1/*
2 *  SMB1 (CIFS) version specific operations
3 *
4 *  Copyright (c) 2012, Jeff Layton <jlayton@redhat.com>
5 *
6 *  This library is free software; you can redistribute it and/or modify
7 *  it under the terms of the GNU General Public License v2 as published
8 *  by the Free Software Foundation.
9 *
10 *  This library is distributed in the hope that it will be useful,
11 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
12 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See
13 *  the GNU Lesser General Public License for more details.
14 *
15 *  You should have received a copy of the GNU Lesser General Public License
16 *  along with this library; if not, write to the Free Software
17 *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
18 */
19
20#include <linux/pagemap.h>
21#include <linux/vfs.h>
22#include "cifsglob.h"
23#include "cifsproto.h"
24#include "cifs_debug.h"
25#include "cifspdu.h"
26#include "cifs_unicode.h"
27
28/*
29 * An NT cancel request header looks just like the original request except:
30 *
31 * The Command is SMB_COM_NT_CANCEL
32 * The WordCount is zeroed out
33 * The ByteCount is zeroed out
34 *
35 * This function mangles an existing request buffer into a
36 * SMB_COM_NT_CANCEL request and then sends it.
37 */
38static int
39send_nt_cancel(struct TCP_Server_Info *server, void *buf,
40	       struct mid_q_entry *mid)
41{
42	int rc = 0;
43	struct smb_hdr *in_buf = (struct smb_hdr *)buf;
44
45	/* -4 for RFC1001 length and +2 for BCC field */
46	in_buf->smb_buf_length = cpu_to_be32(sizeof(struct smb_hdr) - 4  + 2);
47	in_buf->Command = SMB_COM_NT_CANCEL;
48	in_buf->WordCount = 0;
49	put_bcc(0, in_buf);
50
51	mutex_lock(&server->srv_mutex);
52	rc = cifs_sign_smb(in_buf, server, &mid->sequence_number);
53	if (rc) {
54		mutex_unlock(&server->srv_mutex);
55		return rc;
56	}
57
58	/*
59	 * The response to this call was already factored into the sequence
60	 * number when the call went out, so we must adjust it back downward
61	 * after signing here.
62	 */
63	--server->sequence_number;
64	rc = smb_send(server, in_buf, be32_to_cpu(in_buf->smb_buf_length));
65	if (rc < 0)
66		server->sequence_number--;
67
68	mutex_unlock(&server->srv_mutex);
69
70	cifs_dbg(FYI, "issued NT_CANCEL for mid %u, rc = %d\n",
71		 get_mid(in_buf), rc);
72
73	return rc;
74}
75
76static bool
77cifs_compare_fids(struct cifsFileInfo *ob1, struct cifsFileInfo *ob2)
78{
79	return ob1->fid.netfid == ob2->fid.netfid;
80}
81
82static unsigned int
83cifs_read_data_offset(char *buf)
84{
85	READ_RSP *rsp = (READ_RSP *)buf;
86	return le16_to_cpu(rsp->DataOffset);
87}
88
89static unsigned int
90cifs_read_data_length(char *buf)
91{
92	READ_RSP *rsp = (READ_RSP *)buf;
93	return (le16_to_cpu(rsp->DataLengthHigh) << 16) +
94	       le16_to_cpu(rsp->DataLength);
95}
96
97static struct mid_q_entry *
98cifs_find_mid(struct TCP_Server_Info *server, char *buffer)
99{
100	struct smb_hdr *buf = (struct smb_hdr *)buffer;
101	struct mid_q_entry *mid;
102
103	spin_lock(&GlobalMid_Lock);
104	list_for_each_entry(mid, &server->pending_mid_q, qhead) {
105		if (compare_mid(mid->mid, buf) &&
106		    mid->mid_state == MID_REQUEST_SUBMITTED &&
107		    le16_to_cpu(mid->command) == buf->Command) {
108			spin_unlock(&GlobalMid_Lock);
109			return mid;
110		}
111	}
112	spin_unlock(&GlobalMid_Lock);
113	return NULL;
114}
115
116static void
117cifs_add_credits(struct TCP_Server_Info *server, const unsigned int add,
118		 const int optype)
119{
120	spin_lock(&server->req_lock);
121	server->credits += add;
122	server->in_flight--;
123	spin_unlock(&server->req_lock);
124	wake_up(&server->request_q);
125}
126
127static void
128cifs_set_credits(struct TCP_Server_Info *server, const int val)
129{
130	spin_lock(&server->req_lock);
131	server->credits = val;
132	server->oplocks = val > 1 ? enable_oplocks : false;
133	spin_unlock(&server->req_lock);
134}
135
136static int *
137cifs_get_credits_field(struct TCP_Server_Info *server, const int optype)
138{
139	return &server->credits;
140}
141
142static unsigned int
143cifs_get_credits(struct mid_q_entry *mid)
144{
145	return 1;
146}
147
148/*
149 * Find a free multiplex id (SMB mid). Otherwise there could be
150 * mid collisions which might cause problems, demultiplexing the
151 * wrong response to this request. Multiplex ids could collide if
152 * one of a series requests takes much longer than the others, or
153 * if a very large number of long lived requests (byte range
154 * locks or FindNotify requests) are pending. No more than
155 * 64K-1 requests can be outstanding at one time. If no
156 * mids are available, return zero. A future optimization
157 * could make the combination of mids and uid the key we use
158 * to demultiplex on (rather than mid alone).
159 * In addition to the above check, the cifs demultiplex
160 * code already used the command code as a secondary
161 * check of the frame and if signing is negotiated the
162 * response would be discarded if the mid were the same
163 * but the signature was wrong. Since the mid is not put in the
164 * pending queue until later (when it is about to be dispatched)
165 * we do have to limit the number of outstanding requests
166 * to somewhat less than 64K-1 although it is hard to imagine
167 * so many threads being in the vfs at one time.
