1 // SPDX-License-Identifier: GPL-2.0 2 /* 3 * SMB2 version specific operations 4 * 5 * Copyright (c) 2012, Jeff Layton <jlayton@redhat.com> 6 */ 7 8 #include <linux/pagemap.h> 9 #include <linux/vfs.h> 10 #include <linux/falloc.h> 11 #include <linux/scatterlist.h> 12 #include <linux/uuid.h> 13 #include <linux/sort.h> 14 #include <crypto/aead.h> 15 #include <linux/fiemap.h> 16 #include <linux/folio_queue.h> 17 #include <uapi/linux/magic.h> 18 #include "cifsfs.h" 19 #include "cifsglob.h" 20 #include "cifsproto.h" 21 #include "smb2proto.h" 22 #include "smb2pdu.h" 23 #include "cifs_debug.h" 24 #include "cifs_unicode.h" 25 #include "../common/smb2status.h" 26 #include "smb2glob.h" 27 #include "cifs_ioctl.h" 28 #include "smbdirect.h" 29 #include "fscache.h" 30 #include "fs_context.h" 31 #include "cached_dir.h" 32 #include "reparse.h" 33 34 /* Change credits for different ops and return the total number of credits */ 35 static int 36 change_conf(struct TCP_Server_Info *server) 37 { 38 server->credits += server->echo_credits + server->oplock_credits; 39 if (server->credits > server->max_credits) 40 server->credits = server->max_credits; 41 server->oplock_credits = server->echo_credits = 0; 42 switch (server->credits) { 43 case 0: 44 return 0; 45 case 1: 46 server->echoes = false; 47 server->oplocks = false; 48 break; 49 case 2: 50 server->echoes = true; 51 server->oplocks = false; 52 server->echo_credits = 1; 53 break; 54 default: 55 server->echoes = true; 56 if (enable_oplocks) { 57 server->oplocks = true; 58 server->oplock_credits = 1; 59 } else 60 server->oplocks = false; 61 62 server->echo_credits = 1; 63 } 64 server->credits -= server->echo_credits + server->oplock_credits; 65 return server->credits + server->echo_credits + server->oplock_credits; 66 } 67 68 static void 69 smb2_add_credits(struct TCP_Server_Info *server, 70 struct cifs_credits *credits, const int optype) 71 { 72 int *val, rc = -1; 73 int scredits, in_flight; 74 unsigned int add = credits->value; 75 unsigned int instance = credits->instance; 76 bool reconnect_detected = false; 77 bool reconnect_with_invalid_credits = false; 78 79 spin_lock(&server->req_lock); 80 val = server->ops->get_credits_field(server, optype); 81 82 /* eg found case where write overlapping reconnect messed up credits */ 83 if (((optype & CIFS_OP_MASK) == CIFS_NEG_OP) && (*val != 0)) 84 reconnect_with_invalid_credits = true; 85 86 if ((instance == 0) || (instance == server->reconnect_instance)) 87 *val += add; 88 else 89 reconnect_detected = true; 90 91 if (*val > 65000) { 92 *val = 65000; /* Don't get near 64K credits, avoid srv bugs */ 93 pr_warn_once("server overflowed SMB3 credits\n"); 94 trace_smb3_overflow_credits(server->current_mid, 95 server->conn_id, server->hostname, *val, 96 add, server->in_flight); 97 } 98 if (credits->in_flight_check > 1) { 99 pr_warn_once("rreq R=%08x[%x] Credits not in flight\n", 100 credits->rreq_debug_id, credits->rreq_debug_index); 101 } else { 102 credits->in_flight_check = 2; 103 } 104 if (WARN_ON_ONCE(server->in_flight == 0)) { 105 pr_warn_once("rreq R=%08x[%x] Zero in_flight\n", 106 credits->rreq_debug_id, credits->rreq_debug_index); 107 trace_smb3_rw_credits(credits->rreq_debug_id, 108 credits->rreq_debug_index, 109 credits->value, 110 server->credits, server->in_flight, 0, 111 cifs_trace_rw_credits_zero_in_flight); 112 } 113 server->in_flight--; 114 115 /* 116 * Rebalance credits when an op drains in_flight. For session setup, 117 * do this only when the total accumulated credits are high enough (>2) 118 * so that a newly established secondary channel can reserve credits for 119 * echoes and oplocks. We expect this to happen at the end of the final 120 * session setup response. 121 */ 122 if (server->in_flight == 0 && 123 ((optype & CIFS_OP_MASK) != CIFS_NEG_OP) && 124 ((optype & CIFS_OP_MASK) != CIFS_SESS_OP)) 125 rc = change_conf(server); 126 else if (server->in_flight == 0 && 127 ((optype & CIFS_OP_MASK) == CIFS_SESS_OP) && *val > 2) 128 rc = change_conf(server); 129 /* 130 * Sometimes server returns 0 credits on oplock break ack - we need to 131 * rebalance credits in this case. 132 */ 133 else if (server->in_flight > 0 && server->oplock_credits == 0 && 134 server->oplocks) { 135 if (server->credits > 1) { 136 server->credits--; 137 server->oplock_credits++; 138 } 139 } else if ((server->in_flight > 0) && (server->oplock_credits > 3) && 140 ((optype & CIFS_OP_MASK) == CIFS_OBREAK_OP)) 141 /* if now have too many oplock credits, rebalance so don't starve normal ops */ 142 change_conf(server); 143 144 scredits = *val; 145 in_flight = server->in_flight; 146 spin_unlock(&server->req_lock); 147 wake_up(&server->request_q); 148 149 if (reconnect_detected) { 150 trace_smb3_reconnect_detected(server->current_mid, 151 server->conn_id, server->hostname, scredits, add, in_flight); 152 153 cifs_dbg(FYI, "trying to put %d credits from the old server instance %d\n", 154 add, instance); 155 } 156 157 if (reconnect_with_invalid_credits) { 158 trace_smb3_reconnect_with_invalid_credits(server->current_mid, 159 server->conn_id, server->hostname, scredits, add, in_flight); 160 cifs_dbg(FYI, "Negotiate operation when server credits is non-zero. Optype: %d, server credits: %d, credits added: %d\n", 161 optype, scredits, add); 162 } 163 164 spin_lock(&server->srv_lock); 165 if (server->tcpStatus == CifsNeedReconnect 166 || server->tcpStatus == CifsExiting) { 167 spin_unlock(&server->srv_lock); 168 return; 169 } 170 spin_unlock(&server->srv_lock); 171 172 switch (rc) { 173 case -1: 174 /* change_conf hasn't been executed */ 175 break; 176 case 0: 177 cifs_server_dbg(VFS, "Possible client or server bug - zero credits\n"); 178 break; 179 case 1: 180 cifs_server_dbg(VFS, "disabling echoes and oplocks\n"); 181 break; 182 case 2: 183 cifs_dbg(FYI, "disabling oplocks\n"); 184 break; 185 default: 186 /* change_conf rebalanced credits for different types */ 187 break; 188 } 189 190 trace_smb3_add_credits(server->current_mid, 191 server->conn_id, server->hostname, scredits, add, in_flight); 192 cifs_dbg(FYI, "%s: added %u credits total=%d\n", __func__, add, scredits); 193 } 194 195 static void 196 smb2_set_credits(struct TCP_Server_Info *server, const int val) 197 { 198 int scredits, in_flight; 199 200 spin_lock(&server->req_lock); 201 server->credits = val; 202 if (val == 1) { 203 server->reconnect_instance++; 204 /* 205 * ChannelSequence updated for all channels in primary channel so that consistent 206 * across SMB3 requests sent on any channel. See MS-SMB2 3.2.4.1 and 3.2.7.1 207 */ 208 if (SERVER_IS_CHAN(server)) 209 server->primary_server->channel_sequence_num++; 210 else 211 server->channel_sequence_num++; 212 } 213 scredits = server->credits; 214 in_flight = server->in_flight; 215 spin_unlock(&server->req_lock); 216 217 trace_smb3_set_credits(server->current_mid, 218 server->conn_id, server->hostname, scredits, val, in_flight); 219 cifs_dbg(FYI, "%s: set %u credits\n", __func__, val); 220 221 /* don't log while holding the lock */ 222 if (val == 1) 223 cifs_dbg(FYI, "set credits to 1 due to smb2 reconnect\n"); 224 } 225 226 static int * 227 smb2_get_credits_field(struct TCP_Server_Info *server, const int optype) 228 { 229 switch (optype) { 230 case CIFS_ECHO_OP: 231 return &server->echo_credits; 232 case CIFS_OBREAK_OP: 233 return &server->oplock_credits; 234 default: 235 return &server->credits; 236 } 237 } 238 239 static unsigned int 240 smb2_get_credits(struct mid_q_entry *mid) 241 { 242 return mid->credits_received; 243 } 244 245 static int 246 smb2_wait_mtu_credits(struct TCP_Server_Info *server, size_t size, 247 size_t *num, struct cifs_credits *credits) 248 { 249 int rc = 0; 250 unsigned int scredits, in_flight; 251 252 spin_lock(&server->req_lock); 253 while (1) { 254 spin_unlock(&server->req_lock); 255 256 spin_lock(&server->srv_lock); 257 if (server->tcpStatus == CifsExiting) { 258 spin_unlock(&server->srv_lock); 259 return -ENOENT; 260 } 261 spin_unlock(&server->srv_lock); 262 263 spin_lock(&server->req_lock); 264 if (server->credits <= 0) { 265 spin_unlock(&server->req_lock); 266 cifs_num_waiters_inc(server); 267 rc = wait_event_killable(server->request_q, 268 has_credits(server, &server->credits, 1)); 269 cifs_num_waiters_dec(server); 270 if (rc) 271 return rc; 272 spin_lock(&server->req_lock); 273 } else { 274 scredits = server->credits; 275 /* can deadlock with reopen */ 276 if (scredits <= 8) { 277 *num = SMB2_MAX_BUFFER_SIZE; 278 credits->value = 0; 279 credits->instance = 0; 280 break; 281 } 282 283 /* leave some credits for reopen and other ops */ 284 scredits -= 8; 285 *num = min_t(unsigned int, size, 286 scredits * SMB2_MAX_BUFFER_SIZE); 287 288 credits->value = 289 DIV_ROUND_UP(*num, SMB2_MAX_BUFFER_SIZE); 290 credits->instance = server->reconnect_instance; 291 server->credits -= credits->value; 292 server->in_flight++; 293 if (server->in_flight > server->max_in_flight) 294 server->max_in_flight = server->in_flight; 295 break; 296 } 297 } 298 scredits = server->credits; 299 in_flight = server->in_flight; 300 spin_unlock(&server->req_lock); 301 302 trace_smb3_wait_credits(server->current_mid, 303 server->conn_id, server->hostname, scredits, -(credits->value), in_flight); 304 cifs_dbg(FYI, "%s: removed %u credits total=%d\n", 305 __func__, credits->value, scredits); 306 307 return rc; 308 } 309 310 static int 311 smb2_adjust_credits(struct TCP_Server_Info *server, 312 struct cifs_io_subrequest *subreq, 313 unsigned int /*enum smb3_rw_credits_trace*/ trace) 314 { 315 struct cifs_credits *credits = &subreq->credits; 316 int new_val = DIV_ROUND_UP(subreq->subreq.len - subreq->subreq.transferred, 317 SMB2_MAX_BUFFER_SIZE); 318 int scredits, in_flight; 319 320 if (!credits->value || credits->value == new_val) 321 return 0; 322 323 if (credits->value < new_val) { 324 trace_smb3_rw_credits(subreq->rreq->debug_id, 325 subreq->subreq.debug_index, 326 credits->value, 327 server->credits, server->in_flight, 328 new_val - credits->value, 329 cifs_trace_rw_credits_no_adjust_up); 330 trace_smb3_too_many_credits(server->current_mid, 331 server->conn_id, server->hostname, 0, credits->value - new_val, 0); 332 cifs_server_dbg(VFS, "R=%x[%x] request has less credits (%d) than required (%d)", 333 subreq->rreq->debug_id, subreq->subreq.debug_index, 334 credits->value, new_val); 335 336 return -EOPNOTSUPP; 337 } 338 339 spin_lock(&server->req_lock); 340 341 if (server->reconnect_instance != credits->instance) { 342 scredits = server->credits; 343 in_flight = server->in_flight; 344 spin_unlock(&server->req_lock); 345 346 trace_smb3_rw_credits(subreq->rreq->debug_id, 347 subreq->subreq.debug_index, 348 credits->value, 349 server->credits, server->in_flight, 350 new_val - credits->value, 351 cifs_trace_rw_credits_old_session); 352 trace_smb3_reconnect_detected(server->current_mid, 353 server->conn_id, server->hostname, scredits, 354 credits->value - new_val, in_flight); 355 cifs_server_dbg(VFS, "R=%x[%x] trying to return %d credits to old session\n", 356 subreq->rreq->debug_id, subreq->subreq.debug_index, 357 credits->value - new_val); 358 return -EAGAIN; 359 } 360 361 trace_smb3_rw_credits(subreq->rreq->debug_id, 362 subreq->subreq.debug_index, 363 credits->value, 364 server->credits, server->in_flight, 365 new_val - credits->value, trace); 366 server->credits += credits->value - new_val; 367 scredits = server->credits; 368 in_flight = server->in_flight; 369 spin_unlock(&server->req_lock); 370 wake_up(&server->request_q); 371 372 trace_smb3_adj_credits(server->current_mid, 373 server->conn_id, server->hostname, scredits, 374 credits->value - new_val, in_flight); 375 cifs_dbg(FYI, "%s: adjust added %u credits total=%d\n", 376 __func__, credits->value - new_val, scredits); 377 378 credits->value = new_val; 379 380 return 0; 381 } 382 383 static __u64 384 smb2_get_next_mid(struct TCP_Server_Info *server) 385 { 386 __u64 mid; 387 /* for SMB2 we need the current value */ 388 spin_lock(&server->mid_counter_lock); 389 mid = server->current_mid++; 390 spin_unlock(&server->mid_counter_lock); 391 return mid; 392 } 393 394 static void 395 smb2_revert_current_mid(struct TCP_Server_Info *server, const unsigned int val) 396 { 397 spin_lock(&server->mid_counter_lock); 398 if (server->current_mid >= val) 399 server->current_mid -= val; 400 spin_unlock(&server->mid_counter_lock); 401 } 402 403 static struct mid_q_entry * 404 __smb2_find_mid(struct TCP_Server_Info *server, char *buf, bool dequeue) 405 { 406 struct mid_q_entry *mid; 407 struct smb2_hdr *shdr = (struct smb2_hdr *)buf; 408 __u64 wire_mid = le64_to_cpu(shdr->MessageId); 409 410 if (shdr->ProtocolId == SMB2_TRANSFORM_PROTO_NUM) { 411 cifs_server_dbg(VFS, "Encrypted frame parsing not supported yet\n"); 412 return NULL; 413 } 414 415 spin_lock(&server->mid_queue_lock); 416 list_for_each_entry(mid, &server->pending_mid_q, qhead) { 417 if ((mid->mid == wire_mid) && 418 (mid->mid_state == MID_REQUEST_SUBMITTED) && 419 (mid->command == shdr->Command)) { 420 smb_get_mid(mid); 421 if (dequeue) { 422 list_del_init(&mid->qhead); 423 mid->deleted_from_q = true; 424 } 425 spin_unlock(&server->mid_queue_lock); 426 return mid; 427 } 428 } 429 spin_unlock(&server->mid_queue_lock); 430 return NULL; 431 } 432 433 static struct mid_q_entry * 434 smb2_find_mid(struct TCP_Server_Info *server, char *buf) 435 { 436 return __smb2_find_mid(server, buf, false); 437 } 438 439 static struct mid_q_entry * 440 smb2_find_dequeue_mid(struct TCP_Server_Info *server, char *buf) 441 { 442 return __smb2_find_mid(server, buf, true); 443 } 444 445 static void 446 smb2_dump_detail(void *buf, size_t buf_len, struct TCP_Server_Info *server) 447 { 448 #ifdef CONFIG_CIFS_DEBUG2 449 struct smb2_hdr *shdr = (struct smb2_hdr *)buf; 450 451 cifs_server_dbg(VFS, "Cmd: %d Err: 0x%x Flags: 0x%x Mid: %llu Pid: %d\n", 452 shdr->Command, shdr->Status, shdr->Flags, shdr->MessageId, 453 shdr->Id.SyncId.ProcessId); 454 if (!server->ops->check_message(buf, buf_len, server->total_read, server)) { 455 cifs_server_dbg(VFS, "smb buf %p len %u\n", buf, 456 server->ops->calc_smb_size(buf)); 457 } 458 #endif 459 } 460 461 static bool 462 smb2_need_neg(struct TCP_Server_Info *server) 463 { 464 return server->max_read == 0; 465 } 466 467 static int 468 smb2_negotiate(const unsigned int xid, 469 struct cifs_ses *ses, 470 struct TCP_Server_Info *server) 471 { 472 int rc; 473 474 spin_lock(&server->mid_counter_lock); 475 server->current_mid = 0; 476 spin_unlock(&server->mid_counter_lock); 477 rc = SMB2_negotiate(xid, ses, server); 478 return rc; 479 } 480 481 static inline unsigned int 482 prevent_zero_iosize(unsigned int size, const char *type) 483 { 484 if (size == 0) { 485 cifs_dbg(VFS, "SMB: Zero %ssize calculated, using minimum value %u\n", 486 type, CIFS_MIN_DEFAULT_IOSIZE); 487 return CIFS_MIN_DEFAULT_IOSIZE; 488 } 489 return size; 490 } 491 492 static unsigned int 493 smb2_negotiate_wsize(struct cifs_tcon *tcon, struct smb3_fs_context *ctx) 494 { 495 struct TCP_Server_Info *server = tcon->ses->server; 496 unsigned int wsize; 497 498 /* start with specified wsize, or default */ 499 wsize = ctx->got_wsize ? ctx->vol_wsize : CIFS_DEFAULT_IOSIZE; 500 wsize = min_t(unsigned int, wsize, server->max_write); 501 if (!(server->capabilities & SMB2_GLOBAL_CAP_LARGE_MTU)) 502 wsize = min_t(unsigned int, wsize, SMB2_MAX_BUFFER_SIZE); 503 504 return prevent_zero_iosize(wsize, "w"); 505 } 506 507 static unsigned int 508 smb3_negotiate_wsize(struct cifs_tcon *tcon, struct smb3_fs_context *ctx) 509 { 510 struct TCP_Server_Info *server = tcon->ses->server; 511 unsigned int wsize; 512 513 /* start with specified wsize, or default */ 514 wsize = ctx->got_wsize ? ctx->vol_wsize : SMB3_DEFAULT_IOSIZE; 515 wsize = min_t(unsigned int, wsize, server->max_write); 516 #ifdef CONFIG_CIFS_SMB_DIRECT 517 if (server->rdma) { 518 const struct smbdirect_socket_parameters *sp = 519 smbd_get_parameters(server->smbd_conn); 520 521 if (server->sign) 522 /* 523 * Account for SMB2 data transfer packet header and 524 * possible encryption header 525 */ 526 wsize = min_t(unsigned int, 527 wsize, 528 sp->max_fragmented_send_size - 529 SMB2_READWRITE_PDU_HEADER_SIZE - 530 sizeof(struct smb2_transform_hdr)); 531 else 532 wsize = min_t(unsigned int, 533 wsize, sp->max_read_write_size); 534 } 535 #endif 536 if (!(server->capabilities & SMB2_GLOBAL_CAP_LARGE_MTU)) 537 wsize = min_t(unsigned int, wsize, SMB2_MAX_BUFFER_SIZE); 538 539 return prevent_zero_iosize(wsize, "w"); 540 } 541 542 static unsigned int 543 smb2_negotiate_rsize(struct cifs_tcon *tcon, struct smb3_fs_context *ctx) 544 { 545 struct TCP_Server_Info *server = tcon->ses->server; 546 unsigned int rsize; 547 548 /* start with specified rsize, or default */ 549 rsize = ctx->got_rsize ? ctx->vol_rsize : CIFS_DEFAULT_IOSIZE; 550 rsize = min_t(unsigned int, rsize, server->max_read); 551 552 if (!(server->capabilities & SMB2_GLOBAL_CAP_LARGE_MTU)) 553 rsize = min_t(unsigned int, rsize, SMB2_MAX_BUFFER_SIZE); 554 555 return prevent_zero_iosize(rsize, "r"); 556 } 557 558 static unsigned int 559 smb3_negotiate_rsize(struct cifs_tcon *tcon, struct smb3_fs_context *ctx) 560 { 561 struct TCP_Server_Info *server = tcon->ses->server; 562 unsigned int rsize; 563 564 /* start with specified rsize, or default */ 565 rsize = ctx->got_rsize ? ctx->vol_rsize : SMB3_DEFAULT_IOSIZE; 566 rsize = min_t(unsigned int, rsize, server->max_read); 567 #ifdef CONFIG_CIFS_SMB_DIRECT 568 if (server->rdma) { 569 const struct smbdirect_socket_parameters *sp = 570 smbd_get_parameters(server->smbd_conn); 571 572 if (server->sign) 573 /* 574 * Account for SMB2 data transfer packet header and 575 * possible encryption header 576 */ 577 rsize = min_t(unsigned int, 578 rsize, 579 sp->max_fragmented_recv_size - 580 SMB2_READWRITE_PDU_HEADER_SIZE - 581 sizeof(struct smb2_transform_hdr)); 582 else 583 rsize = min_t(unsigned int, 584 rsize, sp->max_read_write_size); 585 } 586 #endif 587 588 if (!(server->capabilities & SMB2_GLOBAL_CAP_LARGE_MTU)) 589 rsize = min_t(unsigned int, rsize, SMB2_MAX_BUFFER_SIZE); 590 591 return prevent_zero_iosize(rsize, "r"); 592 } 593 594 /* 595 * compare two interfaces a and b 596 * return 0 if everything matches. 597 * return 1 if a is rdma capable, or rss capable, or has higher link speed 598 * return -1 otherwise. 599 */ 600 static int 601 iface_cmp(struct cifs_server_iface *a, struct cifs_server_iface *b) 602 { 603 int cmp_ret = 0; 604 605 WARN_ON(!a || !b); 606 if (a->rdma_capable == b->rdma_capable) { 607 if (a->rss_capable == b->rss_capable) { 608 if (a->speed == b->speed) { 609 cmp_ret = cifs_ipaddr_cmp((struct sockaddr *) &a->sockaddr, 610 (struct sockaddr *) &b->sockaddr); 611 if (!cmp_ret) 612 return 0; 613 else if (cmp_ret > 0) 614 return 1; 615 else 616 return -1; 617 } else if (a->speed > b->speed) 618 return 1; 619 else 620 return -1; 621 } else if (a->rss_capable > b->rss_capable) 622 return 1; 623 else 624 return -1; 625 } else if (a->rdma_capable > b->rdma_capable) 626 return 1; 627 else 628 return -1; 629 } 630 631 static int 632 parse_server_interfaces(struct network_interface_info_ioctl_rsp *buf, 633 size_t buf_len, struct cifs_ses *ses, bool in_mount) 634 { 635 struct network_interface_info_ioctl_rsp *p; 636 struct sockaddr_in *addr4; 637 struct sockaddr_in6 *addr6; 638 struct smb_sockaddr_in *p4; 639 struct smb_sockaddr_in6 *p6; 640 struct cifs_server_iface *info = NULL, *iface = NULL, *niface = NULL; 641 struct cifs_server_iface tmp_iface; 642 __be16 port; 643 ssize_t bytes_left; 644 size_t next = 0; 645 int nb_iface = 0; 646 int rc = 0, ret = 0; 647 648 bytes_left = buf_len; 649 p = buf; 650 651 spin_lock(&ses->iface_lock); 652 653 /* 654 * Go through iface_list and mark them as inactive 655 */ 656 list_for_each_entry_safe(iface, niface, &ses->iface_list, 657 iface_head) 658 iface->is_active = 0; 659 660 spin_unlock(&ses->iface_lock); 661 662 /* 663 * Samba server e.g. can return an empty interface list in some cases, 664 * which would only be a problem if we were requesting multichannel 665 */ 666 if (bytes_left == 0) { 667 /* avoid spamming logs every 10 minutes, so log only in mount */ 668 if ((ses->chan_max > 1) && in_mount) 669 cifs_dbg(VFS, 670 "multichannel not available\n" 671 "Empty network interface list returned by server %s\n", 672 ses->server->hostname); 673 rc = -EOPNOTSUPP; 674 goto out; 675 } 676 677 spin_lock(&ses->server->srv_lock); 678 if (ses->server->dstaddr.ss_family == AF_INET) 679 port = ((struct sockaddr_in *)&ses->server->dstaddr)->sin_port; 680 else if (ses->server->dstaddr.ss_family == AF_INET6) 681 port = ((struct sockaddr_in6 *)&ses->server->dstaddr)->sin6_port; 682 else 683 port = cpu_to_be16(CIFS_PORT); 684 spin_unlock(&ses->server->srv_lock); 685 686 while (bytes_left >= (ssize_t)sizeof(*p)) { 687 memset(&tmp_iface, 0, sizeof(tmp_iface)); 688 /* default to 1Gbps when link speed is unset */ 689 tmp_iface.speed = le64_to_cpu(p->LinkSpeed) ?: 1000000000; 690 tmp_iface.rdma_capable = le32_to_cpu(p->Capability & RDMA_CAPABLE) ? 1 : 0; 691 tmp_iface.rss_capable = le32_to_cpu(p->Capability & RSS_CAPABLE) ? 1 : 0; 692 693 switch (p->Family) { 694 /* 695 * The kernel and wire socket structures have the same 696 * layout and use network byte order but make the 697 * conversion explicit in case either one changes. 698 */ 699 case INTERNETWORK: 700 addr4 = (struct sockaddr_in *)&tmp_iface.sockaddr; 701 p4 = (struct smb_sockaddr_in *)p->Buffer; 702 addr4->sin_family = AF_INET; 703 memcpy(&addr4->sin_addr, &p4->IPv4Address, 4); 704 705 /* [MS-SMB2] 2.2.32.5.1.1 Clients MUST ignore these */ 706 addr4->sin_port = port; 707 708 cifs_dbg(FYI, "%s: ipv4 %pI4\n", __func__, 709 &addr4->sin_addr); 710 break; 711 case INTERNETWORKV6: 712 addr6 = (struct sockaddr_in6 *)&tmp_iface.sockaddr; 713 p6 = (struct smb_sockaddr_in6 *)p->Buffer; 714 addr6->sin6_family = AF_INET6; 715 memcpy(&addr6->sin6_addr, &p6->IPv6Address, 16); 716 717 /* [MS-SMB2] 2.2.32.5.1.2 Clients MUST ignore these */ 718 addr6->sin6_flowinfo = 0; 719 addr6->sin6_scope_id = 0; 720 addr6->sin6_port = port; 721 722 cifs_dbg(FYI, "%s: ipv6 %pI6\n", __func__, 723 &addr6->sin6_addr); 724 break; 725 default: 726 cifs_dbg(VFS, 727 "%s: skipping unsupported socket family\n", 728 __func__); 729 goto next_iface; 730 } 731 732 /* 733 * The iface_list is assumed to be sorted by speed. 