1 // SPDX-License-Identifier: GPL-2.0-or-later 2 /* 3 * Copyright (C) 2016 Namjae Jeon <linkinjeon@kernel.org> 4 * Copyright (C) 2018 Samsung Electronics Co., Ltd. 5 */ 6 7 #include <linux/moduleparam.h> 8 9 #include "glob.h" 10 #include "oplock.h" 11 12 #include "smb_common.h" 13 #include "../common/smb2status.h" 14 #include "connection.h" 15 #include "mgmt/user_session.h" 16 #include "mgmt/share_config.h" 17 #include "mgmt/tree_connect.h" 18 19 static LIST_HEAD(lease_table_list); 20 static DEFINE_RWLOCK(lease_list_lock); 21 22 /** 23 * alloc_opinfo() - allocate a new opinfo object for oplock info 24 * @work: smb work 25 * @id: fid of open file 26 * @Tid: tree id of connection 27 * 28 * Return: allocated opinfo object on success, otherwise NULL 29 */ 30 static struct oplock_info *alloc_opinfo(struct ksmbd_work *work, 31 u64 id, __u16 Tid) 32 { 33 struct ksmbd_conn *conn = work->conn; 34 struct ksmbd_session *sess = work->sess; 35 struct oplock_info *opinfo; 36 37 opinfo = kzalloc(sizeof(struct oplock_info), KSMBD_DEFAULT_GFP); 38 if (!opinfo) 39 return NULL; 40 41 opinfo->sess = sess; 42 opinfo->conn = conn; 43 opinfo->level = SMB2_OPLOCK_LEVEL_NONE; 44 opinfo->op_state = OPLOCK_STATE_NONE; 45 opinfo->pending_break = 0; 46 opinfo->fid = id; 47 opinfo->Tid = Tid; 48 INIT_LIST_HEAD(&opinfo->op_entry); 49 init_waitqueue_head(&opinfo->oplock_q); 50 init_waitqueue_head(&opinfo->oplock_brk); 51 atomic_set(&opinfo->refcount, 1); 52 atomic_set(&opinfo->breaking_cnt, 0); 53 atomic_inc(&opinfo->conn->refcnt); 54 55 return opinfo; 56 } 57 58 static void lease_add_list(struct oplock_info *opinfo) 59 { 60 struct lease_table *lb = opinfo->o_lease->l_lb; 61 62 spin_lock(&lb->lb_lock); 63 list_add_rcu(&opinfo->lease_entry, &lb->lease_list); 64 spin_unlock(&lb->lb_lock); 65 } 66 67 static void lease_del_list(struct oplock_info *opinfo) 68 { 69 struct lease_table *lb = opinfo->o_lease->l_lb; 70 71 if (!lb) 72 return; 73 74 spin_lock(&lb->lb_lock); 75 if (list_empty(&opinfo->lease_entry)) { 76 spin_unlock(&lb->lb_lock); 77 return; 78 } 79 80 list_del_init(&opinfo->lease_entry); 81 opinfo->o_lease->l_lb = NULL; 82 spin_unlock(&lb->lb_lock); 83 } 84 85 static void lb_add(struct lease_table *lb) 86 { 87 write_lock(&lease_list_lock); 88 list_add(&lb->l_entry, &lease_table_list); 89 write_unlock(&lease_list_lock); 90 } 91 92 static int alloc_lease(struct oplock_info *opinfo, struct lease_ctx_info *lctx) 93 { 94 struct lease *lease; 95 96 lease = kmalloc(sizeof(struct lease), KSMBD_DEFAULT_GFP); 97 if (!lease) 98 return -ENOMEM; 99 100 memcpy(lease->lease_key, lctx->lease_key, SMB2_LEASE_KEY_SIZE); 101 lease->state = lctx->req_state; 102 lease->new_state = 0; 103 lease->flags = lctx->flags; 104 lease->duration = lctx->duration; 105 lease->is_dir = lctx->is_dir; 106 memcpy(lease->parent_lease_key, lctx->parent_lease_key, SMB2_LEASE_KEY_SIZE); 107 lease->version = lctx->version; 108 lease->epoch = le16_to_cpu(lctx->epoch) + 1; 109 INIT_LIST_HEAD(&opinfo->lease_entry); 110 opinfo->o_lease = lease; 111 112 return 0; 113 } 114 115 static void free_lease(struct oplock_info *opinfo) 116 { 117 struct lease *lease; 118 119 lease = opinfo->o_lease; 120 kfree(lease); 121 } 122 123 static void free_opinfo(struct oplock_info *opinfo) 124 { 125 if (opinfo->is_lease) 126 free_lease(opinfo); 127 if (opinfo->conn && atomic_dec_and_test(&opinfo->conn->refcnt)) 128 kfree(opinfo->conn); 129 kfree(opinfo); 130 } 131 132 struct oplock_info *opinfo_get(struct ksmbd_file *fp) 133 { 134 struct oplock_info *opinfo; 135 136 rcu_read_lock(); 137 opinfo = rcu_dereference(fp->f_opinfo); 138 if (opinfo && !atomic_inc_not_zero(&opinfo->refcount)) 139 opinfo = NULL; 140 rcu_read_unlock(); 141 142 return opinfo; 143 } 144 145 static struct oplock_info *opinfo_get_list(struct ksmbd_inode *ci) 146 { 147 struct oplock_info *opinfo; 148 149 if (list_empty(&ci->m_op_list)) 150 return NULL; 151 152 down_read(&ci->m_lock); 153 opinfo = list_first_entry(&ci->m_op_list, struct oplock_info, 154 op_entry); 155 if (opinfo) { 156 if (opinfo->conn == NULL || 157 !atomic_inc_not_zero(&opinfo->refcount)) 158 opinfo = NULL; 159 else { 160 if (ksmbd_conn_releasing(opinfo->conn)) { 161 atomic_dec(&opinfo->refcount); 162 opinfo = NULL; 163 } 164 } 165 } 166 up_read(&ci->m_lock); 167 168 return opinfo; 169 } 170 171 void opinfo_put(struct oplock_info *opinfo) 172 { 173 if (!opinfo) 174 return; 175 176 if (!atomic_dec_and_test(&opinfo->refcount)) 177 return; 178 179 free_opinfo(opinfo); 180 } 181 182 static void opinfo_add(struct oplock_info *opinfo) 183 { 184 struct ksmbd_inode *ci = opinfo->o_fp->f_ci; 185 186 down_write(&ci->m_lock); 187 list_add(&opinfo->op_entry, &ci->m_op_list); 188 up_write(&ci->m_lock); 189 } 190 191 static void opinfo_del(struct oplock_info *opinfo) 192 { 193 struct ksmbd_inode *ci = opinfo->o_fp->f_ci; 194 195 if (opinfo->is_lease) { 196 write_lock(&lease_list_lock); 197 lease_del_list(opinfo); 198 write_unlock(&lease_list_lock); 199 } 200 down_write(&ci->m_lock); 201 list_del(&opinfo->op_entry); 202 up_write(&ci->m_lock); 203 } 204 205 static unsigned long opinfo_count(struct ksmbd_file *fp) 206 { 207 if (ksmbd_stream_fd(fp)) 208 return atomic_read(&fp->f_ci->sop_count); 209 else 210 return atomic_read(&fp->f_ci->op_count); 211 } 212 213 static void opinfo_count_inc(struct ksmbd_file *fp) 214 { 215 if (ksmbd_stream_fd(fp)) 216 return atomic_inc(&fp->f_ci->sop_count); 217 else 218 return atomic_inc(&fp->f_ci->op_count); 219 } 220 221 static void opinfo_count_dec(struct ksmbd_file *fp) 222 { 223 if (ksmbd_stream_fd(fp)) 224 return atomic_dec(&fp->f_ci->sop_count); 225 else 226 return atomic_dec(&fp->f_ci->op_count); 227 } 228 229 /** 230 * opinfo_write_to_read() - convert a write oplock to read oplock 231 * @opinfo: current oplock info 232 * 233 * Return: 0 on success, otherwise -EINVAL 234 */ 235 int opinfo_write_to_read(struct oplock_info *opinfo) 236 { 237 struct lease *lease = opinfo->o_lease; 238 239 if (!(opinfo->level == SMB2_OPLOCK_LEVEL_BATCH || 240 opinfo->level == SMB2_OPLOCK_LEVEL_EXCLUSIVE)) { 241 pr_err("bad oplock(0x%x)\n", opinfo->level); 242 if (opinfo->is_lease) 243 pr_err("lease state(0x%x)\n", lease->state); 244 return -EINVAL; 245 } 246 opinfo->level = SMB2_OPLOCK_LEVEL_II; 247 248 if (opinfo->is_lease) 249 lease->state = lease->new_state; 250 return 0; 251 } 252 253 /** 254 * opinfo_read_handle_to_read() - convert a read/handle oplock to read oplock 255 * @opinfo: current oplock info 256 * 257 * Return: 0 on success, otherwise -EINVAL 258 */ 259 int opinfo_read_handle_to_read(struct oplock_info *opinfo) 260 { 261 struct lease *lease = opinfo->o_lease; 262 263 lease->state = lease->new_state; 264 opinfo->level = SMB2_OPLOCK_LEVEL_II; 265 return 0; 266 } 267 268 /** 269 * opinfo_write_to_none() - convert a write oplock to none 270 * @opinfo: current oplock info 271 * 272 * Return: 0 on success, otherwise -EINVAL 273 */ 274 int opinfo_write_to_none(struct oplock_info *opinfo) 275 { 276 struct lease *lease = opinfo->o_lease; 277 278 if (!