168 */
169static __u64
170cifs_get_next_mid(struct TCP_Server_Info *server)
171{
172	__u64 mid = 0;
173	__u16 last_mid, cur_mid;
174	bool collision;
175
176	spin_lock(&GlobalMid_Lock);
177
178	/* mid is 16 bit only for CIFS/SMB */
179	cur_mid = (__u16)((server->CurrentMid) & 0xffff);
180	/* we do not want to loop forever */
181	last_mid = cur_mid;
182	cur_mid++;
183
184	/*
185	 * This nested loop looks more expensive than it is.
186	 * In practice the list of pending requests is short,
187	 * fewer than 50, and the mids are likely to be unique
188	 * on the first pass through the loop unless some request
189	 * takes longer than the 64 thousand requests before it
190	 * (and it would also have to have been a request that
191	 * did not time out).
192	 */
193	while (cur_mid != last_mid) {
194		struct mid_q_entry *mid_entry;
195		unsigned int num_mids;
196
197		collision = false;
198		if (cur_mid == 0)
199			cur_mid++;
200
201		num_mids = 0;
202		list_for_each_entry(mid_entry, &server->pending_mid_q, qhead) {
203			++num_mids;
204			if (mid_entry->mid == cur_mid &&
205			    mid_entry->mid_state == MID_REQUEST_SUBMITTED) {
206				/* This mid is in use, try a different one */
207				collision = true;
208				break;
209			}
210		}
211
212		/*
213		 * if we have more than 32k mids in the list, then something
214		 * is very wrong. Possibly a local user is trying to DoS the
215		 * box by issuing long-running calls and SIGKILL'ing them. If
216		 * we get to 2^16 mids then we're in big trouble as this
217		 * function could loop forever.
218		 *
219		 * Go ahead and assign out the mid in this situation, but force
220		 * an eventual reconnect to clean out the pending_mid_q.
221		 */
222		if (num_mids > 32768)
223			server->tcpStatus = CifsNeedReconnect;
224
225		if (!collision) {
226			mid = (__u64)cur_mid;
227			server->CurrentMid = mid;
228			break;
229		}
230		cur_mid++;
231	}
232	spin_unlock(&GlobalMid_Lock);
233	return mid;
234}
235
236/*
237	return codes:
238		0	not a transact2, or all data present
239		>0	transact2 with that much data missing
240		-EINVAL	invalid transact2
241 */
242static int
243check2ndT2(char *buf)
244{
245	struct smb_hdr *pSMB = (struct smb_hdr *)buf;
246	struct smb_t2_rsp *pSMBt;
247	int remaining;
248	__u16 total_data_size, data_in_this_rsp;
249
250	if (pSMB->Command != SMB_COM_TRANSACTION2)
251		return 0;
252
253	/* check for plausible wct, bcc and t2 data and parm sizes */
254	/* check for parm and data offset going beyond end of smb */
255	if (pSMB->WordCount != 10) { /* coalesce_t2 depends on this */
256		cifs_dbg(FYI, "invalid transact2 word count\n");
257		return -EINVAL;
258	}
259
260	pSMBt = (struct smb_t2_rsp *)pSMB;
261
262	total_data_size = get_unaligned_le16(&pSMBt->t2_rsp.TotalDataCount);
263	data_in_this_rsp = get_unaligned_le16(&pSMBt->t2_rsp.DataCount);
264
265	if (total_data_size == data_in_this_rsp)
266		return 0;
267	else if (total_data_size < data_in_this_rsp) {
268		cifs_dbg(FYI, "total data %d smaller than data in frame %d\n",
269			 total_data_size, data_in_this_rsp);
270		return -EINVAL;
271	}
272
273	remaining = total_data_size - data_in_this_rsp;
274
275	cifs_dbg(FYI, "missing %d bytes from transact2, check next response\n",
276		 remaining);
277	if (total_data_size > CIFSMaxBufSize) {
278		cifs_dbg(VFS, "TotalDataSize %d is over maximum buffer %d\n",
279			 total_data_size, CIFSMaxBufSize);
280		return -EINVAL;
281	}
282	return remaining;
283}
284
285static int
286coalesce_t2(char *second_buf, struct smb_hdr *target_hdr)
287{
288	struct smb_t2_rsp *pSMBs = (struct smb_t2_rsp *)second_buf;
289	struct smb_t2_rsp *pSMBt  = (struct smb_t2_rsp *)target_hdr;
290	char *data_area_of_tgt;
291	char *data_area_of_src;
292	int remaining;
293	unsigned int byte_count, total_in_tgt;
294	__u16 tgt_total_cnt, src_total_cnt, total_in_src;
295
296	src_total_cnt = get_unaligned_le16(&pSMBs->t2_rsp.TotalDataCount);
297	tgt_total_cnt = get_unaligned_le16(&pSMBt->t2_rsp.TotalDataCount);
298
299	if (tgt_total_cnt != src_total_cnt)
300		cifs_dbg(FYI, "total data count of primary and secondary t2 differ source=%hu target=%hu\n",
301			 src_total_cnt, tgt_total_cnt);
302
303	total_in_tgt = get_unaligned_le16(&pSMBt->t2_rsp.DataCount);
304
305	remaining = tgt_total_cnt - total_in_tgt;
306
307	if (remaining < 0) {
308		cifs_dbg(FYI, "Server sent too much data. tgt_total_cnt=%hu total_in_tgt=%hu\n",
309			 tgt_total_cnt, total_in_tgt);
310		return -EPROTO;
311	}
312
313	if (remaining == 0) {