734 * Check if the new interface exists in that list. 735 * NEVER change iface. it could be in use. 736 * Add a new one instead 737 */ 738 spin_lock(&ses->iface_lock); 739 list_for_each_entry_safe(iface, niface, &ses->iface_list, 740 iface_head) { 741 ret = iface_cmp(iface, &tmp_iface); 742 if (!ret) { 743 iface->is_active = 1; 744 spin_unlock(&ses->iface_lock); 745 goto next_iface; 746 } else if (ret < 0) { 747 /* all remaining ifaces are slower */ 748 kref_get(&iface->refcount); 749 break; 750 } 751 } 752 spin_unlock(&ses->iface_lock); 753 754 /* no match. insert the entry in the list */ 755 info = kmalloc_obj(struct cifs_server_iface); 756 if (!info) { 757 rc = -ENOMEM; 758 goto out; 759 } 760 memcpy(info, &tmp_iface, sizeof(tmp_iface)); 761 762 /* add this new entry to the list */ 763 kref_init(&info->refcount); 764 info->is_active = 1; 765 766 cifs_dbg(FYI, "%s: adding iface %zu\n", __func__, ses->iface_count); 767 cifs_dbg(FYI, "%s: speed %zu bps\n", __func__, info->speed); 768 cifs_dbg(FYI, "%s: capabilities 0x%08x\n", __func__, 769 le32_to_cpu(p->Capability)); 770 771 spin_lock(&ses->iface_lock); 772 if (!list_entry_is_head(iface, &ses->iface_list, iface_head)) { 773 list_add_tail(&info->iface_head, &iface->iface_head); 774 kref_put(&iface->refcount, release_iface); 775 } else 776 list_add_tail(&info->iface_head, &ses->iface_list); 777 778 ses->iface_count++; 779 spin_unlock(&ses->iface_lock); 780 next_iface: 781 nb_iface++; 782 next = le32_to_cpu(p->Next); 783 if (!next) { 784 bytes_left -= sizeof(*p); 785 break; 786 } 787 /* Validate that Next doesn't point beyond the buffer */ 788 if (next > bytes_left) { 789 cifs_dbg(VFS, "%s: invalid Next pointer %zu > %zd\n", 790 __func__, next, bytes_left); 791 rc = -EINVAL; 792 goto out; 793 } 794 p = (struct network_interface_info_ioctl_rsp *)((u8 *)p+next); 795 bytes_left -= next; 796 } 797 798 if (!nb_iface) { 799 cifs_dbg(VFS, "%s: malformed interface info\n", __func__); 800 rc = -EINVAL; 801 goto out; 802 } 803 804 /* Azure rounds the buffer size up 8, to a 16 byte boundary */ 805 if ((bytes_left > 8) || 806 (bytes_left >= offsetof(struct network_interface_info_ioctl_rsp, Next) 807 + sizeof(p->Next) && p->Next)) 808 cifs_dbg(VFS, "%s: incomplete interface info\n", __func__); 809 810 out: 811 /* 812 * Go through the list again and put the inactive entries 813 */ 814 spin_lock(&ses->iface_lock); 815 list_for_each_entry_safe(iface, niface, &ses->iface_list, 816 iface_head) { 817 if (!iface->is_active) { 818 list_del(&iface->iface_head); 819 kref_put(&iface->refcount, release_iface); 820 ses->iface_count--; 821 } 822 } 823 spin_unlock(&ses->iface_lock); 824 825 return rc; 826 } 827 828 int 829 SMB3_request_interfaces(const unsigned int xid, struct cifs_tcon *tcon, bool in_mount) 830 { 831 int rc; 832 unsigned int ret_data_len = 0; 833 struct network_interface_info_ioctl_rsp *out_buf = NULL; 834 struct cifs_ses *ses = tcon->ses; 835 struct TCP_Server_Info *pserver; 836 837 /* do not query too frequently */ 838 spin_lock(&ses->iface_lock); 839 if (ses->iface_last_update && 840 time_before(jiffies, ses->iface_last_update + 841 (SMB_INTERFACE_POLL_INTERVAL * HZ))) { 842 spin_unlock(&ses->iface_lock); 843 return 0; 844 } 845 846 ses->iface_last_update = jiffies; 847 848 spin_unlock(&ses->iface_lock); 849 850 rc = SMB2_ioctl(xid, tcon, NO_FILE_ID, NO_FILE_ID, 851 FSCTL_QUERY_NETWORK_INTERFACE_INFO, 852 NULL /* no data input */, 0 /* no data input */, 853 CIFSMaxBufSize, (char **)&out_buf, &ret_data_len); 854 if (rc == -EOPNOTSUPP) { 855 cifs_dbg(FYI, 856 "server does not support query network interfaces\n"); 857 ret_data_len = 0; 858 } else if (rc != 0) { 859 cifs_tcon_dbg(VFS, "error %d on ioctl to get interface list\n", rc); 860 goto out; 861 } 862 863 rc = parse_server_interfaces(out_buf, ret_data_len, ses, in_mount); 864 if (rc) 865 goto out; 866 867 /* check if iface is still active */ 868 spin_lock(&ses->chan_lock); 869 pserver = ses->chans[0].server; 870 if (pserver && !cifs_chan_is_iface_active(ses, pserver)) { 871 spin_unlock(&ses->chan_lock); 872 cifs_chan_update_iface(ses, pserver); 873 spin_lock(&ses->chan_lock); 874 } 875 spin_unlock(&ses->chan_lock); 876 877 out: 878 kfree(out_buf); 879 return rc; 880 } 881 882 static void 883 smb3_qfs_tcon(const unsigned int xid, struct cifs_tcon *tcon, 884 struct cifs_sb_info *cifs_sb) 885 { 886 int rc; 887 __le16 srch_path = 0; /* Null - open root of share */ 888 u8 oplock = SMB2_OPLOCK_LEVEL_NONE; 889 struct cifs_open_parms oparms; 890 struct cifs_fid fid; 891 struct cached_fid *cfid = NULL; 892 893 oparms = (struct cifs_open_parms) { 894 .tcon = tcon, 895 .path = "", 896 .desired_access = FILE_READ_ATTRIBUTES, 897 .disposition = FILE_OPEN, 898 .create_options = cifs_create_options(cifs_sb, 0), 899 .fid = &fid, 900 }; 901 902 rc = open_cached_dir(xid, tcon, "", cifs_sb, false, &cfid); 903 if (rc == 0) 904 memcpy(&fid, &cfid->fid, sizeof(struct cifs_fid)); 905 else 906 rc = SMB2_open(xid, &oparms, &srch_path, &oplock, NULL, NULL, 907 NULL, NULL); 908 if (rc) 909 return; 910 911 SMB3_request_interfaces(xid, tcon, true /* called during mount */); 912 913 SMB2_QFS_attr(xid, tcon, fid.persistent_fid, fid.volatile_fid, 914 FS_ATTRIBUTE_INFORMATION); 915 SMB2_QFS_attr(xid, tcon, fid.persistent_fid, fid.volatile_fid, 916 FS_DEVICE_INFORMATION); 917 SMB2_QFS_attr(xid, tcon, fid.persistent_fid, fid.volatile_fid, 918 FS_VOLUME_INFORMATION); 919 SMB2_QFS_attr(xid, tcon, fid.persistent_fid, fid.volatile_fid, 920 FS_SECTOR_SIZE_INFORMATION); /* SMB3 specific */ 921 if (cfid == NULL) 922 SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid); 923 else 924 close_cached_dir(cfid); 925 } 926 927 static void 928 smb2_qfs_tcon(const unsigned int xid, struct cifs_tcon *tcon, 929 struct cifs_sb_info *cifs_sb) 930 { 931 int rc; 932 __le16 srch_path = 0; /* Null - open root of share */ 933 u8 oplock = SMB2_OPLOCK_LEVEL_NONE; 934 struct cifs_open_parms oparms; 935 struct cifs_fid fid; 936 937 oparms = (struct cifs_open_parms) { 938 .tcon = tcon, 939 .path = "", 940 .desired_access = FILE_READ_ATTRIBUTES, 941 .disposition = FILE_OPEN, 942 .create_options = cifs_create_options(cifs_sb, 0), 943 .fid = &fid, 944 }; 945 946 rc = SMB2_open(xid, &oparms, &srch_path, &oplock, NULL, NULL, 947 NULL, NULL); 948 if (rc) 949 return; 950 951 SMB2_QFS_attr(xid, tcon, fid.persistent_fid, fid.volatile_fid, 952 FS_ATTRIBUTE_INFORMATION); 953 SMB2_QFS_attr(xid, tcon, fid.persistent_fid, fid.volatile_fid, 954 FS_DEVICE_INFORMATION); 955 SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid); 956 } 957 958 static int 959 smb2_is_path_accessible(const unsigned int xid, struct cifs_tcon *tcon, 960 struct cifs_sb_info *cifs_sb, const char *full_path) 961 { 962 __le16 *utf16_path; 963 __u8 oplock = SMB2_OPLOCK_LEVEL_NONE; 964 int err_buftype = CIFS_NO_BUFFER; 965 struct cifs_open_parms oparms; 966 struct kvec err_iov = {}; 967 struct cifs_fid fid; 968 struct cached_fid *cfid; 969 bool islink; 970 int rc, rc2; 971 972 rc = open_cached_dir(xid, tcon, full_path, cifs_sb, true, &cfid); 973 if (!rc) { 974 close_cached_dir(cfid); 975 return 0; 976 } 977 978 utf16_path = cifs_convert_path_to_utf16(full_path, cifs_sb); 979 if (!utf16_path) 980 return -ENOMEM; 981 982 oparms = (struct cifs_open_parms) { 983 .tcon = tcon, 984 .path = full_path, 985 .desired_access = FILE_READ_ATTRIBUTES, 986 .disposition = FILE_OPEN, 987 .create_options = cifs_create_options(cifs_sb, 0), 988 .fid = &fid, 989 }; 990 991 rc = SMB2_open(xid, &oparms, utf16_path, &oplock, NULL, NULL, 992 &err_iov, &err_buftype); 993 if (rc) { 994 struct smb2_hdr *hdr = err_iov.iov_base; 995 996 if (unlikely(!hdr || err_buftype == CIFS_NO_BUFFER)) 997 goto out; 998 999 if (rc != -EREMOTE && hdr->Status == STATUS_OBJECT_NAME_INVALID) { 1000 rc2 = cifs_inval_name_dfs_link_error(xid, tcon, cifs_sb, 1001 full_path, &islink); 1002 if (rc2) { 1003 rc = rc2; 1004 goto out; 1005 } 1006 if (islink) 1007 rc = -EREMOTE; 1008 } 1009 if (rc == -EREMOTE && IS_ENABLED(CONFIG_CIFS_DFS_UPCALL) && 1010 (cifs_sb_flags(cifs_sb) & CIFS_MOUNT_NO_DFS)) 1011 rc = -EOPNOTSUPP; 1012 goto out; 1013 } 1014 1015 rc = SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid); 1016 1017 out: 1018 free_rsp_buf(err_buftype, err_iov.iov_base); 1019 kfree(utf16_path); 1020 return rc; 1021 } 1022 1023 static int smb2_get_srv_inum(const unsigned int xid, struct cifs_tcon *tcon, 1024 struct cifs_sb_info *cifs_sb, const char *full_path, 1025 u64 *uniqueid, struct cifs_open_info_data *data) 1026 { 1027 *uniqueid = le64_to_cpu(data->fi.IndexNumber); 1028 return 0; 1029 } 1030 1031 static int smb2_query_file_info(const unsigned int xid, struct cifs_tcon *tcon, 1032 struct cifsFileInfo *cfile, struct cifs_open_info_data *data) 1033 { 1034 struct cifs_fid *fid = &cfile->fid; 1035 1036 if (cfile->symlink_target) { 1037 data->symlink_target = kstrdup(cfile->symlink_target, GFP_KERNEL); 1038 if (!data->symlink_target) 1039 return -ENOMEM; 1040 } 1041 data->contains_posix_file_info = false; 1042 return SMB2_query_info(xid, tcon, fid->persistent_fid, fid->volatile_fid, &data->fi); 1043 } 1044 1045 #ifdef CONFIG_CIFS_XATTR 1046 static ssize_t 1047 move_smb2_ea_to_cifs(char *dst, size_t dst_size, 1048 struct smb2_file_full_ea_info *src, size_t src_size, 1049 const unsigned char *ea_name) 1050 { 1051 int rc = 0; 1052 unsigned int ea_name_len = ea_name ? strlen(ea_name) : 0; 1053 char *name, *value; 1054 size_t buf_size = dst_size; 1055 size_t name_len, value_len, user_name_len; 1056 1057 while (src_size > 0) { 1058 name_len = (size_t)src->ea_name_length; 1059 value_len = (size_t)le16_to_cpu(src->ea_value_length); 1060 1061 if (name_len == 0) 1062 break; 1063 1064 if (src_size < 8 + name_len + 1 + value_len) { 1065 cifs_dbg(FYI, "EA entry goes beyond length of list\n"); 1066 rc = smb_EIO2(smb_eio_trace_ea_overrun, 1067 src_size, 8 + name_len + 1 + value_len); 1068 goto out; 1069 } 1070 1071 name = &src->ea_data[0]; 1072 value = &src->ea_data[src->ea_name_length + 1]; 1073 1074 if (ea_name) { 1075 if (ea_name_len == name_len && 1076 memcmp(ea_name, name, name_len) == 0) { 1077 rc = value_len; 1078 if (dst_size == 0) 1079 goto out; 1080 if (dst_size < value_len) { 1081 rc = -ERANGE; 1082 goto out; 1083 } 1084 memcpy(dst, value, value_len); 1085 goto out; 1086 } 1087 } else { 1088 /* 'user.' plus a terminating null */ 1089 user_name_len = 5 + 1 + name_len; 1090 1091 if (buf_size == 0) { 1092 /* skip copy - calc size only */ 1093 rc += user_name_len; 1094 } else if (dst_size >= user_name_len) { 1095 dst_size -= user_name_len; 1096 memcpy(dst, "user.", 5); 1097 dst += 5; 1098 memcpy(dst, src->ea_data, name_len); 1099 dst += name_len; 1100 *dst = 0; 1101 ++dst; 1102 rc += user_name_len; 1103 } else { 1104 /* stop before overrun buffer */ 1105 rc = -ERANGE; 1106 break; 1107 } 1108 } 1109 1110 if (!src->next_entry_offset) 1111 break; 1112 1113 if (src_size < le32_to_cpu(src->next_entry_offset)) { 1114 /* stop before overrun buffer */ 1115 rc = -ERANGE; 1116 break; 1117 } 1118 src_size -= le32_to_cpu(src->next_entry_offset); 1119 src = (void *)((char *)src + 1120 le32_to_cpu(src->next_entry_offset)); 1121 } 1122 1123 /* didn't find the named attribute */ 1124 if (ea_name) 1125 rc = -ENODATA; 1126 1127 out: 1128 return (ssize_t)rc; 1129 } 1130 1131 static ssize_t 1132 smb2_query_eas(const unsigned int xid, struct cifs_tcon *tcon, 1133 const unsigned char *path, const unsigned char *ea_name, 1134 char *ea_data, size_t buf_size, 1135 struct cifs_sb_info *cifs_sb) 1136 { 1137 int rc; 1138 struct kvec rsp_iov = {NULL, 0}; 1139 int buftype = CIFS_NO_BUFFER; 1140 struct smb2_query_info_rsp *rsp; 1141 struct smb2_file_full_ea_info *info = NULL; 1142 1143 rc = smb2_query_info_compound(xid, tcon, path, 1144 FILE_READ_EA, 1145 FILE_FULL_EA_INFORMATION, 1146 SMB2_O_INFO_FILE, 1147 CIFSMaxBufSize - 1148 MAX_SMB2_CREATE_RESPONSE_SIZE - 1149 MAX_SMB2_CLOSE_RESPONSE_SIZE, 1150 &rsp_iov, &buftype, cifs_sb); 1151 if (rc) { 1152 /* 1153 * If ea_name is NULL (listxattr) and there are no EAs, 1154 * return 0 as it's not an error. Otherwise, the specified 1155 * ea_name was not found. 1156 */ 1157 if (!ea_name && rc == -ENODATA) 1158 rc = 0; 1159 goto qeas_exit; 1160 } 1161 1162 rsp = (struct smb2_query_info_rsp *)rsp_iov.iov_base; 1163 rc = smb2_validate_iov(le16_to_cpu(rsp->OutputBufferOffset), 1164 le32_to_cpu(rsp->OutputBufferLength), 1165 &rsp_iov, 1166 sizeof(struct smb2_file_full_ea_info)); 1167 if (rc) 1168 goto qeas_exit; 1169 1170 info = (struct smb2_file_full_ea_info *)( 1171 le16_to_cpu(rsp->OutputBufferOffset) + (char *)rsp); 1172 rc = move_smb2_ea_to_cifs(ea_data, buf_size, info, 1173 le32_to_cpu(rsp->OutputBufferLength), ea_name); 1174 1175 qeas_exit: 1176 free_rsp_buf(buftype, rsp_iov.iov_base); 1177 return rc; 1178 } 1179 1180 static int 1181 smb2_set_ea(const unsigned int xid, struct cifs_tcon *tcon, 1182 const char *path, const char *ea_name, const void *ea_value, 1183 const __u16 ea_value_len, const struct nls_table *nls_codepage, 1184 struct cifs_sb_info *cifs_sb) 1185 { 1186 struct smb2_compound_vars *vars; 1187 struct cifs_ses *ses = tcon->ses; 1188 struct TCP_Server_Info *server; 1189 struct smb_rqst *rqst; 1190 struct kvec *rsp_iov; 1191 __le16 *utf16_path = NULL; 1192 int ea_name_len = strlen(ea_name); 1193 int flags = CIFS_CP_CREATE_CLOSE_OP; 1194 int len; 1195 int resp_buftype[3]; 1196 struct cifs_open_parms oparms; 1197 __u8 oplock = SMB2_OPLOCK_LEVEL_NONE; 1198 struct cifs_fid fid; 1199 unsigned int size[1]; 1200 void *data[1]; 1201 struct smb2_file_full_ea_info *ea; 1202 struct smb2_query_info_rsp *rsp; 1203 int rc, used_len = 0; 1204 int retries = 0, cur_sleep = 0; 1205 1206 replay_again: 1207 /* reinitialize for possible replay */ 1208 used_len = 0; 1209 flags = CIFS_CP_CREATE_CLOSE_OP; 1210 oplock = SMB2_OPLOCK_LEVEL_NONE; 1211 server = cifs_pick_channel(ses); 1212 1213 if (smb3_encryption_required(tcon)) 1214 flags |= CIFS_TRANSFORM_REQ; 1215 1216 if (ea_name_len > 255) 1217 return -EINVAL; 1218 1219 utf16_path = cifs_convert_path_to_utf16(path, cifs_sb); 1220 if (!utf16_path) 1221 return -ENOMEM; 1222 1223 ea = NULL; 1224 resp_buftype[0] = resp_buftype[1] = resp_buftype[2] = CIFS_NO_BUFFER; 1225 vars = kzalloc_obj(*vars); 1226 if (!vars) { 1227 rc = -ENOMEM; 1228 goto out_free_path; 1229 } 1230 rqst = vars->rqst; 1231 rsp_iov = vars->rsp_iov; 1232 1233 if (ses->server->ops->query_all_EAs) { 1234 if (!ea_value) { 1235 rc = ses->server->ops->query_all_EAs(xid, tcon, path, 1236 ea_name, NULL, 0, 1237 cifs_sb); 1238 if (rc == -ENODATA) 1239 goto sea_exit; 1240 } else { 1241 /* If we are adding a attribute we should first check 1242 * if there will be enough space available to store 1243 * the new EA. If not we should not add it since we 1244 * would not be able to even read the EAs back. 1245 */ 1246 rc = smb2_query_info_compound(xid, tcon, path, 1247 FILE_READ_EA, 1248 FILE_FULL_EA_INFORMATION, 1249 SMB2_O_INFO_FILE, 1250 CIFSMaxBufSize - 1251 MAX_SMB2_CREATE_RESPONSE_SIZE - 1252 MAX_SMB2_CLOSE_RESPONSE_SIZE, 1253 &rsp_iov[1], &resp_buftype[1], cifs_sb); 1254 if (rc == 0) { 1255 rsp = (struct smb2_query_info_rsp *)rsp_iov[1].iov_base; 1256 used_len = le32_to_cpu(rsp->OutputBufferLength); 1257 } 1258 free_rsp_buf(resp_buftype[1], rsp_iov[1].iov_base); 1259 resp_buftype[1] = CIFS_NO_BUFFER; 1260 memset(&rsp_iov[1], 0, sizeof(rsp_iov[1])); 1261 rc = 0; 1262 1263 /* Use a fudge factor of 256 bytes in case we collide 1264 * with a different set_EAs command. 1265 */ 1266 if (CIFSMaxBufSize - MAX_SMB2_CREATE_RESPONSE_SIZE - 1267 MAX_SMB2_CLOSE_RESPONSE_SIZE - 256 < 1268 used_len + ea_name_len + ea_value_len + 1) { 1269 rc = -ENOSPC; 1270 goto sea_exit; 1271 } 1272 } 1273 } 1274 1275 /* Open */ 1276 rqst[0].rq_iov = vars->open_iov; 1277 rqst[0].rq_nvec = SMB2_CREATE_IOV_SIZE; 1278 1279 oparms = (struct cifs_open_parms) { 1280 .tcon = tcon, 1281 .path = path, 1282 .desired_access = FILE_WRITE_EA, 1283 .disposition = FILE_OPEN, 1284 .create_options = cifs_create_options(cifs_sb, 0), 1285 .fid = &fid, 1286 .replay = !!(retries), 1287 }; 1288 1289 rc = SMB2_open_init(tcon, server, 1290 &rqst[0], &oplock, &oparms, utf16_path); 1291 if (rc) 1292 goto sea_exit; 1293 smb2_set_next_command(tcon, &rqst[0]); 1294 1295 1296 /* Set Info */ 1297 rqst[1].rq_iov = vars->si_iov; 1298 rqst[1].rq_nvec = 1; 1299 1300 len = sizeof(*ea) + ea_name_len + ea_value_len + 1; 1301 ea = kzalloc(len, GFP_KERNEL); 1302 if (ea == NULL) { 1303 rc = -ENOMEM; 1304 goto sea_exit; 1305 } 1306 1307 ea->ea_name_length = ea_name_len; 1308 ea->ea_value_length = cpu_to_le16(ea_value_len); 1309 memcpy(ea->ea_data, ea_name, ea_name_len + 1); 1310 memcpy(ea->ea_data + ea_name_len + 1, ea_value, ea_value_len); 1311 1312 size[0] = len; 1313 data[0] = ea; 1314 1315 rc = SMB2_set_info_init(tcon, server, 1316 &rqst[1], COMPOUND_FID, 1317 COMPOUND_FID, current->tgid, 1318 FILE_FULL_EA_INFORMATION, 1319 SMB2_O_INFO_FILE, 0, data, size); 1320 if (rc) 1321 goto sea_exit; 1322 smb2_set_next_command(tcon, &rqst[1]); 1323 smb2_set_related(&rqst[1]); 1324 1325 /* Close */ 1326 rqst[2].rq_iov = &vars->close_iov; 1327 rqst[2].rq_nvec = 1; 1328 rc = SMB2_close_init(tcon, server, 1329 &rqst[2], COMPOUND_FID, COMPOUND_FID, false); 1330 if (rc) 1331 goto sea_exit; 1332 smb2_set_related(&rqst[2]); 1333 1334 if (retries) { 1335 /* Back-off before retry */ 1336 if (cur_sleep) 1337 msleep(cur_sleep); 1338 smb2_set_replay(server, &rqst[0]); 1339 smb2_set_replay(server, &rqst[1]); 1340 smb2_set_replay(server, &rqst[2]); 1341 } 1342 1343 rc = compound_send_recv(xid, ses, server, 1344 flags, 3, rqst, 1345 resp_buftype, rsp_iov); 1346 /* no need to bump num_remote_opens because handle immediately closed */ 1347 1348 sea_exit: 1349 kfree(ea); 1350 SMB2_open_free(&rqst[0]); 1351 SMB2_set_info_free(&rqst[1]); 1352 SMB2_close_free(&rqst[2]); 1353 free_rsp_buf(resp_buftype[0], rsp_iov[0].iov_base); 1354 free_rsp_buf(resp_buftype[1], rsp_iov[1].iov_base); 1355 free_rsp_buf(resp_buftype[2], rsp_iov[2].iov_base); 1356 kfree(vars); 1357 out_free_path: 1358 kfree(utf16_path); 1359 1360 if (is_replayable_error(rc) && 1361 smb2_should_replay(tcon, &retries, &cur_sleep)) 1362 goto replay_again; 1363 1364 return rc; 1365 } 1366 #endif 1367 1368 static bool 1369 smb2_can_echo(struct TCP_Server_Info *server) 1370 { 1371 return server->echoes; 1372 } 1373 1374 static void 1375 smb2_clear_stats(struct cifs_tcon *tcon) 1376 { 1377 int i; 1378 1379 for (i = 0; i < NUMBER_OF_SMB2_COMMANDS; i++) { 1380 atomic_set(&tcon->stats.smb2_stats.smb2_com_sent[i], 0); 1381 atomic_set(&tcon->stats.smb2_stats.smb2_com_failed[i], 0); 1382 } 1383 } 1384 1385 static void 1386 smb2_dump_share_caps(struct seq_file *m, struct cifs_tcon *tcon) 1387 { 1388 seq_puts(m, "\n\tShare Capabilities:"); 1389 if (tcon->capabilities & SMB2_SHARE_CAP_DFS) 1390 seq_puts(m, " DFS,"); 1391 if (tcon->capabilities & SMB2_SHARE_CAP_CONTINUOUS_AVAILABILITY) 1392 seq_puts(m, " CONTINUOUS AVAILABILITY,"); 1393 if (tcon->capabilities & SMB2_SHARE_CAP_SCALEOUT) 1394 seq_puts(m, " SCALEOUT,"); 1395 if (tcon->capabilities & SMB2_SHARE_CAP_CLUSTER) 1396 seq_puts(m, " CLUSTER,"); 1397 if (tcon->capabilities & SMB2_SHARE_CAP_ASYMMETRIC) 1398 seq_puts(m, " ASYMMETRIC,"); 1399 if (tcon->capabilities == 0) 1400 seq_puts(m, " None"); 1401 if (tcon->ss_flags & SSINFO_FLAGS_ALIGNED_DEVICE) 1402 seq_puts(m, " Aligned,"); 1403 if (tcon->ss_flags & SSINFO_FLAGS_PARTITION_ALIGNED_ON_DEVICE) 1404 seq_puts(m, " Partition Aligned,"); 1405 if (tcon->ss_flags & SSINFO_FLAGS_NO_SEEK_PENALTY) 1406 seq_puts(m, " SSD,"); 1407 if (tcon->ss_flags & SSINFO_FLAGS_TRIM_ENABLED) 1408 seq_puts(m, " TRIM-support,"); 1409 1410 seq_printf(m, "\tShare Flags: 0x%x", tcon->share_flags); 1411 seq_printf(m, "\n\ttid: 0x%x", tcon->tid); 1412 if (tcon->perf_sector_size) 1413 seq_printf(m, "\tOptimal sector size: 0x%x", 1414 tcon->perf_sector_size); 1415 seq_printf(m, "\tMaximal Access: 0x%x", tcon->maximal_access); 1416 } 1417 1418 static void 1419 smb2_print_stats(struct seq_file *m, struct cifs_tcon *tcon) 1420 { 1421 atomic_t *sent = tcon->stats.smb2_stats.smb2_com_sent; 1422 atomic_t *failed = tcon->stats.smb2_stats.smb2_com_failed; 1423 1424 /* 1425 * Can't display SMB2_NEGOTIATE, SESSION_SETUP, LOGOFF, CANCEL and ECHO 1426 * totals (requests sent) since those SMBs are per-session not per tcon 1427 */ 1428 seq_printf(m, "\nBytes read: %llu Bytes written: %llu", 1429 (long long)(tcon->bytes_read), 1430 (long long)(tcon->bytes_written)); 1431 seq_printf(m, "\nOpen files: %d total (local), %d open on server", 1432 atomic_read(&tcon->num_local_opens), 1433 atomic_read(&tcon->num_remote_opens)); 1434 seq_printf(m, "\nTreeConnects: %d total %d failed", 1435 atomic_read(&sent[SMB2_TREE_CONNECT_HE]), 1436 atomic_read(&failed[SMB2_TREE_CONNECT_HE])); 1437 seq_printf(m, "\nTreeDisconnects: %d total %d failed", 1438 atomic_read(&sent[SMB2_TREE_DISCONNECT_HE]), 1439 atomic_read(&failed[SMB2_TREE_DISCONNECT_HE])); 1440 seq_printf(m, "\nCreates: %d total %d failed", 1441 atomic_read(&sent[SMB2_CREATE_HE]), 1442 atomic_read(&failed[SMB2_CREATE_HE])); 1443 seq_printf(m, "\nCloses: %d total %d failed", 1444 atomic_read(&sent[SMB2_CLOSE_HE]), 1445 atomic_read(&failed[SMB2_CLOSE_HE])); 1446 seq_printf(m, "\nFlushes: %d total %d failed", 1447 atomic_read(&sent[SMB2_FLUSH_HE]), 1448 atomic_read(&failed[SMB2_FLUSH_HE])); 1449 seq_printf(m, "\nReads: %d total %d failed", 1450 atomic_read(&sent[SMB2_READ_HE]), 1451 atomic_read(&failed[SMB2_READ_HE])); 1452 seq_printf(m, "\nWrites: %d total %d failed", 1453 atomic_read(&sent[SMB2_WRITE_HE]), 1454 atomic_read(&failed[SMB2_WRITE_HE])); 1455 seq_printf(m, "\nLocks: %d total %d failed", 1456 atomic_read(&sent[SMB2_LOCK_HE]), 1457 atomic_read(&failed[SMB2_LOCK_HE])); 1458 seq_printf(m, "\nIOCTLs: %d total %d failed", 1459 atomic_read(&sent[SMB2_IOCTL_HE]), 1460 atomic_read(&failed[SMB2_IOCTL_HE])); 1461 seq_printf(m, "\nQueryDirectories: %d total %d failed", 1462 atomic_read(&sent[SMB2_QUERY_DIRECTORY_HE]), 1463 atomic_read(&failed[SMB2_QUERY_DIRECTORY_HE])); 1464 seq_printf(m, "\nChangeNotifies: %d total %d failed", 1465 atomic_read(&sent[SMB2_CHANGE_NOTIFY_HE]), 1466 atomic_read(&failed[SMB2_CHANGE_NOTIFY_HE])); 1467 seq_printf(m, "\nQueryInfos: %d total %d failed", 1468 atomic_read(&sent[SMB2_QUERY_INFO_HE]), 1469 atomic_read(&failed[SMB2_QUERY_INFO_HE])); 1470 seq_printf(m, "\nSetInfos: %d total %d failed", 1471 atomic_read(&sent[SMB2_SET_INFO_HE]), 1472 atomic_read(&failed[SMB2_SET_INFO_HE])); 1473 seq_printf(m, "\nOplockBreaks: %d sent %d failed", 1474 atomic_read(&sent[SMB2_OPLOCK_BREAK_HE]), 1475 atomic_read(&failed[SMB2_OPLOCK_BREAK_HE])); 1476 } 1477 1478 static void 1479 smb2_set_fid(struct cifsFileInfo *cfile, struct cifs_fid *fid, __u32 oplock) 1480 { 1481 struct cifsInodeInfo *cinode = CIFS_I(d_inode(cfile->dentry)); 1482 struct TCP_Server_Info *server = tlink_tcon(cfile->tlink)->ses->server; 1483 1484 lockdep_assert_held(&cinode->open_file_lock); 1485 1486 cfile->fid.persistent_fid = fid->persistent_fid; 1487 cfile->fid.volatile_fid = fid->volatile_fid; 1488 cfile->fid.access = fid->access; 1489 #ifdef CONFIG_CIFS_DEBUG2 1490 cfile->fid.mid = fid->mid; 1491 #endif /* CIFS_DEBUG2 */ 1492 server->ops->set_oplock_level(cinode, oplock, fid->epoch, 1493 &fid->purge_cache); 1494 cinode->can_cache_brlcks = CIFS_CACHE_WRITE(cinode); 1495 memcpy(cfile->fid.create_guid, fid->create_guid, 16); 1496 } 1497 1498 static int 1499 smb2_close_file(const unsigned int xid, struct cifs_tcon *tcon, 1500 struct cifs_fid *fid) 1501 { 1502 return SMB2_close(xid, tcon, fid->persistent_fid, fid->volatile_fid); 1503 } 1504 1505 static int 1506 smb2_close_getattr(const unsigned int xid, struct cifs_tcon *tcon, 1507 struct cifsFileInfo *cfile) 1508 { 1509 struct smb2_file_network_open_info file_inf; 1510 struct inode *inode; 1511 u64 asize; 1512 int rc; 1513 1514 rc = __SMB2_close(xid, tcon, cfile->fid.persistent_fid, 1515 cfile->fid.volatile_fid, &file_inf); 1516 if (rc) 1517 return rc; 1518 1519 inode = d_inode(cfile->dentry); 1520 1521 spin_lock(&inode->i_lock); 1522 CIFS_I(inode)->time = jiffies; 1523 1524 /* Creation time should not need to be updated on close */ 1525 if (file_inf.LastWriteTime) 1526 inode_set_mtime_to_ts(inode, 1527 cifs_NTtimeToUnix(file_inf.LastWriteTime)); 1528 if (file_inf.ChangeTime) 1529 inode_set_ctime_to_ts(inode, 1530 cifs_NTtimeToUnix(file_inf.ChangeTime)); 1531 if (file_inf.LastAccessTime) 1532 inode_set_atime_to_ts(inode, 1533 cifs_NTtimeToUnix(file_inf.LastAccessTime)); 1534 1535 asize = le64_to_cpu(file_inf.AllocationSize); 1536 if (asize > 4096) 1537 inode->i_blocks = CIFS_INO_BLOCKS(asize); 1538 1539 /* End of file and Attributes should not have to be updated on close */ 1540 spin_unlock(&inode->i_lock); 1541 return rc; 1542 } 1543 1544 static int 1545 SMB2_request_res_key(const unsigned int xid, struct cifs_tcon *tcon, 1546 u64 persistent_fid, u64 volatile_fid, 1547 struct copychunk_ioctl_req *pcchunk) 1548 { 1549 int rc; 1550 unsigned int ret_data_len; 1551 struct resume_key_ioctl_rsp *res_key; 1552 1553 rc = SMB2_ioctl(xid, tcon, persistent_fid, volatile_fid, 1554 FSCTL_SRV_REQUEST_RESUME_KEY, NULL, 0 /* no input */, 1555 CIFSMaxBufSize, (char **)&res_key, &ret_data_len); 1556 1557 if (rc == -EOPNOTSUPP) { 1558 pr_warn_once("Server share %s does not support copy range\n", tcon->tree_name); 1559 goto req_res_key_exit; 1560 } else if (rc) { 1561 cifs_tcon_dbg(VFS, "refcpy ioctl error %d getting resume key\n", rc); 1562 goto req_res_key_exit; 1563 } 1564 if (ret_data_len < sizeof(struct resume_key_ioctl_rsp)) { 1565 cifs_tcon_dbg(VFS, "Invalid refcopy resume key length\n"); 1566 rc = -EINVAL; 1567 goto req_res_key_exit; 1568 } 1569 memcpy(pcchunk->SourceKey, res_key->ResumeKey, COPY_CHUNK_RES_KEY_SIZE); 1570 1571 req_res_key_exit: 1572 kfree(res_key); 1573 return rc; 1574 } 1575 1576 static int 1577 smb2_ioctl_query_info(const unsigned int xid, 1578 struct cifs_tcon *tcon, 1579 struct cifs_sb_info *cifs_sb, 1580 __le16 *path, int is_dir, 1581 unsigned long p) 1582 { 1583 struct smb2_compound_vars *vars; 1584 struct smb_rqst *rqst; 1585 struct kvec *rsp_iov; 1586 struct cifs_ses *ses = tcon->ses; 1587 struct TCP_Server_Info *server; 1588 char __user *arg = (char __user *)p; 1589 struct smb_query_info qi; 1590 struct smb_query_info __user *pqi; 1591 int rc = 0; 1592 int flags = CIFS_CP_CREATE_CLOSE_OP; 1593 struct smb2_query_info_rsp *qi_rsp = NULL; 1594 struct smb2_ioctl_rsp *io_rsp = NULL; 1595 void *buffer = NULL; 1596 int resp_buftype[3]; 1597 struct cifs_open_parms oparms; 1598 u8 oplock = SMB2_OPLOCK_LEVEL_NONE; 1599 struct cifs_fid fid; 1600 unsigned int size[2]; 1601 void *data[2]; 1602 int create_options = is_dir ? CREATE_NOT_FILE : CREATE_NOT_DIR; 1603 void (*free_req1_func)(struct smb_rqst *r); 1604 int retries = 0, cur_sleep = 0; 1605 1606 replay_again: 1607 /* reinitialize for possible replay */ 1608 buffer = NULL; 1609 flags = CIFS_CP_CREATE_CLOSE_OP; 1610 oplock = SMB2_OPLOCK_LEVEL_NONE; 1611 server = cifs_pick_channel(ses); 1612 1613 vars = kzalloc_obj(*vars, GFP_ATOMIC); 1614 if (vars == NULL) 1615 return -ENOMEM; 1616 rqst = &vars->rqst[0]; 1617 rsp_iov = &vars->rsp_iov[0]; 1618 1619 resp_buftype[0] = resp_buftype[1] = resp_buftype[2] = CIFS_NO_BUFFER; 1620 1621 if (copy_from_user(&qi, arg, sizeof(struct smb_query_info))) { 1622 rc = -EFAULT; 1623 goto free_vars; 1624 } 1625 if (qi.output_buffer_length > 1024) { 1626 rc = -EINVAL; 1627 goto free_vars; 1628 } 1629 1630 if (!ses || !server) { 1631 rc = smb_EIO(smb_eio_trace_null_pointers); 1632 goto free_vars; 1633 } 1634 1635 if (smb3_encryption_required(tcon)) 1636 flags |= CIFS_TRANSFORM_REQ; 1637 1638 if (qi.output_buffer_length) { 1639 buffer = memdup_user(arg + sizeof(struct smb_query_info), qi.output_buffer_length); 1640 if (IS_ERR(buffer)) { 1641 rc = PTR_ERR(buffer); 1642 goto free_vars; 1643 } 1644 } 1645 1646 /* Open */ 1647 rqst[0].rq_iov = &vars->open_iov[0]; 1648 rqst[0].rq_nvec = SMB2_CREATE_IOV_SIZE; 1649 1650 oparms = (struct cifs_open_parms) { 1651 .tcon = tcon, 1652 .disposition = FILE_OPEN, 1653 .create_options = cifs_create_options(cifs_sb, create_options), 1654 .fid = &fid, 1655 .replay = !!