xref: /linux/fs/smb/server/oplock.c (revision ff9a79307f89563da6d841da8b7cc4a0afceb0e2)
1 // SPDX-License-Identifier: GPL-2.0-or-later
2 /*
3  *   Copyright (C) 2016 Namjae Jeon <linkinjeon@kernel.org>
4  *   Copyright (C) 2018 Samsung Electronics Co., Ltd.
5  */
6 
7 #include <linux/moduleparam.h>
8 
9 #include "glob.h"
10 #include "oplock.h"
11 
12 #include "smb_common.h"
13 #include "smbstatus.h"
14 #include "connection.h"
15 #include "mgmt/user_session.h"
16 #include "mgmt/share_config.h"
17 #include "mgmt/tree_connect.h"
18 
19 static LIST_HEAD(lease_table_list);
20 static DEFINE_RWLOCK(lease_list_lock);
21 
22 /**
23  * alloc_opinfo() - allocate a new opinfo object for oplock info
24  * @work:	smb work
25  * @id:		fid of open file
26  * @Tid:	tree id of connection
27  *
28  * Return:      allocated opinfo object on success, otherwise NULL
29  */
30 static struct oplock_info *alloc_opinfo(struct ksmbd_work *work,
31 					u64 id, __u16 Tid)
32 {
33 	struct ksmbd_conn *conn = work->conn;
34 	struct ksmbd_session *sess = work->sess;
35 	struct oplock_info *opinfo;
36 
37 	opinfo = kzalloc(sizeof(struct oplock_info), GFP_KERNEL);
38 	if (!opinfo)
39 		return NULL;
40 
41 	opinfo->sess = sess;
42 	opinfo->conn = conn;
43 	opinfo->level = SMB2_OPLOCK_LEVEL_NONE;
44 	opinfo->op_state = OPLOCK_STATE_NONE;
45 	opinfo->pending_break = 0;
46 	opinfo->fid = id;
47 	opinfo->Tid = Tid;
48 	INIT_LIST_HEAD(&opinfo->op_entry);
49 	INIT_LIST_HEAD(&opinfo->interim_list);
50 	init_waitqueue_head(&opinfo->oplock_q);
51 	init_waitqueue_head(&opinfo->oplock_brk);
52 	atomic_set(&opinfo->refcount, 1);
53 	atomic_set(&opinfo->breaking_cnt, 0);
54 
55 	return opinfo;
56 }
57 
58 static void lease_add_list(struct oplock_info *opinfo)
59 {
60 	struct lease_table *lb = opinfo->o_lease->l_lb;
61 
62 	spin_lock(&lb->lb_lock);
63 	list_add_rcu(&opinfo->lease_entry, &lb->lease_list);
64 	spin_unlock(&lb->lb_lock);
65 }
66 
67 static void lease_del_list(struct oplock_info *opinfo)
68 {
69 	struct lease_table *lb = opinfo->o_lease->l_lb;
70 
71 	if (!lb)
72 		return;
73 
74 	spin_lock(&lb->lb_lock);
75 	if (list_empty(&opinfo->lease_entry)) {
76 		spin_unlock(&lb->lb_lock);
77 		return;
78 	}
79 
80 	list_del_init(&opinfo->lease_entry);
81 	opinfo->o_lease->l_lb = NULL;
82 	spin_unlock(&lb->lb_lock);
83 }
84 
85 static void lb_add(struct lease_table *lb)
86 {
87 	write_lock(&lease_list_lock);
88 	list_add(&lb->l_entry, &lease_table_list);
89 	write_unlock(&lease_list_lock);
90 }
91 
92 static int alloc_lease(struct oplock_info *opinfo, struct lease_ctx_info *lctx)
93 {
94 	struct lease *lease;
95 
96 	lease = kmalloc(sizeof(struct lease), GFP_KERNEL);
97 	if (!lease)
98 		return -ENOMEM;
99 
100 	memcpy(lease->lease_key, lctx->lease_key, SMB2_LEASE_KEY_SIZE);
101 	lease->state = lctx->req_state;
102 	lease->new_state = 0;
103 	lease->flags = lctx->flags;
104 	lease->duration = lctx->duration;
105 	lease->is_dir = lctx->is_dir;
106 	memcpy(lease->parent_lease_key, lctx->parent_lease_key, SMB2_LEASE_KEY_SIZE);
107 	lease->version = lctx->version;
108 	lease->epoch = le16_to_cpu(lctx->epoch) + 1;
109 	INIT_LIST_HEAD(&opinfo->lease_entry);