314		/* nothing to do, ignore */
315		cifs_dbg(FYI, "no more data remains\n");
316		return 0;
317	}
318
319	total_in_src = get_unaligned_le16(&pSMBs->t2_rsp.DataCount);
320	if (remaining < total_in_src)
321		cifs_dbg(FYI, "transact2 2nd response contains too much data\n");
322
323	/* find end of first SMB data area */
324	data_area_of_tgt = (char *)&pSMBt->hdr.Protocol +
325				get_unaligned_le16(&pSMBt->t2_rsp.DataOffset);
326
327	/* validate target area */
328	data_area_of_src = (char *)&pSMBs->hdr.Protocol +
329				get_unaligned_le16(&pSMBs->t2_rsp.DataOffset);
330
331	data_area_of_tgt += total_in_tgt;
332
333	total_in_tgt += total_in_src;
334	/* is the result too big for the field? */
335	if (total_in_tgt > USHRT_MAX) {
336		cifs_dbg(FYI, "coalesced DataCount too large (%u)\n",
337			 total_in_tgt);
338		return -EPROTO;
339	}
340	put_unaligned_le16(total_in_tgt, &pSMBt->t2_rsp.DataCount);
341
342	/* fix up the BCC */
343	byte_count = get_bcc(target_hdr);
344	byte_count += total_in_src;
345	/* is the result too big for the field? */
346	if (byte_count > USHRT_MAX) {
347		cifs_dbg(FYI, "coalesced BCC too large (%u)\n", byte_count);
348		return -EPROTO;
349	}
350	put_bcc(byte_count, target_hdr);
351
352	byte_count = be32_to_cpu(target_hdr->smb_buf_length);
353	byte_count += total_in_src;
354	/* don't allow buffer to overflow */
355	if (byte_count > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE - 4) {
356		cifs_dbg(FYI, "coalesced BCC exceeds buffer size (%u)\n",
357			 byte_count);
358		return -ENOBUFS;
359	}
360	target_hdr->smb_buf_length = cpu_to_be32(byte_count);
361
362	/* copy second buffer into end of first buffer */
363	memcpy(data_area_of_tgt, data_area_of_src, total_in_src);
364
365	if (remaining != total_in_src) {
366		/* more responses to go */
367		cifs_dbg(FYI, "waiting for more secondary responses\n");
368		return 1;
369	}
370
371	/* we are done */
372	cifs_dbg(FYI, "found the last secondary response\n");
373	return 0;
374}
375
376static void
377cifs_downgrade_oplock(struct TCP_Server_Info *server,
378			struct cifsInodeInfo *cinode, bool set_level2)
379{
380	if (set_level2)
381		cifs_set_oplock_level(cinode, OPLOCK_READ);
382	else
383		cifs_set_oplock_level(cinode, 0);
384}
385
386static bool
387cifs_check_trans2(struct mid_q_entry *mid, struct TCP_Server_Info *server,
388		  char *buf, int malformed)
389{
390	if (malformed)
391		return false;
392	if (check2ndT2(buf) <= 0)
393		return false;
394	mid->multiRsp = true;
395	if (mid->resp_buf) {
396		/* merge response - fix up 1st*/
397		malformed = coalesce_t2(buf, mid->resp_buf);
398		if (malformed > 0)
399			return true;
400		/* All parts received or packet is malformed. */
401		mid->multiEnd = true;
402		dequeue_mid(mid, malformed);
403		return true;
404	}
405	if (!server->large_buf) {
406		/*FIXME: switch to already allocated largebuf?*/
407		cifs_dbg(VFS, "1st trans2 resp needs bigbuf\n");
408	} else {
409		/* Have first buffer */
410		mid->resp_buf = buf;
411		mid->large_buf = true;
412		server->bigbuf = NULL;
413	}
414	return true;
415}
416
417static bool
418cifs_need_neg(struct TCP_Server_Info *server)
419{
420	return server->maxBuf == 0;
421}
422
423static int
424cifs_negotiate(const unsigned int xid, struct cifs_ses *ses)
425{
426	int rc;
427	rc = CIFSSMBNegotiate(xid, ses);
428	if (rc == -EAGAIN) {
429		/* retry only once on 1st time connection */
430		set_credits(ses->server, 1);
431		rc = CIFSSMBNegotiate(xid, ses);
432		if (rc == -EAGAIN)
433			rc = -EHOSTDOWN;
434	}
435	return rc;
436}
437
438static unsigned int
439cifs_negotiate_wsize(struct cifs_tcon *tcon, struct smb_vol *volume_info)
440{
441	__u64 unix_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
442	struct TCP_Server_Info *server = tcon->ses->server;
443	unsigned int wsize;
444
445	/* start with specified wsize, or default */
446	if (volume_info->wsize)
447		wsize = volume_info->wsize;
448	else if (tcon->unix_ext && (unix_cap & CIFS_UNIX_LARGE_WRITE_CAP))
449		wsize = CIFS_DEFAULT_IOSIZE;
450	else
451		wsize = CIFS_DEFAULT_NON_POSIX_WSIZE;
452
453	/* can server support 24-bit write sizes? (via UNIX extensions) */
454	if (!tcon->unix_ext || !(unix_cap & CIFS_UNIX_LARGE_WRITE_CAP))
455		wsize = min_t(unsigned int, wsize, CIFS_MAX_RFC1002_WSIZE);
456
457	/*
458	 * no CAP_LARGE_WRITE_X or is signing enabled without CAP_UNIX set?
459	 * Limit it to max buffer offered by the server, minus the size of the
460	 * WRITEX header, not including the 4 byte RFC1001 length.
