st time connection */
2827                         rc = CIFSSMBNegotiate(xid, pSesInfo);
2828                         if (rc == -EAGAIN)
2829                                 rc = -EHOSTDOWN;
2830                 }
2831                 if (rc == 0) {
2832                         spin_lock(&GlobalMid_Lock);
2833                         if (server->tcpStatus != CifsExiting)
2834                                 server->tcpStatus = CifsGood;
2835                         else
2836                                 rc = -EHOSTDOWN;
2837                         spin_unlock(&GlobalMid_Lock);
2838
2839                 }
2840                 first_time = 1;
2841         }
2842
2843         if (rc)
2844                 goto ss_err_exit;
2845
2846         pSesInfo->flags = 0;
2847         pSesInfo->capabilities = server->capabilities;
2848         if (linuxExtEnabled == 0)
2849                 pSesInfo->capabilities &= (~CAP_UNIX);
2850
2851         cFYI(1, ("Security Mode: 0x%x Capabilities: 0x%x TimeAdjust: %d",
2852                  server->secMode, server->capabilities, server->timeAdj));
2853
2854         rc = CIFS_SessSetup(xid, pSesInfo, first_time, nls_info);
2855         if (rc) {
2856                 cERROR(1, ("Send error in SessSetup = %d", rc));
2857         } else {
2858                 cFYI(1, ("CIFS Session Established successfully"));
2859                 spin_lock(&GlobalMid_Lock);
2860                 pSesInfo->status = CifsGood;
2861                 pSesInfo->need_reconnect = false;
2862                 spin_unlock(&GlobalMid_Lock);
2863         }
2864
2865 ss_err_exit:
2866         return rc;
2867 }
2868