(retries), 1656 }; 1657 1658 if (qi.flags & PASSTHRU_FSCTL) { 1659 switch (qi.info_type & FSCTL_DEVICE_ACCESS_MASK) { 1660 case FSCTL_DEVICE_ACCESS_FILE_READ_WRITE_ACCESS: 1661 oparms.desired_access = FILE_READ_DATA | FILE_WRITE_DATA | FILE_READ_ATTRIBUTES | SYNCHRONIZE; 1662 break; 1663 case FSCTL_DEVICE_ACCESS_FILE_ANY_ACCESS: 1664 oparms.desired_access = GENERIC_ALL; 1665 break; 1666 case FSCTL_DEVICE_ACCESS_FILE_READ_ACCESS: 1667 oparms.desired_access = GENERIC_READ; 1668 break; 1669 case FSCTL_DEVICE_ACCESS_FILE_WRITE_ACCESS: 1670 oparms.desired_access = GENERIC_WRITE; 1671 break; 1672 } 1673 } else if (qi.flags & PASSTHRU_SET_INFO) { 1674 oparms.desired_access = GENERIC_WRITE; 1675 } else { 1676 oparms.desired_access = FILE_READ_ATTRIBUTES | READ_CONTROL; 1677 } 1678 1679 rc = SMB2_open_init(tcon, server, 1680 &rqst[0], &oplock, &oparms, path); 1681 if (rc) 1682 goto free_output_buffer; 1683 smb2_set_next_command(tcon, &rqst[0]); 1684 1685 /* Query */ 1686 if (qi.flags & PASSTHRU_FSCTL) { 1687 /* Can eventually relax perm check since server enforces too */ 1688 if (!capable(CAP_SYS_ADMIN)) { 1689 rc = -EPERM; 1690 goto free_open_req; 1691 } 1692 rqst[1].rq_iov = &vars->io_iov[0]; 1693 rqst[1].rq_nvec = SMB2_IOCTL_IOV_SIZE; 1694 1695 rc = SMB2_ioctl_init(tcon, server, &rqst[1], COMPOUND_FID, COMPOUND_FID, 1696 qi.info_type, buffer, qi.output_buffer_length, 1697 CIFSMaxBufSize - MAX_SMB2_CREATE_RESPONSE_SIZE - 1698 MAX_SMB2_CLOSE_RESPONSE_SIZE); 1699 free_req1_func = SMB2_ioctl_free; 1700 } else if (qi.flags == PASSTHRU_SET_INFO) { 1701 /* Can eventually relax perm check since server enforces too */ 1702 if (!capable(CAP_SYS_ADMIN)) { 1703 rc = -EPERM; 1704 goto free_open_req; 1705 } 1706 if (qi.output_buffer_length < 8) { 1707 rc = -EINVAL; 1708 goto free_open_req; 1709 } 1710 rqst[1].rq_iov = vars->si_iov; 1711 rqst[1].rq_nvec = 1; 1712 1713 /* MS-FSCC 2.4.13 FileEndOfFileInformation */ 1714 size[0] = 8; 1715 data[0] = buffer; 1716 1717 rc = SMB2_set_info_init(tcon, server, &rqst[1], COMPOUND_FID, COMPOUND_FID, 1718 current->tgid, FILE_END_OF_FILE_INFORMATION, 1719 SMB2_O_INFO_FILE, 0, data, size); 1720 free_req1_func = SMB2_set_info_free; 1721 } else if (qi.flags == PASSTHRU_QUERY_INFO) { 1722 rqst[1].rq_iov = &vars->qi_iov; 1723 rqst[1].rq_nvec = 1; 1724 1725 rc = SMB2_query_info_init(tcon, server, 1726 &rqst[1], COMPOUND_FID, 1727 COMPOUND_FID, qi.file_info_class, 1728 qi.info_type, qi.additional_information, 1729 qi.input_buffer_length, 1730 qi.output_buffer_length, buffer); 1731 free_req1_func = SMB2_query_info_free; 1732 } else { /* unknown flags */ 1733 cifs_tcon_dbg(VFS, "Invalid passthru query flags: 0x%x\n", 1734 qi.flags); 1735 rc = -EINVAL; 1736 } 1737 1738 if (rc) 1739 goto free_open_req; 1740 smb2_set_next_command(tcon, &rqst[1]); 1741 smb2_set_related(&rqst[1]); 1742 1743 /* Close */ 1744 rqst[2].rq_iov = &vars->close_iov; 1745 rqst[2].rq_nvec = 1; 1746 1747 rc = SMB2_close_init(tcon, server, 1748 &rqst[2], COMPOUND_FID, COMPOUND_FID, false); 1749 if (rc) 1750 goto free_req_1; 1751 smb2_set_related(&rqst[2]); 1752 1753 if (retries) { 1754 /* Back-off before retry */ 1755 if (cur_sleep) 1756 msleep(cur_sleep); 1757 smb2_set_replay(server, &rqst[0]); 1758 smb2_set_replay(server, &rqst[1]); 1759 smb2_set_replay(server, &rqst[2]); 1760 } 1761 1762 rc = compound_send_recv(xid, ses, server, 1763 flags, 3, rqst, 1764 resp_buftype, rsp_iov); 1765 if (rc) 1766 goto out; 1767 1768 /* No need to bump num_remote_opens since handle immediately closed */ 1769 if (qi.flags & PASSTHRU_FSCTL) { 1770 pqi = (struct smb_query_info __user *)arg; 1771 io_rsp = (struct smb2_ioctl_rsp *)rsp_iov[1].iov_base; 1772 if (le32_to_cpu(io_rsp->OutputCount) < qi.input_buffer_length) 1773 qi.input_buffer_length = le32_to_cpu(io_rsp->OutputCount); 1774 if (qi.input_buffer_length > 0 && 1775 size_add(le32_to_cpu(io_rsp->OutputOffset), 1776 qi.input_buffer_length) > rsp_iov[1].iov_len) { 1777 rc = -EFAULT; 1778 goto out; 1779 } 1780 1781 if (copy_to_user(&pqi->input_buffer_length, 1782 &qi.input_buffer_length, 1783 sizeof(qi.input_buffer_length))) { 1784 rc = -EFAULT; 1785 goto out; 1786 } 1787 1788 if (copy_to_user((void __user *)pqi + sizeof(struct smb_query_info), 1789 (const void *)io_rsp + le32_to_cpu(io_rsp->OutputOffset), 1790 qi.input_buffer_length)) 1791 rc = -EFAULT; 1792 } else { 1793 pqi = (struct smb_query_info __user *)arg; 1794 qi_rsp = (struct smb2_query_info_rsp *)rsp_iov[1].iov_base; 1795 if (le32_to_cpu(qi_rsp->OutputBufferLength) < qi.input_buffer_length) 1796 qi.input_buffer_length = le32_to_cpu(qi_rsp->OutputBufferLength); 1797 if (qi.input_buffer_length > 0 && 1798 struct_size(qi_rsp, Buffer, qi.input_buffer_length) > 1799 rsp_iov[1].iov_len) { 1800 rc = -EFAULT; 1801 goto out; 1802 } 1803 if (copy_to_user(&pqi->input_buffer_length, 1804 &qi.input_buffer_length, 1805 sizeof(qi.input_buffer_length))) { 1806 rc = -EFAULT; 1807 goto out; 1808 } 1809 1810 if (copy_to_user(pqi + 1, qi_rsp->Buffer, 1811 qi.input_buffer_length)) 1812 rc = -EFAULT; 1813 } 1814 1815 out: 1816 free_rsp_buf(resp_buftype[0], rsp_iov[0].iov_base); 1817 free_rsp_buf(resp_buftype[1], rsp_iov[1].iov_base); 1818 free_rsp_buf(resp_buftype[2], rsp_iov[2].iov_base); 1819 SMB2_close_free(&rqst[2]); 1820 free_req_1: 1821 free_req1_func(&rqst[1]); 1822 free_open_req: 1823 SMB2_open_free(&rqst[0]); 1824 free_output_buffer: 1825 kfree(buffer); 1826 free_vars: 1827 kfree(vars); 1828 1829 if (is_replayable_error(rc) && 1830 smb2_should_replay(tcon, &retries, &cur_sleep)) 1831 goto replay_again; 1832 1833 return rc; 1834 } 1835 1836 /** 1837 * calc_chunk_count - calculates the number chunks to be filled in the Chunks[] 1838 * array of struct copychunk_ioctl 1839 * 1840 * @tcon: destination file tcon 1841 * @bytes_left: how many bytes are left to copy 1842 * 1843 * Return: maximum number of chunks with which Chunks[] can be filled. 1844 */ 1845 static inline u32 1846 calc_chunk_count(struct cifs_tcon *tcon, u64 bytes_left) 1847 { 1848 u32 max_chunks = READ_ONCE(tcon->max_chunks); 1849 u32 max_bytes_copy = READ_ONCE(tcon->max_bytes_copy); 1850 u32 max_bytes_chunk = READ_ONCE(tcon->max_bytes_chunk); 1851 u64 need; 1852 u32 allowed; 1853 1854 if (!max_bytes_chunk || !max_bytes_copy || !max_chunks) 1855 return 0; 1856 1857 /* chunks needed for the remaining bytes */ 1858 need = DIV_ROUND_UP_ULL(bytes_left, max_bytes_chunk); 1859 /* chunks allowed per cc request */ 1860 allowed = DIV_ROUND_UP(max_bytes_copy, max_bytes_chunk); 1861 1862 return (u32)umin(need, umin(max_chunks, allowed)); 1863 } 1864 1865 /** 1866 * smb2_copychunk_range - server-side copy of data range 1867 * 1868 * @xid: transaction id 1869 * @src_file: source file 1870 * @dst_file: destination file 1871 * @src_off: source file byte offset 1872 * @len: number of bytes to copy 1873 * @dst_off: destination file byte offset 1874 * 1875 * Obtains a resume key for @src_file and issues FSCTL_SRV_COPYCHUNK_WRITE 1876 * IOCTLs, splitting the request into chunks limited by tcon->max_*. 1877 * 1878 * Return: @len on success; negative errno on failure. 1879 */ 1880 static ssize_t 1881 smb2_copychunk_range(const unsigned int xid, 1882 struct cifsFileInfo *src_file, 1883 struct cifsFileInfo *dst_file, 1884 u64 src_off, 1885 u64 len, 1886 u64 dst_off) 1887 { 1888 int rc = 0; 1889 unsigned int ret_data_len = 0; 1890 struct copychunk_ioctl_req *cc_req = NULL; 1891 struct copychunk_ioctl_rsp *cc_rsp = NULL; 1892 struct cifs_tcon *tcon; 1893 struct srv_copychunk *chunk; 1894 u32 chunks, chunk_count, chunk_bytes; 1895 u32 copy_bytes, copy_bytes_left; 1896 u32 chunks_written, bytes_written; 1897 u64 total_bytes_left = len; 1898 u64 src_off_prev, dst_off_prev; 1899 u32 retries = 0; 1900 1901 tcon = tlink_tcon(dst_file->tlink); 1902 1903 trace_smb3_copychunk_enter(xid, src_file->fid.volatile_fid, 1904 dst_file->fid.volatile_fid, tcon->tid, 1905 tcon->ses->Suid, src_off, dst_off, len); 1906 1907 retry: 1908 chunk_count = calc_chunk_count(tcon, total_bytes_left); 1909 if (!chunk_count) { 1910 rc = -EOPNOTSUPP; 1911 goto out; 1912 } 1913 1914 cc_req = kzalloc_flex(*cc_req, Chunks, chunk_count); 1915 if (!cc_req) { 1916 rc = -ENOMEM; 1917 goto out; 1918 } 1919 1920 /* Request a key from the server to identify the source of the copy */ 1921 rc = SMB2_request_res_key(xid, 1922 tlink_tcon(src_file->tlink), 1923 src_file->fid.persistent_fid, 1924 src_file->fid.volatile_fid, 1925 cc_req); 1926 1927 /* Note: request_res_key sets res_key null only if rc != 0 */ 1928 if (rc) 1929 goto out; 1930 1931 while (total_bytes_left > 0) { 1932 1933 /* Store previous offsets to allow rewind */ 1934 src_off_prev = src_off; 1935 dst_off_prev = dst_off; 1936 1937 /* 1938 * __counted_by_le(ChunkCount): set to allocated chunks before 1939 * populating Chunks[] 1940 */ 1941 cc_req->ChunkCount = cpu_to_le32(chunk_count); 1942 1943 chunks = 0; 1944 copy_bytes = 0; 1945 copy_bytes_left = umin(total_bytes_left, tcon->max_bytes_copy); 1946 while (copy_bytes_left > 0 && chunks < chunk_count) { 1947 chunk = &cc_req->Chunks[chunks++]; 1948 1949 chunk->SourceOffset = cpu_to_le64(src_off); 1950 chunk->TargetOffset = cpu_to_le64(dst_off); 1951 1952 chunk_bytes = umin(copy_bytes_left, tcon->max_bytes_chunk); 1953 1954 chunk->Length = cpu_to_le32(chunk_bytes); 1955 /* Buffer is zeroed, no need to set chunk->Reserved = 0 */ 1956 1957 src_off += chunk_bytes; 1958 dst_off += chunk_bytes; 1959 1960 copy_bytes_left -= chunk_bytes; 1961 copy_bytes += chunk_bytes; 1962 } 1963 1964 cc_req->ChunkCount = cpu_to_le32(chunks); 1965 /* Buffer is zeroed, no need to set cc_req->Reserved = 0 */ 1966 1967 /* Request server copy to target from src identified by key */ 1968 kfree(cc_rsp); 1969 cc_rsp = NULL; 1970 rc = SMB2_ioctl(xid, tcon, dst_file->fid.persistent_fid, 1971 dst_file->fid.volatile_fid, FSCTL_SRV_COPYCHUNK_WRITE, 1972 (char *)cc_req, struct_size(cc_req, Chunks, chunks), 1973 CIFSMaxBufSize, (char **)&cc_rsp, &ret_data_len); 1974 1975 if (rc && rc != -EINVAL) 1976 goto out; 1977 1978 if (unlikely(ret_data_len != sizeof(*cc_rsp))) { 1979 cifs_tcon_dbg(VFS, "Copychunk invalid response: size %u/%zu\n", 1980 ret_data_len, sizeof(*cc_rsp)); 1981 rc = smb_EIO1(smb_eio_trace_copychunk_inv_rsp, ret_data_len); 1982 goto out; 1983 } 1984 1985 bytes_written = le32_to_cpu(cc_rsp->TotalBytesWritten); 1986 chunks_written = le32_to_cpu(cc_rsp->ChunksWritten); 1987 chunk_bytes = le32_to_cpu(cc_rsp->ChunkBytesWritten); 1988 1989 if (rc == 0) { 1990 /* Check if server claimed to write more than we asked */ 1991 if (unlikely(!bytes_written || bytes_written > copy_bytes)) { 1992 cifs_tcon_dbg(VFS, "Copychunk invalid response: bytes written %u/%u\n", 1993 bytes_written, copy_bytes); 1994 rc = smb_EIO2(smb_eio_trace_copychunk_overcopy_b, 1995 bytes_written, copy_bytes); 1996 goto out; 1997 } 1998 if (unlikely(!chunks_written || chunks_written > chunks)) { 1999 cifs_tcon_dbg(VFS, "Copychunk invalid response: chunks written %u/%u\n", 2000 chunks_written, chunks); 2001 rc = smb_EIO2(smb_eio_trace_copychunk_overcopy_c, 2002 chunks_written, chunks); 2003 goto out; 2004 } 2005 2006 /* Partial write: rewind */ 2007 if (bytes_written < copy_bytes) { 2008 u32 delta = copy_bytes - bytes_written; 2009 2010 src_off -= delta; 2011 dst_off -= delta; 2012 } 2013 2014 total_bytes_left -= bytes_written; 2015 continue; 2016 } 2017 2018 /* 2019 * Check if server is not asking us to reduce size. 2020 * 2021 * Note: As per MS-SMB2 2.2.32.1, the values returned 2022 * in cc_rsp are not strictly lower than what existed 2023 * before. 2024 */ 2025 if (bytes_written < tcon->max_bytes_copy) { 2026 cifs_tcon_dbg(FYI, "Copychunk MaxBytesCopy updated: %u -> %u\n", 2027 tcon->max_bytes_copy, bytes_written); 2028 tcon->max_bytes_copy = bytes_written; 2029 } 2030 2031 if (chunks_written < tcon->max_chunks) { 2032 cifs_tcon_dbg(FYI, "Copychunk MaxChunks updated: %u -> %u\n", 2033 tcon->max_chunks, chunks_written); 2034 tcon->max_chunks = chunks_written; 2035 } 2036 2037 if (chunk_bytes < tcon->max_bytes_chunk) { 2038 cifs_tcon_dbg(FYI, "Copychunk MaxBytesChunk updated: %u -> %u\n", 2039 tcon->max_bytes_chunk, chunk_bytes); 2040 tcon->max_bytes_chunk = chunk_bytes; 2041 } 2042 2043 /* reset to last offsets */ 2044 if (retries++ < 2) { 2045 src_off = src_off_prev; 2046 dst_off = dst_off_prev; 2047 kfree(cc_req); 2048 cc_req = NULL; 2049 goto retry; 2050 } 2051 2052 break; 2053 } 2054 2055 out: 2056 kfree(cc_req); 2057 kfree(cc_rsp); 2058 if (rc) { 2059 trace_smb3_copychunk_err(xid, src_file->fid.volatile_fid, 2060 dst_file->fid.volatile_fid, tcon->tid, 2061 tcon->ses->Suid, src_off, dst_off, len, rc); 2062 return rc; 2063 } else { 2064 trace_smb3_copychunk_done(xid, src_file->fid.volatile_fid, 2065 dst_file->fid.volatile_fid, tcon->tid, 2066 tcon->ses->Suid, src_off, dst_off, len); 2067 return len; 2068 } 2069 } 2070 2071 static int 2072 smb2_flush_file(const unsigned int xid, struct cifs_tcon *tcon, 2073 struct cifs_fid *fid) 2074 { 2075 return SMB2_flush(xid, tcon, fid->persistent_fid, fid->volatile_fid); 2076 } 2077 2078 static unsigned int 2079 smb2_read_data_offset(char *buf) 2080 { 2081 struct smb2_read_rsp *rsp = (struct smb2_read_rsp *)buf; 2082 2083 return rsp->DataOffset; 2084 } 2085 2086 static unsigned int 2087 smb2_read_data_length(char *buf, bool in_remaining) 2088 { 2089 struct smb2_read_rsp *rsp = (struct smb2_read_rsp *)buf; 2090 2091 if (in_remaining) 2092 return le32_to_cpu(rsp->DataRemaining); 2093 2094 return le32_to_cpu(rsp->DataLength); 2095 } 2096 2097 2098 static int 2099 smb2_sync_read(const unsigned int xid, struct cifs_fid *pfid, 2100 struct cifs_io_parms *parms, unsigned int *bytes_read, 2101 char **buf, int *buf_type) 2102 { 2103 parms->persistent_fid = pfid->persistent_fid; 2104 parms->volatile_fid = pfid->volatile_fid; 2105 return SMB2_read(xid, parms, bytes_read, buf, buf_type); 2106 } 2107 2108 static int 2109 smb2_sync_write(const unsigned int xid, struct cifs_fid *pfid, 2110 struct cifs_io_parms *parms, unsigned int *written, 2111 struct kvec *iov, unsigned long nr_segs) 2112 { 2113 2114 parms->persistent_fid = pfid->persistent_fid; 2115 parms->volatile_fid = pfid->volatile_fid; 2116 return SMB2_write(xid, parms, written, iov, nr_segs); 2117 } 2118 2119 /* Set or clear the SPARSE_FILE attribute based on value passed in setsparse */ 2120 static int smb2_set_sparse(const unsigned int xid, struct cifs_tcon *tcon, 2121 struct cifsFileInfo *cfile, struct inode *inode, 2122 __u8 setsparse) 2123 { 2124 struct cifsInodeInfo *cifsi; 2125 int rc; 2126 2127 cifsi = CIFS_I(inode); 2128 2129 /* if file already sparse don't bother setting sparse again */ 2130 if ((cifsi->cifsAttrs & FILE_ATTRIBUTE_SPARSE_FILE) && setsparse) 2131 return 0; /* already sparse */ 2132 2133 if (!(cifsi->cifsAttrs & FILE_ATTRIBUTE_SPARSE_FILE) && !setsparse) 2134 return 0; /* already not sparse */ 2135 2136 /* 2137 * Can't check for sparse support on share the usual way via the 2138 * FS attribute info (FILE_SUPPORTS_SPARSE_FILES) on the share 2139 * since Samba server doesn't set the flag on the share, yet 2140 * supports the set sparse FSCTL and returns sparse correctly 2141 * in the file attributes. If the server returns EOPNOTSUPP, mark 2142 * that sparse files are not supported on this share to avoid 2143 * repeatedly sending the unsupported FSCTL. 2144 */ 2145 if (tcon->broken_sparse_sup) 2146 return -EOPNOTSUPP; 2147 2148 rc = SMB2_ioctl(xid, tcon, cfile->fid.persistent_fid, 2149 cfile->fid.volatile_fid, FSCTL_SET_SPARSE, 2150 &setsparse, 1, CIFSMaxBufSize, NULL, NULL); 2151 if (rc) { 2152 if (rc == -EOPNOTSUPP) 2153 tcon->broken_sparse_sup = true; 2154 cifs_dbg(FYI, "set sparse rc = %d\n", rc); 2155 return rc; 2156 } 2157 2158 if (setsparse) 2159 cifsi->cifsAttrs |= FILE_ATTRIBUTE_SPARSE_FILE; 2160 else 2161 cifsi->cifsAttrs &= (~FILE_ATTRIBUTE_SPARSE_FILE); 2162 2163 return 0; 2164 } 2165 2166 static int 2167 smb2_set_file_size(const unsigned int xid, struct cifs_tcon *tcon, 2168 struct cifsFileInfo *cfile, __u64 size, bool set_alloc) 2169 { 2170 struct inode *inode; 2171 2172 /* 2173 * If extending file more than one page make sparse. Many Linux fs 2174 * make files sparse by default when extending via ftruncate 2175 */ 2176 inode = d_inode(cfile->dentry); 2177 2178 if (!set_alloc && (size > inode->i_size + 8192)) { 2179 __u8 set_sparse = 1; 2180 2181 /* whether set sparse succeeds or not, extend the file */ 2182 smb2_set_sparse(xid, tcon, cfile, inode, set_sparse); 2183 } 2184 2185 return SMB2_set_eof(xid, tcon, cfile->fid.persistent_fid, 2186 cfile->fid.volatile_fid, cfile->pid, size); 2187 } 2188 2189 static int 2190 smb2_duplicate_extents(const unsigned int xid, 2191 struct cifsFileInfo *srcfile, 2192 struct cifsFileInfo *trgtfile, u64 src_off, 2193 u64 len, u64 dest_off) 2194 { 2195 int rc; 2196 int qrc; 2197 unsigned int ret_data_len; 2198 struct inode *inode; 2199 struct smb2_file_all_info file_inf; 2200 struct duplicate_extents_to_file dup_ext_buf; 2201 struct timespec64 ts; 2202 struct cifs_tcon *tcon = tlink_tcon(trgtfile->tlink); 2203 u64 asize; 2204 2205 /* server fileays advertise duplicate extent support with this flag */ 2206 if ((le32_to_cpu(tcon->fsAttrInfo.Attributes) & 2207 FILE_SUPPORTS_BLOCK_REFCOUNTING) == 0) 2208 return -EOPNOTSUPP; 2209 2210 dup_ext_buf.VolatileFileHandle = srcfile->fid.volatile_fid; 2211 dup_ext_buf.PersistentFileHandle = srcfile->fid.persistent_fid; 2212 dup_ext_buf.SourceFileOffset = cpu_to_le64(src_off); 2213 dup_ext_buf.TargetFileOffset = cpu_to_le64(dest_off); 2214 dup_ext_buf.ByteCount = cpu_to_le64(len); 2215 cifs_dbg(FYI, "Duplicate extents: src off %lld dst off %lld len %lld\n", 2216 src_off, dest_off, len); 2217 trace_smb3_clone_enter(xid, srcfile->fid.volatile_fid, 2218 trgtfile->fid.volatile_fid, tcon->tid, 2219 tcon->ses->Suid, src_off, dest_off, len); 2220 inode = d_inode(trgtfile->dentry); 2221 if (inode->i_size < dest_off + len) { 2222 rc = smb2_set_file_size(xid, tcon, trgtfile, dest_off + len, false); 2223 if (rc) 2224 goto duplicate_extents_out; 2225 netfs_resize_file(netfs_inode(inode), dest_off + len, true); 2226 cifs_setsize(inode, dest_off + len); 2227 } 2228 rc = SMB2_ioctl(xid, tcon, trgtfile->fid.persistent_fid, 2229 trgtfile->fid.volatile_fid, 2230 FSCTL_DUPLICATE_EXTENTS_TO_FILE, 2231 (char *)&dup_ext_buf, 2232 sizeof(struct duplicate_extents_to_file), 2233 CIFSMaxBufSize, NULL, 2234 &ret_data_len); 2235 2236 if (ret_data_len > 0) 2237 cifs_dbg(FYI, "Non-zero response length in duplicate extents\n"); 2238 2239 if (rc == 0) { 2240 qrc = SMB2_query_info(xid, tcon, trgtfile->fid.persistent_fid, 2241 trgtfile->fid.volatile_fid, &file_inf); 2242 spin_lock(&inode->i_lock); 2243 if (qrc == 0) { 2244 asize = le64_to_cpu(file_inf.AllocationSize); 2245 CIFS_I(inode)->time = jiffies; 2246 if (file_inf.LastWriteTime) { 2247 ts = cifs_NTtimeToUnix(file_inf.LastWriteTime); 2248 inode_set_mtime_to_ts(inode, ts); 2249 } 2250 if (file_inf.ChangeTime) { 2251 ts = cifs_NTtimeToUnix(file_inf.ChangeTime); 2252 inode_set_ctime_to_ts(inode, ts); 2253 } 2254 if (file_inf.LastAccessTime) { 2255 ts = cifs_NTtimeToUnix(file_inf.LastAccessTime); 2256 inode_set_atime_to_ts(inode, ts); 2257 } 2258 inode->i_blocks = CIFS_INO_BLOCKS(asize); 2259 } else { 2260 CIFS_I(inode)->time = 0; /* force reval */ 2261 } 2262 spin_unlock(&inode->i_lock); 2263 } 2264 2265 duplicate_extents_out: 2266 if (rc) 2267 trace_smb3_clone_err(xid, srcfile->fid.volatile_fid, 2268 trgtfile->fid.volatile_fid, 2269 tcon->tid, tcon->ses->Suid, src_off, 2270 dest_off, len, rc); 2271 else 2272 trace_smb3_clone_done(xid, srcfile->fid.volatile_fid, 2273 trgtfile->fid.volatile_fid, tcon->tid, 2274 tcon->ses->Suid, src_off, dest_off, len); 2275 return rc; 2276 } 2277 2278 static int 2279 smb2_set_compression(const unsigned int xid, struct cifs_tcon *tcon, 2280 struct cifsFileInfo *cfile, __u16 compression_state) 2281 { 2282 return SMB2_set_compression(xid, tcon, cfile->fid.persistent_fid, 2283 cfile->fid.volatile_fid, compression_state); 2284 } 2285 2286 static int 2287 smb3_set_integrity(const unsigned int xid, struct cifs_tcon *tcon, 2288 struct cifsFileInfo *cfile) 2289 { 2290 struct fsctl_set_integrity_information_req integr_info; 2291 unsigned int ret_data_len; 2292 2293 integr_info.ChecksumAlgorithm = cpu_to_le16(CHECKSUM_TYPE_UNCHANGED); 2294 integr_info.Flags = 0; 2295 integr_info.Reserved = 0; 2296 2297 return SMB2_ioctl(xid, tcon, cfile->fid.persistent_fid, 2298 cfile->fid.volatile_fid, 2299 FSCTL_SET_INTEGRITY_INFORMATION, 2300 (char *)&integr_info, 2301 sizeof(struct fsctl_set_integrity_information_req), 2302 CIFSMaxBufSize, NULL, 2303 &ret_data_len); 2304 2305 } 2306 2307 /* GMT Token is @GMT-YYYY.MM.DD-HH.MM.SS Unicode which is 48 bytes + null */ 2308 #define GMT_TOKEN_SIZE 50 2309 2310 #define MIN_SNAPSHOT_ARRAY_SIZE 16 /* See MS-SMB2 section 3.3.5.15.1 */ 2311 2312 /* 2313 * Input buffer contains (empty) struct smb_snapshot array with size filled in 2314 * For output see struct SRV_SNAPSHOT_ARRAY in MS-SMB2 section 2.2.32.2 2315 */ 2316 static int 2317 smb3_enum_snapshots(const unsigned int xid, struct cifs_tcon *tcon, 2318 struct cifsFileInfo *cfile, void __user *ioc_buf) 2319 { 2320 char *retbuf = NULL; 2321 unsigned int ret_data_len = 0; 2322 int rc; 2323 u32 max_response_size; 2324 struct smb_snapshot_array snapshot_in; 2325 2326 /* 2327 * On the first query to enumerate the list of snapshots available 2328 * for this volume the buffer begins with 0 (number of snapshots 2329 * which can be returned is zero since at that point we do not know 2330 * how big the buffer needs to be). On the second query, 2331 * it (ret_data_len) is set to number of snapshots so we can 2332 * know to set the maximum response size larger (see below). 2333 */ 2334 if (get_user(ret_data_len, (unsigned int __user *)ioc_buf)) 2335 return -EFAULT; 2336 2337 /* 2338 * Note that for snapshot queries that servers like Azure expect that 2339 * the first query be minimal size (and just used to get the number/size 2340 * of previous versions) so response size must be specified as EXACTLY 2341 * sizeof(struct snapshot_array) which is 16 when rounded up to multiple 2342 * of eight bytes. 