(opinfo->level == SMB2_OPLOCK_LEVEL_BATCH || 279 opinfo->level == SMB2_OPLOCK_LEVEL_EXCLUSIVE)) { 280 pr_err("bad oplock(0x%x)\n", opinfo->level); 281 if (opinfo->is_lease) 282 pr_err("lease state(0x%x)\n", lease->state); 283 return -EINVAL; 284 } 285 opinfo->level = SMB2_OPLOCK_LEVEL_NONE; 286 if (opinfo->is_lease) 287 lease->state = lease->new_state; 288 return 0; 289 } 290 291 /** 292 * opinfo_read_to_none() - convert a write read to none 293 * @opinfo: current oplock info 294 * 295 * Return: 0 on success, otherwise -EINVAL 296 */ 297 int opinfo_read_to_none(struct oplock_info *opinfo) 298 { 299 struct lease *lease = opinfo->o_lease; 300 301 if (opinfo->level != SMB2_OPLOCK_LEVEL_II) { 302 pr_err("bad oplock(0x%x)\n", opinfo->level); 303 if (opinfo->is_lease) 304 pr_err("lease state(0x%x)\n", lease->state); 305 return -EINVAL; 306 } 307 opinfo->level = SMB2_OPLOCK_LEVEL_NONE; 308 if (opinfo->is_lease) 309 lease->state = lease->new_state; 310 return 0; 311 } 312 313 /** 314 * lease_read_to_write() - upgrade lease state from read to write 315 * @opinfo: current lease info 316 * 317 * Return: 0 on success, otherwise -EINVAL 318 */ 319 int lease_read_to_write(struct oplock_info *opinfo) 320 { 321 struct lease *lease = opinfo->o_lease; 322 323 if (!(lease->state & SMB2_LEASE_READ_CACHING_LE)) { 324 ksmbd_debug(OPLOCK, "bad lease state(0x%x)\n", lease->state); 325 return -EINVAL; 326 } 327 328 lease->new_state = SMB2_LEASE_NONE_LE; 329 lease->state |= SMB2_LEASE_WRITE_CACHING_LE; 330 if (lease->state & SMB2_LEASE_HANDLE_CACHING_LE) 331 opinfo->level = SMB2_OPLOCK_LEVEL_BATCH; 332 else 333 opinfo->level = SMB2_OPLOCK_LEVEL_EXCLUSIVE; 334 return 0; 335 } 336 337 /** 338 * lease_none_upgrade() - upgrade lease state from none 339 * @opinfo: current lease info 340 * @new_state: new lease state 341 * 342 * Return: 0 on success, otherwise -EINVAL 343 */ 344 static int lease_none_upgrade(struct oplock_info *opinfo, __le32 new_state) 345 { 346 struct lease *lease = opinfo->o_lease; 347 348 if (!(lease->state == SMB2_LEASE_NONE_LE)) { 349 ksmbd_debug(OPLOCK, "bad lease state(0x%x)\n", lease->state); 350 return -EINVAL; 351 } 352 353 lease->new_state = SMB2_LEASE_NONE_LE; 354 lease->state = new_state; 355 if (lease->state & SMB2_LEASE_HANDLE_CACHING_LE) 356 if (lease->state & SMB2_LEASE_WRITE_CACHING_LE) 357 opinfo->level = SMB2_OPLOCK_LEVEL_BATCH; 358 else 359 opinfo->level = SMB2_OPLOCK_LEVEL_II; 360 else if (lease->state & SMB2_LEASE_WRITE_CACHING_LE) 361 opinfo->level = SMB2_OPLOCK_LEVEL_EXCLUSIVE; 362 else if (lease->state & SMB2_LEASE_READ_CACHING_LE) 363 opinfo->level = SMB2_OPLOCK_LEVEL_II; 364 365 return 0; 366 } 367 368 /** 369 * close_id_del_oplock() - release oplock object at file close time 370 * @fp: ksmbd file pointer 371 */ 372 void close_id_del_oplock(struct ksmbd_file *fp) 373 { 374 struct oplock_info *opinfo; 375 376 if (fp->reserve_lease_break) 377 smb_lazy_parent_lease_break_close(fp); 378 379 opinfo = opinfo_get(fp); 380 if (!opinfo) 381 return; 382 383 opinfo_del(opinfo); 384 385 rcu_assign_pointer(fp->f_opinfo, NULL); 386 if (opinfo->op_state == OPLOCK_ACK_WAIT) { 387 opinfo->op_state = OPLOCK_CLOSING; 388 wake_up_interruptible_all(&opinfo->oplock_q); 389 if (opinfo->is_lease) { 390 atomic_set(&opinfo->breaking_cnt, 0); 391 wake_up_interruptible_all(&opinfo->oplock_brk); 392 } 393 } 394 395 opinfo_count_dec(fp); 396 atomic_dec(&opinfo->refcount); 397 opinfo_put(opinfo); 398 } 399 400 /** 401 * grant_write_oplock() - grant exclusive/batch oplock or write lease 402 * @opinfo_new: new oplock info object 403 * @req_oplock: request oplock 404 * @lctx: lease context information 405 * 406 * Return: 0 407 */ 408 static void grant_write_oplock(struct oplock_info *opinfo_new, int req_oplock, 409 struct lease_ctx_info *lctx) 410 { 411 struct lease *lease = opinfo_new->o_lease; 412 413 if (req_oplock == SMB2_OPLOCK_LEVEL_BATCH) 414 opinfo_new->level = SMB2_OPLOCK_LEVEL_BATCH; 415 else 416 opinfo_new->level = SMB2_OPLOCK_LEVEL_EXCLUSIVE; 417 418 if (lctx) { 419 lease->state = lctx->req_state; 420 memcpy(lease->lease_key, lctx->lease_key, SMB2_LEASE_KEY_SIZE); 421 } 422 } 423 424 /** 425 * grant_read_oplock() - grant level2 oplock or read lease 426 * @opinfo_new: new oplock info object 427 * @lctx: lease context information 428 * 429 * Return: 0 430 */ 431 static void grant_read_oplock(struct oplock_info *opinfo_new, 432 struct lease_ctx_info *lctx) 433 { 434 struct lease *lease = opinfo_new->o_lease; 435 436 opinfo_new->level = SMB2_OPLOCK_LEVEL_II; 437 438 if (lctx) { 439 lease->state = SMB2_LEASE_READ_CACHING_LE; 440 if (lctx->req_state & SMB2_LEASE_HANDLE_CACHING_LE) 441 lease->state |= SMB2_LEASE_HANDLE_CACHING_LE; 442 memcpy(lease->lease_key, lctx->lease_key, SMB2_LEASE_KEY_SIZE); 443 } 444 } 445 446 /** 447 * grant_none_oplock() - grant none oplock or none lease 448 * @opinfo_new: new oplock info object 449 * @lctx: lease context information 450 * 451 * Return: 0 452 */ 453 static void grant_none_oplock(struct oplock_info *opinfo_new, 454 struct lease_ctx_info *lctx) 455 { 456 struct lease *lease = opinfo_new->o_lease; 457 458 opinfo_new->level = SMB2_OPLOCK_LEVEL_NONE; 459 460 if (lctx) { 461 lease->state = 0; 462 memcpy(lease->lease_key, lctx->lease_key, SMB2_LEASE_KEY_SIZE); 463 } 464 } 465 466 static inline int compare_guid_key(struct oplock_info *opinfo, 467 const char *guid1, const char *key1) 468 { 469 const char *guid2, *key2; 470 471 guid2 = opinfo->conn->ClientGUID; 472 key2 = opinfo->o_lease->lease_key; 473 if (!memcmp(guid1, guid2, SMB2_CLIENT_GUID_SIZE) && 474 !memcmp(key1, key2, SMB2_LEASE_KEY_SIZE)) 475 return 1; 476 477 return 0; 478 } 479 480 /** 481 * same_client_has_lease() - check whether current lease request is 482 * from lease owner of file 483 * @ci: master file pointer 484 * @client_guid: Client GUID 485 * @lctx: lease context information 486 * 487 * Return: oplock(lease) object on success, otherwise NULL 488 */ 489 static struct oplock_info *same_client_has_lease(struct ksmbd_inode *ci, 490 char *client_guid, 491 struct lease_ctx_info *lctx) 492 { 493 int ret; 494 struct lease *lease; 495 struct oplock_info *opinfo; 496 struct oplock_info *m_opinfo = NULL; 497 498 if (!lctx) 499 return NULL; 500 501 /* 502 * Compare lease key and client_guid to know request from same owner 503 * of same client 504 */ 505 down_read(&ci->m_lock); 506 list_for_each_entry(opinfo, &ci->m_op_list, op_entry) { 507 if (!opinfo->is_lease || !opinfo->conn) 508 continue; 509 lease = opinfo->o_lease; 510 511 ret = compare_guid_key(opinfo, client_guid, lctx->lease_key); 512 if (ret) { 513 m_opinfo = opinfo; 514 /* skip upgrading lease about breaking lease */ 515 if (atomic_read(&opinfo->breaking_cnt)) 516 continue; 517 518 /* upgrading lease */ 519 if ((atomic_read(&ci->op_count) + 520 atomic_read(&ci->sop_count)) == 1) { 521 if (lease->state != SMB2_LEASE_NONE_LE && 522 lease->state == (lctx->req_state & lease->state)) { 523 lease->epoch++; 524 lease->state |= lctx->req_state; 525 if (lctx->req_state & 526 SMB2_LEASE_WRITE_CACHING_LE) 527 lease_read_to_write(opinfo); 528 529 } 530 } else if ((atomic_read(&ci->op_count) + 531 atomic_read(&ci->sop_count)) > 1) { 532 if (lctx->req_state == 533 (SMB2_LEASE_READ_CACHING_LE | 534 SMB2_LEASE_HANDLE_CACHING_LE)) { 535 lease->epoch++; 536 lease->state = lctx->req_state; 537 } 538 } 539 540 if (lctx->req_state && lease->state == 541 SMB2_LEASE_NONE_LE) { 542 lease->epoch++; 543 lease_none_upgrade(opinfo, lctx->req_state); 544 } 545 } 546 } 547 up_read(&ci->m_lock); 548 549 return m_opinfo; 550 } 551 552 static void wait_for_break_ack(struct oplock_info *opinfo) 553 { 554 int rc = 0; 555 556 rc = wait_event_interruptible_timeout(opinfo->oplock_q, 557 opinfo->op_state == OPLOCK_STATE_NONE || 558 opinfo->op_state == OPLOCK_CLOSING, 559 OPLOCK_WAIT_TIME); 560 561 /* is this a timeout ? */ 562 if (!rc) { 563 if (opinfo->is_lease) 564 opinfo->o_lease->state = SMB2_LEASE_NONE_LE; 565 opinfo->level = SMB2_OPLOCK_LEVEL_NONE; 566 opinfo->op_state = OPLOCK_STATE_NONE; 567 } 568 } 569 570 static void wake_up_oplock_break(struct oplock_info *opinfo) 571 { 572 clear_bit_unlock(0, &opinfo->pending_break); 573 /* memory barrier is needed for wake_up_bit() */ 574 smp_mb__after_atomic(); 575 wake_up_bit(&opinfo->pending_break, 0); 576 } 577 578 static int oplock_break_pending(struct oplock_info *opinfo, int req_op_level) 579 { 580 while (test_and_set_bit(0, &opinfo->pending_break)) { 581 wait_on_bit(&opinfo->pending_break, 0, TASK_UNINTERRUPTIBLE); 582 583 /* Not immediately break to none. */ 584 opinfo->open_trunc = 0; 585 586 if (opinfo->op_state == OPLOCK_CLOSING) 587 return -ENOENT; 588 else if (opinfo->level <= req_op_level) { 589 if (opinfo->is_lease == false) 590 return 1; 591 592 if (opinfo->o_lease->state != 593 (SMB2_LEASE_HANDLE_CACHING_LE | 594 SMB2_LEASE_READ_CACHING_LE)) 595 return 1; 596 } 597 } 598 599 if (opinfo->level <= req_op_level) { 600 if (opinfo->is_lease == false) { 601 wake_up_oplock_break(opinfo); 602 return 1; 603 } 604 if (opinfo->o_lease->state != 605 (SMB2_LEASE_HANDLE_CACHING_LE | 606 SMB2_LEASE_READ_CACHING_LE)) { 607 wake_up_oplock_break(opinfo); 608 return 1; 609 } 610 } 611 return 0; 612 } 613 614 /** 615 * __smb2_oplock_break_noti() - send smb2 oplock break cmd from conn 616 * to client 617 * @wk: smb work object 618 * 619 * There are two ways this function can be called. 1- while file open we break 620 * from exclusive/batch lock to levelII oplock and 2- while file write/truncate 621 * we break from levelII oplock no oplock. 622 * work->request_buf contains oplock_info. 623 */ 624 static void __smb2_oplock_break_noti(struct work_struct *wk) 625 { 626 struct smb2_oplock_break *rsp = NULL; 627 struct ksmbd_work *work = container_of(wk, struct ksmbd_work, work); 628 struct ksmbd_conn *conn = work->conn; 629 struct oplock_break_info *br_info = work->request_buf; 630 struct smb2_hdr *rsp_hdr; 631 struct ksmbd_file *fp; 632 633 fp = ksmbd_lookup_global_fd(br_info->fid); 634 if (!fp) 635 goto out; 636 637 if (allocate_interim_rsp_buf(work)) { 638 pr_err("smb2_allocate_rsp_buf failed! "); 639 ksmbd_fd_put(work, fp); 640 goto out; 641 } 642 643 rsp_hdr = smb2_get_msg(work->response_buf); 644 memset(rsp_hdr, 0, sizeof(struct smb2_hdr) + 2); 645 rsp_hdr->ProtocolId = SMB2_PROTO_NUMBER; 646 rsp_hdr->StructureSize = SMB2_HEADER_STRUCTURE_SIZE; 647 rsp_hdr->CreditRequest = cpu_to_le16(0); 648 rsp_hdr->Command = SMB2_OPLOCK_BREAK; 649 rsp_hdr->Flags = (SMB2_FLAGS_SERVER_TO_REDIR); 650 rsp_hdr->NextCommand = 0; 651 rsp_hdr->MessageId = cpu_to_le64(-1); 652 rsp_hdr->Id.SyncId.ProcessId = 0; 653 rsp_hdr->Id.SyncId.TreeId = 0; 654 rsp_hdr->SessionId = 0; 655 memset(rsp_hdr->Signature, 0, 16); 656 657 rsp = smb2_get_msg(work->response_buf); 658 659 rsp->StructureSize = cpu_to_le16(24); 660 if (!br_info->open_trunc && 661 (br_info->level == SMB2_OPLOCK_LEVEL_BATCH || 662 br_info->level == SMB2_OPLOCK_LEVEL_EXCLUSIVE)) 663 rsp->OplockLevel = SMB2_OPLOCK_LEVEL_II; 664 else 665 rsp->OplockLevel = SMB2_OPLOCK_LEVEL_NONE; 666 rsp->Reserved = 0; 667 rsp->Reserved2 = 0; 668 rsp->PersistentFid = fp->persistent_id; 669 rsp->VolatileFid = fp->volatile_id; 670 671 ksmbd_fd_put(work, fp); 672 if (ksmbd_iov_pin_rsp(work, (void *)rsp, 673 sizeof(struct smb2_oplock_break))) 674 goto out; 675 676 ksmbd_debug(OPLOCK, 677 "sending oplock break v_id %llu p_id = %llu lock level = %d\n", 678 rsp->VolatileFid, rsp->PersistentFid, rsp->OplockLevel); 679 680 ksmbd_conn_write(work); 681 682 out: 683 ksmbd_free_work_struct(work); 684 ksmbd_conn_r_count_dec(conn); 685 } 686 687 /** 688 * smb2_oplock_break_noti() - send smb2 exclusive/batch to level2 oplock 689 * break command from server to client 690 * @opinfo: oplock info object 691 * 692 * Return: 0 on success, otherwise error 693 */ 694 static int smb2_oplock_break_noti(struct oplock_info *opinfo) 695 { 696 struct ksmbd_conn *conn = opinfo->conn; 697 struct oplock_break_info *br_info; 698 int ret = 0; 699 struct ksmbd_work *work = ksmbd_alloc_work_struct(); 700 701 if (!work) 702 return -ENOMEM; 703 704 br_info = kmalloc(sizeof(struct oplock_break_info), KSMBD_DEFAULT_GFP); 705 if (!br_info) { 706 ksmbd_free_work_struct(work); 707 return -ENOMEM; 708 } 709 710 br_info->level = opinfo->level; 711 br_info->fid = opinfo->fid; 712 br_info->open_trunc = opinfo->open_trunc; 713 714 work->request_buf = (char *)br_info; 715 work->conn = conn; 716 work->sess = opinfo->sess; 717 718 ksmbd_conn_r_count_inc(conn); 719 if (opinfo->op_state == OPLOCK_ACK_WAIT) { 720 INIT_WORK(&work->work, __smb2_oplock_break_noti); 721 ksmbd_queue_work(work); 722 723 wait_for_break_ack(opinfo); 724 } else { 725 __smb2_oplock_break_noti(&work->work); 726 if (opinfo->level == SMB2_OPLOCK_LEVEL_II) 727 opinfo->level = SMB2_OPLOCK_LEVEL_NONE; 728 } 729 return ret; 730 } 731 732 /** 733 * __smb2_lease_break_noti() - send lease break command from server 734 * to client 735 * @wk: smb work object 736 */ 737 static void __smb2_lease_break_noti(struct work_struct *wk) 738 { 739 struct smb2_lease_break *rsp = NULL; 740 struct ksmbd_work *work = container_of(wk, struct ksmbd_work, work); 741 struct ksmbd_conn *conn = work->conn; 742 struct lease_break_info *br_info = work->request_buf; 743 struct smb2_hdr *rsp_hdr; 744 745 if (allocate_interim_rsp_buf(work)) { 746 ksmbd_debug(OPLOCK, "smb2_allocate_rsp_buf failed! "); 747 goto out; 748 } 749 750 rsp_hdr = smb2_get_msg(work->response_buf); 751 memset(rsp_hdr, 0, sizeof(struct smb2_hdr) + 2); 752 rsp_hdr->ProtocolId = SMB2_PROTO_NUMBER; 753 rsp_hdr->StructureSize = SMB2_HEADER_STRUCTURE_SIZE; 754 rsp_hdr->CreditRequest = cpu_to_le16(0); 755 rsp_hdr->Command = SMB2_OPLOCK_BREAK; 756 rsp_hdr->Flags = (SMB2_FLAGS_SERVER_TO_REDIR); 757 rsp_hdr->NextCommand = 0; 758 rsp_hdr->MessageId = cpu_to_le64(-1); 759 rsp_hdr->Id.SyncId.ProcessId = 0; 760 rsp_hdr->Id.SyncId.TreeId = 0; 761 rsp_hdr->SessionId = 0; 762 memset(rsp_hdr->Signature, 0, 16); 763 764 rsp = smb2_get_msg(work->response_buf); 765 rsp->StructureSize = cpu_to_le16(44); 766 rsp->Epoch = br_info->epoch; 767 rsp->Flags = 0; 768 769 if (br_info->curr_state & (SMB2_LEASE_WRITE_CACHING_LE | 770 SMB2_LEASE_HANDLE_CACHING_LE)) 771 rsp->Flags = SMB2_NOTIFY_BREAK_LEASE_FLAG_ACK_REQUIRED; 772 773 memcpy(rsp->LeaseKey, br_info->lease_key, SMB2_LEASE_KEY_SIZE); 774 rsp->CurrentLeaseState = br_info->curr_state; 775 rsp->NewLeaseState = br_info->new_state; 776 rsp->BreakReason = 0; 777 rsp->AccessMaskHint = 0; 778 rsp->ShareMaskHint = 0; 779 780 if (ksmbd_iov_pin_rsp(work, (void *)rsp, 781 sizeof(struct smb2_lease_break))) 782 goto out; 783 784 ksmbd_conn_write(work); 785 786 out: 787 ksmbd_free_work_struct(work); 788 ksmbd_conn_r_count_dec(conn); 789 } 790 791 /** 792 * smb2_lease_break_noti() - break lease when a new client request 793 * write lease 794 * @opinfo: contains lease state information 795 * 796 * Return: 0 on success, otherwise error 797 */ 798 static int smb2_lease_break_noti(struct oplock_info *opinfo) 799 { 800 struct ksmbd_conn *conn = opinfo->conn; 801 struct ksmbd_work *work; 802 struct lease_break_info *br_info; 803 struct lease *lease = opinfo->o_lease; 804 805 work = ksmbd_alloc_work_struct(); 806 if (!work) 807 return -ENOMEM; 808 809 br_info = kmalloc(sizeof(struct lease_break_info), KSMBD_DEFAULT_GFP); 810 if (!br_info) { 811 ksmbd_free_work_struct(work); 812 return -ENOMEM; 813 } 814 815 br_info->curr_state = lease->state; 816 br_info->new_state = lease->new_state; 817 if (lease->version == 2) 818 br_info->epoch = cpu_to_le16(++lease->epoch); 819 else 820 br_info->epoch = 0; 821 memcpy(br_info->lease_key, lease->lease_key, SMB2_LEASE_KEY_SIZE); 822 823 work->request_buf = (char *)br_info; 824 work->conn = conn; 825 work->sess = opinfo->sess; 826 827 ksmbd_conn_r_count_inc(conn); 828 if (opinfo->op_state == OPLOCK_ACK_WAIT) { 829 INIT_WORK(&work->work, __smb2_lease_break_noti); 830 ksmbd_queue_work(work); 831 wait_for_break_ack(opinfo); 832 } else { 833 __smb2_lease_break_noti(&work->work); 834 if (opinfo->o_lease->new_state == SMB2_LEASE_NONE_LE) { 835 opinfo->level = SMB2_OPLOCK_LEVEL_NONE; 836 opinfo->o_lease->state = SMB2_LEASE_NONE_LE; 837 } 838 } 839 return 0; 840 } 841 842 static void wait_lease_breaking(struct oplock_info *opinfo) 843 { 844 if (!opinfo->is_lease) 845 return; 846 847 wake_up_interruptible_all(&opinfo->oplock_brk); 848 if (atomic_read(&opinfo->breaking_cnt)) { 849 int ret = 0; 850 851 ret = wait_event_interruptible_timeout(opinfo->oplock_brk, 852 atomic_read(&opinfo->breaking_cnt) == 0, 853 HZ); 854 if (!ret) 855 atomic_set(&opinfo->breaking_cnt, 0); 856 } 857 } 858 859 static int oplock_break(struct oplock_info *brk_opinfo, int req_op_level, 860 struct ksmbd_work *in_work) 861 { 862 int err = 0; 863 864 /* Need to break exclusive/batch oplock, write lease or overwrite_if */ 865 ksmbd_debug(OPLOCK, 866 "request to send oplock(level : 0x%x) break notification\n", 867 brk_opinfo->level); 868 869 if (brk_opinfo->is_lease) { 870 struct lease *lease = brk_opinfo->o_lease; 871 872 atomic_inc(&brk_opinfo->breaking_cnt); 873 err = oplock_break_pending(brk_opinfo, req_op_level); 874 if (err) 875 return err < 0 ? err : 0; 876 877 if (brk_opinfo->open_trunc) { 878 /* 879 * Create overwrite break trigger the lease break to 880 * none. 881 */ 882 lease->new_state = SMB2_LEASE_NONE_LE; 883 } else { 884 if (lease->state & SMB2_LEASE_WRITE_CACHING_LE) { 885 if (lease->state & SMB2_LEASE_HANDLE_CACHING_LE) 886 lease->new_state = 887 SMB2_LEASE_READ_CACHING_LE | 888 SMB2_LEASE_HANDLE_CACHING_LE; 889 else 890 lease->new_state = 891 SMB2_LEASE_READ_CACHING_LE; 892 } else { 893 if (lease->state & SMB2_LEASE_HANDLE_CACHING_LE && 894 !lease->is_dir) 895 lease->new_state = 896 SMB2_LEASE_READ_CACHING_LE; 897 else 898 lease->new_state = SMB2_LEASE_NONE_LE; 899 } 900 } 901 902 if (lease->state & (SMB2_LEASE_WRITE_CACHING_LE | 903 SMB2_LEASE_HANDLE_CACHING_LE)) { 904 if (in_work) { 905 setup_async_work(in_work, NULL, NULL); 906 smb2_send_interim_resp(in_work, STATUS_PENDING); 907 release_async_work(in_work); 908 } 909 910 brk_opinfo->op_state = OPLOCK_ACK_WAIT; 911 } else 912 atomic_dec(&brk_opinfo->breaking_cnt); 913 } else { 914 err = oplock_break_pending(brk_opinfo, req_op_level); 915 if (err) 916 return err < 0 ? err : 0; 917 918 if (brk_opinfo->level == SMB2_OPLOCK_LEVEL_BATCH || 919 brk_opinfo->level == SMB2_OPLOCK_LEVEL_EXCLUSIVE) 920 brk_opinfo->op_state = OPLOCK_ACK_WAIT; 921 } 922 923 if (brk_opinfo->is_lease) 924 err = smb2_lease_break_noti(brk_opinfo); 925 else 926 err = smb2_oplock_break_noti(brk_opinfo); 927 928 ksmbd_debug(OPLOCK, "oplock granted = %d\n", brk_opinfo->level); 929 if (brk_opinfo->op_state == OPLOCK_CLOSING) 930 err = -ENOENT; 931 wake_up_oplock_break(brk_opinfo); 932 933 wait_lease_breaking(brk_opinfo); 934 935 return err; 936 } 937 938 void destroy_lease_table(struct ksmbd_conn *conn) 939 { 940 struct lease_table *lb, *lbtmp; 941 struct oplock_info *opinfo; 942 943 write_lock(&lease_list_lock); 944 if (list_empty(&lease_table_list)) { 945 write_unlock(&lease_list_lock); 946 return; 947 } 948 949 list_for_each_entry_safe(lb, lbtmp, &lease_table_list, l_entry) { 950 if (conn && memcmp(lb->client_guid, conn->ClientGUID, 951 SMB2_CLIENT_GUID_SIZE)) 952 continue; 953 again: 954 rcu_read_lock(); 955 list_for_each_entry_rcu(opinfo, &lb->lease_list, 956 lease_entry) { 957 rcu_read_unlock(); 958 lease_del_list(opinfo); 959 goto again; 960 } 961 rcu_read_unlock(); 962 list_del(&lb->l_entry); 963 kfree(lb); 964 } 965 write_unlock(&lease_list_lock); 966 } 967 968 int find_same_lease_key(struct ksmbd_session *sess, struct ksmbd_inode *ci, 969 struct lease_ctx_info *lctx) 970 { 971 struct oplock_info *opinfo; 972 int err = 0; 973 struct lease_table *lb; 974 975 if (!lctx) 976 return err; 977 978 read_lock(&lease_list_lock); 979 if (list_empty(&lease_table_list)) { 980 read_unlock(&lease_list_lock); 981 return 0; 982 } 983 984 list_for_each_entry(lb, &lease_table_list, l_entry) { 985 if (!memcmp(lb->client_guid, sess->ClientGUID, 986 SMB2_CLIENT_GUID_SIZE)) 987 goto found; 