461	 */
462	if (!(server->capabilities & CAP_LARGE_WRITE_X) ||
463	    (!(server->capabilities & CAP_UNIX) && server->sign))
464		wsize = min_t(unsigned int, wsize,
465				server->maxBuf - sizeof(WRITE_REQ) + 4);
466
467	/* hard limit of CIFS_MAX_WSIZE */
468	wsize = min_t(unsigned int, wsize, CIFS_MAX_WSIZE);
469
470	return wsize;
471}
472
473static unsigned int
474cifs_negotiate_rsize(struct cifs_tcon *tcon, struct smb_vol *volume_info)
475{
476	__u64 unix_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
477	struct TCP_Server_Info *server = tcon->ses->server;
478	unsigned int rsize, defsize;
479
480	/*
481	 * Set default value...
482	 *
483	 * HACK alert! Ancient servers have very small buffers. Even though
484	 * MS-CIFS indicates that servers are only limited by the client's
485	 * bufsize for reads, testing against win98se shows that it throws
486	 * INVALID_PARAMETER errors if you try to request too large a read.
487	 * OS/2 just sends back short reads.
488	 *
489	 * If the server doesn't advertise CAP_LARGE_READ_X, then assume that
490	 * it can't handle a read request larger than its MaxBufferSize either.
491	 */
492	if (tcon->unix_ext && (unix_cap & CIFS_UNIX_LARGE_READ_CAP))
493		defsize = CIFS_DEFAULT_IOSIZE;
494	else if (server->capabilities & CAP_LARGE_READ_X)
495		defsize = CIFS_DEFAULT_NON_POSIX_RSIZE;
496	else
497		defsize = server->maxBuf - sizeof(READ_RSP);
498
499	rsize = volume_info->rsize ? volume_info->rsize : defsize;
500
501	/*
502	 * no CAP_LARGE_READ_X? Then MS-CIFS states that we must limit this to
503	 * the client's MaxBufferSize.
504	 */
505	if (!(server->capabilities & CAP_LARGE_READ_X))
506		rsize = min_t(unsigned int, CIFSMaxBufSize, rsize);
507
508	/* hard limit of CIFS_MAX_RSIZE */
509	rsize = min_t(unsigned int, rsize, CIFS_MAX_RSIZE);
510
511	return rsize;
512}
513
514static void
515cifs_qfs_tcon(const unsigned int xid, struct cifs_tcon *tcon)
516{
517	CIFSSMBQFSDeviceInfo(xid, tcon);
518	CIFSSMBQFSAttributeInfo(xid, tcon);
519}
520
521static int
522cifs_is_path_accessible(const unsigned int xid, struct cifs_tcon *tcon,
523			struct cifs_sb_info *cifs_sb, const char *full_path)
524{
525	int rc;
526	FILE_ALL_INFO *file_info;
527
528	file_info = kmalloc(sizeof(FILE_ALL_INFO), GFP_KERNEL);
529	if (file_info == NULL)
530		return -ENOMEM;
531
532	rc = CIFSSMBQPathInfo(xid, tcon, full_path, file_info,
533			      0 /* not legacy */, cifs_sb->local_nls,
534			      cifs_remap(cifs_sb));
535
536	if (rc == -EOPNOTSUPP || rc == -EINVAL)
537		rc = SMBQueryInformation(xid, tcon, full_path, file_info,
538				cifs_sb->local_nls, cifs_remap(cifs_sb));
539	kfree(file_info);
540	return rc;
541}
542
543static int
544cifs_query_path_info(const unsigned int xid, struct cifs_tcon *tcon,
545		     struct cifs_sb_info *cifs_sb, const char *full_path,
546		     FILE_ALL_INFO *data, bool *adjustTZ, bool *symlink)
547{
548	int rc;
549
550	*symlink = false;
551
552	/* could do find first instead but this returns more info */
553	rc = CIFSSMBQPathInfo(xid, tcon, full_path, data, 0 /* not legacy */,
554			      cifs_sb->local_nls, cifs_remap(cifs_sb));
555	/*
556	 * BB optimize code so we do not make the above call when server claims
557	 * no NT SMB support and the above call failed at least once - set flag
558	 * in tcon or mount.
559	 */
560	if ((rc == -EOPNOTSUPP) || (rc == -EINVAL)) {
561		rc = SMBQueryInformation(xid, tcon, full_path, data,
562					 cifs_sb->local_nls,
563					 cifs_remap(cifs_sb));
564		*adjustTZ = true;
565	}
566
567	if (!rc && (le32_to_cpu(data->Attributes) & ATTR_REPARSE)) {
568		int tmprc;
569		int oplock = 0;
570		struct cifs_fid fid;
571		struct cifs_open_parms oparms;
572
573		oparms.tcon = tcon;
574		oparms.cifs_sb = cifs_sb;
575		oparms.desired_access = FILE_READ_ATTRIBUTES;
576		oparms.create_options = 0;
577		oparms.disposition = FILE_OPEN;
578		oparms.path = full_path;
579		oparms.fid = &fid;
580		oparms.reconnect = false;
581
582		/* Need to check if this is a symbolic link or not */
583		tmprc = CIFS_open(xid, &oparms, &oplock, NULL);
584		if (tmprc == -EOPNOTSUPP)
585			*symlink = true;
586		else if (tmprc == 0)
587			CIFSSMBClose(xid, tcon, fid.netfid);
588	}
589
590	return rc;
591}
592
593static int
594cifs_get_srv_inum(const unsigned int xid, struct cifs_tcon *tcon,
595		  struct cifs_sb_info *cifs_sb, const char *full_path,
596		  u64 *uniqueid, FILE_ALL_INFO *data)
597{
598	/*
599	 * We can not use the IndexNumber field by default from Windows or
600	 * Samba (in ALL_INFO buf) but we can request it explicitly. The SNIA
601	 * CIFS spec claims that this value is unique within the scope of a
602	 * share, and the windows docs hint that it's actually unique
603	 * per-machine.
604	 *
605	 * There may be higher info levels that work but are there Windows
606	 * server or network appliances for which IndexNumber field is not
607	 * guaranteed unique?