2343 */ 2344 if (ret_data_len == 0) 2345 max_response_size = MIN_SNAPSHOT_ARRAY_SIZE; 2346 else 2347 max_response_size = CIFSMaxBufSize; 2348 2349 rc = SMB2_ioctl(xid, tcon, cfile->fid.persistent_fid, 2350 cfile->fid.volatile_fid, 2351 FSCTL_SRV_ENUMERATE_SNAPSHOTS, 2352 NULL, 0 /* no input data */, max_response_size, 2353 (char **)&retbuf, 2354 &ret_data_len); 2355 cifs_dbg(FYI, "enum snapshots ioctl returned %d and ret buflen is %d\n", 2356 rc, ret_data_len); 2357 if (rc) 2358 return rc; 2359 2360 if (ret_data_len && (ioc_buf != NULL) && (retbuf != NULL)) { 2361 /* Fixup buffer */ 2362 if (copy_from_user(&snapshot_in, ioc_buf, 2363 sizeof(struct smb_snapshot_array))) { 2364 rc = -EFAULT; 2365 kfree(retbuf); 2366 return rc; 2367 } 2368 2369 /* 2370 * Check for min size, ie not large enough to fit even one GMT 2371 * token (snapshot). On the first ioctl some users may pass in 2372 * smaller size (or zero) to simply get the size of the array 2373 * so the user space caller can allocate sufficient memory 2374 * and retry the ioctl again with larger array size sufficient 2375 * to hold all of the snapshot GMT tokens on the second try. 2376 */ 2377 if (snapshot_in.snapshot_array_size < GMT_TOKEN_SIZE) 2378 ret_data_len = sizeof(struct smb_snapshot_array); 2379 2380 /* 2381 * We return struct SRV_SNAPSHOT_ARRAY, followed by 2382 * the snapshot array (of 50 byte GMT tokens) each 2383 * representing an available previous version of the data 2384 */ 2385 if (ret_data_len > (snapshot_in.snapshot_array_size + 2386 sizeof(struct smb_snapshot_array))) 2387 ret_data_len = snapshot_in.snapshot_array_size + 2388 sizeof(struct smb_snapshot_array); 2389 2390 if (copy_to_user(ioc_buf, retbuf, ret_data_len)) 2391 rc = -EFAULT; 2392 } 2393 2394 kfree(retbuf); 2395 return rc; 2396 } 2397 2398 2399 2400 static int 2401 smb3_notify(const unsigned int xid, struct file *pfile, 2402 void __user *ioc_buf, bool return_changes) 2403 { 2404 struct smb3_notify_info notify; 2405 struct smb3_notify_info __user *pnotify_buf; 2406 struct dentry *dentry = pfile->f_path.dentry; 2407 struct inode *inode = file_inode(pfile); 2408 struct cifs_sb_info *cifs_sb = CIFS_SB(inode->i_sb); 2409 struct cifs_open_parms oparms; 2410 struct cifs_fid fid; 2411 struct cifs_tcon *tcon; 2412 const unsigned char *path; 2413 char *returned_ioctl_info = NULL; 2414 void *page = alloc_dentry_path(); 2415 __le16 *utf16_path = NULL; 2416 u8 oplock = SMB2_OPLOCK_LEVEL_NONE; 2417 int rc = 0; 2418 __u32 ret_len = 0; 2419 2420 path = build_path_from_dentry(dentry, page); 2421 if (IS_ERR(path)) { 2422 rc = PTR_ERR(path); 2423 goto notify_exit; 2424 } 2425 2426 utf16_path = cifs_convert_path_to_utf16(path, cifs_sb); 2427 if (utf16_path == NULL) { 2428 rc = -ENOMEM; 2429 goto notify_exit; 2430 } 2431 2432 if (return_changes) { 2433 if (copy_from_user(¬ify, ioc_buf, sizeof(struct smb3_notify_info))) { 2434 rc = -EFAULT; 2435 goto notify_exit; 2436 } 2437 } else { 2438 if (copy_from_user(¬ify, ioc_buf, sizeof(struct smb3_notify))) { 2439 rc = -EFAULT; 2440 goto notify_exit; 2441 } 2442 notify.data_len = 0; 2443 } 2444 2445 tcon = cifs_sb_master_tcon(cifs_sb); 2446 oparms = (struct cifs_open_parms) { 2447 .tcon = tcon, 2448 .path = path, 2449 .desired_access = FILE_READ_ATTRIBUTES | FILE_READ_DATA, 2450 .disposition = FILE_OPEN, 2451 .create_options = cifs_create_options(cifs_sb, 0), 2452 .fid = &fid, 2453 }; 2454 2455 rc = SMB2_open(xid, &oparms, utf16_path, &oplock, NULL, NULL, NULL, 2456 NULL); 2457 if (rc) 2458 goto notify_exit; 2459 2460 rc = SMB2_change_notify(xid, tcon, fid.persistent_fid, fid.volatile_fid, 2461 notify.watch_tree, notify.completion_filter, 2462 notify.data_len, &returned_ioctl_info, &ret_len); 2463 2464 SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid); 2465 2466 cifs_dbg(FYI, "change notify for path %s rc %d\n", path, rc); 2467 if (return_changes && (ret_len > 0) && (notify.data_len > 0)) { 2468 if (ret_len > notify.data_len) 2469 ret_len = notify.data_len; 2470 pnotify_buf = (struct smb3_notify_info __user *)ioc_buf; 2471 if (copy_to_user(pnotify_buf->notify_data, returned_ioctl_info, ret_len)) 2472 rc = -EFAULT; 2473 else if (copy_to_user(&pnotify_buf->data_len, &ret_len, sizeof(ret_len))) 2474 rc = -EFAULT; 2475 } 2476 kfree(returned_ioctl_info); 2477 notify_exit: 2478 free_dentry_path(page); 2479 kfree(utf16_path); 2480 return rc; 2481 } 2482 2483 static int 2484 smb2_query_dir_first(const unsigned int xid, struct cifs_tcon *tcon, 2485 const char *path, struct cifs_sb_info *cifs_sb, 2486 struct cifs_fid *fid, __u16 search_flags, 2487 struct cifs_search_info *srch_inf) 2488 { 2489 __le16 *utf16_path; 2490 struct smb_rqst rqst[2]; 2491 struct kvec rsp_iov[2]; 2492 int resp_buftype[2]; 2493 struct kvec open_iov[SMB2_CREATE_IOV_SIZE]; 2494 struct kvec qd_iov[SMB2_QUERY_DIRECTORY_IOV_SIZE]; 2495 int rc, flags = 0; 2496 u8 oplock = SMB2_OPLOCK_LEVEL_NONE; 2497 struct cifs_open_parms oparms; 2498 struct smb2_query_directory_rsp *qd_rsp = NULL; 2499 struct smb2_create_rsp *op_rsp = NULL; 2500 struct TCP_Server_Info *server; 2501 int retries = 0, cur_sleep = 0; 2502 2503 replay_again: 2504 /* reinitialize for possible replay */ 2505 flags = 0; 2506 oplock = SMB2_OPLOCK_LEVEL_NONE; 2507 server = cifs_pick_channel(tcon->ses); 2508 2509 utf16_path = cifs_convert_path_to_utf16(path, cifs_sb); 2510 if (!utf16_path) 2511 return -ENOMEM; 2512 2513 if (smb3_encryption_required(tcon)) 2514 flags |= CIFS_TRANSFORM_REQ; 2515 2516 memset(rqst, 0, sizeof(rqst)); 2517 resp_buftype[0] = resp_buftype[1] = CIFS_NO_BUFFER; 2518 memset(rsp_iov, 0, sizeof(rsp_iov)); 2519 2520 /* Open */ 2521 memset(&open_iov, 0, sizeof(open_iov)); 2522 rqst[0].rq_iov = open_iov; 2523 rqst[0].rq_nvec = SMB2_CREATE_IOV_SIZE; 2524 2525 oparms = (struct cifs_open_parms) { 2526 .tcon = tcon, 2527 .path = path, 2528 .desired_access = FILE_READ_ATTRIBUTES | FILE_READ_DATA, 2529 .disposition = FILE_OPEN, 2530 .create_options = cifs_create_options(cifs_sb, 0), 2531 .fid = fid, 2532 .replay = !!(retries), 2533 }; 2534 2535 rc = SMB2_open_init(tcon, server, 2536 &rqst[0], &oplock, &oparms, utf16_path); 2537 if (rc) 2538 goto qdf_free; 2539 smb2_set_next_command(tcon, &rqst[0]); 2540 2541 /* Query directory */ 2542 srch_inf->entries_in_buffer = 0; 2543 srch_inf->index_of_last_entry = 2; 2544 2545 memset(&qd_iov, 0, sizeof(qd_iov)); 2546 rqst[1].rq_iov = qd_iov; 2547 rqst[1].rq_nvec = SMB2_QUERY_DIRECTORY_IOV_SIZE; 2548 2549 rc = SMB2_query_directory_init(xid, tcon, server, 2550 &rqst[1], 2551 COMPOUND_FID, COMPOUND_FID, 2552 0, srch_inf->info_level); 2553 if (rc) 2554 goto qdf_free; 2555 2556 smb2_set_related(&rqst[1]); 2557 2558 if (retries) { 2559 /* Back-off before retry */ 2560 if (cur_sleep) 2561 msleep(cur_sleep); 2562 smb2_set_replay(server, &rqst[0]); 2563 smb2_set_replay(server, &rqst[1]); 2564 } 2565 2566 rc = compound_send_recv(xid, tcon->ses, server, 2567 flags, 2, rqst, 2568 resp_buftype, rsp_iov); 2569 2570 /* If the open failed there is nothing to do */ 2571 op_rsp = (struct smb2_create_rsp *)rsp_iov[0].iov_base; 2572 if (op_rsp == NULL || op_rsp->hdr.Status != STATUS_SUCCESS) { 2573 cifs_dbg(FYI, "query_dir_first: open failed rc=%d\n", rc); 2574 goto qdf_free; 2575 } 2576 fid->persistent_fid = op_rsp->PersistentFileId; 2577 fid->volatile_fid = op_rsp->VolatileFileId; 2578 2579 /* Anything else than ENODATA means a genuine error */ 2580 if (rc && rc != -ENODATA) { 2581 SMB2_close(xid, tcon, fid->persistent_fid, fid->volatile_fid); 2582 cifs_dbg(FYI, "query_dir_first: query directory failed rc=%d\n", rc); 2583 trace_smb3_query_dir_err(xid, fid->persistent_fid, 2584 tcon->tid, tcon->ses->Suid, 0, 0, rc); 2585 goto qdf_free; 2586 } 2587 2588 atomic_inc(&tcon->num_remote_opens); 2589 2590 qd_rsp = (struct smb2_query_directory_rsp *)rsp_iov[1].iov_base; 2591 if (qd_rsp->hdr.Status == STATUS_NO_MORE_FILES) { 2592 trace_smb3_query_dir_done(xid, fid->persistent_fid, 2593 tcon->tid, tcon->ses->Suid, 0, 0); 2594 srch_inf->endOfSearch = true; 2595 rc = 0; 2596 goto qdf_free; 2597 } 2598 2599 rc = smb2_parse_query_directory(tcon, &rsp_iov[1], resp_buftype[1], 2600 srch_inf); 2601 if (rc) { 2602 trace_smb3_query_dir_err(xid, fid->persistent_fid, tcon->tid, 2603 tcon->ses->Suid, 0, 0, rc); 2604 goto qdf_free; 2605 } 2606 resp_buftype[1] = CIFS_NO_BUFFER; 2607 2608 trace_smb3_query_dir_done(xid, fid->persistent_fid, tcon->tid, 2609 tcon->ses->Suid, 0, srch_inf->entries_in_buffer); 2610 2611 qdf_free: 2612 kfree(utf16_path); 2613 SMB2_open_free(&rqst[0]); 2614 SMB2_query_directory_free(&rqst[1]); 2615 free_rsp_buf(resp_buftype[0], rsp_iov[0].iov_base); 2616 free_rsp_buf(resp_buftype[1], rsp_iov[1].iov_base); 2617 2618 if (is_replayable_error(rc) && 2619 smb2_should_replay(tcon, &retries, &cur_sleep)) 2620 goto replay_again; 2621 2622 return rc; 2623 } 2624 2625 static int 2626 smb2_query_dir_next(const unsigned int xid, struct cifs_tcon *tcon, 2627 struct cifs_fid *fid, __u16 search_flags, 2628 struct cifs_search_info *srch_inf) 2629 { 2630 return SMB2_query_directory(xid, tcon, fid->persistent_fid, 2631 fid->volatile_fid, 0, srch_inf); 2632 } 2633 2634 static int 2635 smb2_close_dir(const unsigned int xid, struct cifs_tcon *tcon, 2636 struct cifs_fid *fid) 2637 { 2638 return SMB2_close(xid, tcon, fid->persistent_fid, fid->volatile_fid); 2639 } 2640 2641 /* 2642 * If we negotiate SMB2 protocol and get STATUS_PENDING - update 2643 * the number of credits and return true. Otherwise - return false. 2644 */ 2645 static bool 2646 smb2_is_status_pending(char *buf, struct TCP_Server_Info *server) 2647 { 2648 struct smb2_hdr *shdr = (struct smb2_hdr *)buf; 2649 int scredits, in_flight; 2650 2651 if (shdr->Status != STATUS_PENDING) 2652 return false; 2653 2654 if (shdr->CreditRequest) { 2655 spin_lock(&server->req_lock); 2656 server->credits += le16_to_cpu(shdr->CreditRequest); 2657 scredits = server->credits; 2658 in_flight = server->in_flight; 2659 spin_unlock(&server->req_lock); 2660 wake_up(&server->request_q); 2661 2662 trace_smb3_pend_credits(server->current_mid, 2663 server->conn_id, server->hostname, scredits, 2664 le16_to_cpu(shdr->CreditRequest), in_flight); 2665 cifs_dbg(FYI, "%s: status pending add %u credits total=%d\n", 2666 __func__, le16_to_cpu(shdr->CreditRequest), scredits); 2667 } 2668 2669 return true; 2670 } 2671 2672 static bool 2673 smb2_is_session_expired(char *buf) 2674 { 2675 struct smb2_hdr *shdr = (struct smb2_hdr *)buf; 2676 2677 if (shdr->Status != STATUS_NETWORK_SESSION_EXPIRED && 2678 shdr->Status != STATUS_USER_SESSION_DELETED) 2679 return false; 2680 2681 trace_smb3_ses_expired(le32_to_cpu(shdr->Id.SyncId.TreeId), 2682 le64_to_cpu(shdr->SessionId), 2683 le16_to_cpu(shdr->Command), 2684 le64_to_cpu(shdr->MessageId)); 2685 cifs_dbg(FYI, "Session expired or deleted\n"); 2686 2687 return true; 2688 } 2689 2690 static bool 2691 smb2_is_status_io_timeout(char *buf) 2692 { 2693 struct smb2_hdr *shdr = (struct smb2_hdr *)buf; 2694 2695 if (shdr->Status == STATUS_IO_TIMEOUT) 2696 return true; 2697 else 2698 return false; 2699 } 2700 2701 static bool 2702 smb2_is_network_name_deleted(char *buf, struct TCP_Server_Info *server) 2703 { 2704 struct smb2_hdr *shdr = (struct smb2_hdr *)buf; 2705 struct TCP_Server_Info *pserver; 2706 struct cifs_ses *ses; 2707 struct cifs_tcon *tcon; 2708 2709 if (shdr->Status != STATUS_NETWORK_NAME_DELETED) 2710 return false; 2711 2712 /* If server is a channel, select the primary channel */ 2713 pserver = SERVER_IS_CHAN(server) ? server->primary_server : server; 2714 2715 spin_lock(&cifs_tcp_ses_lock); 2716 list_for_each_entry(ses, &pserver->smb_ses_list, smb_ses_list) { 2717 if (cifs_ses_exiting(ses)) 2718 continue; 2719 list_for_each_entry(tcon, &ses->tcon_list, tcon_list) { 2720 if (tcon->tid == le32_to_cpu(shdr->Id.SyncId.TreeId)) { 2721 spin_lock(&tcon->tc_lock); 2722 tcon->need_reconnect = true; 2723 spin_unlock(&tcon->tc_lock); 2724 spin_unlock(&cifs_tcp_ses_lock); 2725 pr_warn_once("Server share %s deleted.\n", 2726 tcon->tree_name); 2727 return true; 2728 } 2729 } 2730 } 2731 spin_unlock(&cifs_tcp_ses_lock); 2732 2733 return false; 2734 } 2735 2736 static int smb2_oplock_response(struct cifs_tcon *tcon, __u64 persistent_fid, 2737 __u64 volatile_fid, __u16 net_fid, 2738 struct cifsInodeInfo *cinode, unsigned int oplock) 2739 { 2740 unsigned int sbflags = cifs_sb_flags(CIFS_SB(cinode)); 2741 __u8 op; 2742 2743 if (tcon->ses->server->capabilities & SMB2_GLOBAL_CAP_LEASING) 2744 return SMB2_lease_break(0, tcon, cinode->lease_key, 2745 smb2_get_lease_state(cinode, oplock)); 2746 2747 op = !!((oplock & CIFS_CACHE_READ_FLG) || (sbflags & CIFS_MOUNT_RO_CACHE)); 2748 return SMB2_oplock_break(0, tcon, persistent_fid, volatile_fid, op); 2749 } 2750 2751 void 2752 smb2_set_replay(struct TCP_Server_Info *server, struct smb_rqst *rqst) 2753 { 2754 struct smb2_hdr *shdr; 2755 2756 if (server->dialect < SMB30_PROT_ID) 2757 return; 2758 2759 shdr = (struct smb2_hdr *)(rqst->rq_iov[0].iov_base); 2760 if (shdr == NULL) { 2761 cifs_dbg(FYI, "shdr NULL in smb2_set_related\n"); 2762 return; 2763 } 2764 shdr->Flags |= SMB2_FLAGS_REPLAY_OPERATION; 2765 } 2766 2767 void 2768 smb2_set_related(struct smb_rqst *rqst) 2769 { 2770 struct smb2_hdr *shdr; 2771 2772 shdr = (struct smb2_hdr *)(rqst->rq_iov[0].iov_base); 2773 if (shdr == NULL) { 2774 cifs_dbg(FYI, "shdr NULL in smb2_set_related\n"); 2775 return; 2776 } 2777 shdr->Flags |= SMB2_FLAGS_RELATED_OPERATIONS; 2778 } 2779 2780 char smb2_padding[7] = {0, 0, 0, 0, 0, 0, 0}; 2781 2782 void 2783 smb2_set_next_command(struct cifs_tcon *tcon, struct smb_rqst *rqst) 2784 { 2785 struct smb2_hdr *shdr; 2786 struct cifs_ses *ses = tcon->ses; 2787 struct TCP_Server_Info *server = ses->server; 2788 unsigned long len = smb_rqst_len(server, rqst); 2789 int num_padding; 2790 2791 shdr = (struct smb2_hdr *)(rqst->rq_iov[0].iov_base); 2792 if (shdr == NULL) { 2793 cifs_dbg(FYI, "shdr NULL in smb2_set_next_command\n"); 2794 return; 2795 } 2796 2797 /* SMB headers in a compound are 8 byte aligned. */ 2798 if (IS_ALIGNED(len, 8)) 2799 goto out; 2800 2801 num_padding = 8 - (len & 7); 2802 if (smb3_encryption_required(tcon)) { 2803 int i; 2804 2805 /* 2806 * Flatten request into a single buffer with required padding as 2807 * the encryption layer can't handle the padding iovs. 2808 */ 2809 for (i = 1; i < rqst->rq_nvec; i++) { 2810 memcpy(rqst->rq_iov[0].iov_base + 2811 rqst->rq_iov[0].iov_len, 2812 rqst->rq_iov[i].iov_base, 2813 rqst->rq_iov[i].iov_len); 2814 rqst->rq_iov[0].iov_len += rqst->rq_iov[i].iov_len; 2815 } 2816 memset(rqst->rq_iov[0].iov_base + rqst->rq_iov[0].iov_len, 2817 0, num_padding); 2818 rqst->rq_iov[0].iov_len += num_padding; 2819 rqst->rq_nvec = 1; 2820 } else { 2821 rqst->rq_iov[rqst->rq_nvec].iov_base = smb2_padding; 2822 rqst->rq_iov[rqst->rq_nvec].iov_len = num_padding; 2823 rqst->rq_nvec++; 2824 } 2825 len += num_padding; 2826 out: 2827 shdr->NextCommand = cpu_to_le32(len); 2828 } 2829 2830 /* 2831 * helper function for exponential backoff and check if replayable 2832 */ 2833 bool smb2_should_replay(struct cifs_tcon *tcon, 2834 int *pretries, 2835 int *pcur_sleep) 2836 { 2837 if (!pretries || !pcur_sleep) 2838 return false; 2839 2840 if (tcon->retry || (*pretries)++ < tcon->ses->server->retrans) { 2841 /* Update sleep time for exponential backoff */ 2842 if (!(*pcur_sleep)) 2843 (*pcur_sleep) = 1; 2844 else { 2845 (*pcur_sleep) = ((*pcur_sleep) << 1); 2846 if ((*pcur_sleep) > CIFS_MAX_SLEEP) 2847 (*pcur_sleep) = CIFS_MAX_SLEEP; 2848 } 2849 return true; 2850 } 2851 2852 return false; 2853 } 2854 2855 /* 2856 * Passes the query info response back to the caller on success. 2857 * Caller need to free this with free_rsp_buf(). 2858 */ 2859 int 2860 smb2_query_info_compound(const unsigned int xid, struct cifs_tcon *tcon, 2861 const char *path, u32 desired_access, 2862 u32 class, u32 type, u32 output_len, 2863 struct kvec *rsp, int *buftype, 2864 struct cifs_sb_info *cifs_sb) 2865 { 2866 struct smb2_compound_vars *vars; 2867 struct cifs_ses *ses = tcon->ses; 2868 struct TCP_Server_Info *server; 2869 int flags = CIFS_CP_CREATE_CLOSE_OP; 2870 struct smb_rqst *rqst; 2871 int resp_buftype[3]; 2872 struct kvec *rsp_iov; 2873 u8 oplock = SMB2_OPLOCK_LEVEL_NONE; 2874 struct cifs_open_parms oparms; 2875 struct cifs_fid fid; 2876 int rc; 2877 __le16 *utf16_path; 2878 struct cached_fid *cfid; 2879 int retries = 0, cur_sleep = 0; 2880 2881 replay_again: 2882 /* reinitialize for possible replay */ 2883 cfid = NULL; 2884 flags = CIFS_CP_CREATE_CLOSE_OP; 2885 oplock = SMB2_OPLOCK_LEVEL_NONE; 2886 server = cifs_pick_channel(ses); 2887 2888 if (!path) 2889 path = ""; 2890 utf16_path = cifs_convert_path_to_utf16(path, cifs_sb); 2891 if (!utf16_path) 2892 return -ENOMEM; 2893 2894 if (smb3_encryption_required(tcon)) 2895 flags |= CIFS_TRANSFORM_REQ; 2896 2897 resp_buftype[0] = resp_buftype[1] = resp_buftype[2] = CIFS_NO_BUFFER; 2898 vars = kzalloc_obj(*vars); 2899 if (!vars) { 2900 rc = -ENOMEM; 2901 goto out_free_path; 2902 } 2903 rqst = vars->rqst; 2904 rsp_iov = vars->rsp_iov; 2905 2906 /* 2907 * We can only call this for things we know are directories. 2908 */ 2909 if (!strcmp(path, "")) 2910 open_cached_dir(xid, tcon, path, cifs_sb, false, 2911 &cfid); /* cfid null if open dir failed */ 2912 2913 rqst[0].rq_iov = vars->open_iov; 2914 rqst[0].rq_nvec = SMB2_CREATE_IOV_SIZE; 2915 2916 oparms = (struct cifs_open_parms) { 2917 .tcon = tcon, 2918 .path = path, 2919 .desired_access = desired_access, 2920 .disposition = FILE_OPEN, 2921 .create_options = cifs_create_options(cifs_sb, 0), 2922 .fid = &fid, 2923 .replay = !!(retries), 2924 }; 2925 2926 rc = SMB2_open_init(tcon, server, 2927 &rqst[0], &oplock, &oparms, utf16_path); 2928 if (rc) 2929 goto qic_exit; 2930 smb2_set_next_command(tcon, &rqst[0]); 2931 2932 rqst[1].rq_iov = &vars->qi_iov; 2933 rqst[1].rq_nvec = 1; 2934 2935 if (cfid) { 2936 rc = SMB2_query_info_init(tcon, server, 2937 &rqst[1], 2938 cfid->fid.persistent_fid, 2939 cfid->fid.volatile_fid, 2940 class, type, 0, 2941 output_len, 0, 2942 NULL); 2943 } else { 2944 rc = SMB2_query_info_init(tcon, server, 2945 &rqst[1], 2946 COMPOUND_FID, 2947 COMPOUND_FID, 2948 class, type, 0, 2949 output_len, 0, 2950 NULL); 2951 } 2952 if (rc) 2953 goto qic_exit; 2954 if (!cfid) { 2955 smb2_set_next_command(tcon, &rqst[1]); 2956 smb2_set_related(&rqst[1]); 2957 } 2958 2959 rqst[2].rq_iov = &vars->close_iov; 2960 rqst[2].rq_nvec = 1; 2961 2962 rc = SMB2_close_init(tcon, server, 2963 &rqst[2], COMPOUND_FID, COMPOUND_FID, false); 2964 if (rc) 2965 goto qic_exit; 2966 smb2_set_related(&rqst[2]); 2967 2968 if (retries) { 2969 /* Back-off before retry */ 2970 if (cur_sleep) 2971 msleep(cur_sleep); 2972 if (!cfid) { 2973 smb2_set_replay(server, &rqst[0]); 2974 smb2_set_replay(server, &rqst[2]); 2975 } 2976 smb2_set_replay(server, &rqst[1]); 2977 } 2978 2979 if (cfid) { 2980 rc = compound_send_recv(xid, ses, server, 2981 flags, 1, &rqst[1], 2982 &resp_buftype[1], &rsp_iov[1]); 2983 } else { 2984 rc = compound_send_recv(xid, ses, server, 2985 flags, 3, rqst, 2986 resp_buftype, rsp_iov); 2987 } 2988 if (rc) { 2989 free_rsp_buf(resp_buftype[1], rsp_iov[1].iov_base); 2990 if (rc == -EREMCHG) { 2991 tcon->need_reconnect = true; 2992 pr_warn_once("server share %s deleted\n", 2993 tcon->tree_name); 2994 } 2995 goto qic_exit; 2996 } 2997 *rsp = rsp_iov[1]; 2998 *buftype = resp_buftype[1]; 2999 3000 qic_exit: 3001 SMB2_open_free(&rqst[0]); 3002 SMB2_query_info_free(&rqst[1]); 3003 SMB2_close_free(&rqst[2]); 3004 free_rsp_buf(resp_buftype[0], rsp_iov[0].iov_base); 3005 free_rsp_buf(resp_buftype[2], rsp_iov[2].iov_base); 3006 if (cfid) 3007 close_cached_dir(cfid); 3008 kfree(vars); 3009 out_free_path: 3010 kfree(utf16_path); 3011 3012 if (is_replayable_error(rc) && 3013 smb2_should_replay(tcon, &retries, &cur_sleep)) 3014 goto replay_again; 3015 3016 return rc; 3017 } 3018 3019 static int 3020 smb2_queryfs(const unsigned int xid, struct cifs_tcon *tcon, 3021 const char *path, struct cifs_sb_info *cifs_sb, struct kstatfs *buf) 3022 { 3023 struct smb2_query_info_rsp *rsp; 3024 struct smb2_fs_full_size_info *info = NULL; 3025 struct kvec rsp_iov = {NULL, 0}; 3026 int buftype = CIFS_NO_BUFFER; 3027 int rc; 3028 3029 3030 rc = smb2_query_info_compound(xid, tcon, path, 3031 FILE_READ_ATTRIBUTES, 3032 FS_FULL_SIZE_INFORMATION, 3033 SMB2_O_INFO_FILESYSTEM, 3034 sizeof(struct smb2_fs_full_size_info), 3035 &rsp_iov, &buftype, cifs_sb); 3036 if (rc) 3037 goto qfs_exit; 3038 3039 rsp = (struct smb2_query_info_rsp *)rsp_iov.iov_base; 3040 buf->f_type = SMB2_SUPER_MAGIC; 3041 info = (struct smb2_fs_full_size_info *)( 3042 le16_to_cpu(rsp->OutputBufferOffset) + (char *)rsp); 3043 rc = smb2_validate_iov(le16_to_cpu(rsp->OutputBufferOffset), 3044 le32_to_cpu(rsp->OutputBufferLength), 3045 &rsp_iov, 3046 sizeof(struct smb2_fs_full_size_info)); 3047 if (!rc) 3048 smb2_copy_fs_info_to_kstatfs(info, buf); 3049 3050 qfs_exit: 3051 trace_smb3_qfs_done(xid, tcon->tid, tcon->ses->Suid, tcon->tree_name, rc); 3052 free_rsp_buf(buftype, rsp_iov.iov_base); 3053 return rc; 3054 } 3055 3056 static int 3057 smb311_queryfs(const unsigned int xid, struct cifs_tcon *tcon, 3058 const char *path, struct cifs_sb_info *cifs_sb, struct kstatfs *buf) 3059 { 3060 int rc; 3061 __le16 *utf16_path = NULL; 3062 u8 oplock = SMB2_OPLOCK_LEVEL_NONE; 3063 struct cifs_open_parms oparms; 3064 struct cifs_fid fid; 3065 3066 if (!tcon->posix_extensions) 3067 return smb2_queryfs(xid, tcon, path, cifs_sb, buf); 3068 3069 oparms = (struct cifs_open_parms) { 3070 .tcon = tcon, 3071 .path = path, 3072 .desired_access = FILE_READ_ATTRIBUTES, 3073 .disposition = FILE_OPEN, 3074 .create_options = cifs_create_options(cifs_sb, 0), 3075 .fid = &fid, 3076 }; 3077 3078 utf16_path = cifs_convert_path_to_utf16(path, cifs_sb); 3079 if (utf16_path == NULL) 3080 return -ENOMEM; 3081 3082 rc = SMB2_open(xid, &oparms, utf16_path, &oplock, NULL, NULL, 3083 NULL, NULL); 3084 kfree(utf16_path); 3085 if (rc) 3086 return rc; 3087 3088 rc = SMB311_posix_qfs_info(xid, tcon, fid.persistent_fid, 3089 fid.volatile_fid, buf); 3090 buf->f_type = SMB2_SUPER_MAGIC; 3091 SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid); 3092 return rc; 3093 } 3094 3095 static bool 3096 smb2_compare_fids(struct cifsFileInfo *ob1, struct cifsFileInfo *ob2) 3097 { 3098 return ob1->fid.persistent_fid == ob2->fid.persistent_fid && 3099 ob1->fid.volatile_fid == ob2->fid.volatile_fid; 3100 } 3101 3102 static int 3103 smb2_mand_lock(const unsigned int xid, struct cifsFileInfo *cfile, __u64 offset, 3104 __u64 length, __u32 type, int lock, int unlock, bool wait) 3105 { 3106 if (unlock && !lock) 3107 type = SMB2_LOCKFLAG_UNLOCK; 3108 return SMB2_lock(xid, tlink_tcon(cfile->tlink), 3109 cfile->fid.persistent_fid, cfile->fid.volatile_fid, 3110 current->tgid, length, offset, type, wait); 3111 } 3112 3113 static void 3114 smb2_get_lease_key(struct inode *inode, struct cifs_fid *fid) 3115 { 3116 memcpy(fid->lease_key, CIFS_I(inode)->lease_key, SMB2_LEASE_KEY_SIZE); 3117 } 3118 3119 static void 3120 smb2_set_lease_key(struct inode *inode, struct cifs_fid *fid) 3121 { 3122 memcpy(CIFS_I(inode)->lease_key, fid->lease_key, SMB2_LEASE_KEY_SIZE); 3123 } 3124 3125 static void 3126 smb2_new_lease_key(struct cifs_fid *fid) 3127 { 3128 generate_random_uuid(fid->lease_key); 3129 } 3130 3131 static int 3132 smb2_get_dfs_refer(const unsigned int xid, struct cifs_ses *ses, 3133 const char *search_name, 3134 struct dfs_info3_param **target_nodes, 3135 unsigned int *num_of_nodes, 3136 const struct nls_table *nls_codepage, int remap) 3137 { 3138 int rc; 3139 __le16 *utf16_path = NULL; 3140 int utf16_path_len = 0; 3141 struct cifs_tcon *tcon; 3142 struct fsctl_get_dfs_referral_req *dfs_req = NULL; 3143 struct get_dfs_referral_rsp *dfs_rsp = NULL; 3144 u32 dfs_req_size = 0, dfs_rsp_size = 0; 3145 int retry_once = 0; 3146 3147 cifs_dbg(FYI, "%s: path: %s\n", __func__, search_name); 3148 3149 /* 3150 * Try to use the IPC tcon, otherwise just use any 3151 */ 3152 tcon = ses->tcon_ipc; 3153 if (tcon == NULL) { 3154 spin_lock(&cifs_tcp_ses_lock); 3155 tcon = list_first_entry_or_null(&ses->tcon_list, 3156 struct cifs_tcon, 3157 tcon_list); 3158 if (tcon) { 3159 spin_lock(&tcon->tc_lock); 3160 tcon->tc_count++; 3161 spin_unlock(&tcon->tc_lock); 3162 