988 } 989 read_unlock(&lease_list_lock); 990 991 return 0; 992 993 found: 994 rcu_read_lock(); 995 list_for_each_entry_rcu(opinfo, &lb->lease_list, lease_entry) { 996 if (!atomic_inc_not_zero(&opinfo->refcount)) 997 continue; 998 rcu_read_unlock(); 999 if (opinfo->o_fp->f_ci == ci) 1000 goto op_next; 1001 err = compare_guid_key(opinfo, sess->ClientGUID, 1002 lctx->lease_key); 1003 if (err) { 1004 err = -EINVAL; 1005 ksmbd_debug(OPLOCK, 1006 "found same lease key is already used in other files\n"); 1007 opinfo_put(opinfo); 1008 goto out; 1009 } 1010 op_next: 1011 opinfo_put(opinfo); 1012 rcu_read_lock(); 1013 } 1014 rcu_read_unlock(); 1015 1016 out: 1017 read_unlock(&lease_list_lock); 1018 return err; 1019 } 1020 1021 static void copy_lease(struct oplock_info *op1, struct oplock_info *op2) 1022 { 1023 struct lease *lease1 = op1->o_lease; 1024 struct lease *lease2 = op2->o_lease; 1025 1026 op2->level = op1->level; 1027 lease2->state = lease1->state; 1028 memcpy(lease2->lease_key, lease1->lease_key, 1029 SMB2_LEASE_KEY_SIZE); 1030 lease2->duration = lease1->duration; 1031 lease2->flags = lease1->flags; 1032 lease2->epoch = lease1->epoch; 1033 lease2->version = lease1->version; 1034 } 1035 1036 static int add_lease_global_list(struct oplock_info *opinfo) 1037 { 1038 struct lease_table *lb; 1039 1040 read_lock(&lease_list_lock); 1041 list_for_each_entry(lb, &lease_table_list, l_entry) { 1042 if (!memcmp(lb->client_guid, opinfo->conn->ClientGUID, 1043 SMB2_CLIENT_GUID_SIZE)) { 1044 opinfo->o_lease->l_lb = lb; 1045 lease_add_list(opinfo); 1046 read_unlock(&lease_list_lock); 1047 return 0; 1048 } 1049 } 1050 read_unlock(&lease_list_lock); 1051 1052 lb = kmalloc(sizeof(struct lease_table), KSMBD_DEFAULT_GFP); 1053 if (!lb) 1054 return -ENOMEM; 1055 1056 memcpy(lb->client_guid, opinfo->conn->ClientGUID, 1057 SMB2_CLIENT_GUID_SIZE); 1058 INIT_LIST_HEAD(&lb->lease_list); 1059 spin_lock_init(&lb->lb_lock); 1060 opinfo->o_lease->l_lb = lb; 1061 lease_add_list(opinfo); 1062 lb_add(lb); 1063 return 0; 1064 } 1065 1066 static void set_oplock_level(struct oplock_info *opinfo, int level, 1067 struct lease_ctx_info *lctx) 1068 { 1069 switch (level) { 1070 case SMB2_OPLOCK_LEVEL_BATCH: 1071 case SMB2_OPLOCK_LEVEL_EXCLUSIVE: 1072 grant_write_oplock(opinfo, level, lctx); 1073 break; 1074 case SMB2_OPLOCK_LEVEL_II: 1075 grant_read_oplock(opinfo, lctx); 1076 break; 1077 default: 1078 grant_none_oplock(opinfo, lctx); 1079 break; 1080 } 1081 } 1082 1083 void smb_send_parent_lease_break_noti(struct ksmbd_file *fp, 1084 struct lease_ctx_info *lctx) 1085 { 1086 struct oplock_info *opinfo; 1087 struct ksmbd_inode *p_ci = NULL; 1088 1089 if (lctx->version != 2) 1090 return; 1091 1092 p_ci = ksmbd_inode_lookup_lock(fp->filp->f_path.dentry->d_parent); 1093 if (!p_ci) 1094 return; 1095 1096 down_read(&p_ci->m_lock); 1097 list_for_each_entry(opinfo, &p_ci->m_op_list, op_entry) { 1098 if (opinfo->conn == NULL || !opinfo->is_lease) 1099 continue; 1100 1101 if (opinfo->o_lease->state != SMB2_OPLOCK_LEVEL_NONE && 1102 (!(lctx->flags & SMB2_LEASE_FLAG_PARENT_LEASE_KEY_SET_LE) || 1103 !compare_guid_key(opinfo, fp->conn->ClientGUID, 1104 lctx->parent_lease_key))) { 1105 if (!atomic_inc_not_zero(&opinfo->refcount)) 1106 continue; 1107 1108 if (ksmbd_conn_releasing(opinfo->conn)) 1109 continue; 1110 1111 oplock_break(opinfo, SMB2_OPLOCK_LEVEL_NONE, NULL); 1112 opinfo_put(opinfo); 1113 } 1114 } 1115 up_read(&p_ci->m_lock); 1116 1117 ksmbd_inode_put(p_ci); 1118 } 1119 1120 void smb_lazy_parent_lease_break_close(struct ksmbd_file *fp) 1121 { 1122 struct oplock_info *opinfo; 1123 struct ksmbd_inode *p_ci = NULL; 1124 1125 rcu_read_lock(); 1126 opinfo = rcu_dereference(fp->f_opinfo); 1127 rcu_read_unlock(); 1128 1129 if (!opinfo || !opinfo->is_lease || opinfo->o_lease->version != 2) 1130 return; 1131 1132 p_ci = ksmbd_inode_lookup_lock(fp->filp->f_path.dentry->d_parent); 1133 if (!p_ci) 1134 return; 1135 1136 down_read(&p_ci->m_lock); 1137 list_for_each_entry(opinfo, &p_ci->m_op_list, op_entry) { 1138 if (opinfo->conn == NULL || !opinfo->is_lease) 1139 continue; 1140 1141 if (opinfo->o_lease->state != SMB2_OPLOCK_LEVEL_NONE) { 1142 if (!atomic_inc_not_zero(&opinfo->refcount)) 1143 continue; 1144 1145 if (ksmbd_conn_releasing(opinfo->conn)) 1146 continue; 1147 oplock_break(opinfo, SMB2_OPLOCK_LEVEL_NONE, NULL); 1148 opinfo_put(opinfo); 1149 } 1150 } 1151 up_read(&p_ci->m_lock); 1152 1153 ksmbd_inode_put(p_ci); 1154 } 1155 1156 /** 1157 * smb_grant_oplock() - handle oplock/lease request on file open 1158 * @work: smb work 1159 * @req_op_level: oplock level 1160 * @pid: id of open file 1161 * @fp: ksmbd file pointer 1162 * @tid: Tree id of connection 1163 * @lctx: lease context information on file open 1164 * @share_ret: share mode 1165 * 1166 * Return: 0 on success, otherwise error 1167 */ 1168 int smb_grant_oplock(struct ksmbd_work *work, int req_op_level, u64 pid, 1169 struct ksmbd_file *fp, __u16 tid, 1170 struct lease_ctx_info *lctx, int share_ret) 1171 { 1172 struct ksmbd_session *sess = work->sess; 1173 int err = 0; 1174 struct oplock_info *opinfo = NULL, *prev_opinfo = NULL; 1175 struct ksmbd_inode *ci = fp->f_ci; 1176 bool prev_op_has_lease; 1177 __le32 prev_op_state = 0; 1178 1179 /* Only v2 leases handle the directory */ 1180 if (S_ISDIR(file_inode(fp->filp)->i_mode)) { 1181 if (!lctx || lctx->version != 2 || 1182 (lctx->flags != SMB2_LEASE_FLAG_PARENT_LEASE_KEY_SET_LE && 1183 !lctx->epoch)) 1184 return 0; 1185 } 1186 1187 opinfo = alloc_opinfo(work, pid, tid); 1188 if (!opinfo) 1189 return -ENOMEM; 1190 1191 if (lctx) { 1192 err = alloc_lease(opinfo, lctx); 1193 if (err) 1194 goto err_out; 1195 opinfo->is_lease = 1; 1196 } 1197 1198 /* ci does not have any oplock */ 1199 if (!opinfo_count(fp)) 1200 goto set_lev; 1201 1202 /* grant none-oplock if second open is trunc */ 1203 if (fp->attrib_only && fp->cdoption != FILE_OVERWRITE_IF_LE && 1204 fp->cdoption != FILE_OVERWRITE_LE && 1205 fp->cdoption != FILE_SUPERSEDE_LE) { 1206 req_op_level = SMB2_OPLOCK_LEVEL_NONE; 1207 goto set_lev; 1208 } 1209 1210 if (lctx) { 1211 struct oplock_info *m_opinfo; 1212 1213 /* is lease already granted ? */ 1214 m_opinfo = same_client_has_lease(ci, sess->ClientGUID, 1215 lctx); 1216 if (m_opinfo) { 1217 copy_lease(m_opinfo, opinfo); 1218 if (atomic_read(&m_opinfo->breaking_cnt)) 1219 opinfo->o_lease->flags = 1220 SMB2_LEASE_FLAG_BREAK_IN_PROGRESS_LE; 1221 goto out; 1222 } 1223 } 1224 prev_opinfo = opinfo_get_list(ci); 1225 if (!prev_opinfo || 1226 (prev_opinfo->level == SMB2_OPLOCK_LEVEL_NONE && lctx)) { 1227 opinfo_put(prev_opinfo); 1228 goto set_lev; 1229 } 1230 prev_op_has_lease = prev_opinfo->is_lease; 1231 if (prev_op_has_lease) 1232 prev_op_state = prev_opinfo->o_lease->state; 1233 1234 if (share_ret < 0 && 1235 