608	 */
609	return CIFSGetSrvInodeNumber(xid, tcon, full_path, uniqueid,
610				     cifs_sb->local_nls,
611				     cifs_remap(cifs_sb));
612}
613
614static int
615cifs_query_file_info(const unsigned int xid, struct cifs_tcon *tcon,
616		     struct cifs_fid *fid, FILE_ALL_INFO *data)
617{
618	return CIFSSMBQFileInfo(xid, tcon, fid->netfid, data);
619}
620
621static void
622cifs_clear_stats(struct cifs_tcon *tcon)
623{
624#ifdef CONFIG_CIFS_STATS
625	atomic_set(&tcon->stats.cifs_stats.num_writes, 0);
626	atomic_set(&tcon->stats.cifs_stats.num_reads, 0);
627	atomic_set(&tcon->stats.cifs_stats.num_flushes, 0);
628	atomic_set(&tcon->stats.cifs_stats.num_oplock_brks, 0);
629	atomic_set(&tcon->stats.cifs_stats.num_opens, 0);
630	atomic_set(&tcon->stats.cifs_stats.num_posixopens, 0);
631	atomic_set(&tcon->stats.cifs_stats.num_posixmkdirs, 0);
632	atomic_set(&tcon->stats.cifs_stats.num_closes, 0);
633	atomic_set(&tcon->stats.cifs_stats.num_deletes, 0);
634	atomic_set(&tcon->stats.cifs_stats.num_mkdirs, 0);
635	atomic_set(&tcon->stats.cifs_stats.num_rmdirs, 0);
636	atomic_set(&tcon->stats.cifs_stats.num_renames, 0);
637	atomic_set(&tcon->stats.cifs_stats.num_t2renames, 0);
638	atomic_set(&tcon->stats.cifs_stats.num_ffirst, 0);
639	atomic_set(&tcon->stats.cifs_stats.num_fnext, 0);
640	atomic_set(&tcon->stats.cifs_stats.num_fclose, 0);
641	atomic_set(&tcon->stats.cifs_stats.num_hardlinks, 0);
642	atomic_set(&tcon->stats.cifs_stats.num_symlinks, 0);
643	atomic_set(&tcon->stats.cifs_stats.num_locks, 0);
644	atomic_set(&tcon->stats.cifs_stats.num_acl_get, 0);
645	atomic_set(&tcon->stats.cifs_stats.num_acl_set, 0);
646#endif
647}
648
649static void
650cifs_print_stats(struct seq_file *m, struct cifs_tcon *tcon)
651{
652#ifdef CONFIG_CIFS_STATS
653	seq_printf(m, " Oplocks breaks: %d",
654		   atomic_read(&tcon->stats.cifs_stats.num_oplock_brks));
655	seq_printf(m, "\nReads:  %d Bytes: %llu",
656		   atomic_read(&tcon->stats.cifs_stats.num_reads),
657		   (long long)(tcon->bytes_read));
658	seq_printf(m, "\nWrites: %d Bytes: %llu",
659		   atomic_read(&tcon->stats.cifs_stats.num_writes),
660		   (long long)(tcon->bytes_written));
661	seq_printf(m, "\nFlushes: %d",
662		   atomic_read(&tcon->stats.cifs_stats.num_flushes));
663	seq_printf(m, "\nLocks: %d HardLinks: %d Symlinks: %d",
664		   atomic_read(&tcon->stats.cifs_stats.num_locks),
665		   atomic_read(&tcon->stats.cifs_stats.num_hardlinks),
666		   atomic_read(&tcon->stats.cifs_stats.num_symlinks));
667	seq_printf(m, "\nOpens: %d Closes: %d Deletes: %d",
668		   atomic_read(&tcon->stats.cifs_stats.num_opens),
669		   atomic_read(&tcon->stats.cifs_stats.num_closes),
670		   atomic_read(&tcon->stats.cifs_stats.num_deletes));
671	seq_printf(m, "\nPosix Opens: %d Posix Mkdirs: %d",
672		   atomic_read(&tcon->stats.cifs_stats.num_posixopens),
673		   atomic_read(&tcon->stats.cifs_stats.num_posixmkdirs));
674	seq_printf(m, "\nMkdirs: %d Rmdirs: %d",
675		   atomic_read(&tcon->stats.cifs_stats.num_mkdirs),
676		   atomic_read(&tcon->stats.cifs_stats.num_rmdirs));
677	seq_printf(m, "\nRenames: %d T2 Renames %d",
678		   atomic_read(&tcon->stats.cifs_stats.num_renames),
679		   atomic_read(&tcon->stats.cifs_stats.num_t2renames));
680	seq_printf(m, "\nFindFirst: %d FNext %d FClose %d",
681		   atomic_read(&tcon->stats.cifs_stats.num_ffirst),
682		   atomic_read(&tcon->stats.cifs_stats.num_fnext),
683		   atomic_read(&tcon->stats.cifs_stats.num_fclose));
684#endif
685}
686
687static void
688cifs_mkdir_setinfo(struct inode *inode, const char *full_path,
689		   struct cifs_sb_info *cifs_sb, struct cifs_tcon *tcon,
690		   const unsigned int xid)
691{
692	FILE_BASIC_INFO info;
693	struct cifsInodeInfo *cifsInode;
694	u32 dosattrs;
695	int rc;
696
697	memset(&info, 0, sizeof(info));
698	cifsInode = CIFS_I(inode);
699	dosattrs = cifsInode->cifsAttrs|ATTR_READONLY;
700	info.Attributes = cpu_to_le32(dosattrs);
701	rc = CIFSSMBSetPathInfo(xid, tcon, full_path, &info, cifs_sb->local_nls,
702				cifs_remap(cifs_sb));
703	if (rc == 0)
704		cifsInode->cifsAttrs = dosattrs;
705}
706
707static int
708cifs_open_file(const unsigned int xid, struct cifs_open_parms *oparms,
709	       __u32 *oplock, FILE_ALL_INFO *buf)
710{