trace_smb3_tcon_ref(tcon->debug_id, tcon->tc_count, 3163 netfs_trace_tcon_ref_get_dfs_refer); 3164 } 3165 spin_unlock(&cifs_tcp_ses_lock); 3166 } 3167 3168 if (tcon == NULL) { 3169 cifs_dbg(VFS, "session %p has no tcon available for a dfs referral request\n", 3170 ses); 3171 rc = -ENOTCONN; 3172 goto out; 3173 } 3174 3175 utf16_path = cifs_strndup_to_utf16(search_name, PATH_MAX, 3176 &utf16_path_len, 3177 nls_codepage, remap); 3178 if (!utf16_path) { 3179 rc = -ENOMEM; 3180 goto out; 3181 } 3182 3183 dfs_req_size = sizeof(*dfs_req) + utf16_path_len; 3184 dfs_req = kzalloc(dfs_req_size, GFP_KERNEL); 3185 if (!dfs_req) { 3186 rc = -ENOMEM; 3187 goto out; 3188 } 3189 3190 /* Highest DFS referral version understood */ 3191 dfs_req->MaxReferralLevel = DFS_VERSION; 3192 3193 /* Path to resolve in an UTF-16 null-terminated string */ 3194 memcpy(dfs_req->RequestFileName, utf16_path, utf16_path_len); 3195 3196 for (;;) { 3197 rc = SMB2_ioctl(xid, tcon, NO_FILE_ID, NO_FILE_ID, 3198 FSCTL_DFS_GET_REFERRALS, 3199 (char *)dfs_req, dfs_req_size, CIFSMaxBufSize, 3200 (char **)&dfs_rsp, &dfs_rsp_size); 3201 if (fatal_signal_pending(current)) { 3202 rc = -EINTR; 3203 break; 3204 } 3205 if (!is_retryable_error(rc) || retry_once++) 3206 break; 3207 usleep_range(512, 2048); 3208 } 3209 3210 if (!rc && !dfs_rsp) 3211 rc = smb_EIO(smb_eio_trace_dfsref_no_rsp); 3212 if (rc) { 3213 if (!is_retryable_error(rc) && rc != -ENOENT && rc != -EOPNOTSUPP) 3214 cifs_tcon_dbg(FYI, "%s: ioctl error: rc=%d\n", __func__, rc); 3215 goto out; 3216 } 3217 3218 rc = parse_dfs_referrals(dfs_rsp, dfs_rsp_size, 3219 num_of_nodes, target_nodes, 3220 nls_codepage, remap, search_name, 3221 true /* is_unicode */); 3222 if (rc && rc != -ENOENT) { 3223 cifs_tcon_dbg(VFS, "%s: failed to parse DFS referral %s: %d\n", 3224 __func__, search_name, rc); 3225 } 3226 3227 out: 3228 if (tcon && !tcon->ipc) { 3229 /* ipc tcons are not refcounted */ 3230 cifs_put_tcon(tcon, netfs_trace_tcon_ref_put_dfs_refer); 3231 } 3232 kfree(utf16_path); 3233 kfree(dfs_req); 3234 kfree(dfs_rsp); 3235 return rc; 3236 } 3237 3238 static struct smb_ntsd * 3239 get_smb2_acl_by_fid(struct cifs_sb_info *cifs_sb, 3240 const struct cifs_fid *cifsfid, u32 *pacllen, u32 info) 3241 { 3242 struct smb_ntsd *pntsd = NULL; 3243 unsigned int xid; 3244 int rc = -EOPNOTSUPP; 3245 struct tcon_link *tlink = cifs_sb_tlink(cifs_sb); 3246 3247 if (IS_ERR(tlink)) 3248 return ERR_CAST(tlink); 3249 3250 xid = get_xid(); 3251 cifs_dbg(FYI, "trying to get acl\n"); 3252 3253 rc = SMB2_query_acl(xid, tlink_tcon(tlink), cifsfid->persistent_fid, 3254 cifsfid->volatile_fid, (void **)&pntsd, pacllen, 3255 info); 3256 free_xid(xid); 3257 3258 cifs_put_tlink(tlink); 3259 3260 cifs_dbg(FYI, "%s: rc = %d ACL len %d\n", __func__, rc, *pacllen); 3261 if (rc) 3262 return ERR_PTR(rc); 3263 return pntsd; 3264 3265 } 3266 3267 static struct smb_ntsd * 3268 get_smb2_acl_by_path(struct cifs_sb_info *cifs_sb, 3269 const char *path, u32 *pacllen, u32 info) 3270 { 3271 struct smb_ntsd *pntsd = NULL; 3272 u8 oplock = SMB2_OPLOCK_LEVEL_NONE; 3273 unsigned int xid; 3274 int rc; 3275 struct cifs_tcon *tcon; 3276 struct tcon_link *tlink = cifs_sb_tlink(cifs_sb); 3277 struct cifs_fid fid; 3278 struct cifs_open_parms oparms; 3279 __le16 *utf16_path; 3280 3281 cifs_dbg(FYI, "get smb3 acl for path %s\n", path); 3282 if (IS_ERR(tlink)) 3283 return ERR_CAST(tlink); 3284 3285 tcon = tlink_tcon(tlink); 3286 xid = get_xid(); 3287 3288 utf16_path = cifs_convert_path_to_utf16(path, cifs_sb); 3289 if (!utf16_path) { 3290 rc = -ENOMEM; 3291 goto put_tlink; 3292 } 3293 3294 oparms = (struct cifs_open_parms) { 3295 .tcon = tcon, 3296 .path = path, 3297 .desired_access = READ_CONTROL, 3298 .disposition = FILE_OPEN, 3299 /* 3300 * When querying an ACL, even if the file is a symlink 3301 * we want to open the source not the target, and so 3302 * the protocol requires that the client specify this 3303 * flag when opening a reparse point 3304 */ 3305 .create_options = cifs_create_options(cifs_sb, 0) | 3306 OPEN_REPARSE_POINT, 3307 .fid = &fid, 3308 }; 3309 3310 if (info & SACL_SECINFO) 3311 oparms.desired_access |= SYSTEM_SECURITY; 3312 3313 rc = SMB2_open(xid, &oparms, utf16_path, &oplock, NULL, NULL, NULL, 3314 NULL); 3315 kfree(utf16_path); 3316 if (!rc) { 3317 rc = SMB2_query_acl(xid, tlink_tcon(tlink), fid.persistent_fid, 3318 fid.volatile_fid, (void **)&pntsd, pacllen, 3319 info); 3320 SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid); 3321 } 3322 3323 put_tlink: 3324 cifs_put_tlink(tlink); 3325 free_xid(xid); 3326 3327 cifs_dbg(FYI, "%s: rc = %d ACL len %d\n", __func__, rc, *pacllen); 3328 if (rc) 3329 return ERR_PTR(rc); 3330 return pntsd; 3331 } 3332 3333 static int 3334 set_smb2_acl(struct smb_ntsd *pnntsd, __u32 acllen, 3335 struct inode *inode, const char *path, int aclflag) 3336 { 3337 u8 oplock = SMB2_OPLOCK_LEVEL_NONE; 3338 unsigned int xid; 3339 int rc, access_flags = 0; 3340 struct cifs_tcon *tcon; 3341 struct cifs_sb_info *cifs_sb = CIFS_SB(inode->i_sb); 3342 struct tcon_link *tlink = cifs_sb_tlink(cifs_sb); 3343 struct cifs_fid fid; 3344 struct cifs_open_parms oparms; 3345 __le16 *utf16_path; 3346 3347 cifs_dbg(FYI, "set smb3 acl for path %s\n", path); 3348 if (IS_ERR(tlink)) 3349 return PTR_ERR(tlink); 3350 3351 tcon = tlink_tcon(tlink); 3352 xid = get_xid(); 3353 3354 if (aclflag & CIFS_ACL_OWNER || aclflag & CIFS_ACL_GROUP) 3355 access_flags |= WRITE_OWNER; 3356 if (aclflag & CIFS_ACL_SACL) 3357 access_flags |= SYSTEM_SECURITY; 3358 if (aclflag & CIFS_ACL_DACL) 3359 access_flags |= WRITE_DAC; 3360 3361 utf16_path = cifs_convert_path_to_utf16(path, cifs_sb); 3362 if (!utf16_path) { 3363 rc = -ENOMEM; 3364 goto put_tlink; 3365 } 3366 3367 oparms = (struct cifs_open_parms) { 3368 .tcon = tcon, 3369 .desired_access = access_flags, 3370 .create_options = cifs_create_options(cifs_sb, 0), 3371 .disposition = FILE_OPEN, 3372 .path = path, 3373 .fid = &fid, 3374 }; 3375 3376 rc = SMB2_open(xid, &oparms, utf16_path, &oplock, NULL, NULL, 3377 NULL, NULL); 3378 kfree(utf16_path); 3379 if (!rc) { 3380 rc = SMB2_set_acl(xid, tlink_tcon(tlink), fid.persistent_fid, 3381 fid.volatile_fid, pnntsd, acllen, aclflag); 3382 SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid); 3383 } 3384 3385 put_tlink: 3386 cifs_put_tlink(tlink); 3387 free_xid(xid); 3388 return rc; 3389 } 3390 3391 /* Retrieve an ACL from the server */ 3392 static struct smb_ntsd * 3393 get_smb2_acl(struct cifs_sb_info *cifs_sb, 3394 struct inode *inode, const char *path, 3395 u32 *pacllen, u32 info) 3396 { 3397 struct smb_ntsd *pntsd = NULL; 3398 struct cifsFileInfo *open_file = NULL; 3399 3400 if (inode && !(info & SACL_SECINFO)) 3401 open_file = find_readable_file(CIFS_I(inode), FIND_FSUID_ONLY); 3402 if (!open_file || (info & SACL_SECINFO)) 3403 return get_smb2_acl_by_path(cifs_sb, path, pacllen, info); 3404 3405 pntsd = get_smb2_acl_by_fid(cifs_sb, &open_file->fid, pacllen, info); 3406 cifsFileInfo_put(open_file); 3407 return pntsd; 3408 } 3409 3410 static long smb3_zero_data(struct file *file, struct cifs_tcon *tcon, 3411 loff_t offset, loff_t len, unsigned int xid) 3412 { 3413 struct cifsFileInfo *cfile = file->private_data; 3414 struct file_zero_data_information fsctl_buf; 3415 3416 cifs_dbg(FYI, "Offset %lld len %lld\n", offset, len); 3417 3418 fsctl_buf.FileOffset = cpu_to_le64(offset); 3419 fsctl_buf.BeyondFinalZero = cpu_to_le64(offset + len); 3420 3421 return SMB2_ioctl(xid, tcon, cfile->fid.persistent_fid, 3422 cfile->fid.volatile_fid, FSCTL_SET_ZERO_DATA, 3423 (char *)&fsctl_buf, 3424 sizeof(struct file_zero_data_information), 3425 0, NULL, NULL); 3426 } 3427 3428 static long smb3_zero_range(struct file *file, struct cifs_tcon *tcon, 3429 unsigned long long offset, unsigned long long len, 3430 bool keep_size) 3431 { 3432 struct cifs_ses *ses = tcon->ses; 3433 struct inode *inode = file_inode(file); 3434 struct cifsInodeInfo *cifsi = CIFS_I(inode); 3435 struct cifsFileInfo *cfile = file->private_data; 3436 unsigned long long i_size, new_size, remote_i_size, zero_point; 3437 long rc; 3438 unsigned int xid; 3439 3440 xid = get_xid(); 3441 3442 trace_smb3_zero_enter(xid, cfile->fid.persistent_fid, tcon->tid, 3443 ses->Suid, offset, len); 3444 3445 filemap_invalidate_lock(inode->i_mapping); 3446 3447 netfs_read_sizes(inode, &i_size, &remote_i_size, &zero_point); 3448 if (offset + len >= remote_i_size && offset < i_size) { 3449 unsigned long long top = umin(offset + len, i_size); 3450 3451 rc = filemap_write_and_wait_range(inode->i_mapping, offset, top - 1); 3452 if (rc < 0) 3453 goto zero_range_exit; 3454 } 3455 3456 /* 3457 * We zero the range through ioctl, so we need remove the page caches 3458 * first, otherwise the data may be inconsistent with the server. 3459 */ 3460 truncate_pagecache_range(inode, offset, offset + len - 1); 3461 netfs_wait_for_outstanding_io(inode); 3462 3463 /* if file not oplocked can't be sure whether asking to extend size */ 3464 rc = -EOPNOTSUPP; 3465 if (keep_size == false && !CIFS_CACHE_READ(cifsi)) 3466 goto zero_range_exit; 3467 3468 rc = smb3_zero_data(file, tcon, offset, len, xid); 3469 if (rc < 0) 3470 goto zero_range_exit; 3471 3472 /* 3473 * do we also need to change the size of the file? 3474 */ 3475 new_size = offset + len; 3476 if (keep_size == false && (unsigned long long)i_size_read(inode) < new_size) { 3477 rc = SMB2_set_eof(xid, tcon, cfile->fid.persistent_fid, 3478 cfile->fid.volatile_fid, cfile->pid, new_size); 3479 if (rc >= 0) { 3480 truncate_setsize(inode, new_size); 3481 spin_lock(&inode->i_lock); 3482 netfs_resize_file(&cifsi->netfs, new_size, true); 3483 if (offset < cifsi->netfs._zero_point) 3484 netfs_write_zero_point(inode, offset); 3485 spin_unlock(&inode->i_lock); 3486 fscache_resize_cookie(cifs_inode_cookie(inode), new_size); 3487 } 3488 } 3489 3490 zero_range_exit: 3491 filemap_invalidate_unlock(inode->i_mapping); 3492 free_xid(xid); 3493 if (rc) 3494 trace_smb3_zero_err(xid, cfile->fid.persistent_fid, tcon->tid, 3495 ses->Suid, offset, len, rc); 3496 else 3497 trace_smb3_zero_done(xid, cfile->fid.persistent_fid, tcon->tid, 3498 ses->Suid, offset, len); 3499 return rc; 3500 } 3501 3502 static long smb3_punch_hole(struct file *file, struct cifs_tcon *tcon, 3503 loff_t offset, loff_t len) 3504 { 3505 struct inode *inode = file_inode(file); 3506 struct cifsFileInfo *cfile = file->private_data; 3507 struct file_zero_data_information fsctl_buf; 3508 unsigned long long end = offset + len, i_size, remote_i_size, zero_point; 3509 long rc; 3510 unsigned int xid; 3511 __u8 set_sparse = 1; 3512 3513 xid = get_xid(); 3514 3515 /* Need to make file sparse, if not already, before freeing range. */ 3516 /* Consider adding equivalent for compressed since it could also work */ 3517 rc = smb2_set_sparse(xid, tcon, cfile, inode, set_sparse); 3518 if (rc) 3519 goto out; 3520 3521 filemap_invalidate_lock(inode->i_mapping); 3522 /* 3523 * Flush dirty data first, otherwise a dirty folio spanning the punched 3524 * range may be written back after the ioctl and refill the hole. 3525 */ 3526 rc = filemap_write_and_wait_range(inode->i_mapping, offset, 3527 offset + len - 1); 3528 if (rc < 0) 3529 goto unlock; 3530 3531 /* 3532 * We implement the punch hole through ioctl, so we need remove the page 3533 * caches first, otherwise the data may be inconsistent with the server. 3534 */ 3535 truncate_pagecache_range(inode, offset, offset + len - 1); 3536 netfs_wait_for_outstanding_io(inode); 3537 3538 cifs_dbg(FYI, "Offset %lld len %lld\n", offset, len); 3539 3540 fsctl_buf.FileOffset = cpu_to_le64(offset); 3541 fsctl_buf.BeyondFinalZero = cpu_to_le64(offset + len); 3542 3543 rc = SMB2_ioctl(xid, tcon, cfile->fid.persistent_fid, 3544 cfile->fid.volatile_fid, FSCTL_SET_ZERO_DATA, 3545 (char *)&fsctl_buf, 3546 sizeof(struct file_zero_data_information), 3547 CIFSMaxBufSize, NULL, NULL); 3548 3549 if (rc) 3550 goto unlock; 3551 3552 /* If there's dirty data in the buffer that would extend the EOF if it 3553 * were written, then we need to move the EOF marker over to the lower 3554 * of the high end of the hole and the proposed EOF. The problem is 3555 * that we locally hole-punch the tail of the dirty data, the proposed 3556 * EOF update will end up in the wrong place. 3557 */ 3558 netfs_read_sizes(inode, &i_size, &remote_i_size, &zero_point); 3559 3560 if (end > remote_i_size && i_size > remote_i_size) { 3561 unsigned long long extend_to = umin(end, i_size); 3562 rc = SMB2_set_eof(xid, tcon, cfile->fid.persistent_fid, 3563 cfile->fid.volatile_fid, cfile->pid, extend_to); 3564 if (rc >= 0) { 3565 spin_lock(&inode->i_lock); 3566 netfs_write_remote_i_size(inode, extend_to); 3567 spin_unlock(&inode->i_lock); 3568 } 3569 } 3570 3571 unlock: 3572 filemap_invalidate_unlock(inode->i_mapping); 3573 out: 3574 free_xid(xid); 3575 return rc; 3576 } 3577 3578 static int smb3_simple_fallocate_write_range(unsigned int xid, 3579 struct cifs_tcon *tcon, 3580 struct cifsFileInfo *cfile, 3581 loff_t off, loff_t len, 3582 char *buf) 3583 { 3584 struct cifs_io_parms io_parms = {0}; 3585 unsigned int nbytes; 3586 int rc = 0; 3587 struct kvec iov[2]; 3588 3589 io_parms.netfid = cfile->fid.netfid; 3590 io_parms.pid = current->tgid; 3591 io_parms.tcon = tcon; 3592 io_parms.persistent_fid = cfile->fid.persistent_fid; 3593 io_parms.volatile_fid = cfile->fid.volatile_fid; 3594 3595 while (len) { 3596 io_parms.offset = off; 3597 io_parms.length = len; 3598 if (io_parms.length > SMB2_MAX_BUFFER_SIZE) 3599 io_parms.length = SMB2_MAX_BUFFER_SIZE; 3600 /* iov[0] is reserved for smb header */ 3601 iov[1].iov_base = buf; 3602 iov[1].iov_len = io_parms.length; 3603 rc = SMB2_write(xid, &io_parms, &nbytes, iov, 1); 3604 if (rc) 3605 break; 3606 if (!nbytes) 3607 return -EIO; 3608 if (nbytes > len) 3609 return -EINVAL; 3610 off += nbytes; 3611 len -= nbytes; 3612 } 3613 return rc; 3614 } 3615 3616 static int smb3_simple_fallocate_range(unsigned int xid, 3617 struct cifs_tcon *tcon, 3618 struct cifsFileInfo *cfile, 3619 loff_t off, loff_t len) 3620 { 3621 struct file_allocated_range_buffer in_data, *out_data = NULL, *tmp_data; 3622 struct inode *inode = d_inode(cfile->dentry); 3623 u32 out_data_len; 3624 char *buf = NULL; 3625 u64 range_start, range_len, range_end; 3626 loff_t l; 3627 int rc; 3628 3629 buf = kvzalloc(min_t(loff_t, len, SMB2_MAX_BUFFER_SIZE), GFP_KERNEL); 3630 if (!buf) { 3631 rc = -ENOMEM; 3632 goto out; 3633 } 3634 3635 if (off >= i_size_read(inode)) { 3636 rc = smb3_simple_fallocate_write_range(xid, tcon, cfile, 3637 off, len, buf); 3638 goto out; 3639 } 3640 3641 in_data.file_offset = cpu_to_le64(off); 3642 in_data.length = cpu_to_le64(len); 3643 rc = SMB2_ioctl(xid, tcon, cfile->fid.persistent_fid, 3644 cfile->fid.volatile_fid, 3645 FSCTL_QUERY_ALLOCATED_RANGES, 3646 (char *)&in_data, sizeof(in_data), 3647 1024 * sizeof(struct file_allocated_range_buffer), 3648 (char **)&out_data, &out_data_len); 3649 if (rc) 3650 goto out; 3651 3652 tmp_data = out_data; 3653 while (len) { 3654 /* 3655 * The rest of the region is unmapped so write it all. 3656 */ 3657 if (out_data_len == 0) { 3658 rc = smb3_simple_fallocate_write_range(xid, tcon, 3659 cfile, off, len, buf); 3660 goto out; 3661 } 3662 3663 if (out_data_len < sizeof(struct file_allocated_range_buffer)) { 3664 rc = -EINVAL; 3665 goto out; 3666 } 3667 3668 range_start = le64_to_cpu(tmp_data->file_offset); 3669 range_len = le64_to_cpu(tmp_data->length); 3670 if (check_add_overflow(range_start, range_len, &range_end) || 3671 range_end > S64_MAX) { 3672 rc = -EINVAL; 3673 goto out; 3674 } 3675 3676 if (off < range_start) { 3677 /* 3678 * We are at a hole. Write until the end of the region 3679 * or until the next allocated data, 3680 * whichever comes next. 3681 */ 3682 l = range_start - off; 3683 if (len < l) 3684 l = len; 3685 rc = smb3_simple_fallocate_write_range(xid, tcon, 3686 cfile, off, l, buf); 3687 if (rc) 3688 goto out; 3689 off = off + l; 3690 len = len - l; 3691 if (len == 0) 3692 goto out; 3693 } 3694 /* 3695 * We are at a section of allocated data, just skip forward 3696 * until the end of the data or the end of the region 3697 * we are supposed to fallocate, whichever comes first. 3698 */ 3699 if (off < range_end) { 3700 l = range_end - off; 3701 if (len < l) 3702 l = len; 3703 off += l; 3704 len -= l; 3705 } 3706 3707 tmp_data = &tmp_data[1]; 3708 out_data_len -= sizeof(struct file_allocated_range_buffer); 3709 } 3710 3711 out: 3712 kfree(out_data); 3713 kvfree(buf); 3714 return rc; 3715 } 3716 3717 3718 static long smb3_simple_falloc(struct file *file, struct cifs_tcon *tcon, 3719 loff_t off, loff_t len, bool keep_size) 3720 { 3721 struct inode *inode; 3722 struct cifsInodeInfo *cifsi; 3723 struct cifsFileInfo *cfile = file->private_data; 3724 long rc = -EOPNOTSUPP; 3725 unsigned int xid; 3726 loff_t old_eof, new_eof; 3727 struct smb2_file_all_info file_inf; 3728 u64 asize; 3729 int qrc; 3730 3731 xid = get_xid(); 3732 3733 inode = d_inode(cfile->dentry); 3734 cifsi = CIFS_I(inode); 3735 old_eof = i_size_read(inode); 3736 3737 trace_smb3_falloc_enter(xid, cfile->fid.persistent_fid, tcon->tid, 3738 tcon->ses->Suid, off, len); 3739 /* if file not oplocked can't be sure whether asking to extend size */ 3740 if (!CIFS_CACHE_READ(cifsi)) 3741 if (!keep_size) { 3742 trace_smb3_falloc_err(xid, cfile->fid.persistent_fid, 3743 tcon->tid, tcon->ses->Suid, off, len, rc); 3744 free_xid(xid); 3745 return rc; 3746 } 3747 3748 /* 3749 * Extending the file 3750 */ 3751 if (!keep_size && old_eof < off + len) { 3752 rc = inode_newsize_ok(inode, off + len); 3753 if (rc) 3754 goto out; 3755 3756 /* 3757 * A small range at or beyond EOF can be allocated by writing 3758 * zeroes. For off > old_eof, this preserves the intervening 3759 * hole instead of allocating from offset 0. 3760 */ 3761 if (off > old_eof || 3762 (off == old_eof && old_eof != 0 && 3763 (cifsi->cifsAttrs & FILE_ATTRIBUTE_SPARSE_FILE))) { 3764 if (len > 1024 * 1024) { 3765 rc = -EOPNOTSUPP; 3766 goto out; 3767 } 3768 3769 rc = smb3_simple_fallocate_range(xid, tcon, cfile, 3770 off, len); 3771 if (rc) { 3772 spin_lock(&inode->i_lock); 3773 cifsi->time = 0; 3774 spin_unlock(&inode->i_lock); 3775 goto out; 3776 } 3777 3778 new_eof = off + len; 3779 netfs_resize_file(&cifsi->netfs, new_eof, true); 3780 cifs_setsize(inode, new_eof); 3781 3782 qrc = SMB2_query_info(xid, tcon, 3783 cfile->fid.persistent_fid, 3784 cfile->fid.volatile_fid, &file_inf); 3785 spin_lock(&inode->i_lock); 3786 if (qrc == 0) { 3787 asize = le64_to_cpu(file_inf.AllocationSize); 3788 inode->i_blocks = CIFS_INO_BLOCKS(asize); 3789 } else { 3790 cifsi->time = 0; 3791 } 3792 spin_unlock(&inode->i_lock); 3793 goto out; 3794 } 3795 3796 if (cifsi->cifsAttrs & FILE_ATTRIBUTE_SPARSE_FILE) 3797 smb2_set_sparse(xid, tcon, cfile, inode, false); 3798 3799 new_eof = off + len; 3800 3801 qrc = SMB2_query_info(xid, tcon, 3802 cfile->fid.persistent_fid, 3803 cfile->fid.volatile_fid, &file_inf); 3804 if (qrc == 0) 3805 asize = le64_to_cpu(file_inf.AllocationSize); 3806 3807 /* 3808 * FILE_ALLOCATION_INFORMATION can only describe allocation up to 3809 * new_eof. Some servers may accept it without allocating blocks, 3810 * so refresh AllocationSize before updating i_blocks. 3811 */ 3812 if (off == 0 || off == old_eof) { 3813 if (qrc || asize < new_eof) { 3814 rc = SMB2_set_allocation(xid, tcon, 3815 cfile->fid.persistent_fid, 3816 cfile->fid.volatile_fid, 3817 cfile->pid, new_eof); 3818 if (rc) 3819 goto out; 3820 } 3821 } 3822 3823 rc = SMB2_set_eof(xid, tcon, cfile->fid.persistent_fid, 3824 cfile->fid.volatile_fid, cfile->pid, new_eof); 3825 if (rc) 3826 goto out; 3827 3828 netfs_resize_file(&cifsi->netfs, new_eof, true); 3829 cifs_setsize(inode, new_eof); 3830 3831 qrc = SMB2_query_info(xid, tcon, 3832 cfile->fid.persistent_fid, 3833 cfile->fid.volatile_fid, &file_inf); 3834 spin_lock(&inode->i_lock); 3835 if (qrc == 0) { 3836 asize = le64_to_cpu(file_inf.AllocationSize); 3837 if (asize >= new_eof) 3838 inode->i_blocks = CIFS_INO_BLOCKS(asize); 3839 } else { 3840 cifsi->time = 0; 3841 } 3842 spin_unlock(&inode->i_lock); 3843 goto out; 3844 } 3845 3846 /* 3847 * Files are non-sparse by default so falloc may be a no-op 3848 * Must check if file sparse. If not sparse, and since we are not 3849 * extending then no need to do anything since file already allocated 3850 */ 3851 if ((cifsi->cifsAttrs & FILE_ATTRIBUTE_SPARSE_FILE) == 0) { 3852 rc = 0; 3853 goto out; 3854 } 3855 3856 if (keep_size == true) { 3857 /* 3858 * We can not preallocate pages beyond the end of the file 3859 * in SMB2 3860 */ 3861 if (off >= i_size_read(inode)) { 3862 rc = 0; 3863 goto out; 3864 } 3865 /* 3866 * For fallocates that are partially beyond the end of file, 3867 * clamp len so we only fallocate up to the end of file. 3868 */ 3869 if (off + len > i_size_read(inode)) { 3870 len = i_size_read(inode) - off; 3871 } 3872 } 3873 3874 if ((keep_size == true) || (i_size_read(inode) >= off + len)) { 3875 /* 3876 * At this point, we are trying to fallocate an internal 3877 * regions of a sparse file. Since smb2 does not have a 3878 * fallocate command we have two options on how to emulate this. 3879 * We can either turn the entire file to become non-sparse 3880 * which we only do if the fallocate is for virtually 3881 * the whole file, or we can overwrite the region with zeroes 3882 * using SMB2_write, which could be prohibitevly expensive 3883 * if len is large. 3884 */ 3885 /* 3886 * We are only trying to fallocate a small region so 3887 * just write it with zero. 3888 */ 3889 if (len <= 1024 * 1024) { 3890 rc = smb3_simple_fallocate_range(xid, tcon, cfile, 3891 off, len); 3892 goto out; 3893 } 3894 3895 /* 3896 * Check if falloc starts within first few pages of file 3897 * and ends within a few pages of the end of file to 3898 * ensure that most of file is being forced to be 3899 * fallocated now. If so then setting whole file sparse 3900 * ie potentially making a few extra pages at the beginning 3901 * or end of the file non-sparse via set_sparse is harmless. 