prev_opinfo->level == SMB2_OPLOCK_LEVEL_EXCLUSIVE) { 1236 err = share_ret; 1237 opinfo_put(prev_opinfo); 1238 goto err_out; 1239 } 1240 1241 if (prev_opinfo->level != SMB2_OPLOCK_LEVEL_BATCH && 1242 prev_opinfo->level != SMB2_OPLOCK_LEVEL_EXCLUSIVE) { 1243 opinfo_put(prev_opinfo); 1244 goto op_break_not_needed; 1245 } 1246 1247 err = oplock_break(prev_opinfo, SMB2_OPLOCK_LEVEL_II, work); 1248 opinfo_put(prev_opinfo); 1249 if (err == -ENOENT) 1250 goto set_lev; 1251 /* Check all oplock was freed by close */ 1252 else if (err < 0) 1253 goto err_out; 1254 1255 op_break_not_needed: 1256 if (share_ret < 0) { 1257 err = share_ret; 1258 goto err_out; 1259 } 1260 1261 if (req_op_level != SMB2_OPLOCK_LEVEL_NONE) 1262 req_op_level = SMB2_OPLOCK_LEVEL_II; 1263 1264 /* grant fixed oplock on stacked locking between lease and oplock */ 1265 if (prev_op_has_lease && !lctx) 1266 if (prev_op_state & SMB2_LEASE_HANDLE_CACHING_LE) 1267 req_op_level = SMB2_OPLOCK_LEVEL_NONE; 1268 1269 if (!prev_op_has_lease && lctx) { 1270 req_op_level = SMB2_OPLOCK_LEVEL_II; 1271 lctx->req_state = SMB2_LEASE_READ_CACHING_LE; 1272 } 1273 1274 set_lev: 1275 set_oplock_level(opinfo, req_op_level, lctx); 1276 1277 out: 1278 rcu_assign_pointer(fp->f_opinfo, opinfo); 1279 opinfo->o_fp = fp; 1280 1281 opinfo_count_inc(fp); 1282 opinfo_add(opinfo); 1283 if (opinfo->is_lease) { 1284 err = add_lease_global_list(opinfo); 1285 if (err) 1286 goto err_out; 1287 } 1288 1289 return 0; 1290 err_out: 1291 free_opinfo(opinfo); 1292 return err; 1293 } 1294 1295 /** 1296 * smb_break_all_write_oplock() - break batch/exclusive oplock to level2 1297 * @work: smb work 1298 * @fp: ksmbd file pointer 1299 * @is_trunc: truncate on open 1300 */ 1301 static void smb_break_all_write_oplock(struct ksmbd_work *work, 1302 struct ksmbd_file *fp, int is_trunc) 1303 { 1304 struct oplock_info *brk_opinfo; 1305 1306 brk_opinfo = opinfo_get_list(fp->f_ci); 1307 if (!brk_opinfo) 1308 return; 1309 if (brk_opinfo->level != SMB2_OPLOCK_LEVEL_BATCH && 1310 brk_opinfo->level != SMB2_OPLOCK_LEVEL_EXCLUSIVE) { 1311 opinfo_put(brk_opinfo); 1312 return; 1313 } 1314 1315 brk_opinfo->open_trunc = is_trunc; 1316 oplock_break(brk_opinfo, SMB2_OPLOCK_LEVEL_II, work); 1317 opinfo_put(brk_opinfo); 1318 } 1319 1320 /** 1321 * smb_break_all_levII_oplock() - send level2 oplock or read lease break command 1322 * from server to client 1323 * @work: smb work 1324 * @fp: ksmbd file pointer 1325 * @is_trunc: truncate on open 1326 */ 1327 void smb_break_all_levII_oplock(struct ksmbd_work *work, struct ksmbd_file *fp, 1328 int is_trunc) 1329 { 1330 struct oplock_info *op, *brk_op; 1331 struct ksmbd_inode *ci; 1332 struct ksmbd_conn *conn = work->conn; 1333 1334 if (!test_share_config_flag(work->tcon->share_conf, 1335 KSMBD_SHARE_FLAG_OPLOCKS)) 1336 return; 1337 1338 ci = fp->f_ci; 1339 op = opinfo_get(fp); 1340 1341 down_read(&ci->m_lock); 1342 list_for_each_entry(brk_op, &ci->m_op_list, op_entry) { 1343 if (brk_op->conn == NULL) 1344 continue; 1345 1346 if (!atomic_inc_not_zero(&brk_op->refcount)) 1347 continue; 1348 1349 if (ksmbd_conn_releasing(brk_op->conn)) 1350 continue; 1351 1352 if (brk_op->is_lease && (brk_op->o_lease->state & 1353 (~(SMB2_LEASE_READ_CACHING_LE | 1354 SMB2_LEASE_HANDLE_CACHING_LE)))) { 1355 ksmbd_debug(OPLOCK, "unexpected lease state(0x%x)\n", 1356 brk_op->o_lease->state); 1357 goto next; 1358 } else if (brk_op->level != 1359 SMB2_OPLOCK_LEVEL_II) { 1360 ksmbd_debug(OPLOCK, "unexpected oplock(0x%x)\n", 1361 brk_op->level); 1362 goto next; 1363 } 1364 1365 /* Skip oplock being break to none */ 1366 if (brk_op->is_lease && 1367 brk_op->o_lease->new_state == SMB2_LEASE_NONE_LE && 1368 atomic_read(&brk_op->breaking_cnt)) 1369 goto next; 1370 1371 if (op && op->is_lease && brk_op->is_lease && 1372 !memcmp(conn->ClientGUID, brk_op->conn->ClientGUID, 1373 SMB2_CLIENT_GUID_SIZE) && 1374 !memcmp(op->o_lease->lease_key, brk_op->o_lease->lease_key, 1375 SMB2_LEASE_KEY_SIZE)) 1376 goto next; 1377 brk_op->open_trunc = is_trunc; 1378 oplock_break(brk_op, SMB2_OPLOCK_LEVEL_NONE, NULL); 1379 next: 1380 opinfo_put(brk_op); 1381 } 1382 up_read(&ci->m_lock); 1383 1384 if (op) 1385 opinfo_put(op); 1386 } 1387 1388 /** 1389 * smb_break_all_oplock() - break both batch/exclusive and level2 oplock 1390 * @work: smb work 1391 * @fp: ksmbd file pointer 1392 */ 1393 void smb_break_all_oplock(struct ksmbd_work *work, struct ksmbd_file *fp) 1394 { 1395 if (!test_share_config_flag(work->tcon->share_conf, 1396 KSMBD_SHARE_FLAG_OPLOCKS)) 1397 return; 1398 1399 smb_break_all_write_oplock(work, fp, 1); 1400 smb_break_all_levII_oplock(work, fp, 1); 1401 } 1402 1403 /** 1404 * smb2_map_lease_to_oplock() - map lease state to corresponding oplock type 1405 * @lease_state: lease type 1406 * 1407 * Return: 0 if no mapping, otherwise corresponding oplock type 1408 */ 1409 __u8 smb2_map_lease_to_oplock(__le32 lease_state) 1410 { 1411 if (lease_state == (SMB2_LEASE_HANDLE_CACHING_LE | 1412 SMB2_LEASE_READ_CACHING_LE | 1413 SMB2_LEASE_WRITE_CACHING_LE)) { 1414 return SMB2_OPLOCK_LEVEL_BATCH; 1415 } else if (lease_state != SMB2_LEASE_WRITE_CACHING_LE && 1416 lease_state & SMB2_LEASE_WRITE_CACHING_LE) { 1417 if (!(lease_state & SMB2_LEASE_HANDLE_CACHING_LE)) 1418 return SMB2_OPLOCK_LEVEL_EXCLUSIVE; 1419 } else if (lease_state & SMB2_LEASE_READ_CACHING_LE) { 1420 return SMB2_OPLOCK_LEVEL_II; 1421 } 1422 return 0; 1423 } 1424 1425 /** 1426 * create_lease_buf() - create lease context for open cmd response 1427 * @rbuf: buffer to create lease context response 1428 * @lease: buffer to stored parsed lease state information 1429 */ 1430 void create_lease_buf(u8 *rbuf, struct lease *lease) 1431 { 1432 if (lease->version == 2) { 1433 struct create_lease_v2 *buf = (struct create_lease_v2 *)rbuf; 1434 1435 memset(buf, 0, sizeof(struct create_lease_v2)); 1436 memcpy(buf->lcontext.LeaseKey, lease->lease_key, 1437 SMB2_LEASE_KEY_SIZE); 1438 buf->lcontext.LeaseFlags = lease->flags; 1439 buf->lcontext.Epoch = cpu_to_le16(lease->epoch); 1440 buf->lcontext.LeaseState = lease->state; 1441 if (lease->flags == SMB2_LEASE_FLAG_PARENT_LEASE_KEY_SET_LE) 1442 memcpy(buf->lcontext.ParentLeaseKey, lease->parent_lease_key, 1443 SMB2_LEASE_KEY_SIZE); 1444 buf->ccontext.DataOffset = cpu_to_le16(offsetof 1445 (struct create_lease_v2, lcontext)); 1446 buf->ccontext.DataLength = cpu_to_le32(sizeof(struct lease_context_v2)); 1447 buf->ccontext.NameOffset = cpu_to_le16(offsetof 1448 (struct create_lease_v2, Name)); 1449 buf->ccontext.NameLength = cpu_to_le16(4); 1450 buf->Name[0] = 'R'; 1451 buf->Name[1] = 'q'; 1452 buf->Name[2] = 'L'; 1453 buf->Name[3] = 's'; 1454 } else { 1455 struct create_lease *buf = (struct create_lease *)rbuf; 1456 1457 memset(buf, 0, sizeof(struct create_lease)); 1458 