711	if (!(oparms->tcon->ses->capabilities & CAP_NT_SMBS))
712		return SMBLegacyOpen(xid, oparms->tcon, oparms->path,
713				     oparms->disposition,
714				     oparms->desired_access,
715				     oparms->create_options,
716				     &oparms->fid->netfid, oplock, buf,
717				     oparms->cifs_sb->local_nls,
718				     cifs_remap(oparms->cifs_sb));
719	return CIFS_open(xid, oparms, oplock, buf);
720}
721
722static void
723cifs_set_fid(struct cifsFileInfo *cfile, struct cifs_fid *fid, __u32 oplock)
724{
725	struct cifsInodeInfo *cinode = CIFS_I(d_inode(cfile->dentry));
726	cfile->fid.netfid = fid->netfid;
727	cifs_set_oplock_level(cinode, oplock);
728	cinode->can_cache_brlcks = CIFS_CACHE_WRITE(cinode);
729}
730
731static void
732cifs_close_file(const unsigned int xid, struct cifs_tcon *tcon,
733		struct cifs_fid *fid)
734{
735	CIFSSMBClose(xid, tcon, fid->netfid);
736}
737
738static int
739cifs_flush_file(const unsigned int xid, struct cifs_tcon *tcon,
740		struct cifs_fid *fid)
741{
742	return CIFSSMBFlush(xid, tcon, fid->netfid);
743}
744
745static int
746cifs_sync_read(const unsigned int xid, struct cifs_fid *pfid,
747	       struct cifs_io_parms *parms, unsigned int *bytes_read,
748	       char **buf, int *buf_type)
749{
750	parms->netfid = pfid->netfid;
751	return CIFSSMBRead(xid, parms, bytes_read, buf, buf_type);
752}
753
754static int
755cifs_sync_write(const unsigned int xid, struct cifs_fid *pfid,
756		struct cifs_io_parms *parms, unsigned int *written,
757		struct kvec *iov, unsigned long nr_segs)
758{
759
760	parms->netfid = pfid->netfid;
761	return CIFSSMBWrite2(xid, parms, written, iov, nr_segs);
762}
763
764static int
765smb_set_file_info(struct inode *inode, const char *full_path,
766		  FILE_BASIC_INFO *buf, const unsigned int xid)
767{
768	int oplock = 0;
769	int rc;
770	__u32 netpid;
771	struct cifs_fid fid;
772	struct cifs_open_parms oparms;
773	struct cifsFileInfo *open_file;
774	struct cifsInodeInfo *cinode = CIFS_I(inode);
775	struct cifs_sb_info *cifs_sb = CIFS_SB(inode->i_sb);
776	struct tcon_link *tlink = NULL;
777	struct cifs_tcon *tcon;
778
779	/* if the file is already open for write, just use that fileid */
780	open_file = find_writable_file(cinode, true);
781	if (open_file) {
782		fid.netfid = open_file->fid.netfid;
783		netpid = open_file->pid;
784		tcon = tlink_tcon(open_file->tlink);
785		goto set_via_filehandle;
786	}
787
788	tlink = cifs_sb_tlink(cifs_sb);
789	if (IS_ERR(tlink)) {
790		rc = PTR_ERR(tlink);
791		tlink = NULL;
792		goto out;
793	}
794	tcon = tlink_tcon(tlink);
795
796	rc = CIFSSMBSetPathInfo(xid, tcon, full_path, buf, cifs_sb->local_nls,
797				cifs_remap(cifs_sb));
798	if (rc == 0) {
799		cinode->cifsAttrs = le32_to_cpu(buf->Attributes);
800		goto out;
801	} else if (rc != -EOPNOTSUPP && rc != -EINVAL) {
802		goto out;
803	}
804
805	oparms.tcon = tcon;
806	oparms.cifs_sb = cifs_sb;
807	oparms.desired_access = SYNCHRONIZE | FILE_WRITE_ATTRIBUTES;
808	oparms.create_options = CREATE_NOT_DIR;
809	oparms.disposition = FILE_OPEN;
810	oparms.path = full_path;
811	oparms.fid = &fid;
812	oparms.reconnect = false;
813
814	cifs_dbg(FYI, "calling SetFileInfo since SetPathInfo for times not supported by this server\n");
815	rc = CIFS_open(xid, &oparms, &oplock, NULL);
816	if (rc != 0) {
817		if (rc == -EIO)
818			rc = -EINVAL;
819		goto out;
820	}
821
822	netpid = current->tgid;
823
824set_via_filehandle:
825	rc = CIFSSMBSetFileInfo(xid, tcon, buf, fid.netfid, netpid);
826	if (!rc)
827		cinode->cifsAttrs = le32_to_cpu(buf->Attributes);
828
829	if (open_file == NULL)
830		CIFSSMBClose(xid, tcon, fid.netfid);
831	else
832		cifsFileInfo_put(open_file);
833out:
834	if (tlink != NULL)
835		cifs_put_tlink(tlink);
836	return rc;
837}
838
839static int
840cifs_set_compression(const unsigned int xid, struct cifs_tcon *tcon,
841		   struct cifsFileInfo *cfile)
842{
843	return CIFSSMB_set_compression(xid, tcon, cfile->fid.netfid);
844}
845
846static int
847cifs_query_dir_first(const unsigned int xid, struct cifs_tcon *tcon,
848		     const char *path, struct cifs_sb_info *cifs_sb,
849		     struct cifs_fid *fid, __u16 search_flags,
850		     struct cifs_search_info *srch_inf)
851{
852	return CIFSFindFirst(xid, tcon, path, cifs_sb,