3902 */ 3903 if ((off > 8192) || (off + len + 8192 < i_size_read(inode))) { 3904 rc = -EOPNOTSUPP; 3905 goto out; 3906 } 3907 } 3908 3909 smb2_set_sparse(xid, tcon, cfile, inode, false); 3910 rc = 0; 3911 3912 out: 3913 if (rc) 3914 trace_smb3_falloc_err(xid, cfile->fid.persistent_fid, tcon->tid, 3915 tcon->ses->Suid, off, len, rc); 3916 else 3917 trace_smb3_falloc_done(xid, cfile->fid.persistent_fid, tcon->tid, 3918 tcon->ses->Suid, off, len); 3919 3920 free_xid(xid); 3921 return rc; 3922 } 3923 3924 static long smb3_collapse_range(struct file *file, struct cifs_tcon *tcon, 3925 loff_t off, loff_t len) 3926 { 3927 int rc; 3928 unsigned int xid; 3929 struct inode *inode = file_inode(file); 3930 struct cifsInodeInfo *cifsi = CIFS_I(inode); 3931 struct cifsFileInfo *cfile = file->private_data; 3932 loff_t old_eof, new_eof; 3933 3934 xid = get_xid(); 3935 3936 old_eof = i_size_read(inode); 3937 if ((off >= old_eof) || 3938 off + len >= old_eof) { 3939 rc = -EINVAL; 3940 goto out; 3941 } 3942 3943 filemap_invalidate_lock(inode->i_mapping); 3944 rc = filemap_write_and_wait_range(inode->i_mapping, off, old_eof - 1); 3945 if (rc < 0) 3946 goto out_2; 3947 3948 truncate_pagecache_range(inode, off, old_eof); 3949 spin_lock(&inode->i_lock); 3950 netfs_write_zero_point(inode, old_eof); 3951 spin_unlock(&inode->i_lock); 3952 netfs_wait_for_outstanding_io(inode); 3953 3954 rc = smb2_copychunk_range(xid, cfile, cfile, off + len, 3955 old_eof - off - len, off); 3956 if (rc < 0) 3957 goto out_2; 3958 3959 new_eof = old_eof - len; 3960 rc = SMB2_set_eof(xid, tcon, cfile->fid.persistent_fid, 3961 cfile->fid.volatile_fid, cfile->pid, new_eof); 3962 if (rc < 0) 3963 goto out_2; 3964 3965 rc = 0; 3966 3967 truncate_setsize(inode, new_eof); 3968 spin_lock(&inode->i_lock); 3969 netfs_resize_file(&cifsi->netfs, new_eof, true); 3970 netfs_write_zero_point(inode, new_eof); 3971 spin_unlock(&inode->i_lock); 3972 fscache_resize_cookie(cifs_inode_cookie(inode), new_eof); 3973 out_2: 3974 filemap_invalidate_unlock(inode->i_mapping); 3975 out: 3976 free_xid(xid); 3977 return rc; 3978 } 3979 3980 static long smb3_insert_range(struct file *file, struct cifs_tcon *tcon, 3981 loff_t off, loff_t len) 3982 { 3983 int rc; 3984 unsigned int xid; 3985 struct cifsFileInfo *cfile = file->private_data; 3986 struct inode *inode = file_inode(file); 3987 struct cifsInodeInfo *cifsi = CIFS_I(inode); 3988 __u64 count, old_eof, new_eof; 3989 3990 xid = get_xid(); 3991 3992 old_eof = i_size_read(inode); 3993 if (off >= old_eof) { 3994 rc = -EINVAL; 3995 goto out; 3996 } 3997 3998 count = old_eof - off; 3999 new_eof = old_eof + len; 4000 4001 filemap_invalidate_lock(inode->i_mapping); 4002 rc = filemap_write_and_wait_range(inode->i_mapping, off, new_eof - 1); 4003 if (rc < 0) 4004 goto out_2; 4005 truncate_pagecache_range(inode, off, old_eof); 4006 netfs_wait_for_outstanding_io(inode); 4007 4008 rc = SMB2_set_eof(xid, tcon, cfile->fid.persistent_fid, 4009 cfile->fid.volatile_fid, cfile->pid, new_eof); 4010 if (rc < 0) 4011 goto out_2; 4012 4013 truncate_setsize(inode, new_eof); 4014 spin_lock(&inode->i_lock); 4015 netfs_resize_file(&cifsi->netfs, i_size_read(inode), true); 4016 spin_unlock(&inode->i_lock); 4017 fscache_resize_cookie(cifs_inode_cookie(inode), i_size_read(inode)); 4018 4019 rc = smb2_copychunk_range(xid, cfile, cfile, off, count, off + len); 4020 if (rc < 0) 4021 goto out_2; 4022 spin_lock(&inode->i_lock); 4023 netfs_write_zero_point(inode, new_eof); 4024 spin_unlock(&inode->i_lock); 4025 4026 rc = smb3_zero_data(file, tcon, off, len, xid); 4027 if (rc < 0) 4028 goto out_2; 4029 4030 rc = 0; 4031 out_2: 4032 filemap_invalidate_unlock(inode->i_mapping); 4033 out: 4034 free_xid(xid); 4035 return rc; 4036 } 4037 4038 static loff_t smb3_llseek(struct file *file, struct cifs_tcon *tcon, loff_t offset, int whence) 4039 { 4040 struct cifsFileInfo *wrcfile, *cfile = file->private_data; 4041 struct cifsInodeInfo *cifsi; 4042 struct inode *inode; 4043 int rc = 0; 4044 struct file_allocated_range_buffer in_data, *out_data = NULL; 4045 u32 out_data_len; 4046 unsigned int xid; 4047 4048 if (whence != SEEK_HOLE && whence != SEEK_DATA) 4049 return generic_file_llseek(file, offset, whence); 4050 4051 inode = d_inode(cfile->dentry); 4052 cifsi = CIFS_I(inode); 4053 4054 if (offset < 0 || offset >= i_size_read(inode)) 4055 return -ENXIO; 4056 4057 xid = get_xid(); 4058 /* 4059 * We need to be sure that all dirty pages are written as they 4060 * might fill holes on the server. 4061 * Note that we also MUST flush any written pages since at least 4062 * some servers (Windows2016) will not reflect recent writes in 4063 * QUERY_ALLOCATED_RANGES until SMB2_flush is called. 4064 */ 4065 wrcfile = find_writable_file(cifsi, FIND_ANY); 4066 if (wrcfile) { 4067 filemap_write_and_wait(inode->i_mapping); 4068 smb2_flush_file(xid, tcon, &wrcfile->fid); 4069 cifsFileInfo_put(wrcfile); 4070 } 4071 4072 if (!(cifsi->cifsAttrs & FILE_ATTRIBUTE_SPARSE_FILE)) { 4073 if (whence == SEEK_HOLE) 4074 offset = i_size_read(inode); 4075 goto lseek_exit; 4076 } 4077 4078 in_data.file_offset = cpu_to_le64(offset); 4079 in_data.length = cpu_to_le64(i_size_read(inode)); 4080 4081 rc = SMB2_ioctl(xid, tcon, cfile->fid.persistent_fid, 4082 cfile->fid.volatile_fid, 4083 FSCTL_QUERY_ALLOCATED_RANGES, 4084 (char *)&in_data, sizeof(in_data), 4085 sizeof(struct file_allocated_range_buffer), 4086 (char **)&out_data, &out_data_len); 4087 if (rc == -E2BIG) 4088 rc = 0; 4089 if (rc) 4090 goto lseek_exit; 4091 4092 if (whence == SEEK_HOLE && out_data_len == 0) 4093 goto lseek_exit; 4094 4095 if (whence == SEEK_DATA && out_data_len == 0) { 4096 rc = -ENXIO; 4097 goto lseek_exit; 4098 } 4099 4100 if (out_data_len < sizeof(struct file_allocated_range_buffer)) { 4101 rc = -EINVAL; 4102 goto lseek_exit; 4103 } 4104 if (whence == SEEK_DATA) { 4105 offset = le64_to_cpu(out_data->file_offset); 4106 goto lseek_exit; 4107 } 4108 if (offset < le64_to_cpu(out_data->file_offset)) 4109 goto lseek_exit; 4110 4111 offset = le64_to_cpu(out_data->file_offset) + le64_to_cpu(out_data->length); 4112 4113 lseek_exit: 4114 free_xid(xid); 4115 kfree(out_data); 4116 if (!rc) 4117 return vfs_setpos(file, offset, inode->i_sb->s_maxbytes); 4118 else 4119 return rc; 4120 } 4121 4122 static int smb3_fiemap(struct cifs_tcon *tcon, 4123 struct cifsFileInfo *cfile, 4124 struct fiemap_extent_info *fei, u64 start, u64 len) 4125 { 4126 unsigned int xid; 4127 struct file_allocated_range_buffer in_data, *out_data; 4128 u32 out_data_len; 4129 int i, num, rc, flags, last_blob; 4130 u64 next; 4131 4132 rc = fiemap_prep(d_inode(cfile->dentry), fei, start, &len, 0); 4133 if (rc) 4134 return rc; 4135 4136 xid = get_xid(); 4137 again: 4138 in_data.file_offset = cpu_to_le64(start); 4139 in_data.length = cpu_to_le64(len); 4140 4141 rc = SMB2_ioctl(xid, tcon, cfile->fid.persistent_fid, 4142 cfile->fid.volatile_fid, 4143 FSCTL_QUERY_ALLOCATED_RANGES, 4144 (char *)&in_data, sizeof(in_data), 4145 1024 * sizeof(struct file_allocated_range_buffer), 4146 (char **)&out_data, &out_data_len); 4147 if (rc == -E2BIG) { 4148 last_blob = 0; 4149 rc = 0; 4150 } else 4151 last_blob = 1; 4152 if (rc) 4153 goto out; 4154 4155 if (out_data_len && out_data_len < sizeof(struct file_allocated_range_buffer)) { 4156 rc = -EINVAL; 4157 goto out; 4158 } 4159 if (out_data_len % sizeof(struct file_allocated_range_buffer)) { 4160 rc = -EINVAL; 4161 goto out; 4162 } 4163 4164 num = out_data_len / sizeof(struct file_allocated_range_buffer); 4165 for (i = 0; i < num; i++) { 4166 flags = 0; 4167 if (i == num - 1 && last_blob) 4168 flags |= FIEMAP_EXTENT_LAST; 4169 4170 rc = fiemap_fill_next_extent(fei, 4171 le64_to_cpu(out_data[i].file_offset), 4172 le64_to_cpu(out_data[i].file_offset), 4173 le64_to_cpu(out_data[i].length), 4174 flags); 4175 if (rc < 0) 4176 goto out; 4177 if (rc == 1) { 4178 rc = 0; 4179 goto out; 4180 } 4181 } 4182 4183 if (!last_blob) { 4184 next = le64_to_cpu(out_data[num - 1].file_offset) + 4185 le64_to_cpu(out_data[num - 1].length); 4186 len = len - (next - start); 4187 start = next; 4188 goto again; 4189 } 4190 4191 out: 4192 free_xid(xid); 4193 kfree(out_data); 4194 return rc; 4195 } 4196 4197 static long smb3_fallocate(struct file *file, struct cifs_tcon *tcon, int mode, 4198 loff_t off, loff_t len) 4199 { 4200 /* KEEP_SIZE already checked for by do_fallocate */ 4201 if (mode & FALLOC_FL_PUNCH_HOLE) 4202 return smb3_punch_hole(file, tcon, off, len); 4203 else if (mode & FALLOC_FL_ZERO_RANGE) { 4204 if (mode & FALLOC_FL_KEEP_SIZE) 4205 return smb3_zero_range(file, tcon, off, len, true); 4206 return smb3_zero_range(file, tcon, off, len, false); 4207 } else if (mode == FALLOC_FL_KEEP_SIZE) 4208 return smb3_simple_falloc(file, tcon, off, len, true); 4209 else if (mode == FALLOC_FL_COLLAPSE_RANGE) 4210 return smb3_collapse_range(file, tcon, off, len); 4211 else if (mode == FALLOC_FL_INSERT_RANGE) 4212 return smb3_insert_range(file, tcon, off, len); 4213 else if (mode == FALLOC_FL_ALLOCATE_RANGE) 4214 return smb3_simple_falloc(file, tcon, off, len, false); 4215 4216 return -EOPNOTSUPP; 4217 } 4218 4219 static void 4220 smb2_downgrade_oplock(struct TCP_Server_Info *server, 4221 struct cifsInodeInfo *cinode, __u32 oplock, 4222 __u16 epoch, bool *purge_cache) 4223 { 4224 lockdep_assert_held(&cinode->open_file_lock); 4225 server->ops->set_oplock_level(cinode, oplock, 0, NULL); 4226 } 4227 4228 static void 4229 smb21_set_oplock_level(struct cifsInodeInfo *cinode, __u32 oplock, 4230 __u16 epoch, bool *purge_cache); 4231 4232 static void 4233 smb3_downgrade_oplock(struct TCP_Server_Info *server, 4234 struct cifsInodeInfo *cinode, __u32 oplock, 4235 __u16 epoch, bool *purge_cache) 4236 { 4237 unsigned int old_state = cinode->oplock; 4238 __u16 old_epoch = cinode->epoch; 4239 unsigned int new_state; 4240 4241 if (epoch > old_epoch) { 4242 smb21_set_oplock_level(cinode, oplock, 0, NULL); 4243 cinode->epoch = epoch; 4244 } 4245 4246 new_state = cinode->oplock; 4247 *purge_cache = false; 4248 4249 if ((old_state & CIFS_CACHE_READ_FLG) != 0 && 4250 (new_state & CIFS_CACHE_READ_FLG) == 0) 4251 *purge_cache = true; 4252 else if (old_state == new_state && (epoch - old_epoch > 1)) 4253 *purge_cache = true; 4254 } 4255 4256 static void 4257 smb2_set_oplock_level(struct cifsInodeInfo *cinode, __u32 oplock, 4258 __u16 epoch, bool *purge_cache) 4259 { 4260 oplock &= 0xFF; 4261 cinode->lease_granted = false; 4262 if (oplock == SMB2_OPLOCK_LEVEL_NOCHANGE) 4263 return; 4264 if (oplock == SMB2_OPLOCK_LEVEL_BATCH) { 4265 WRITE_ONCE(cinode->oplock, CIFS_CACHE_RHW_FLG); 4266 cifs_dbg(FYI, "Batch Oplock granted on inode %p\n", 4267 &cinode->netfs.inode); 4268 } else if (oplock == SMB2_OPLOCK_LEVEL_EXCLUSIVE) { 4269 WRITE_ONCE(cinode->oplock, CIFS_CACHE_RW_FLG); 4270 cifs_dbg(FYI, "Exclusive Oplock granted on inode %p\n", 4271 &cinode->netfs.inode); 4272 } else if (oplock == SMB2_OPLOCK_LEVEL_II) { 4273 WRITE_ONCE(cinode->oplock, CIFS_CACHE_READ_FLG); 4274 cifs_dbg(FYI, "Level II Oplock granted on inode %p\n", 4275 &cinode->netfs.inode); 4276 } else 4277 WRITE_ONCE(cinode->oplock, 0); 4278 } 4279 4280 static void 4281 smb21_set_oplock_level(struct cifsInodeInfo *cinode, __u32 oplock, 4282 __u16 epoch, bool *purge_cache) 4283 { 4284 char message[5] = {0}; 4285 unsigned int new_oplock = 0; 4286 4287 oplock &= 0xFF; 4288 cinode->lease_granted = true; 4289 if (oplock == SMB2_OPLOCK_LEVEL_NOCHANGE) 4290 return; 4291 4292 /* Check if the server granted an oplock rather than a lease */ 4293 if (oplock & SMB2_OPLOCK_LEVEL_EXCLUSIVE) 4294 return smb2_set_oplock_level(cinode, oplock, epoch, 4295 purge_cache); 4296 4297 if (oplock & SMB2_LEASE_READ_CACHING_HE) { 4298 new_oplock |= CIFS_CACHE_READ_FLG; 4299 strcat(message, "R"); 4300 } 4301 if (oplock & SMB2_LEASE_HANDLE_CACHING_HE) { 4302 new_oplock |= CIFS_CACHE_HANDLE_FLG; 4303 strcat(message, "H"); 4304 } 4305 if (oplock & SMB2_LEASE_WRITE_CACHING_HE) { 4306 new_oplock |= CIFS_CACHE_WRITE_FLG; 4307 strcat(message, "W"); 4308 } 4309 if (!new_oplock) 4310 strscpy(message, "None"); 4311 4312 WRITE_ONCE(cinode->oplock, new_oplock); 4313 cifs_dbg(FYI, "%s Lease granted on inode %p\n", message, 4314 &cinode->netfs.inode); 4315 } 4316 4317 static void 4318 smb3_set_oplock_level(struct cifsInodeInfo *cinode, __u32 oplock, 4319 __u16 epoch, bool *purge_cache) 4320 { 4321 unsigned int old_oplock = READ_ONCE(cinode->oplock); 4322 unsigned int new_oplock; 4323 4324 smb21_set_oplock_level(cinode, oplock, epoch, purge_cache); 4325 new_oplock = READ_ONCE(cinode->oplock); 4326 4327 if (purge_cache) { 4328 *purge_cache = false; 4329 if (old_oplock == CIFS_CACHE_READ_FLG) { 4330 if (new_oplock == CIFS_CACHE_READ_FLG && 4331 (epoch - cinode->epoch > 0)) 4332 *purge_cache = true; 4333 else if (new_oplock == CIFS_CACHE_RH_FLG && 4334 (epoch - cinode->epoch > 1)) 4335 *purge_cache = true; 4336 else if (new_oplock == CIFS_CACHE_RHW_FLG && 4337 (epoch - cinode->epoch > 1)) 4338 *purge_cache = true; 4339 else if (new_oplock == 0 && 4340 (epoch - cinode->epoch > 0)) 4341 *purge_cache = true; 4342 } else if (old_oplock == CIFS_CACHE_RH_FLG) { 4343 if (new_oplock == CIFS_CACHE_RH_FLG && 4344 (epoch - cinode->epoch > 0)) 4345 *purge_cache = true; 4346 else if (new_oplock == CIFS_CACHE_RHW_FLG && 4347 (epoch - cinode->epoch > 1)) 4348 *purge_cache = true; 4349 } 4350 cinode->epoch = epoch; 4351 } 4352 } 4353 4354 #ifdef CONFIG_CIFS_ALLOW_INSECURE_LEGACY 4355 static bool 4356 smb2_is_read_op(__u32 oplock) 4357 { 4358 return oplock == SMB2_OPLOCK_LEVEL_II; 4359 } 4360 #endif /* CIFS_ALLOW_INSECURE_LEGACY */ 4361 4362 static bool 4363 smb21_is_read_op(__u32 oplock) 4364 { 4365 return (oplock & SMB2_LEASE_READ_CACHING_HE) && 4366 !(oplock & SMB2_LEASE_WRITE_CACHING_HE); 4367 } 4368 4369 static __le32 4370 map_oplock_to_lease(u8 oplock) 4371 { 4372 if (oplock == SMB2_OPLOCK_LEVEL_EXCLUSIVE) 4373 return SMB2_LEASE_WRITE_CACHING_LE | SMB2_LEASE_READ_CACHING_LE; 4374 else if (oplock == SMB2_OPLOCK_LEVEL_II) 4375 return SMB2_LEASE_READ_CACHING_LE | SMB2_LEASE_HANDLE_CACHING_LE; 4376 else if (oplock == SMB2_OPLOCK_LEVEL_BATCH) 4377 return SMB2_LEASE_HANDLE_CACHING_LE | SMB2_LEASE_READ_CACHING_LE | 4378 SMB2_LEASE_WRITE_CACHING_LE; 4379 return 0; 4380 } 4381 4382 static char * 4383 smb2_create_lease_buf(u8 *lease_key, u8 oplock, u8 *parent_lease_key, __le32 flags) 4384 { 4385 struct create_lease *buf; 4386 4387 buf = kzalloc_obj(struct create_lease); 4388 if (!buf) 4389 return NULL; 4390 4391 memcpy(&buf->lcontext.LeaseKey, lease_key, SMB2_LEASE_KEY_SIZE); 4392 buf->lcontext.LeaseState = map_oplock_to_lease(oplock); 4393 4394 buf->ccontext.DataOffset = cpu_to_le16(offsetof 4395 (struct create_lease, lcontext)); 4396 buf->ccontext.DataLength = cpu_to_le32(sizeof(struct lease_context)); 4397 buf->ccontext.NameOffset = cpu_to_le16(offsetof 4398 (struct create_lease, Name)); 4399 buf->ccontext.NameLength = cpu_to_le16(4); 4400 /* SMB2_CREATE_REQUEST_LEASE is "RqLs" */ 4401 buf->Name[0] = 'R'; 4402 buf->Name[1] = 'q'; 4403 buf->Name[2] = 'L'; 4404 buf->Name[3] = 's'; 4405 return (char *)buf; 4406 } 4407 4408 static char * 4409 smb3_create_lease_buf(u8 *lease_key, u8 oplock, u8 *parent_lease_key, __le32 flags) 4410 { 4411 struct create_lease_v2 *buf; 4412 4413 buf = kzalloc_obj(struct create_lease_v2); 4414 if (!buf) 4415 return NULL; 4416 4417 memcpy(&buf->lcontext.LeaseKey, lease_key, SMB2_LEASE_KEY_SIZE); 4418 buf->lcontext.LeaseState = map_oplock_to_lease(oplock); 4419 buf->lcontext.LeaseFlags = flags; 4420 if (flags & SMB2_LEASE_FLAG_PARENT_LEASE_KEY_SET_LE) 4421 memcpy(&buf->lcontext.ParentLeaseKey, parent_lease_key, SMB2_LEASE_KEY_SIZE); 4422 4423 buf->ccontext.DataOffset = cpu_to_le16(offsetof 4424 (struct create_lease_v2, lcontext)); 4425 buf->ccontext.DataLength = cpu_to_le32(sizeof(struct lease_context_v2)); 4426 buf->ccontext.NameOffset = cpu_to_le16(offsetof 4427 (struct create_lease_v2, Name)); 4428 buf->ccontext.NameLength = cpu_to_le16(4); 4429 /* SMB2_CREATE_REQUEST_LEASE is "RqLs" */ 4430 buf->Name[0] = 'R'; 4431 buf->Name[1] = 'q'; 4432 buf->Name[2] = 'L'; 4433 buf->Name[3] = 's'; 4434 return (char *)buf; 4435 } 4436 4437 static __u8 4438 smb2_parse_lease_buf(void *buf, __u16 *epoch, char *lease_key) 4439 { 4440 struct create_lease *lc = (struct create_lease *)buf; 4441 4442 *epoch = 0; /* not used */ 4443 if (lc->lcontext.LeaseFlags & SMB2_LEASE_FLAG_BREAK_IN_PROGRESS_LE) 4444 return SMB2_OPLOCK_LEVEL_NOCHANGE; 4445 return le32_to_cpu(lc->lcontext.LeaseState); 4446 } 4447 4448 static __u8 4449 smb3_parse_lease_buf(void *buf, __u16 *epoch, char *lease_key) 4450 { 4451 struct create_lease_v2 *lc = (struct create_lease_v2 *)buf; 4452 4453 *epoch = le16_to_cpu(lc->lcontext.Epoch); 4454 if (lc->lcontext.LeaseFlags & SMB2_LEASE_FLAG_BREAK_IN_PROGRESS_LE) 4455 return SMB2_OPLOCK_LEVEL_NOCHANGE; 4456 if (lease_key) 4457 memcpy(lease_key, &lc->lcontext.LeaseKey, SMB2_LEASE_KEY_SIZE); 4458 return le32_to_cpu(lc->lcontext.LeaseState); 4459 } 4460 4461 static unsigned int 4462 smb2_wp_retry_size(struct inode *inode) 4463 { 4464 return min_t(unsigned int, CIFS_SB(inode->i_sb)->ctx->wsize, 4465 SMB2_MAX_BUFFER_SIZE); 4466 } 4467 4468 static bool 4469 smb2_dir_needs_close(struct cifsFileInfo *cfile) 4470 { 4471 return !cfile->invalidHandle; 4472 } 4473 4474 static void 4475 fill_transform_hdr(struct smb2_transform_hdr *tr_hdr, unsigned int orig_len, 4476 struct smb_rqst *old_rq, __le16 cipher_type) 4477 { 4478 struct smb2_hdr *shdr = 4479 (struct smb2_hdr *)old_rq->rq_iov[0].iov_base; 4480 4481 memset(tr_hdr, 0, sizeof(struct smb2_transform_hdr)); 4482 tr_hdr->ProtocolId = SMB2_TRANSFORM_PROTO_NUM; 4483 tr_hdr->OriginalMessageSize = cpu_to_le32(orig_len); 4484 tr_hdr->Flags = cpu_to_le16(0x01); 4485 if ((cipher_type == SMB2_ENCRYPTION_AES128_GCM) || 4486 (cipher_type == SMB2_ENCRYPTION_AES256_GCM)) 4487 get_random_bytes(&tr_hdr->Nonce, SMB3_AES_GCM_NONCE); 4488 else 4489 get_random_bytes(&tr_hdr->Nonce, SMB3_AES_CCM_NONCE); 4490 memcpy(&tr_hdr->SessionId, &shdr->SessionId, 8); 4491 } 4492 4493 static void *smb2_aead_req_alloc(struct crypto_aead *tfm, const struct smb_rqst *rqst, 4494 int num_rqst, const u8 *sig, u8 **iv, 4495 struct aead_request **req, struct sg_table *sgt, 4496 unsigned int *num_sgs) 4497 { 4498 unsigned int req_size = sizeof(**req) + crypto_aead_reqsize(tfm); 4499 unsigned int iv_size = crypto_aead_ivsize(tfm); 4500 unsigned int len; 4501 int ret; 4502 u8 *p; 4503 4504 ret = cifs_get_num_sgs(rqst, num_rqst, sig); 4505 if (ret < 0) 4506 return ERR_PTR(ret); 4507 *num_sgs = ret; 4508 4509 len = iv_size; 4510 len += crypto_aead_alignmask(tfm) & ~(crypto_tfm_ctx_alignment() - 1); 4511 len = ALIGN(len, crypto_tfm_ctx_alignment()); 4512 len += req_size; 4513 len = ALIGN(len, __alignof__(struct scatterlist)); 4514 len += array_size(*num_sgs, sizeof(struct scatterlist)); 4515 4516 p = kzalloc(len, GFP_NOFS); 4517 if (!p) 4518 return ERR_PTR(-ENOMEM); 4519 4520 *iv = (u8 *)PTR_ALIGN(p, crypto_aead_alignmask(tfm) + 1); 4521 *req = (struct aead_request *)PTR_ALIGN(*iv + iv_size, 4522 crypto_tfm_ctx_alignment()); 4523 sgt->sgl = (struct scatterlist *)PTR_ALIGN((u8 *)*req + req_size, 4524 __alignof__(struct scatterlist)); 4525 return p; 4526 } 4527 4528 static void *smb2_get_aead_req(struct crypto_aead *tfm, struct smb_rqst *rqst, 4529 int num_rqst, const u8 *sig, u8 **iv, 4530 struct aead_request **req, struct scatterlist **sgl) 4531 { 4532 struct sg_table sgtable = {}; 4533 unsigned int skip, num_sgs, i, j; 4534 ssize_t rc; 4535 void *p; 4536 4537 p = smb2_aead_req_alloc(tfm, rqst, num_rqst, sig, iv, req, &sgtable, &num_sgs); 4538 if (IS_ERR(p)) 4539 return ERR_CAST(p); 4540 4541 sg_init_marker(sgtable.sgl, num_sgs); 4542 4543 /* 4544 * The first rqst has a transform header where the 4545 * first 20 bytes are not part of the encrypted blob. 4546 */ 4547 skip = 20; 4548 4549 for (i = 0; i < num_rqst; i++) { 4550 struct iov_iter *iter = &rqst[i].rq_iter; 4551 size_t count = iov_iter_count(iter); 4552 4553 for (j = 0; j < rqst[i].rq_nvec; j++) { 4554 cifs_sg_set_buf(&sgtable, 4555 rqst[i].rq_iov[j].iov_base + skip, 4556 rqst[i].rq_iov[j].iov_len - skip); 4557 4558 /* See the above comment on the 'skip' assignment */ 4559 skip = 0; 4560 } 4561 sgtable.orig_nents = sgtable.nents; 4562 4563 rc = extract_iter_to_sg(iter, count, &sgtable, 4564 num_sgs - sgtable.nents, 0); 4565 iov_iter_revert(iter, rc); 4566 sgtable.orig_nents = sgtable.nents; 4567 } 4568 4569 cifs_sg_set_buf(&sgtable, sig, SMB2_SIGNATURE_SIZE); 4570 sg_mark_end(&sgtable.sgl[sgtable.nents - 1]); 4571 *sgl = sgtable.sgl; 4572 return p; 4573 } 4574 4575 static int 4576 smb2_get_enc_key(struct TCP_Server_Info *server, __u64 ses_id, int enc, u8 *key) 4577 { 4578 struct TCP_Server_Info *pserver; 4579 struct cifs_ses *ses; 4580 u8 *ses_enc_key; 4581 4582 /* If server is a channel, select the primary channel */ 4583 pserver = SERVER_IS_CHAN(server) ? server->primary_server : server; 4584 4585 spin_lock(&cifs_tcp_ses_lock); 4586 list_for_each_entry(ses, &pserver->smb_ses_list, smb_ses_list) { 4587 if (ses->Suid == ses_id) { 4588 spin_lock(&ses->ses_lock); 4589 ses_enc_key = enc ? ses->smb3encryptionkey : 4590 ses->smb3decryptionkey; 4591 memcpy(key, ses_enc_key, SMB3_ENC_DEC_KEY_SIZE); 4592 spin_unlock(&ses->ses_lock); 4593 spin_unlock(&cifs_tcp_ses_lock); 4594 return 0; 4595 } 4596 } 4597 spin_unlock(&cifs_tcp_ses_lock); 4598 4599 trace_smb3_ses_not_found(ses_id); 4600 4601 return -EAGAIN; 4602 } 4603 /* 4604 * Encrypt or decrypt @rqst message. @rqst[0] has the following format: 4605 * iov[0] - transform header (associate data), 4606 * iov[1-N] - SMB2 header and pages - data to encrypt. 4607 * On success return encrypted data in iov[1-N] and pages, leave iov[0] 4608 * untouched. 4609 */ 4610 static int 4611 crypt_message(struct TCP_Server_Info *server, int num_rqst, 4612 struct smb_rqst *rqst, int enc, struct crypto_aead *tfm) 4613 { 4614 struct smb2_transform_hdr *tr_hdr = 4615 (struct smb2_transform_hdr *)rqst[0].rq_iov[0].iov_base; 4616 unsigned int assoc_data_len = sizeof(struct smb2_transform_hdr) - 20; 4617 int rc = 0; 4618 struct scatterlist *sg; 4619 u8 sign[SMB2_SIGNATURE_SIZE] = {}; 4620 u8 key[SMB3_ENC_DEC_KEY_SIZE]; 4621 struct aead_request *req; 4622 u8 *iv; 4623 DECLARE_CRYPTO_WAIT(wait); 4624 unsigned int crypt_len = le32_to_cpu(tr_hdr->OriginalMessageSize); 4625 void *creq; 4626 4627 rc = smb2_get_enc_key(server, le64_to_cpu(tr_hdr->SessionId), enc, key); 4628 if (rc) { 4629 cifs_server_dbg(FYI, "%s: Could not get %scryption key. sid: 0x%llx\n", __func__, 4630 enc ? "en" : "de", le64_to_cpu(tr_hdr->SessionId)); 4631 return rc; 4632 } 4633 4634 if ((server->cipher_type == SMB2_ENCRYPTION_AES256_CCM) || 4635 (server->cipher_type == SMB2_ENCRYPTION_AES256_GCM)) 4636 rc = crypto_aead_setkey(tfm, key, SMB3_GCM256_CRYPTKEY_SIZE); 4637 else 4638 rc = crypto_aead_setkey(tfm, key, SMB3_GCM128_CRYPTKEY_SIZE); 4639 4640 if (rc) { 4641 cifs_server_dbg(VFS, "%s: Failed to set aead key %d\n", __func__, rc); 4642 return rc; 4643 } 4644 4645 rc = crypto_aead_setauthsize(tfm, SMB2_SIGNATURE_SIZE); 4646 if (rc) { 4647 cifs_server_dbg(VFS, "%s: Failed to set authsize %d\n", __func__, rc); 4648 return rc; 4649 } 4650 4651 creq = smb2_get_aead_req(tfm, rqst, num_rqst, sign, &iv, &req, &sg); 4652 if (IS_ERR(creq)) 4653 return PTR_ERR(creq); 4654 4655 if (!enc) { 4656 memcpy(sign, &tr_hdr->Signature, SMB2_SIGNATURE_SIZE); 4657 crypt_len += SMB2_SIGNATURE_SIZE; 4658 } 4659 4660 if ((server->cipher_type == SMB2_ENCRYPTION_AES128_GCM) || 4661 (server->cipher_type == SMB2_ENCRYPTION_AES256_GCM)) 4662 memcpy(iv, (char *)tr_hdr->Nonce, SMB3_AES_GCM_NONCE); 4663 else { 4664 iv[0] = 3; 4665 memcpy(iv + 1, (char *)tr_hdr->Nonce, SMB3_AES_CCM_NONCE); 4666 } 4667 4668 aead_request_set_tfm(req, tfm); 4669 aead_request_set_crypt(req, sg, sg, crypt_len, iv); 4670 aead_request_set_ad(req, assoc_data_len); 4671 4672 aead_request_set_callback(req, CRYPTO_TFM_REQ_MAY_BACKLOG, 4673 crypto_req_done, &wait); 4674 4675 rc = crypto_wait_req(enc ? crypto_aead_encrypt(req) 4676 : crypto_aead_decrypt(req), &wait); 4677 4678 if (!rc && enc) 4679 memcpy(&tr_hdr->Signature, sign, SMB2_SIGNATURE_SIZE); 4680 4681 kfree_sensitive(creq); 4682 return rc; 4683 } 4684 4685 /* 4686 * Copy data from an iterator to the folios in a folio queue buffer. 4687 */ 4688 static bool cifs_copy_iter_to_folioq(struct iov_iter *iter, size_t size, 4689 struct folio_queue *buffer) 4690 { 4691 for (; buffer; buffer = buffer->next) { 4692 for (int s = 0; s < folioq_count(buffer); s++) { 4693 struct folio *folio = folioq_folio(buffer, s); 4694 size_t part = folioq_folio_size(buffer, s); 4695 4696 part = umin(part, size); 4697 4698 if (copy_folio_from_iter(folio, 0, part, iter) != part) 4699 return false; 4700 size -= part; 4701 } 4702 } 4703 return true; 4704 } 4705 4706 void 4707 smb3_free_compound_rqst(int num_rqst, struct smb_rqst *rqst) 4708 { 4709 for (int i = 0; i < num_rqst; i++) 4710 netfs_free_folioq_buffer(rqst[i].rq_buffer); 4711 } 4712 4713 /* 4714 * This function will initialize new_rq and encrypt the content. 4715 * The first entry, new_rq[0], only contains a single iov which contains 4716 * a smb2_transform_hdr and is pre-allocated by the caller. 4717 * This function then populates new_rq[1+] with the content from olq_rq[0+]. 4718 * 4719 * The end result is an array of smb_rqst structures where the first structure 4720 * only contains a single iov for the transform header which we then can pass 4721 * to crypt_message(). 