memcpy(buf->lcontext.LeaseKey, lease->lease_key, SMB2_LEASE_KEY_SIZE); 1459 buf->lcontext.LeaseFlags = lease->flags; 1460 buf->lcontext.LeaseState = lease->state; 1461 buf->ccontext.DataOffset = cpu_to_le16(offsetof 1462 (struct create_lease, lcontext)); 1463 buf->ccontext.DataLength = cpu_to_le32(sizeof(struct lease_context)); 1464 buf->ccontext.NameOffset = cpu_to_le16(offsetof 1465 (struct create_lease, Name)); 1466 buf->ccontext.NameLength = cpu_to_le16(4); 1467 buf->Name[0] = 'R'; 1468 buf->Name[1] = 'q'; 1469 buf->Name[2] = 'L'; 1470 buf->Name[3] = 's'; 1471 } 1472 } 1473 1474 /** 1475 * parse_lease_state() - parse lease context contained in file open request 1476 * @open_req: buffer containing smb2 file open(create) request 1477 * 1478 * Return: allocated lease context object on success, otherwise NULL 1479 */ 1480 struct lease_ctx_info *parse_lease_state(void *open_req) 1481 { 1482 struct create_context *cc; 1483 struct smb2_create_req *req = (struct smb2_create_req *)open_req; 1484 struct lease_ctx_info *lreq; 1485 1486 cc = smb2_find_context_vals(req, SMB2_CREATE_REQUEST_LEASE, 4); 1487 if (IS_ERR_OR_NULL(cc)) 1488 return NULL; 1489 1490 lreq = kzalloc(sizeof(struct lease_ctx_info), KSMBD_DEFAULT_GFP); 1491 if (!lreq) 1492 return NULL; 1493 1494 if (sizeof(struct lease_context_v2) == le32_to_cpu(cc->DataLength)) { 1495 struct create_lease_v2 *lc = (struct create_lease_v2 *)cc; 1496 1497 if (le16_to_cpu(cc->DataOffset) + le32_to_cpu(cc->DataLength) < 1498 sizeof(struct create_lease_v2) - 4) 1499 goto err_out; 1500 1501 memcpy(lreq->lease_key, lc->lcontext.LeaseKey, SMB2_LEASE_KEY_SIZE); 1502 lreq->req_state = lc->lcontext.LeaseState; 1503 lreq->flags = lc->lcontext.LeaseFlags; 1504 lreq->epoch = lc->lcontext.Epoch; 1505 lreq->duration = lc->lcontext.LeaseDuration; 1506 if (lreq->flags == SMB2_LEASE_FLAG_PARENT_LEASE_KEY_SET_LE) 1507 memcpy(lreq->parent_lease_key, lc->lcontext.ParentLeaseKey, 1508 SMB2_LEASE_KEY_SIZE); 1509 lreq->version = 2; 1510 } else { 1511 struct create_lease *lc = (struct create_lease *)cc; 1512 1513 if (le16_to_cpu(cc->DataOffset) + le32_to_cpu(cc->DataLength) < 1514 sizeof(struct create_lease)) 1515 goto err_out; 1516 1517 memcpy(lreq->lease_key, lc->lcontext.LeaseKey, SMB2_LEASE_KEY_SIZE); 1518 lreq->req_state = lc->lcontext.LeaseState; 1519 lreq->flags = lc->lcontext.LeaseFlags; 1520 lreq->duration = lc->lcontext.LeaseDuration; 1521 lreq->version = 1; 1522 } 1523 return lreq; 1524 err_out: 1525 kfree(lreq); 1526 return NULL; 1527 } 1528 1529 /** 1530 * smb2_find_context_vals() - find a particular context info in open request 1531 * @open_req: buffer containing smb2 file open(create) request 1532 * @tag: context name to search for 1533 * @tag_len: the length of tag 1534 * 1535 * Return: pointer to requested context, NULL if @str context not found 1536 * or error pointer if name length is invalid. 1537 */ 1538 struct create_context *smb2_find_context_vals(void *open_req, const char *tag, int tag_len) 1539 { 1540 struct create_context *cc; 1541 unsigned int next = 0; 1542 char *name; 1543 struct smb2_create_req *req = (struct smb2_create_req *)open_req; 1544 unsigned int remain_len, name_off, name_len, value_off, value_len, 1545 cc_len; 1546 1547 /* 1548 * CreateContextsOffset and CreateContextsLength are guaranteed to 1549 * be valid because of ksmbd_smb2_check_message(). 1550 */ 1551 cc = (struct create_context *)((char *)req + 1552 le32_to_cpu(req->CreateContextsOffset)); 1553 remain_len = le32_to_cpu(req->CreateContextsLength); 1554 do { 1555 cc = (struct create_context *)((char *)cc + next); 1556 if (remain_len < offsetof(struct create_context, Buffer)) 1557 return ERR_PTR(-EINVAL); 1558 1559 next = le32_to_cpu(cc->Next); 1560 name_off = le16_to_cpu(cc->NameOffset); 1561 name_len = le16_to_cpu(cc->NameLength); 1562 value_off = le16_to_cpu(cc->DataOffset); 1563 value_len = le32_to_cpu(cc->DataLength); 1564 cc_len = next ? next : remain_len; 1565 1566 if ((next & 0x7) != 0 || 1567 next > remain_len || 1568 name_off != offsetof(struct create_context, Buffer) || 1569 name_len < 4 || 1570 name_off + name_len > cc_len || 1571 (value_off & 0x7) != 0 || 1572 (value_len && value_off < name_off + (name_len < 8 ? 8 : name_len)) || 1573 ((u64)value_off + value_len > cc_len)) 1574 return ERR_PTR(-EINVAL); 1575 1576 name = (char *)cc + name_off; 1577 if (name_len == tag_len && !memcmp(name, tag, name_len)) 1578 return cc; 1579 1580 remain_len -= next; 1581 } while (next != 0); 1582 1583 return NULL; 1584 } 1585 1586 /** 1587 * create_durable_rsp_buf() - create durable handle context 1588 * @cc: buffer to create durable context response 1589 */ 1590 void create_durable_rsp_buf(char *cc) 1591 { 1592 struct create_durable_rsp *buf; 1593 1594 buf = (struct create_durable_rsp *)cc; 1595 memset(buf, 0, sizeof(struct create_durable_rsp)); 1596 buf->ccontext.DataOffset = cpu_to_le16(offsetof 1597 (struct create_durable_rsp, Data)); 1598 buf->ccontext.DataLength = cpu_to_le32(8); 1599 buf->ccontext.NameOffset = cpu_to_le16(offsetof 1600 (struct create_durable_rsp, Name)); 1601 buf->ccontext.NameLength = cpu_to_le16(4); 1602 /* SMB2_CREATE_DURABLE_HANDLE_RESPONSE is "DHnQ" */ 1603 buf->Name[0] = 'D'; 1604 buf->Name[1] = 'H'; 1605 buf->Name[2] = 'n'; 1606 buf->Name[3] = 'Q'; 1607 } 1608 1609 /** 1610 * create_durable_v2_rsp_buf() - create durable handle v2 context 1611 * @cc: buffer to create durable context response 1612 * @fp: ksmbd file pointer 1613 */ 1614 void create_durable_v2_rsp_buf(char *cc, struct ksmbd_file *fp) 1615 { 1616 struct create_durable_v2_rsp *buf; 1617 1618 buf = (struct create_durable_v2_rsp *)cc; 1619 memset(buf, 0, sizeof(struct create_durable_rsp)); 1620 buf->ccontext.DataOffset = cpu_to_le16(offsetof 1621 (struct create_durable_rsp, Data)); 1622 buf->ccontext.DataLength = cpu_to_le32(8); 1623 buf->ccontext.NameOffset = cpu_to_le16(offsetof 1624 (struct create_durable_rsp, Name)); 1625 buf->ccontext.NameLength = cpu_to_le16(4); 1626 /* SMB2_CREATE_DURABLE_HANDLE_RESPONSE_V2 is "DH2Q" */ 1627 buf->Name[0] = 'D'; 1628 buf->Name[1] = 'H'; 1629 buf->Name[2] = '2'; 1630 buf->Name[3] = 'Q'; 1631 1632 buf->Timeout = cpu_to_le32(fp->durable_timeout); 1633 if (fp->is_persistent) 1634 buf->Flags = cpu_to_le32(SMB2_DHANDLE_FLAG_PERSISTENT); 1635 } 1636 1637 /** 1638 * create_mxac_rsp_buf() - create query maximal access context 1639 * @cc: buffer to create maximal access context response 1640 * @maximal_access: maximal access 1641 */ 1642 void create_mxac_rsp_buf(char *cc, int maximal_access) 1643 { 1644 struct create_mxac_rsp *buf; 1645 1646 buf = (struct create_mxac_rsp *)cc; 1647 memset(buf, 0, sizeof(struct create_mxac_rsp)); 1648 buf->ccontext.DataOffset = cpu_to_le16(offsetof 1649 (struct create_mxac_rsp, QueryStatus)); 1650 buf->ccontext.DataLength = cpu_to_le32(8); 1651 buf->ccontext.NameOffset = cpu_to_le16(offsetof 1652 (struct create_mxac_rsp, Name)); 1653 buf->ccontext.NameLength = cpu_to_le16(4); 1654 /* SMB2_CREATE_QUERY_MAXIMAL_ACCESS_RESPONSE is "MxAc" */ 1655 buf->Name[0] = 'M'; 1656 buf->Name[1] = 'x'; 1657 buf->Name[2] = 'A'; 1658 buf->Name[3] = 'c'; 1659 1660 buf->QueryStatus = STATUS_SUCCESS; 1661 buf->MaximalAccess = cpu_to_le32(maximal_access); 1662 } 1663 1664 void create_disk_id_rsp_buf(char *cc, __u64 file_id, __u64 vol_id) 1665 { 1666 struct create_disk_id_rsp *buf; 1667 1668 buf = (struct create_disk_id_rsp *)cc; 1669 memset(buf, 0, sizeof(struct create_disk_id_rsp)); 1670 buf->ccontext.DataOffset = cpu_to_le16(offsetof 1671 (struct create_disk_id_rsp, DiskFileId)); 1672 buf->ccontext.DataLength = cpu_to_le32(32); 1673 buf->ccontext.NameOffset = cpu_to_le16(offsetof 1674 (struct create_mxac_rsp, Name)); 1675 buf->ccontext.NameLength = cpu_to_le16(4); 1676 /* SMB2_CREATE_QUERY_ON_DISK_ID_RESPONSE is "QFid" */ 1677 buf->Name[0] = 'Q'; 1678 buf->Name[1] = 'F'; 1679 buf->Name[2] = 'i'; 1680 buf->Name[3] = 'd'; 1681 1682 buf->DiskFileId = cpu_to_le64(file_id); 1683 buf->VolumeId = cpu_to_le64(vol_id); 1684 } 1685 1686 /** 1687 * create_posix_rsp_buf() - create posix extension context 1688 * @cc: buffer to create posix on posix response 1689 * @fp: ksmbd file pointer 1690 */ 1691 void create_posix_rsp_buf(char *cc, struct ksmbd_file *fp) 1692 { 1693 struct create_posix_rsp *buf; 1694 struct inode *inode = file_inode(fp->filp); 1695 struct mnt_idmap *idmap = file_mnt_idmap(fp->filp); 1696 vfsuid_t vfsuid = i_uid_into_vfsuid(idmap, inode); 1697 vfsgid_t vfsgid = i_gid_into_vfsgid(idmap, inode); 1698 1699 buf = (struct create_posix_rsp *)cc; 1700 memset(buf, 0, sizeof(struct create_posix_rsp)); 1701 buf->ccontext.DataOffset = cpu_to_le16(offsetof 1702 (struct create_posix_rsp, nlink)); 1703 /* 1704 * DataLength = nlink(4) + reparse_tag(4) + mode(4) + 1705 * domain sid(28) + unix group sid(16). 1706 */ 1707 buf->ccontext.DataLength = cpu_to_le32(56); 1708 buf->ccontext.NameOffset = cpu_to_le16(offsetof 1709 (struct create_posix_rsp, Name)); 1710 buf->ccontext.NameLength = cpu_to_le16(POSIX_CTXT_DATA_LEN); 1711 /* SMB2_CREATE_TAG_POSIX is "0x93AD25509CB411E7B42383DE968BCD7C" */ 1712 buf->Name[0] = 0x93; 1713 buf->Name[1] = 0xAD; 1714 buf->Name[2] = 0x25; 1715 buf->Name[3] = 0x50; 1716 buf->Name[4] = 0x9C; 1717 buf->Name[5] = 0xB4; 1718 buf->Name[6] = 0x11; 1719 buf->Name[7] = 0xE7; 1720 buf->Name[8] = 0xB4; 1721 buf->Name[9] = 0x23; 1722 buf->Name[10] = 0x83; 1723 buf->Name[11] = 0xDE; 1724 buf->Name[12] = 0x96; 1725 buf->Name[13] = 0x8B; 1726 buf->Name[14] = 0xCD; 1727 buf->Name[15] = 0x7C; 1728 1729 buf->nlink = cpu_to_le32(inode->i_nlink); 1730 buf->reparse_tag = cpu_to_le32(fp->volatile_id); 1731 buf->mode = cpu_to_le32(inode->i_mode & 0777); 1732 /* 1733 * SidBuffer(44) contain two sids(Domain sid(28), UNIX group sid(16)). 1734 * Domain sid(28) = revision(1) + num_subauth(1) + authority(6) + 1735 * sub_auth(4 * 4(num_subauth)) + RID(4). 1736 * UNIX group id(16) = revision(1) + num_subauth(1) + authority(6) + 1737 * sub_auth(4 * 1(num_subauth)) + RID(4). 1738 */ 1739 id_to_sid(from_kuid_munged(&init_user_ns, vfsuid_into_kuid(vfsuid)), 1740 SIDOWNER, (struct smb_sid *)&buf->SidBuffer[0]); 1741 id_to_sid(from_kgid_munged(&init_user_ns, vfsgid_into_kgid(vfsgid)), 1742 SIDUNIX_GROUP, (struct smb_sid *)&buf->SidBuffer[28]); 1743 } 1744 1745 /* 1746 * Find lease object(opinfo) for given lease key/fid from lease 1747 * break/file close path. 1748 */ 1749 /** 1750 * lookup_lease_in_table() - find a matching lease info object 1751 * @conn: connection instance 1752 * @lease_key: lease key to be searched for 1753 * 1754 * Return: opinfo if found matching opinfo, otherwise NULL 1755 */ 1756 struct oplock_info *lookup_lease_in_table(struct ksmbd_conn *conn, 1757 char *lease_key) 1758 { 1759 struct oplock_info *opinfo = NULL, *ret_op = NULL; 1760 struct lease_table *lt; 1761 int ret; 1762 1763 read_lock(&lease_list_lock); 1764 list_for_each_entry(lt, &lease_table_list, l_entry) { 1765 if (!memcmp(lt->client_guid, conn->ClientGUID, 1766 SMB2_CLIENT_GUID_SIZE)) 1767 goto found; 1768 } 1769 1770 read_unlock(&lease_list_lock); 1771 return NULL; 1772 1773 found: 1774 rcu_read_lock(); 1775 list_for_each_entry_rcu(opinfo, <->lease_list, lease_entry) { 1776 if (!atomic_inc_not_zero(&opinfo->refcount)) 1777 continue; 1778 rcu_read_unlock(); 1779 if (!opinfo->op_state || opinfo->op_state == OPLOCK_CLOSING) 1780 goto op_next; 1781 if (!(opinfo->o_lease->state & 1782 (SMB2_LEASE_HANDLE_CACHING_LE | 1783 SMB2_LEASE_WRITE_CACHING_LE))) 1784 goto op_next; 1785 ret = compare_guid_key(opinfo, conn->ClientGUID, 1786 lease_key); 1787 if (ret) { 1788 ksmbd_debug(OPLOCK, "found opinfo\n"); 1789 ret_op = opinfo; 1790 goto out; 1791 } 1792 op_next: 1793 opinfo_put(opinfo); 1794 rcu_read_lock(); 1795 } 1796 rcu_read_unlock(); 1797 1798 out: 1799 read_unlock(&lease_list_lock); 1800 return ret_op; 1801 } 1802 1803 int smb2_check_durable_oplock(struct ksmbd_conn *conn, 1804 struct ksmbd_share_config *share, 1805 struct ksmbd_file *fp, 1806 struct lease_ctx_info *lctx, 1807 char *name) 1808 { 1809 struct oplock_info *opinfo = opinfo_get(fp); 1810 int ret = 0; 1811 1812 if (!opinfo) 1813 return 0; 1814 1815 if (opinfo->is_lease == false) { 1816 if (lctx) { 1817 pr_err("create context include lease\n"); 1818 ret = -EBADF; 1819 goto out; 1820 } 1821 1822 if (opinfo->level != SMB2_OPLOCK_LEVEL_BATCH) { 1823 pr_err("oplock level is not equal to SMB2_OPLOCK_LEVEL_BATCH\n"); 1824 ret = -EBADF; 1825 } 1826 1827 goto out; 1828 } 1829 1830 if (memcmp(conn->ClientGUID, fp->client_guid, 1831 SMB2_CLIENT_GUID_SIZE)) { 1832 ksmbd_debug(SMB, "Client guid of fp is not equal to the one of connection\n"); 1833 ret = -EBADF; 1834 goto out; 1835 } 1836 1837 if (!lctx) { 1838 ksmbd_debug(SMB, "create context does not include lease\n"); 1839 ret = -EBADF; 1840 goto out; 1841 } 1842 1843 if (memcmp(opinfo->o_lease->lease_key, lctx->lease_key, 1844 SMB2_LEASE_KEY_SIZE)) { 1845 ksmbd_debug(SMB, 1846 "lease key of fp does not match lease key in create context\n"); 1847 ret = -EBADF; 1848 goto out; 1849 } 1850 1851 if (!(opinfo->o_lease->state & SMB2_LEASE_HANDLE_CACHING_LE)) { 1852 ksmbd_debug(SMB, "lease state does not contain SMB2_LEASE_HANDLE_CACHING\n"); 1853 ret = -EBADF; 1854 goto out; 1855 } 1856 1857 if (opinfo->o_lease->version != lctx->version) { 1858 ksmbd_debug(SMB, 1859 "lease version of fp does not match the one in create context\n"); 1860 ret = -EBADF; 1861 goto out; 1862 } 1863 1864 if (!ksmbd_inode_pending_delete(fp)) 1865 ret = ksmbd_validate_name_reconnect(share, fp, name); 1866 out: 1867 opinfo_put(opinfo); 1868 return ret; 1869 } 1870