853			     &fid->netfid, search_flags, srch_inf, true);
854}
855
856static int
857cifs_query_dir_next(const unsigned int xid, struct cifs_tcon *tcon,
858		    struct cifs_fid *fid, __u16 search_flags,
859		    struct cifs_search_info *srch_inf)
860{
861	return CIFSFindNext(xid, tcon, fid->netfid, search_flags, srch_inf);
862}
863
864static int
865cifs_close_dir(const unsigned int xid, struct cifs_tcon *tcon,
866	       struct cifs_fid *fid)
867{
868	return CIFSFindClose(xid, tcon, fid->netfid);
869}
870
871static int
872cifs_oplock_response(struct cifs_tcon *tcon, struct cifs_fid *fid,
873		     struct cifsInodeInfo *cinode)
874{
875	return CIFSSMBLock(0, tcon, fid->netfid, current->tgid, 0, 0, 0, 0,
876			   LOCKING_ANDX_OPLOCK_RELEASE, false,
877			   CIFS_CACHE_READ(cinode) ? 1 : 0);
878}
879
880static int
881cifs_queryfs(const unsigned int xid, struct cifs_tcon *tcon,
882	     struct kstatfs *buf)
883{
884	int rc = -EOPNOTSUPP;
885
886	buf->f_type = CIFS_MAGIC_NUMBER;
887
888	/*
889	 * We could add a second check for a QFS Unix capability bit
890	 */
891	if ((tcon->ses->capabilities & CAP_UNIX) &&
892	    (CIFS_POSIX_EXTENSIONS & le64_to_cpu(tcon->fsUnixInfo.Capability)))
893		rc = CIFSSMBQFSPosixInfo(xid, tcon, buf);
894
895	/*
896	 * Only need to call the old QFSInfo if failed on newer one,
897	 * e.g. by OS/2.
898	 **/
899	if (rc && (tcon->ses->capabilities & CAP_NT_SMBS))
900		rc = CIFSSMBQFSInfo(xid, tcon, buf);
901
902	/*
903	 * Some old Windows servers also do not support level 103, retry with
904	 * older level one if old server failed the previous call or we
905	 * bypassed it because we detected that this was an older LANMAN sess
906	 */
907	if (rc)
908		rc = SMBOldQFSInfo(xid, tcon, buf);
909	return rc;
910}
911
912static int
913cifs_mand_lock(const unsigned int xid, struct cifsFileInfo *cfile, __u64 offset,
914	       __u64 length, __u32 type, int lock, int unlock, bool wait)
915{
916	return CIFSSMBLock(xid, tlink_tcon(cfile->tlink), cfile->fid.netfid,
917			   current->tgid, length, offset, unlock, lock,
918			   (__u8)type, wait, 0);
919}
920
921static int
922cifs_unix_dfs_readlink(const unsigned int xid, struct cifs_tcon *tcon,
923		       const unsigned char *searchName, char **symlinkinfo,
924		       const struct nls_table *nls_codepage)
925{
926#ifdef CONFIG_CIFS_DFS_UPCALL
927	int rc;
928	unsigned int num_referrals = 0;
929	struct dfs_info3_param *referrals = NULL;
930
931	rc = get_dfs_path(xid, tcon->ses, searchName, nls_codepage,
932			  &num_referrals, &referrals, 0);
933
934	if (!rc && num_referrals > 0) {
935		*symlinkinfo = kstrndup(referrals->node_name,
936					strlen(referrals->node_name),
937					GFP_KERNEL);
938		if (!*symlinkinfo)
939			rc = -ENOMEM;
940		free_dfs_info_array(referrals, num_referrals);
941	}
942	return rc;
943#else /* No DFS support */
944	return -EREMOTE;
945#endif
946}
947
948static int
949cifs_query_symlink(const unsigned int xid, struct cifs_tcon *tcon,
950		   const char *full_path, char **target_path,
951		   struct cifs_sb_info *cifs_sb)
952{
953	int rc;
954	int oplock = 0;
955	struct cifs_fid fid;
956	struct cifs_open_parms oparms;
957
958	cifs_dbg(FYI, "%s: path: %s\n", __func__, full_path);
959
960	/* Check for unix extensions */
961	if (cap_unix(tcon->ses)) {
962		rc = CIFSSMBUnixQuerySymLink(xid, tcon, full_path, target_path,
963					     cifs_sb->local_nls,
964					     cifs_remap(cifs_sb));
965		if (rc == -EREMOTE)
966			rc = cifs_unix_dfs_readlink(xid, tcon, full_path,
967						    target_path,
968						    cifs_sb->local_nls);
969
970		goto out;
971	}
972
973	oparms.tcon = tcon;
974	oparms.cifs_sb = cifs_sb;
975	oparms.desired_access = FILE_READ_ATTRIBUTES;
976	oparms.create_options = OPEN_REPARSE_POINT;
977	oparms.disposition = FILE_OPEN;
978	oparms.path = full_path;
979	oparms.fid = &fid;
980	oparms.reconnect = false;
981
982	rc = CIFS_open(xid, &oparms, &oplock, NULL);
983	if (rc)
984		goto out;
985
986	rc = CIFSSMBQuerySymLink(xid, tcon, fid.netfid, target_path,
987				 cifs_sb->local_nls);
988	if (rc)
989		goto out_close;
990
991	convert_delimiter(*target_path, '/');
992out_close:
993	CIFSSMBClose(xid, tcon, fid.netfid);
994out:
995	if (!rc)
996		cifs_dbg(FYI, "%s: target path: %s\n", __func__, *target_path);