4722 * 4723 * new_rq[0].rq_iov[0] : smb2_transform_hdr pre-allocated by the caller 4724 * new_rq[1+].rq_iov[*] == old_rq[0+].rq_iov[*] : SMB2/3 requests 4725 */ 4726 static int 4727 smb3_init_transform_rq(struct TCP_Server_Info *server, int num_rqst, 4728 struct smb_rqst *new_rq, struct smb_rqst *old_rq) 4729 { 4730 struct smb2_transform_hdr *tr_hdr = new_rq[0].rq_iov[0].iov_base; 4731 unsigned int orig_len = 0; 4732 int rc = -ENOMEM; 4733 4734 for (int i = 1; i < num_rqst; i++) { 4735 struct smb_rqst *old = &old_rq[i - 1]; 4736 struct smb_rqst *new = &new_rq[i]; 4737 struct folio_queue *buffer = NULL; 4738 size_t size = iov_iter_count(&old->rq_iter); 4739 4740 orig_len += smb_rqst_len(server, old); 4741 new->rq_iov = old->rq_iov; 4742 new->rq_nvec = old->rq_nvec; 4743 4744 if (size > 0) { 4745 size_t cur_size = 0; 4746 rc = netfs_alloc_folioq_buffer(NULL, &buffer, &cur_size, 4747 size, GFP_NOFS); 4748 if (rc < 0) 4749 goto err_free; 4750 4751 new->rq_buffer = buffer; 4752 iov_iter_folio_queue(&new->rq_iter, ITER_SOURCE, 4753 buffer, 0, 0, size); 4754 4755 if (!cifs_copy_iter_to_folioq(&old->rq_iter, size, buffer)) { 4756 rc = smb_EIO1(smb_eio_trace_tx_copy_iter_to_buf, size); 4757 goto err_free; 4758 } 4759 } 4760 } 4761 4762 /* fill the 1st iov with a transform header */ 4763 fill_transform_hdr(tr_hdr, orig_len, old_rq, server->cipher_type); 4764 4765 rc = crypt_message(server, num_rqst, new_rq, 1, server->secmech.enc); 4766 cifs_dbg(FYI, "Encrypt message returned %d\n", rc); 4767 if (rc) 4768 goto err_free; 4769 4770 return rc; 4771 4772 err_free: 4773 smb3_free_compound_rqst(num_rqst - 1, &new_rq[1]); 4774 return rc; 4775 } 4776 4777 static int 4778 smb3_is_transform_hdr(void *buf) 4779 { 4780 struct smb2_transform_hdr *trhdr = buf; 4781 4782 return trhdr->ProtocolId == SMB2_TRANSFORM_PROTO_NUM; 4783 } 4784 4785 static int 4786 decrypt_raw_data(struct TCP_Server_Info *server, char *buf, 4787 unsigned int buf_data_size, struct iov_iter *iter, 4788 bool is_offloaded) 4789 { 4790 struct crypto_aead *tfm; 4791 struct smb_rqst rqst = {NULL}; 4792 struct kvec iov[2]; 4793 size_t iter_size = 0; 4794 int rc; 4795 4796 iov[0].iov_base = buf; 4797 iov[0].iov_len = sizeof(struct smb2_transform_hdr); 4798 iov[1].iov_base = buf + sizeof(struct smb2_transform_hdr); 4799 iov[1].iov_len = buf_data_size; 4800 4801 rqst.rq_iov = iov; 4802 rqst.rq_nvec = 2; 4803 if (iter) { 4804 rqst.rq_iter = *iter; 4805 iter_size = iov_iter_count(iter); 4806 } 4807 4808 if (is_offloaded) { 4809 if ((server->cipher_type == SMB2_ENCRYPTION_AES128_GCM) || 4810 (server->cipher_type == SMB2_ENCRYPTION_AES256_GCM)) 4811 tfm = crypto_alloc_aead("gcm(aes)", 0, 0); 4812 else 4813 tfm = crypto_alloc_aead("ccm(aes)", 0, 0); 4814 if (IS_ERR(tfm)) { 4815 rc = PTR_ERR(tfm); 4816 cifs_server_dbg(VFS, "%s: Failed alloc decrypt TFM, rc=%d\n", __func__, rc); 4817 4818 return rc; 4819 } 4820 } else { 4821 rc = smb3_crypto_aead_allocate(server); 4822 if (unlikely(rc)) 4823 return rc; 4824 tfm = server->secmech.dec; 4825 } 4826 4827 rc = crypt_message(server, 1, &rqst, 0, tfm); 4828 cifs_dbg(FYI, "Decrypt message returned %d\n", rc); 4829 4830 if (is_offloaded) 4831 crypto_free_aead(tfm); 4832 4833 if (rc) 4834 return rc; 4835 4836 memmove(buf, iov[1].iov_base, buf_data_size); 4837 4838 if (!is_offloaded) 4839 server->total_read = buf_data_size + iter_size; 4840 4841 return rc; 4842 } 4843 4844 static int 4845 cifs_copy_folioq_to_iter(struct folio_queue *folioq, size_t data_size, 4846 size_t skip, struct iov_iter *iter) 4847 { 4848 for (; folioq; folioq = folioq->next) { 4849 for (int s = 0; s < folioq_count(folioq); s++) { 4850 struct folio *folio; 4851 size_t fsize, n, len; 4852 4853 if (data_size == 0) 4854 return 0; 4855 4856 folio = folioq_folio(folioq, s); 4857 fsize = folio_size(folio); 4858 len = umin(fsize - skip, data_size); 4859 4860 n = copy_folio_to_iter(folio, skip, len, iter); 4861 if (n != len) { 4862 cifs_dbg(VFS, "%s: something went wrong\n", __func__); 4863 return smb_EIO2(smb_eio_trace_rx_copy_to_iter, 4864 n, len); 4865 } 4866 data_size -= n; 4867 skip = 0; 4868 } 4869 } 4870 4871 if (data_size != 0) { 4872 cifs_dbg(VFS, "%s: short copy, %zu bytes missing\n", 4873 __func__, data_size); 4874 return smb_EIO2(smb_eio_trace_rx_copy_to_iter, 0, data_size); 4875 } 4876 4877 return 0; 4878 } 4879 4880 static int 4881 handle_read_data(struct TCP_Server_Info *server, struct mid_q_entry *mid, 4882 char *buf, unsigned int buf_len, struct folio_queue *buffer, 4883 unsigned int buffer_len, bool is_offloaded) 4884 { 4885 unsigned int data_offset; 4886 unsigned int data_len; 4887 unsigned int end_off; 4888 unsigned int cur_off; 4889 unsigned int cur_page_idx; 4890 unsigned int pad_len; 4891 struct cifs_io_subrequest *rdata = mid->callback_data; 4892 struct smb2_hdr *shdr = (struct smb2_hdr *)buf; 4893 size_t copied; 4894 bool use_rdma_mr = false; 4895 4896 if (shdr->Command != SMB2_READ) { 4897 cifs_server_dbg(VFS, "only big read responses are supported\n"); 4898 return -EOPNOTSUPP; 4899 } 4900 4901 if (server->ops->is_session_expired && 4902 server->ops->is_session_expired(buf)) { 4903 if (!is_offloaded) 4904 cifs_reconnect(server, true); 4905 return -1; 4906 } 4907 4908 if (server->ops->is_status_pending && 4909 server->ops->is_status_pending(buf, server)) 4910 return -1; 4911 4912 /* set up first two iov to get credits */ 4913 rdata->iov[0].iov_base = buf; 4914 rdata->iov[0].iov_len = 0; 4915 rdata->iov[1].iov_base = buf; 4916 rdata->iov[1].iov_len = 4917 min_t(unsigned int, buf_len, server->vals->read_rsp_size); 4918 cifs_dbg(FYI, "0: iov_base=%p iov_len=%zu\n", 4919 rdata->iov[0].iov_base, rdata->iov[0].iov_len); 4920 cifs_dbg(FYI, "1: iov_base=%p iov_len=%zu\n", 4921 rdata->iov[1].iov_base, rdata->iov[1].iov_len); 4922 4923 rdata->result = server->ops->map_error(buf, true); 4924 if (rdata->result != 0) { 4925 cifs_dbg(FYI, "%s: server returned error %d\n", 4926 __func__, rdata->result); 4927 /* normal error on read response */ 4928 if (is_offloaded) 4929 mid->mid_state = MID_RESPONSE_RECEIVED; 4930 else 4931 dequeue_mid(server, mid, false); 4932 return 0; 4933 } 4934 4935 data_offset = server->ops->read_data_offset(buf); 4936 #ifdef CONFIG_CIFS_SMB_DIRECT 4937 use_rdma_mr = rdata->mr; 4938 #endif 4939 data_len = server->ops->read_data_length(buf, use_rdma_mr); 4940 4941 if (data_offset < server->vals->read_rsp_size) { 4942 /* 4943 * win2k8 sometimes sends an offset of 0 when the read 4944 * is beyond the EOF. Treat it as if the data starts just after 4945 * the header. 4946 */ 4947 cifs_dbg(FYI, "%s: data offset (%u) inside read response header\n", 4948 __func__, data_offset); 4949 data_offset = server->vals->read_rsp_size; 4950 } else if (data_offset > MAX_CIFS_SMALL_BUFFER_SIZE) { 4951 /* data_offset is beyond the end of smallbuf */ 4952 cifs_dbg(FYI, "%s: data offset (%u) beyond end of smallbuf\n", 4953 __func__, data_offset); 4954 rdata->result = smb_EIO1(smb_eio_trace_rx_overlong, data_offset); 4955 if (is_offloaded) 4956 mid->mid_state = MID_RESPONSE_MALFORMED; 4957 else 4958 dequeue_mid(server, mid, rdata->result); 4959 return 0; 4960 } 4961 4962 pad_len = data_offset - server->vals->read_rsp_size; 4963 4964 if (buf_len <= data_offset) { 4965 /* read response payload is in pages */ 4966 cur_page_idx = pad_len / PAGE_SIZE; 4967 cur_off = pad_len % PAGE_SIZE; 4968 4969 if (cur_page_idx != 0) { 4970 /* data offset is beyond the 1st page of response */ 4971 cifs_dbg(FYI, "%s: data offset (%u) beyond 1st page of response\n", 4972 __func__, data_offset); 4973 rdata->result = smb_EIO1(smb_eio_trace_rx_overpage, data_offset); 4974 if (is_offloaded) 4975 mid->mid_state = MID_RESPONSE_MALFORMED; 4976 else 4977 dequeue_mid(server, mid, rdata->result); 4978 return 0; 4979 } 4980 4981 if (data_len > buffer_len - pad_len) { 4982 /* data_len is corrupt -- discard frame */ 4983 rdata->result = smb_EIO1(smb_eio_trace_rx_bad_datalen, data_len); 4984 if (is_offloaded) 4985 mid->mid_state = MID_RESPONSE_MALFORMED; 4986 else 4987 dequeue_mid(server, mid, rdata->result); 4988 return 0; 4989 } 4990 4991 /* Copy the data to the output I/O iterator. */ 4992 rdata->result = cifs_copy_folioq_to_iter(buffer, data_len, 4993 cur_off, &rdata->subreq.io_iter); 4994 if (rdata->result != 0) { 4995 if (is_offloaded) 4996 mid->mid_state = MID_RESPONSE_MALFORMED; 4997 else 4998 dequeue_mid(server, mid, rdata->result); 4999 return 0; 5000 } 5001 rdata->got_bytes = data_len; 5002 5003 } else if (!check_add_overflow(data_offset, data_len, &end_off) && 5004 buf_len >= end_off) { 5005 /* read response payload is in buf */ 5006 WARN_ONCE(buffer, "read data can be either in buf or in buffer"); 5007 copied = copy_to_iter(buf + data_offset, data_len, &rdata->subreq.io_iter); 5008 if (copied == 0) 5009 return smb_EIO2(smb_eio_trace_rx_copy_to_iter, copied, data_len); 5010 rdata->got_bytes = copied; 5011 } else { 5012 /* read response payload cannot be in both buf and pages */ 5013 WARN_ONCE(1, "buf can not contain only a part of read data"); 5014 rdata->result = smb_EIO(smb_eio_trace_rx_both_buf); 5015 if (is_offloaded) 5016 mid->mid_state = MID_RESPONSE_MALFORMED; 5017 else 5018 dequeue_mid(server, mid, rdata->result); 5019 return 0; 5020 } 5021 5022 if (is_offloaded) 5023 mid->mid_state = MID_RESPONSE_RECEIVED; 5024 else 5025 dequeue_mid(server, mid, false); 5026 return 0; 5027 } 5028 5029 struct smb2_decrypt_work { 5030 struct work_struct decrypt; 5031 struct TCP_Server_Info *server; 5032 struct folio_queue *buffer; 5033 char *buf; 5034 unsigned int len; 5035 }; 5036 5037 5038 static void smb2_decrypt_offload(struct work_struct *work) 5039 { 5040 struct smb2_decrypt_work *dw = container_of(work, 5041 struct smb2_decrypt_work, decrypt); 5042 int rc; 5043 struct mid_q_entry *mid; 5044 struct iov_iter iter; 5045 5046 iov_iter_folio_queue(&iter, ITER_DEST, dw->buffer, 0, 0, dw->len); 5047 rc = decrypt_raw_data(dw->server, dw->buf, dw->server->vals->read_rsp_size, 5048 &iter, true); 5049 if (rc) { 5050 cifs_dbg(VFS, "error decrypting rc=%d\n", rc); 5051 goto free_pages; 5052 } 5053 5054 dw->server->lstrp = jiffies; 5055 mid = smb2_find_dequeue_mid(dw->server, dw->buf); 5056 if (mid == NULL) 5057 cifs_dbg(FYI, "mid not found\n"); 5058 else { 5059 mid->decrypted = true; 5060 rc = handle_read_data(dw->server, mid, dw->buf, 5061 dw->server->vals->read_rsp_size, 5062 dw->buffer, dw->len, 5063 true); 5064 if (rc >= 0) { 5065 #ifdef CONFIG_CIFS_STATS2 5066 mid->when_received = jiffies; 5067 #endif 5068 if (dw->server->ops->is_network_name_deleted) 5069 dw->server->ops->is_network_name_deleted(dw->buf, 5070 dw->server); 5071 5072 mid_execute_callback(dw->server, mid); 5073 } else { 5074 spin_lock(&dw->server->srv_lock); 5075 if (dw->server->tcpStatus == CifsNeedReconnect) { 5076 spin_lock(&dw->server->mid_queue_lock); 5077 mid->mid_state = MID_RETRY_NEEDED; 5078 spin_unlock(&dw->server->mid_queue_lock); 5079 spin_unlock(&dw->server->srv_lock); 5080 mid_execute_callback(dw->server, mid); 5081 } else { 5082 spin_lock(&dw->server->mid_queue_lock); 5083 mid->mid_state = MID_REQUEST_SUBMITTED; 5084 mid->deleted_from_q = false; 5085 list_add_tail(&mid->qhead, 5086 &dw->server->pending_mid_q); 5087 spin_unlock(&dw->server->mid_queue_lock); 5088 spin_unlock(&dw->server->srv_lock); 5089 } 5090 } 5091 release_mid(dw->server, mid); 5092 } 5093 5094 free_pages: 5095 netfs_free_folioq_buffer(dw->buffer); 5096 cifs_small_buf_release(dw->buf); 5097 kfree(dw); 5098 } 5099 5100 5101 static int 5102 receive_encrypted_read(struct TCP_Server_Info *server, struct mid_q_entry **mid, 5103 int *num_mids) 5104 { 5105 char *buf = server->smallbuf; 5106 struct smb2_transform_hdr *tr_hdr = (struct smb2_transform_hdr *)buf; 5107 struct iov_iter iter; 5108 unsigned int len; 5109 unsigned int buflen = server->pdu_size; 5110 int rc; 5111 struct smb2_decrypt_work *dw; 5112 5113 dw = kzalloc_obj(struct smb2_decrypt_work); 5114 if (!dw) 5115 return -ENOMEM; 5116 INIT_WORK(&dw->decrypt, smb2_decrypt_offload); 5117 dw->server = server; 5118 5119 *num_mids = 1; 5120 len = min_t(unsigned int, buflen, server->vals->read_rsp_size + 5121 sizeof(struct smb2_transform_hdr)) - HEADER_SIZE(server) + 1; 5122 5123 rc = cifs_read_from_socket(server, buf + HEADER_SIZE(server) - 1, len); 5124 if (rc < 0) 5125 goto free_dw; 5126 server->total_read += rc; 5127 5128 if (le32_to_cpu(tr_hdr->OriginalMessageSize) < 5129 server->vals->read_rsp_size) { 5130 cifs_server_dbg(VFS, "OriginalMessageSize %u too small for read response (%zu)\n", 5131 le32_to_cpu(tr_hdr->OriginalMessageSize), 5132 server->vals->read_rsp_size); 5133 rc = -EINVAL; 5134 goto discard_data; 5135 } 5136 len = le32_to_cpu(tr_hdr->OriginalMessageSize) - 5137 server->vals->read_rsp_size; 5138 dw->len = len; 5139 len = round_up(dw->len, PAGE_SIZE); 5140 5141 size_t cur_size = 0; 5142 rc = netfs_alloc_folioq_buffer(NULL, &dw->buffer, &cur_size, len, GFP_NOFS); 5143 if (rc < 0) 5144 goto discard_data; 5145 5146 iov_iter_folio_queue(&iter, ITER_DEST, dw->buffer, 0, 0, len); 5147 5148 /* Read the data into the buffer and clear excess bufferage. */ 5149 rc = cifs_read_iter_from_socket(server, &iter, dw->len); 5150 if (rc < 0) 5151 goto discard_data; 5152 5153 server->total_read += rc; 5154 if (rc < len) { 5155 struct iov_iter tmp = iter; 5156 5157 iov_iter_advance(&tmp, rc); 5158 iov_iter_zero(len - rc, &tmp); 5159 } 5160 iov_iter_truncate(&iter, dw->len); 5161 5162 rc = cifs_discard_remaining_data(server); 5163 if (rc) 5164 goto free_pages; 5165 5166 /* 5167 * For large reads, offload to different thread for better performance, 5168 * use more cores decrypting which can be expensive 5169 */ 5170 5171 if ((server->min_offload) && (server->in_flight > 1) && 5172 (server->pdu_size >= server->min_offload)) { 5173 dw->buf = server->smallbuf; 5174 server->smallbuf = (char *)cifs_small_buf_get(); 5175 5176 queue_work(decrypt_wq, &dw->decrypt); 5177 *num_mids = 0; /* worker thread takes care of finding mid */ 5178 return -1; 5179 } 5180 5181 rc = decrypt_raw_data(server, buf, server->vals->read_rsp_size, 5182 &iter, false); 5183 if (rc) 5184 goto free_pages; 5185 5186 *mid = smb2_find_mid(server, buf); 5187 if (*mid == NULL) { 5188 cifs_dbg(FYI, "mid not found\n"); 5189 } else { 5190 cifs_dbg(FYI, "mid found\n"); 5191 (*mid)->decrypted = true; 5192 rc = handle_read_data(server, *mid, buf, 5193 server->vals->read_rsp_size, 5194 dw->buffer, dw->len, false); 5195 if (rc >= 0) { 5196 if (server->ops->is_network_name_deleted) { 5197 server->ops->is_network_name_deleted(buf, 5198 server); 5199 } 5200 } 5201 } 5202 5203 free_pages: 5204 netfs_free_folioq_buffer(dw->buffer); 5205 free_dw: 5206 kfree(dw); 5207 return rc; 5208 discard_data: 5209 cifs_discard_remaining_data(server); 5210 goto free_pages; 5211 } 5212 5213 static int 5214 receive_encrypted_standard(struct TCP_Server_Info *server, 5215 struct mid_q_entry **mids, char **bufs, 5216 int *num_mids) 5217 { 5218 int ret, length; 5219 char *buf = server->smallbuf; 5220 struct smb2_hdr *shdr; 5221 unsigned int pdu_length = server->pdu_size; 5222 unsigned int buf_size; 5223 unsigned int next_cmd; 5224 struct mid_q_entry *mid_entry; 5225 int next_is_large; 5226 char *next_buffer = NULL; 5227 5228 *num_mids = 0; 5229 5230 /* switch to large buffer if too big for a small one */ 5231 if (pdu_length > MAX_CIFS_SMALL_BUFFER_SIZE) { 5232 server->large_buf = true; 5233 memcpy(server->bigbuf, buf, server->total_read); 5234 buf = server->bigbuf; 5235 } 5236 5237 /* now read the rest */ 5238 length = cifs_read_from_socket(server, buf + HEADER_SIZE(server) - 1, 5239 pdu_length - HEADER_SIZE(server) + 1); 5240 if (length < 0) 5241 return length; 5242 server->total_read += length; 5243 5244 buf_size = pdu_length - sizeof(struct smb2_transform_hdr); 5245 length = decrypt_raw_data(server, buf, buf_size, NULL, false); 5246 if (length) 5247 return length; 5248 5249 next_is_large = server->large_buf; 5250 one_more: 5251 shdr = (struct smb2_hdr *)buf; 5252 next_cmd = le32_to_cpu(shdr->NextCommand); 5253 5254 if (*num_mids >= MAX_COMPOUND) { 5255 cifs_server_dbg(VFS, "too many PDUs in compound\n"); 5256 return -1; 5257 } 5258 5259 if (next_cmd) { 5260 if (WARN_ON_ONCE(next_cmd > pdu_length)) 5261 return -1; 5262 if (next_is_large) 5263 next_buffer = (char *)cifs_buf_get(); 5264 else 5265 next_buffer = (char *)cifs_small_buf_get(); 5266 if (!next_buffer) { 5267 cifs_server_dbg(VFS, "No memory for (large) SMB response\n"); 5268 return -1; 5269 } 5270 memcpy(next_buffer, buf + next_cmd, pdu_length - next_cmd); 5271 } 5272 5273 mid_entry = smb2_find_mid(server, buf); 5274 if (mid_entry == NULL) 5275 cifs_dbg(FYI, "mid not found\n"); 5276 else { 5277 cifs_dbg(FYI, "mid found\n"); 5278 mid_entry->decrypted = true; 5279 mid_entry->resp_buf_size = server->pdu_size; 5280 } 5281 5282 bufs[*num_mids] = buf; 5283 mids[(*num_mids)++] = mid_entry; 5284 5285 if (mid_entry && mid_entry->handle) 5286 ret = mid_entry->handle(server, mid_entry); 5287 else 5288 ret = cifs_handle_standard(server, mid_entry); 5289 5290 if (ret == 0 && next_cmd) { 5291 pdu_length -= next_cmd; 5292 server->large_buf = next_is_large; 5293 if (next_is_large) 5294 server->bigbuf = buf = next_buffer; 5295 else 5296 server->smallbuf = buf = next_buffer; 5297 goto one_more; 5298 } else if (ret != 0) { 5299 /* 5300 * ret != 0 here means that we didn't get to handle_mid() thus 5301 * server->smallbuf and server->bigbuf are still valid. We need 5302 * to free next_buffer because it is not going to be used 5303 * anywhere. 5304 */ 5305 if (next_is_large) 5306 free_rsp_buf(CIFS_LARGE_BUFFER, next_buffer); 5307 else 5308 free_rsp_buf(CIFS_SMALL_BUFFER, next_buffer); 5309 } 5310 5311 return ret; 5312 } 5313 5314 static int 5315 smb3_receive_transform(struct TCP_Server_Info *server, 5316 struct mid_q_entry **mids, char **bufs, int *num_mids) 5317 { 5318 char *buf = server->smallbuf; 5319 unsigned int pdu_length = server->pdu_size; 5320 struct smb2_transform_hdr *tr_hdr = (struct smb2_transform_hdr *)buf; 5321 unsigned int orig_len = le32_to_cpu(tr_hdr->OriginalMessageSize); 5322 5323 if (pdu_length < sizeof(struct smb2_transform_hdr) + 5324 sizeof(struct smb2_hdr)) { 5325 cifs_server_dbg(VFS, "Transform message is too small (%u)\n", 5326 pdu_length); 5327 cifs_reconnect(server, true); 5328 return -ECONNABORTED; 5329 } 5330 5331 if (pdu_length < orig_len + sizeof(struct smb2_transform_hdr)) { 5332 cifs_server_dbg(VFS, "Transform message is broken\n"); 5333 cifs_reconnect(server, true); 5334 return -ECONNABORTED; 5335 } 5336 5337 /* TODO: add support for compounds containing READ. */ 5338 if (pdu_length > CIFSMaxBufSize + MAX_HEADER_SIZE(server)) { 5339 return receive_encrypted_read(server, &mids[0], num_mids); 5340 } 5341 5342 return receive_encrypted_standard(server, mids, bufs, num_mids); 5343 } 5344 5345 int 5346 smb3_handle_read_data(struct TCP_Server_Info *server, struct mid_q_entry *mid) 5347 { 5348 char *buf = server->large_buf ? server->bigbuf : server->smallbuf; 5349 5350 return handle_read_data(server, mid, buf, server->pdu_size, 5351 NULL, 0, false); 5352 } 5353 5354 static int smb2_next_header(struct TCP_Server_Info *server, char *buf, 5355 unsigned int *noff) 5356 { 5357 struct smb2_hdr *hdr = (struct smb2_hdr *)buf; 5358 struct smb2_transform_hdr *t_hdr = (struct smb2_transform_hdr *)buf; 5359 5360 if (hdr->ProtocolId == SMB2_TRANSFORM_PROTO_NUM) { 5361 *noff = le32_to_cpu(t_hdr->OriginalMessageSize); 5362 if (unlikely(check_add_overflow(*noff, sizeof(*t_hdr), noff))) 5363 return -EINVAL; 5364 } else { 5365 *noff = le32_to_cpu(hdr->NextCommand); 5366 } 5367 if (unlikely(*noff && *noff < MID_HEADER_SIZE(server))) 5368 return -EINVAL; 5369 return 0; 5370 } 5371 5372 int __cifs_sfu_make_node(unsigned int xid, struct inode *inode, 5373 struct dentry *dentry, struct cifs_tcon *tcon, 5374 const char *full_path, umode_t mode, dev_t dev, 5375 const char *symname) 5376 { 5377 struct TCP_Server_Info *server = tcon->ses->server; 5378 struct cifs_open_parms oparms; 5379 struct cifs_open_info_data idata = {}; 5380 struct cifs_io_parms io_parms = {}; 5381 struct cifs_sb_info *cifs_sb = CIFS_SB(inode->i_sb); 5382 struct cifs_fid fid; 5383 unsigned int bytes_written; 5384 u8 type[8]; 5385 int type_len = 0; 5386 struct { 5387 __le64 major; 5388 __le64 minor; 5389 } __packed pdev = {}; 5390 __le16 *symname_utf16 = NULL; 5391 u8 *data = NULL; 5392 int data_len = 0; 5393 struct kvec iov[3]; 5394 __u32 oplock = server->oplocks ? REQ_OPLOCK : 0; 5395 int rc; 5396 5397 switch (mode & S_IFMT) { 5398 case S_IFCHR: 5399 type_len = 8; 5400 memcpy(type, "IntxCHR\0", type_len); 5401 pdev.major = cpu_to_le64(MAJOR(dev)); 5402 pdev.minor = cpu_to_le64(MINOR(dev)); 5403 data = (u8 *)&pdev; 5404 data_len = sizeof(pdev); 5405 break; 5406 case S_IFBLK: 5407 type_len = 8; 5408 memcpy(type, "IntxBLK\0", type_len); 5409 pdev.major = cpu_to_le64(MAJOR(dev)); 5410 pdev.minor = cpu_to_le64(MINOR(dev)); 5411 data = (u8 *)&pdev; 5412 data_len = sizeof(pdev); 5413 break; 5414 case S_IFLNK: 5415 type_len = 8; 5416 memcpy(type, "IntxLNK\1", type_len); 5417 symname_utf16 = cifs_strndup_to_utf16(symname, strlen(symname), 5418 &data_len, cifs_sb->local_nls, 5419 NO_MAP_UNI_RSVD); 5420 if (!symname_utf16) { 5421 rc = -ENOMEM; 5422 goto out; 5423 } 5424 data_len -= 2; /* symlink is without trailing wide-nul */ 5425 data = (u8 *)symname_utf16; 5426 break; 5427 case S_IFSOCK: 5428 /* SFU socket is system file with one zero byte */ 5429 type_len = 1; 5430 type[0] = '\0'; 5431 break; 5432 case S_IFIFO: 5433 /* SFU fifo is system file which is empty */ 5434 type_len = 0; 5435 break; 5436 default: 5437 rc = -EPERM; 5438 goto out; 5439 } 5440 5441 oparms = CIFS_OPARMS(cifs_sb, tcon, full_path, GENERIC_WRITE, 5442 FILE_CREATE, CREATE_NOT_DIR | 5443 CREATE_OPTION_SPECIAL, ACL_NO_MODE); 5444 oparms.fid = &fid; 5445 idata.contains_posix_file_info = false; 5446 rc = server->ops->open(xid, &oparms, &oplock, &idata); 5447 if (rc) 5448 goto out; 5449 5450 /* 5451 * Check if the server honored ATTR_SYSTEM flag by CREATE_OPTION_SPECIAL 5452 * option. If not then server does not support ATTR_SYSTEM and newly 5453 * created file is not SFU compatible, which means that the call failed. 5454 */ 5455 if (!(le32_to_cpu(idata.fi.Attributes) & ATTR_SYSTEM)) { 5456 rc = -EOPNOTSUPP; 5457 goto out_close; 5458 } 5459 5460 if (type_len + data_len > 0) { 5461 io_parms.pid = current->tgid; 5462 io_parms.tcon = tcon; 5463 io_parms.length = type_len + data_len; 5464 iov[1].iov_base = type; 5465 iov[1].iov_len = type_len; 5466 iov[2].iov_base = data; 5467 iov[2].iov_len = data_len; 5468 5469 rc = server->ops->sync_write(xid, &fid, &io_parms, 5470 &bytes_written, 5471 iov, ARRAY_SIZE(iov)-1); 5472 } 5473 5474 out_close: 5475 server->ops->close(xid, tcon, &fid); 5476 5477 /* 5478 * If CREATE was successful but either setting ATTR_SYSTEM failed or 5479 * writing type/data information failed then remove the intermediate 5480 * object created by CREATE. Otherwise intermediate empty object stay 5481 * on the server. 