110 	opinfo->o_lease = lease;
111 
112 	return 0;
113 }
114 
115 static void free_lease(struct oplock_info *opinfo)
116 {
117 	struct lease *lease;
118 
119 	lease = opinfo->o_lease;
120 	kfree(lease);
121 }
122 
123 static void free_opinfo(struct oplock_info *opinfo)
124 {
125 	if (opinfo->is_lease)
126 		free_lease(opinfo);
127 	kfree(opinfo);
128 }
129 
130 static inline void opinfo_free_rcu(struct rcu_head *rcu_head)
131 {
132 	struct oplock_info *opinfo;
133 
134 	opinfo = container_of(rcu_head, struct oplock_info, rcu_head);
135 	free_opinfo(opinfo);
136 }
137 
138 struct oplock_info *opinfo_get(struct ksmbd_file *fp)
139 {
140 	struct oplock_info *opinfo;
141 
142 	rcu_read_lock();
143 	opinfo = rcu_dereference(fp->f_opinfo);
144 	if (opinfo && !atomic_inc_not_zero(&opinfo->refcount))
145 		opinfo = NULL;
146 	rcu_read_unlock();
147 
148 	return opinfo;
149 }
150 
151 static struct oplock_info *opinfo_get_list(struct ksmbd_inode *ci)
152 {
153 	struct oplock_info *opinfo;
154 
155 	if (list_empty(&ci->m_op_list))
156 		return NULL;
157 
158 	rcu_read_lock();
159 	opinfo = list_first_or_null_rcu(&ci->m_op_list, struct oplock_info,
160 					op_entry);
161 	if (opinfo) {
162 		if (opinfo->conn == NULL ||
163 		    !atomic_inc_not_zero(&opinfo->refcount))
164 			opinfo = NULL;
165 		else {
166 			atomic_inc(&opinfo->conn->r_count);
167 			if (ksmbd_conn_releasing(opinfo->conn)) {
168 				atomic_dec(&opinfo->conn->r_count);
169 				atomic_dec(&opinfo->refcount);
170 				opinfo = NULL;
171 			}
172 		}
173 	}
174 
175 	rcu_read_unlock();
176 
177 	return opinfo;
178 }
179 
180 static void opinfo_conn_put(struct oplock_info *opinfo)
181 {
182 	struct ksmbd_conn *conn;
183 
184 	if (!opinfo)
185 		return;
186 
187 	conn = opinfo->conn;
188 	/*
189 	 * Checking waitqueue to dropping pending requests on
190 	 * disconnection. waitqueue_active is safe because it
191 	 * uses atomic operation for condition.
192 	 */
193 	if (!atomic_dec_return(&conn->r_count) && waitqueue_active(&conn->r_count_q))
194 		wake_up(&conn->r_count_q);
195 	opinfo_put(opinfo);
196 }
197 
198 void opinfo_put(struct oplock_info *opinfo)
199 {
200 	if (!atomic_dec_and_test(&opinfo->refcount))
201 		return;
202 
203 	call_rcu(&opinfo->rcu_head, opinfo_free_rcu);
204 }
205 
206 static void opinfo_add(struct oplock_info *opinfo)
207 {
208 	struct ksmbd_inode *ci = opinfo->o_fp->f_ci;
209 
210 	down_write(&ci->m_lock);
211 	list_add_rcu(&opinfo->op_entry, &ci->m_op_list);
212 	up_write(&ci->m_lock);
213 }
214 
215 static void opinfo_del(struct oplock_info *opinfo)
216 {
217 	struct ksmbd_inode *ci = opinfo->o_fp->f_ci;
218 
219 	if (opinfo->is_lease) {
220 		write_lock(&lease_list_lock);
221 		lease_del_list(opinfo);
222 		write_unlock(&lease_list_lock);
223 	}
224 	down_write(&ci->m_lock);
225 	list_del_rcu(&opinfo->op_entry);
226 	up_write(&ci->m_lock);
227 }
228 
229 static unsigned long opinfo_count(struct ksmbd_file *fp)
230 {
231 	if (ksmbd_stream_fd(fp))
232 		return atomic_read(&fp->f_ci->sop_count);
233 	else
234 		return atomic_read(&fp->f_ci->op_count);
235 }
236 
237 static void opinfo_count_inc(struct ksmbd_file *fp)
238 {
239 	if (ksmbd_stream_fd(fp))