997	return rc;
998}
999
1000static bool
1001cifs_is_read_op(__u32 oplock)
1002{
1003	return oplock == OPLOCK_READ;
1004}
1005
1006static unsigned int
1007cifs_wp_retry_size(struct inode *inode)
1008{
1009	return CIFS_SB(inode->i_sb)->wsize;
1010}
1011
1012static bool
1013cifs_dir_needs_close(struct cifsFileInfo *cfile)
1014{
1015	return !cfile->srch_inf.endOfSearch && !cfile->invalidHandle;
1016}
1017
1018struct smb_version_operations smb1_operations = {
1019	.send_cancel = send_nt_cancel,
1020	.compare_fids = cifs_compare_fids,
1021	.setup_request = cifs_setup_request,
1022	.setup_async_request = cifs_setup_async_request,
1023	.check_receive = cifs_check_receive,
1024	.add_credits = cifs_add_credits,
1025	.set_credits = cifs_set_credits,
1026	.get_credits_field = cifs_get_credits_field,
1027	.get_credits = cifs_get_credits,
1028	.wait_mtu_credits = cifs_wait_mtu_credits,
1029	.get_next_mid = cifs_get_next_mid,
1030	.read_data_offset = cifs_read_data_offset,
1031	.read_data_length = cifs_read_data_length,
1032	.map_error = map_smb_to_linux_error,
1033	.find_mid = cifs_find_mid,
1034	.check_message = checkSMB,
1035	.dump_detail = cifs_dump_detail,
1036	.clear_stats = cifs_clear_stats,
1037	.print_stats = cifs_print_stats,
1038	.is_oplock_break = is_valid_oplock_break,
1039	.downgrade_oplock = cifs_downgrade_oplock,
1040	.check_trans2 = cifs_check_trans2,
1041	.need_neg = cifs_need_neg,
1042	.negotiate = cifs_negotiate,
1043	.negotiate_wsize = cifs_negotiate_wsize,
1044	.negotiate_rsize = cifs_negotiate_rsize,
1045	.sess_setup = CIFS_SessSetup,
1046	.logoff = CIFSSMBLogoff,
1047	.tree_connect = CIFSTCon,
1048	.tree_disconnect = CIFSSMBTDis,
1049	.get_dfs_refer = CIFSGetDFSRefer,
1050	.qfs_tcon = cifs_qfs_tcon,
1051	.is_path_accessible = cifs_is_path_accessible,
1052	.query_path_info = cifs_query_path_info,
1053	.query_file_info = cifs_query_file_info,
1054	.get_srv_inum = cifs_get_srv_inum,
1055	.set_path_size = CIFSSMBSetEOF,
1056	.set_file_size = CIFSSMBSetFileSize,
1057	.set_file_info = smb_set_file_info,
1058	.set_compression = cifs_set_compression,
1059	.echo = CIFSSMBEcho,
1060	.mkdir = CIFSSMBMkDir,
1061	.mkdir_setinfo = cifs_mkdir_setinfo,
1062	.rmdir = CIFSSMBRmDir,
1063	.unlink = CIFSSMBDelFile,
1064	.rename_pending_delete = cifs_rename_pending_delete,
1065	.rename = CIFSSMBRename,
1066	.create_hardlink = CIFSCreateHardLink,
1067	.query_symlink = cifs_query_symlink,
1068	.open = cifs_open_file,
1069	.set_fid = cifs_set_fid,
1070	.close = cifs_close_file,
1071	.flush = cifs_flush_file,
1072	.async_readv = cifs_async_readv,
1073	.async_writev = cifs_async_writev,
1074	.sync_read = cifs_sync_read,
1075	.sync_write = cifs_sync_write,
1076	.query_dir_first = cifs_query_dir_first,
1077	.query_dir_next = cifs_query_dir_next,
1078	.close_dir = cifs_close_dir,
1079	.calc_smb_size = smbCalcSize,
1080	.oplock_response = cifs_oplock_response,
1081	.queryfs = cifs_queryfs,
1082	.mand_lock = cifs_mand_lock,
1083	.mand_unlock_range = cifs_unlock_range,
1084	.push_mand_locks = cifs_push_mandatory_locks,
1085	.query_mf_symlink = cifs_query_mf_symlink,
1086	.create_mf_symlink = cifs_create_mf_symlink,
1087	.is_read_op = cifs_is_read_op,
1088	.wp_retry_size = cifs_wp_retry_size,
1089	.dir_needs_close = cifs_dir_needs_close,
1090#ifdef CONFIG_CIFS_XATTR
1091	.query_all_EAs = CIFSSMBQAllEAs,
1092	.set_EA = CIFSSMBSetEA,
1093#endif /* CIFS_XATTR */
1094#ifdef CONFIG_CIFS_ACL
1095	.get_acl = get_cifs_acl,
1096	.get_acl_by_fid = get_cifs_acl_by_fid,
1097	.set_acl = set_cifs_acl,
1098#endif /* CIFS_ACL */
1099};
1100
1101struct smb_version_values smb1_values = {
1102	.version_string = SMB1_VERSION_STRING,
1103	.large_lock_type = LOCKING_ANDX_LARGE_FILES,
1104	.exclusive_lock_type = 0,
1105	.shared_lock_type = LOCKING_ANDX_SHARED_LOCK,
1106	.unlock_lock_type = 0,
1107	.header_size = sizeof(struct smb_hdr),
1108	.max_header_size = MAX_CIFS_HDR_SIZE,
1109	.read_rsp_size = sizeof(READ_RSP),
1110	.lock_cmd = cpu_to_le16(SMB_COM_LOCKING_ANDX),
1111	.cap_unix = CAP_UNIX,
1112	.cap_nt_find = CAP_NT_SMBS | CAP_NT_FIND,
1113	.cap_large_files = CAP_LARGE_FILES,
1114	.signing_enabled = SECMODE_SIGN_ENABLED,
1115	.signing_required = SECMODE_SIGN_REQUIRED,
1116};
1117