5482 */ 5483 if (rc) 5484 server->ops->unlink(xid, tcon, full_path, cifs_sb, NULL); 5485 5486 out: 5487 kfree(symname_utf16); 5488 return rc; 5489 } 5490 5491 int cifs_sfu_make_node(unsigned int xid, struct inode *inode, 5492 struct dentry *dentry, struct cifs_tcon *tcon, 5493 const char *full_path, umode_t mode, dev_t dev) 5494 { 5495 struct inode *new = NULL; 5496 int rc; 5497 5498 rc = __cifs_sfu_make_node(xid, inode, dentry, tcon, 5499 full_path, mode, dev, NULL); 5500 if (rc) 5501 return rc; 5502 5503 if (tcon->posix_extensions) { 5504 rc = smb311_posix_get_inode_info(&new, full_path, NULL, 5505 inode->i_sb, xid); 5506 } else if (tcon->unix_ext) { 5507 rc = cifs_get_inode_info_unix(&new, full_path, 5508 inode->i_sb, xid); 5509 } else { 5510 rc = cifs_get_inode_info(&new, full_path, NULL, 5511 inode->i_sb, xid, NULL); 5512 } 5513 if (!rc) 5514 d_instantiate(dentry, new); 5515 return rc; 5516 } 5517 5518 static int smb2_make_node(unsigned int xid, struct inode *inode, 5519 struct dentry *dentry, struct cifs_tcon *tcon, 5520 const char *full_path, umode_t mode, dev_t dev) 5521 { 5522 unsigned int sbflags = cifs_sb_flags(CIFS_SB(inode)); 5523 int rc = -EOPNOTSUPP; 5524 5525 /* 5526 * Check if mounted with mount parm 'sfu' mount parm. 5527 * SFU emulation should work with all servers, but only 5528 * supports block and char device, socket & fifo, 5529 * and was used by default in earlier versions of Windows 5530 */ 5531 if (sbflags & CIFS_MOUNT_UNX_EMUL) { 5532 rc = cifs_sfu_make_node(xid, inode, dentry, tcon, 5533 full_path, mode, dev); 5534 } else if (CIFS_REPARSE_SUPPORT(tcon)) { 5535 rc = mknod_reparse(xid, inode, dentry, tcon, 5536 full_path, mode, dev); 5537 } 5538 return rc; 5539 } 5540 5541 #ifdef CONFIG_CIFS_ALLOW_INSECURE_LEGACY 5542 struct smb_version_operations smb20_operations = { 5543 .compare_fids = smb2_compare_fids, 5544 .setup_request = smb2_setup_request, 5545 .setup_async_request = smb2_setup_async_request, 5546 .check_receive = smb2_check_receive, 5547 .add_credits = smb2_add_credits, 5548 .set_credits = smb2_set_credits, 5549 .get_credits_field = smb2_get_credits_field, 5550 .get_credits = smb2_get_credits, 5551 .wait_mtu_credits = cifs_wait_mtu_credits, 5552 .get_next_mid = smb2_get_next_mid, 5553 .revert_current_mid = smb2_revert_current_mid, 5554 .read_data_offset = smb2_read_data_offset, 5555 .read_data_length = smb2_read_data_length, 5556 .map_error = map_smb2_to_linux_error, 5557 .find_mid = smb2_find_mid, 5558 .check_message = smb2_check_message, 5559 .dump_detail = smb2_dump_detail, 5560 .clear_stats = smb2_clear_stats, 5561 .print_stats = smb2_print_stats, 5562 .is_oplock_break = smb2_is_valid_oplock_break, 5563 .handle_cancelled_mid = smb2_handle_cancelled_mid, 5564 .downgrade_oplock = smb2_downgrade_oplock, 5565 .need_neg = smb2_need_neg, 5566 .negotiate = smb2_negotiate, 5567 .negotiate_wsize = smb2_negotiate_wsize, 5568 .negotiate_rsize = smb2_negotiate_rsize, 5569 .sess_setup = SMB2_sess_setup, 5570 .logoff = SMB2_logoff, 5571 .tree_connect = SMB2_tcon, 5572 .tree_disconnect = SMB2_tdis, 5573 .qfs_tcon = smb2_qfs_tcon, 5574 .is_path_accessible = smb2_is_path_accessible, 5575 .can_echo = smb2_can_echo, 5576 .echo = SMB2_echo, 5577 .query_path_info = smb2_query_path_info, 5578 .query_reparse_point = smb2_query_reparse_point, 5579 .get_srv_inum = smb2_get_srv_inum, 5580 .query_file_info = smb2_query_file_info, 5581 .set_path_size = smb2_set_path_size, 5582 .set_file_size = smb2_set_file_size, 5583 .set_file_info = smb2_set_file_info, 5584 .set_compression = smb2_set_compression, 5585 .mkdir = smb2_mkdir, 5586 .mkdir_setinfo = smb2_mkdir_setinfo, 5587 .rmdir = smb2_rmdir, 5588 .unlink = smb2_unlink, 5589 .rename = smb2_rename_path, 5590 .create_hardlink = smb2_create_hardlink, 5591 .get_reparse_point_buffer = smb2_get_reparse_point_buffer, 5592 .query_mf_symlink = smb3_query_mf_symlink, 5593 .create_mf_symlink = smb3_create_mf_symlink, 5594 .create_reparse_inode = smb2_create_reparse_inode, 5595 .open = smb2_open_file, 5596 .set_fid = smb2_set_fid, 5597 .close = smb2_close_file, 5598 .flush = smb2_flush_file, 5599 .async_readv = smb2_async_readv, 5600 .async_writev = smb2_async_writev, 5601 .sync_read = smb2_sync_read, 5602 .sync_write = smb2_sync_write, 5603 .query_dir_first = smb2_query_dir_first, 5604 .query_dir_next = smb2_query_dir_next, 5605 .close_dir = smb2_close_dir, 5606 .calc_smb_size = smb2_calc_size, 5607 .is_status_pending = smb2_is_status_pending, 5608 .is_session_expired = smb2_is_session_expired, 5609 .oplock_response = smb2_oplock_response, 5610 .queryfs = smb2_queryfs, 5611 .mand_lock = smb2_mand_lock, 5612 .mand_unlock_range = smb2_unlock_range, 5613 .push_mand_locks = smb2_push_mandatory_locks, 5614 .get_lease_key = smb2_get_lease_key, 5615 .set_lease_key = smb2_set_lease_key, 5616 .new_lease_key = smb2_new_lease_key, 5617 .is_read_op = smb2_is_read_op, 5618 .set_oplock_level = smb2_set_oplock_level, 5619 .create_lease_buf = smb2_create_lease_buf, 5620 .parse_lease_buf = smb2_parse_lease_buf, 5621 .copychunk_range = smb2_copychunk_range, 5622 .wp_retry_size = smb2_wp_retry_size, 5623 .dir_needs_close = smb2_dir_needs_close, 5624 .get_dfs_refer = smb2_get_dfs_refer, 5625 .select_sectype = smb2_select_sectype, 5626 #ifdef CONFIG_CIFS_XATTR 5627 .query_all_EAs = smb2_query_eas, 5628 .set_EA = smb2_set_ea, 5629 #endif /* CIFS_XATTR */ 5630 .get_acl = get_smb2_acl, 5631 .get_acl_by_fid = get_smb2_acl_by_fid, 5632 .set_acl = set_smb2_acl, 5633 .next_header = smb2_next_header, 5634 .ioctl_query_info = smb2_ioctl_query_info, 5635 .make_node = smb2_make_node, 5636 .fiemap = smb3_fiemap, 5637 .llseek = smb3_llseek, 5638 .is_status_io_timeout = smb2_is_status_io_timeout, 5639 .is_network_name_deleted = smb2_is_network_name_deleted, 5640 .rename_pending_delete = smb2_rename_pending_delete, 5641 }; 5642 #endif /* CIFS_ALLOW_INSECURE_LEGACY */ 5643 5644 struct smb_version_operations smb21_operations = { 5645 .compare_fids = smb2_compare_fids, 5646 .setup_request = smb2_setup_request, 5647 .setup_async_request = smb2_setup_async_request, 5648 .check_receive = smb2_check_receive, 5649 .add_credits = smb2_add_credits, 5650 .set_credits = smb2_set_credits, 5651 .get_credits_field = smb2_get_credits_field, 5652 .get_credits = smb2_get_credits, 5653 .wait_mtu_credits = smb2_wait_mtu_credits, 5654 .adjust_credits = smb2_adjust_credits, 5655 .get_next_mid = smb2_get_next_mid, 5656 .revert_current_mid = smb2_revert_current_mid, 5657 .read_data_offset = smb2_read_data_offset, 5658 .read_data_length = smb2_read_data_length, 5659 .map_error = map_smb2_to_linux_error, 5660 .find_mid = smb2_find_mid, 5661 .check_message = smb2_check_message, 5662 .dump_detail = smb2_dump_detail, 5663 .clear_stats = smb2_clear_stats, 5664 .print_stats = smb2_print_stats, 5665 .is_oplock_break = smb2_is_valid_oplock_break, 5666 .handle_cancelled_mid = smb2_handle_cancelled_mid, 5667 .downgrade_oplock = smb2_downgrade_oplock, 5668 .need_neg = smb2_need_neg, 5669 .negotiate = smb2_negotiate, 5670 .negotiate_wsize = smb2_negotiate_wsize, 5671 .negotiate_rsize = smb2_negotiate_rsize, 5672 .sess_setup = SMB2_sess_setup, 5673 .logoff = SMB2_logoff, 5674 .tree_connect = SMB2_tcon, 5675 .tree_disconnect = SMB2_tdis, 5676 .qfs_tcon = smb2_qfs_tcon, 5677 .is_path_accessible = smb2_is_path_accessible, 5678 .can_echo = smb2_can_echo, 5679 .echo = SMB2_echo, 5680 .query_path_info = smb2_query_path_info, 5681 .query_reparse_point = smb2_query_reparse_point, 5682 .get_srv_inum = smb2_get_srv_inum, 5683 .query_file_info = smb2_query_file_info, 5684 .set_path_size = smb2_set_path_size, 5685 .set_file_size = smb2_set_file_size, 5686 .set_file_info = smb2_set_file_info, 5687 .set_compression = smb2_set_compression, 5688 .mkdir = smb2_mkdir, 5689 .mkdir_setinfo = smb2_mkdir_setinfo, 5690 .rmdir = smb2_rmdir, 5691 .unlink = smb2_unlink, 5692 .rename = smb2_rename_path, 5693 .create_hardlink = smb2_create_hardlink, 5694 .get_reparse_point_buffer = smb2_get_reparse_point_buffer, 5695 .query_mf_symlink = smb3_query_mf_symlink, 5696 .create_mf_symlink = smb3_create_mf_symlink, 5697 .create_reparse_inode = smb2_create_reparse_inode, 5698 .open = smb2_open_file, 5699 .set_fid = smb2_set_fid, 5700 .close = smb2_close_file, 5701 .flush = smb2_flush_file, 5702 .async_readv = smb2_async_readv, 5703 .async_writev = smb2_async_writev, 5704 .sync_read = smb2_sync_read, 5705 .sync_write = smb2_sync_write, 5706 .query_dir_first = smb2_query_dir_first, 5707 .query_dir_next = smb2_query_dir_next, 5708 .close_dir = smb2_close_dir, 5709 .calc_smb_size = smb2_calc_size, 5710 .is_status_pending = smb2_is_status_pending, 5711 .is_session_expired = smb2_is_session_expired, 5712 .oplock_response = smb2_oplock_response, 5713 .queryfs = smb2_queryfs, 5714 .mand_lock = smb2_mand_lock, 5715 .mand_unlock_range = smb2_unlock_range, 5716 .push_mand_locks = smb2_push_mandatory_locks, 5717 .get_lease_key = smb2_get_lease_key, 5718 .set_lease_key = smb2_set_lease_key, 5719 .new_lease_key = smb2_new_lease_key, 5720 .is_read_op = smb21_is_read_op, 5721 .set_oplock_level = smb21_set_oplock_level, 5722 .create_lease_buf = smb2_create_lease_buf, 5723 .parse_lease_buf = smb2_parse_lease_buf, 5724 .copychunk_range = smb2_copychunk_range, 5725 .wp_retry_size = smb2_wp_retry_size, 5726 .dir_needs_close = smb2_dir_needs_close, 5727 .enum_snapshots = smb3_enum_snapshots, 5728 .notify = smb3_notify, 5729 .get_dfs_refer = smb2_get_dfs_refer, 5730 .select_sectype = smb2_select_sectype, 5731 #ifdef CONFIG_CIFS_XATTR 5732 .query_all_EAs = smb2_query_eas, 5733 .set_EA = smb2_set_ea, 5734 #endif /* CIFS_XATTR */ 5735 .get_acl = get_smb2_acl, 5736 .get_acl_by_fid = get_smb2_acl_by_fid, 5737 .set_acl = set_smb2_acl, 5738 .next_header = smb2_next_header, 5739 .ioctl_query_info = smb2_ioctl_query_info, 5740 .make_node = smb2_make_node, 5741 .fiemap = smb3_fiemap, 5742 .llseek = smb3_llseek, 5743 .is_status_io_timeout = smb2_is_status_io_timeout, 5744 .is_network_name_deleted = smb2_is_network_name_deleted, 5745 .rename_pending_delete = smb2_rename_pending_delete, 5746 }; 5747 5748 struct smb_version_operations smb30_operations = { 5749 .compare_fids = smb2_compare_fids, 5750 .setup_request = smb2_setup_request, 5751 .setup_async_request = smb2_setup_async_request, 5752 .check_receive = smb2_check_receive, 5753 .add_credits = smb2_add_credits, 5754 .set_credits = smb2_set_credits, 5755 .get_credits_field = smb2_get_credits_field, 5756 .get_credits = smb2_get_credits, 5757 .wait_mtu_credits = smb2_wait_mtu_credits, 5758 .adjust_credits = smb2_adjust_credits, 5759 .get_next_mid = smb2_get_next_mid, 5760 .revert_current_mid = smb2_revert_current_mid, 5761 .read_data_offset = smb2_read_data_offset, 5762 .read_data_length = smb2_read_data_length, 5763 .map_error = map_smb2_to_linux_error, 5764 .find_mid = smb2_find_mid, 5765 .check_message = smb2_check_message, 5766 .dump_detail = smb2_dump_detail, 5767 .clear_stats = smb2_clear_stats, 5768 .print_stats = smb2_print_stats, 5769 .dump_share_caps = smb2_dump_share_caps, 5770 .is_oplock_break = smb2_is_valid_oplock_break, 5771 .handle_cancelled_mid = smb2_handle_cancelled_mid, 5772 .downgrade_oplock = smb3_downgrade_oplock, 5773 .need_neg = smb2_need_neg, 5774 .negotiate = smb2_negotiate, 5775 .negotiate_wsize = smb3_negotiate_wsize, 5776 .negotiate_rsize = smb3_negotiate_rsize, 5777 .sess_setup = SMB2_sess_setup, 5778 .logoff = SMB2_logoff, 5779 .tree_connect = SMB2_tcon, 5780 .tree_disconnect = SMB2_tdis, 5781 .qfs_tcon = smb3_qfs_tcon, 5782 .query_server_interfaces = SMB3_request_interfaces, 5783 .is_path_accessible = smb2_is_path_accessible, 5784 .can_echo = smb2_can_echo, 5785 .echo = SMB2_echo, 5786 .query_path_info = smb2_query_path_info, 5787 /* WSL tags introduced long after smb2.1, enable for SMB3, 3.11 only */ 5788 .query_reparse_point = smb2_query_reparse_point, 5789 .get_srv_inum = smb2_get_srv_inum, 5790 .query_file_info = smb2_query_file_info, 5791 .set_path_size = smb2_set_path_size, 5792 .set_file_size = smb2_set_file_size, 5793 .set_file_info = smb2_set_file_info, 5794 .set_compression = smb2_set_compression, 5795 .mkdir = smb2_mkdir, 5796 .mkdir_setinfo = smb2_mkdir_setinfo, 5797 .rmdir = smb2_rmdir, 5798 .unlink = smb2_unlink, 5799 .rename = smb2_rename_path, 5800 .create_hardlink = smb2_create_hardlink, 5801 .get_reparse_point_buffer = smb2_get_reparse_point_buffer, 5802 .query_mf_symlink = smb3_query_mf_symlink, 5803 .create_mf_symlink = smb3_create_mf_symlink, 5804 .create_reparse_inode = smb2_create_reparse_inode, 5805 .open = smb2_open_file, 5806 .set_fid = smb2_set_fid, 5807 .close = smb2_close_file, 5808 .close_getattr = smb2_close_getattr, 5809 .flush = smb2_flush_file, 5810 .async_readv = smb2_async_readv, 5811 .async_writev = smb2_async_writev, 5812 .sync_read = smb2_sync_read, 5813 .sync_write = smb2_sync_write, 5814 .query_dir_first = smb2_query_dir_first, 5815 .query_dir_next = smb2_query_dir_next, 5816 .close_dir = smb2_close_dir, 5817 .calc_smb_size = smb2_calc_size, 5818 .is_status_pending = smb2_is_status_pending, 5819 .is_session_expired = smb2_is_session_expired, 5820 .oplock_response = smb2_oplock_response, 5821 .queryfs = smb2_queryfs, 5822 .mand_lock = smb2_mand_lock, 5823 .mand_unlock_range = smb2_unlock_range, 5824 .push_mand_locks = smb2_push_mandatory_locks, 5825 .get_lease_key = smb2_get_lease_key, 5826 .set_lease_key = smb2_set_lease_key, 5827 .new_lease_key = smb2_new_lease_key, 5828 .generate_signingkey = generate_smb30signingkey, 5829 .set_integrity = smb3_set_integrity, 5830 .is_read_op = smb21_is_read_op, 5831 .set_oplock_level = smb3_set_oplock_level, 5832 .create_lease_buf = smb3_create_lease_buf, 5833 .parse_lease_buf = smb3_parse_lease_buf, 5834 .copychunk_range = smb2_copychunk_range, 5835 .duplicate_extents = smb2_duplicate_extents, 5836 .validate_negotiate = smb3_validate_negotiate, 5837 .wp_retry_size = smb2_wp_retry_size, 5838 .dir_needs_close = smb2_dir_needs_close, 5839 .fallocate = smb3_fallocate, 5840 .enum_snapshots = smb3_enum_snapshots, 5841 .notify = smb3_notify, 5842 .init_transform_rq = smb3_init_transform_rq, 5843 .is_transform_hdr = smb3_is_transform_hdr, 5844 .receive_transform = smb3_receive_transform, 5845 .get_dfs_refer = smb2_get_dfs_refer, 5846 .select_sectype = smb2_select_sectype, 5847 #ifdef CONFIG_CIFS_XATTR 5848 .query_all_EAs = smb2_query_eas, 5849 .set_EA = smb2_set_ea, 5850 #endif /* CIFS_XATTR */ 5851 .get_acl = get_smb2_acl, 5852 .get_acl_by_fid = get_smb2_acl_by_fid, 5853 .set_acl = set_smb2_acl, 5854 .next_header = smb2_next_header, 5855 .ioctl_query_info = smb2_ioctl_query_info, 5856 .make_node = smb2_make_node, 5857 .fiemap = smb3_fiemap, 5858 .llseek = smb3_llseek, 5859 .is_status_io_timeout = smb2_is_status_io_timeout, 5860 .is_network_name_deleted = smb2_is_network_name_deleted, 5861 .rename_pending_delete = smb2_rename_pending_delete, 5862 }; 5863 5864 struct smb_version_operations smb311_operations = { 5865 .compare_fids = smb2_compare_fids, 5866 .setup_request = smb2_setup_request, 5867 .setup_async_request = smb2_setup_async_request, 5868 .check_receive = smb2_check_receive, 5869 .add_credits = smb2_add_credits, 5870 .set_credits = smb2_set_credits, 5871 .get_credits_field = smb2_get_credits_field, 5872 .get_credits = smb2_get_credits, 5873 .wait_mtu_credits = smb2_wait_mtu_credits, 5874 .adjust_credits = smb2_adjust_credits, 5875 .get_next_mid = smb2_get_next_mid, 5876 .revert_current_mid = smb2_revert_current_mid, 5877 .read_data_offset = smb2_read_data_offset, 5878 .read_data_length = smb2_read_data_length, 5879 .map_error = map_smb2_to_linux_error, 5880 .find_mid = smb2_find_mid, 5881 .check_message = smb2_check_message, 5882 .dump_detail = smb2_dump_detail, 5883 .clear_stats = smb2_clear_stats, 5884 .print_stats = smb2_print_stats, 5885 .dump_share_caps = smb2_dump_share_caps, 5886 .is_oplock_break = smb2_is_valid_oplock_break, 5887 .handle_cancelled_mid = smb2_handle_cancelled_mid, 5888 .downgrade_oplock = smb3_downgrade_oplock, 5889 .need_neg = smb2_need_neg, 5890 .negotiate = smb2_negotiate, 5891 .negotiate_wsize = smb3_negotiate_wsize, 5892 .negotiate_rsize = smb3_negotiate_rsize, 5893 .sess_setup = SMB2_sess_setup, 5894 .logoff = SMB2_logoff, 5895 .tree_connect = SMB2_tcon, 5896 .tree_disconnect = SMB2_tdis, 5897 .qfs_tcon = smb3_qfs_tcon, 5898 .query_server_interfaces = SMB3_request_interfaces, 5899 .is_path_accessible = smb2_is_path_accessible, 5900 .can_echo = smb2_can_echo, 5901 .echo = SMB2_echo, 5902 .query_path_info = smb2_query_path_info, 5903 .query_reparse_point = smb2_query_reparse_point, 5904 .get_srv_inum = smb2_get_srv_inum, 5905 .query_file_info = smb2_query_file_info, 5906 .set_path_size = smb2_set_path_size, 5907 .set_file_size = smb2_set_file_size, 5908 .set_file_info = smb2_set_file_info, 5909 .set_compression = smb2_set_compression, 5910 .mkdir = smb2_mkdir, 5911 .mkdir_setinfo = smb2_mkdir_setinfo, 5912 .posix_mkdir = smb311_posix_mkdir, 5913 .rmdir = smb2_rmdir, 5914 .unlink = smb2_unlink, 5915 .rename = smb2_rename_path, 5916 .create_hardlink = smb2_create_hardlink, 5917 .get_reparse_point_buffer = smb2_get_reparse_point_buffer, 5918 .query_mf_symlink = smb3_query_mf_symlink, 5919 .create_mf_symlink = smb3_create_mf_symlink, 5920 .create_reparse_inode = smb2_create_reparse_inode, 5921 .open = smb2_open_file, 5922 .set_fid = smb2_set_fid, 5923 .close = smb2_close_file, 5924 .close_getattr = smb2_close_getattr, 5925 .flush = smb2_flush_file, 5926 .async_readv = smb2_async_readv, 5927 .async_writev = smb2_async_writev, 5928 .sync_read = smb2_sync_read, 5929 .sync_write = smb2_sync_write, 5930 .query_dir_first = smb2_query_dir_first, 5931 .query_dir_next = smb2_query_dir_next, 5932 .close_dir = smb2_close_dir, 5933 .calc_smb_size = smb2_calc_size, 5934 .is_status_pending = smb2_is_status_pending, 5935 .is_session_expired = smb2_is_session_expired, 5936 .oplock_response = smb2_oplock_response, 5937 .queryfs = smb311_queryfs, 5938 .mand_lock = smb2_mand_lock, 5939 .mand_unlock_range = smb2_unlock_range, 5940 .push_mand_locks = smb2_push_mandatory_locks, 5941 .get_lease_key = smb2_get_lease_key, 5942 .set_lease_key = smb2_set_lease_key, 5943 .new_lease_key = smb2_new_lease_key, 5944 .generate_signingkey = generate_smb311signingkey, 5945 .set_integrity = smb3_set_integrity, 5946 .is_read_op = smb21_is_read_op, 5947 .set_oplock_level = smb3_set_oplock_level, 5948 .create_lease_buf = smb3_create_lease_buf, 5949 .parse_lease_buf = smb3_parse_lease_buf, 5950 .copychunk_range = smb2_copychunk_range, 5951 .duplicate_extents = smb2_duplicate_extents, 5952 /* .validate_negotiate = smb3_validate_negotiate, */ /* not used in 3.11 */ 5953 .wp_retry_size = smb2_wp_retry_size, 5954 .dir_needs_close = smb2_dir_needs_close, 5955 .fallocate = smb3_fallocate, 5956 .enum_snapshots = smb3_enum_snapshots, 5957 .notify = smb3_notify, 5958 .init_transform_rq = smb3_init_transform_rq, 5959 .is_transform_hdr = smb3_is_transform_hdr, 5960 .receive_transform = smb3_receive_transform, 5961 .get_dfs_refer = smb2_get_dfs_refer, 5962 .select_sectype = smb2_select_sectype, 5963 #ifdef CONFIG_CIFS_XATTR 5964 .query_all_EAs = smb2_query_eas, 5965 .set_EA = smb2_set_ea, 5966 #endif /* CIFS_XATTR */ 5967 .get_acl = get_smb2_acl, 5968 .get_acl_by_fid = get_smb2_acl_by_fid, 5969 .set_acl = set_smb2_acl, 5970 .next_header = smb2_next_header, 5971 .ioctl_query_info = smb2_ioctl_query_info, 5972 .make_node = smb2_make_node, 5973 .fiemap = smb3_fiemap, 5974 .llseek = smb3_llseek, 5975 .is_status_io_timeout = smb2_is_status_io_timeout, 5976 .is_network_name_deleted = smb2_is_network_name_deleted, 5977 .rename_pending_delete = smb2_rename_pending_delete, 5978 }; 5979 5980 #ifdef CONFIG_CIFS_ALLOW_INSECURE_LEGACY 5981 struct smb_version_values smb20_values = { 5982 .version_string = SMB20_VERSION_STRING, 5983 .protocol_id = SMB20_PROT_ID, 5984 .req_capabilities = 0, /* MBZ */ 5985 .large_lock_type = 0, 5986 .exclusive_lock_type = SMB2_LOCKFLAG_EXCLUSIVE, 5987 .shared_lock_type = SMB2_LOCKFLAG_SHARED, 5988 .unlock_lock_type = SMB2_LOCKFLAG_UNLOCK, 5989 .header_size = sizeof(struct smb2_hdr), 5990 .max_header_size = MAX_SMB2_HDR_SIZE, 5991 .read_rsp_size = sizeof(struct smb2_read_rsp), 5992 .lock_cmd = SMB2_LOCK, 5993 .cap_unix = 0, 5994 .cap_nt_find = SMB2_NT_FIND, 5995 .cap_large_files = SMB2_LARGE_FILES, 5996 .signing_enabled = SMB2_NEGOTIATE_SIGNING_ENABLED | SMB2_NEGOTIATE_SIGNING_REQUIRED, 5997 .signing_required = SMB2_NEGOTIATE_SIGNING_REQUIRED, 5998 .create_lease_size = sizeof(struct create_lease), 5999 }; 6000 #endif /* ALLOW_INSECURE_LEGACY */ 6001 6002 struct smb_version_values smb21_values = { 6003 .version_string = SMB21_VERSION_STRING, 6004 .protocol_id = SMB21_PROT_ID, 6005 .req_capabilities = 0, /* MBZ on negotiate req until SMB3 dialect */ 6006 .large_lock_type = 0, 6007 .exclusive_lock_type = SMB2_LOCKFLAG_EXCLUSIVE, 6008 .shared_lock_type = SMB2_LOCKFLAG_SHARED, 6009 .unlock_lock_type = SMB2_LOCKFLAG_UNLOCK, 6010 .header_size = sizeof(struct smb2_hdr), 6011 .max_header_size = MAX_SMB2_HDR_SIZE, 6012 .read_rsp_size = sizeof(struct smb2_read_rsp), 6013 .lock_cmd = SMB2_LOCK, 6014 .cap_unix = 0, 6015 .cap_nt_find = SMB2_NT_FIND, 6016 .cap_large_files = SMB2_LARGE_FILES, 6017 .signing_enabled = SMB2_NEGOTIATE_SIGNING_ENABLED | SMB2_NEGOTIATE_SIGNING_REQUIRED, 6018 .signing_required = SMB2_NEGOTIATE_SIGNING_REQUIRED, 6019 .create_lease_size = sizeof(struct create_lease), 6020 }; 6021 6022 struct smb_version_values smb3any_values = { 6023 .version_string = SMB3ANY_VERSION_STRING, 6024 .protocol_id = SMB302_PROT_ID, /* doesn't matter, send protocol array */ 6025 .req_capabilities = SMB2_GLOBAL_CAP_DFS | SMB2_GLOBAL_CAP_LEASING | SMB2_GLOBAL_CAP_LARGE_MTU | SMB2_GLOBAL_CAP_PERSISTENT_HANDLES | SMB2_GLOBAL_CAP_ENCRYPTION | SMB2_GLOBAL_CAP_DIRECTORY_LEASING, 6026 .large_lock_type = 0, 6027 .exclusive_lock_type = SMB2_LOCKFLAG_EXCLUSIVE, 6028 .shared_lock_type = SMB2_LOCKFLAG_SHARED, 6029 .unlock_lock_type = SMB2_LOCKFLAG_UNLOCK, 6030 .header_size = sizeof(struct smb2_hdr), 6031 .max_header_size = MAX_SMB2_HDR_SIZE, 6032 .read_rsp_size = sizeof(struct smb2_read_rsp), 6033 .lock_cmd = SMB2_LOCK, 6034 .cap_unix = 0, 6035 .cap_nt_find = SMB2_NT_FIND, 6036 .cap_large_files = SMB2_LARGE_FILES, 6037 .signing_enabled = SMB2_NEGOTIATE_SIGNING_ENABLED | SMB2_NEGOTIATE_SIGNING_REQUIRED, 6038 .signing_required = SMB2_NEGOTIATE_SIGNING_REQUIRED, 6039 .create_lease_size = sizeof(struct create_lease_v2), 6040 }; 6041 6042 struct smb_version_values smbdefault_values = { 6043 .version_string = SMBDEFAULT_VERSION_STRING, 6044 .protocol_id = SMB302_PROT_ID, /* doesn't matter, send protocol array */ 6045 .req_capabilities = SMB2_GLOBAL_CAP_DFS | SMB2_GLOBAL_CAP_LEASING | SMB2_GLOBAL_CAP_LARGE_MTU | SMB2_GLOBAL_CAP_PERSISTENT_HANDLES | SMB2_GLOBAL_CAP_ENCRYPTION | SMB2_GLOBAL_CAP_DIRECTORY_LEASING, 6046 .large_lock_type = 0, 6047 .exclusive_lock_type = SMB2_LOCKFLAG_EXCLUSIVE, 6048 .shared_lock_type = SMB2_LOCKFLAG_SHARED, 6049 .unlock_lock_type = SMB2_LOCKFLAG_UNLOCK, 6050 .header_size = sizeof(struct smb2_hdr), 6051 .max_header_size = MAX_SMB2_HDR_SIZE, 6052 .read_rsp_size = sizeof(struct smb2_read_rsp), 6053 .lock_cmd = SMB2_LOCK, 6054 .cap_unix = 0, 6055 .cap_nt_find = SMB2_NT_FIND, 6056 .cap_large_files = SMB2_LARGE_FILES, 6057 .signing_enabled = SMB2_NEGOTIATE_SIGNING_ENABLED | SMB2_NEGOTIATE_SIGNING_REQUIRED, 6058 .signing_required = SMB2_NEGOTIATE_SIGNING_REQUIRED, 6059 .create_lease_size = sizeof(struct create_lease_v2), 6060 }; 6061 6062 struct smb_version_values smb30_values = { 6063 .version_string = SMB30_VERSION_STRING, 6064 .protocol_id = SMB30_PROT_ID, 6065 .req_capabilities = SMB2_GLOBAL_CAP_DFS | SMB2_GLOBAL_CAP_LEASING | SMB2_GLOBAL_CAP_LARGE_MTU | SMB2_GLOBAL_CAP_PERSISTENT_HANDLES | SMB2_GLOBAL_CAP_ENCRYPTION | SMB2_GLOBAL_CAP_DIRECTORY_LEASING, 6066 .large_lock_type = 0, 6067 .exclusive_lock_type = SMB2_LOCKFLAG_EXCLUSIVE, 6068 .shared_lock_type = SMB2_LOCKFLAG_SHARED, 6069 .unlock_lock_type = SMB2_LOCKFLAG_UNLOCK, 6070 .header_size = sizeof(struct smb2_hdr), 6071 .max_header_size = MAX_SMB2_HDR_SIZE, 6072 .read_rsp_size = sizeof(struct smb2_read_rsp), 6073 .lock_cmd = SMB2_LOCK, 6074 .cap_unix = 0, 6075 .cap_nt_find = SMB2_NT_FIND, 6076 .cap_large_files = SMB2_LARGE_FILES, 6077 .signing_enabled = SMB2_NEGOTIATE_SIGNING_ENABLED | SMB2_NEGOTIATE_SIGNING_REQUIRED, 6078 .signing_required = SMB2_NEGOTIATE_SIGNING_REQUIRED, 6079 .create_lease_size = sizeof(struct create_lease_v2), 6080 }; 6081 6082 struct smb_version_values smb302_values = { 6083 .version_string = SMB302_VERSION_STRING, 6084 .protocol_id = SMB302_PROT_ID, 6085 .req_capabilities = SMB2_GLOBAL_CAP_DFS | SMB2_GLOBAL_CAP_LEASING | SMB2_GLOBAL_CAP_LARGE_MTU | SMB2_GLOBAL_CAP_PERSISTENT_HANDLES | SMB2_GLOBAL_CAP_ENCRYPTION | SMB2_GLOBAL_CAP_DIRECTORY_LEASING, 6086 .large_lock_type = 0, 6087 .exclusive_lock_type = SMB2_LOCKFLAG_EXCLUSIVE, 6088 .shared_lock_type = SMB2_LOCKFLAG_SHARED, 6089 .unlock_lock_type = SMB2_LOCKFLAG_UNLOCK, 6090 .header_size = sizeof(struct smb2_hdr), 6091 .max_header_size = MAX_SMB2_HDR_SIZE, 6092 .read_rsp_size = sizeof(struct smb2_read_rsp), 6093 .lock_cmd = SMB2_LOCK, 6094 .cap_unix = 0, 6095 .cap_nt_find = SMB2_NT_FIND, 6096 .cap_large_files = SMB2_LARGE_FILES, 6097 .signing_enabled = SMB2_NEGOTIATE_SIGNING_ENABLED | SMB2_NEGOTIATE_SIGNING_REQUIRED, 6098 .signing_required = SMB2_NEGOTIATE_SIGNING_REQUIRED, 6099 .create_lease_size = sizeof(struct create_lease_v2), 6100 }; 6101 6102 struct smb_version_values smb311_values = { 6103 .version_string = SMB311_VERSION_STRING, 6104 .protocol_id = SMB311_PROT_ID, 6105 .req_capabilities = SMB2_GLOBAL_CAP_DFS | SMB2_GLOBAL_CAP_LEASING | SMB2_GLOBAL_CAP_LARGE_MTU | SMB2_GLOBAL_CAP_PERSISTENT_HANDLES | SMB2_GLOBAL_CAP_ENCRYPTION | SMB2_GLOBAL_CAP_DIRECTORY_LEASING, 6106 .large_lock_type = 0, 6107 .exclusive_lock_type = SMB2_LOCKFLAG_EXCLUSIVE, 6108 .shared_lock_type = SMB2_LOCKFLAG_SHARED, 6109 .unlock_lock_type = SMB2_LOCKFLAG_UNLOCK, 6110 .header_size = sizeof(struct smb2_hdr), 6111 .max_header_size = MAX_SMB2_HDR_SIZE, 6112 .read_rsp_size = sizeof(struct smb2_read_rsp), 6113 .lock_cmd = SMB2_LOCK, 6114 .cap_unix = 0, 6115 .cap_nt_find = SMB2_NT_FIND, 6116 .cap_large_files = SMB2_LARGE_FILES, 6117 .signing_enabled = SMB2_NEGOTIATE_SIGNING_ENABLED | SMB2_NEGOTIATE_SIGNING_REQUIRED, 6118 .signing_required = SMB2_NEGOTIATE_SIGNING_REQUIRED, 6119 .create_lease_size = sizeof(struct create_lease_v2), 6120 }; 6121