240 		return atomic_inc(&fp->f_ci->sop_count);
241 	else
242 		return atomic_inc(&fp->f_ci->op_count);
243 }
244 
245 static void opinfo_count_dec(struct ksmbd_file *fp)
246 {
247 	if (ksmbd_stream_fd(fp))
248 		return atomic_dec(&fp->f_ci->sop_count);
249 	else
250 		return atomic_dec(&fp->f_ci->op_count);
251 }
252 
253 /**
254  * opinfo_write_to_read() - convert a write oplock to read oplock
255  * @opinfo:		current oplock info
256  *
257  * Return:      0 on success, otherwise -EINVAL
258  */
259 int opinfo_write_to_read(struct oplock_info *opinfo)
260 {
261 	struct lease *lease = opinfo->o_lease;
262 
263 	if (!(opinfo->level == SMB2_OPLOCK_LEVEL_BATCH ||
264 	      opinfo->level == SMB2_OPLOCK_LEVEL_EXCLUSIVE)) {
265 		pr_err("bad oplock(0x%x)\n", opinfo->level);
266 		if (opinfo->is_lease)
267 			pr_err("lease state(0x%x)\n", lease->state);
268 		return -EINVAL;
269 	}
270 	opinfo->level = SMB2_OPLOCK_LEVEL_II;
271 
272 	if (opinfo->is_lease)
273 		lease->state = lease->new_state;
274 	return 0;
275 }
276 
277 /**
278  * opinfo_read_handle_to_read() - convert a read/handle oplock to read oplock
279  * @opinfo:		current oplock info
280  *
281  * Return:      0 on success, otherwise -EINVAL
282  */
283 int opinfo_read_handle_to_read(struct oplock_info *opinfo)
284 {
285 	struct lease *lease = opinfo->o_lease;
286 
287 	lease->state = lease->new_state;
288 	opinfo->level = SMB2_OPLOCK_LEVEL_II;
289 	return 0;
290 }
291 
292 /**
293  * opinfo_write_to_none() - convert a write oplock to none
294  * @opinfo:	current oplock info
295  *
296  * Return:      0 on success, otherwise -EINVAL
297  */
298 int opinfo_write_to_none(struct oplock_info *opinfo)
299 {
300 	struct lease *lease = opinfo->o_lease;
301 
302 	if (!(opinfo->level == SMB2_OPLOCK_LEVEL_BATCH ||
303 	      opinfo->level == SMB2_OPLOCK_LEVEL_EXCLUSIVE)) {
304 		pr_err("bad oplock(0x%x)\n", opinfo->level);
305 		if (opinfo->is_lease)
306 			pr_err("lease state(0x%x)\n", lease->state);
307 		return -EINVAL;
308 	}
309 	opinfo->level = SMB2_OPLOCK_LEVEL_NONE;
310 	if (opinfo->is_lease)
311 		lease->state = lease->new_state;
312 	return 0;
313 }
314 
315 /**
316  * opinfo_read_to_none() - convert a write read to none
317  * @opinfo:	current oplock info
318  *
319  * Return:      0 on success, otherwise -EINVAL
320  */
321 int opinfo_read_to_none(struct oplock_info *opinfo)
322 {
323 	struct lease *lease = opinfo->o_lease;
324 
325 	if (opinfo->level != SMB2_OPLOCK_LEVEL_II) {
326 		pr_err("bad oplock(0x%x)\n", opinfo->level);
327 		if (opinfo->is_lease)
328 			pr_err("lease state(0x%x)\n", lease->state);
329 		return -EINVAL;
330 	}
331 	opinfo->level = SMB2_OPLOCK_LEVEL_NONE;
332 	if (opinfo->is_lease)
333 		lease->state = lease->new_state;
334 	return 0;
335 }
336 
337 /**
338  * lease_read_to_write() - upgrade lease state from read to write
339  * @opinfo:	current lease info
340  *
341  * Return:      0 on success, otherwise -EINVAL
342  */
343 int lease_read_to_write(struct oplock_info *opinfo)
344 {
345 	struct lease *lease = opinfo->o_lease;
346 
347 	if (!(lease->state & SMB2_LEASE_READ_CACHING_LE)) {
348 		ksmbd_debug(OPLOCK, "bad lease state(0x%x)\n", lease->state);
349 		return -EINVAL;
350 	}
351 
352 	lease->new_state = SMB2_LEASE_NONE_LE;
353 	lease->state |= SMB2_LEASE_WRITE_CACHING_LE;
354 	if (lease->state & SMB2_LEASE_HANDLE_CACHING_LE)
355 		opinfo->level = SMB2_OPLOCK_LEVEL_BATCH;
356 	else
357 		opinfo->level = SMB2_OPLOCK_LEVEL_EXCLUSIVE;
358 	return 0;
359 }
360 
361 /**
362  * lease_none_upgrade() - upgrade lease state from none
363  * @opinfo:	current lease info
364  * @new_state:	new lease state
365  *
366  * Return:	0 on success, otherwise -EINVAL
367  */
368 static int lease_none_upgrade(struct oplock_info *opinfo, __le32 new_state)
369 {
370 	struct lease *lease = opinfo->o_lease;
371 
372 	if (!(lease->state == SMB2_LEASE_NONE_LE)) {
373 		ksmbd_debug(OPLOCK, "bad lease state(0x%x)\n", lease->state);
374 		return -EINVAL;
375 	}
376 
377 	lease->new_state = SMB2_LEASE_NONE_LE;
378 	lease->state = new_state;
379 	if (lease->state & SMB2_LEASE_HANDLE_CACHING_LE)
380 		if (lease->state & SMB2_LEASE_WRITE_CACHING_LE)
381 			opinfo->level = SMB2_OPLOCK_LEVEL_BATCH;
382 		else
383 			opinfo->level = SMB2_OPLOCK_LEVEL_II;
384 	else if (lease->state & SMB2_LEASE_WRITE_CACHING_LE)
385 		opinfo->level = SMB2_OPLOCK_LEVEL_EXCLUSIVE;
386 	else if (lease->state & SMB2_LEASE_READ_CACHING_LE)
387 		opinfo->level = SMB2_OPLOCK_LEVEL_II;
388 
389 	return 0;
390 }
391 
392 /**
393  * close_id_del_oplock() - release oplock object at file close time
394  * @fp:		ksmbd file pointer
395  */
396 void close_id_del_oplock(struct ksmbd_file *fp)
397 {
398 	struct oplock_info *opinfo;
399 
400 	if (fp->reserve_lease_break)
401 		smb_lazy_parent_lease_break_close(fp);
402 
403 	opinfo = opinfo_get(fp);
404 	if (!opinfo)
405 		return;
406 
407 	opinfo_del(opinfo);
408 
409 	rcu_assign_pointer(fp->f_opinfo, NULL);
410 	if (opinfo->op_state == OPLOCK_ACK_WAIT) {
411 		opinfo->op_state = OPLOCK_CLOSING;
412 		wake_up_interruptible_all(&opinfo->oplock_q);
413 		if (opinfo->is_lease) {
414 			atomic_set(&opinfo->breaking_cnt, 0);
415 			wake_up_interruptible_all(&opinfo->oplock_brk);
416 		}
417 	}
418 
419 	opinfo_count_dec(fp);
420 	atomic_dec(&opinfo->refcount);
421 	opinfo_put(opinfo);
422 }
423 
424 /**
425  * grant_write_oplock() - grant exclusive/batch oplock or write lease
426  * @opinfo_new:	new oplock info object
427  * @req_oplock: request oplock
428  * @lctx:	lease context information
429  *
430  * Return:      0
431  */
432 static void grant_write_oplock(struct oplock_info *opinfo_new, int req_oplock,
433 			       struct lease_ctx_info *lctx)
434 {
435 	struct lease *lease = opinfo_new->o_lease;
436 
437 	if (req_oplock == SMB2_OPLOCK_LEVEL_BATCH)
438 		opinfo_new->level = SMB2_OPLOCK_LEVEL_BATCH;
439 	else
440 		opinfo_new->level = SMB2_OPLOCK_LEVEL_EXCLUSIVE;
441 
442 	if (lctx) {
443 		lease->state = lctx->req_state;
444 		memcpy(lease->lease_key, lctx->lease_key, SMB2_LEASE_KEY_SIZE);
445 	}
446 }
447 
448 /**
449  * grant_read_oplock() - grant level2 oplock or read lease
450  * @opinfo_new:	new oplock info object
451  * @lctx:	lease context information
452  *
453  * Return:      0
454  */
455 static void grant_read_oplock(struct oplock_info *opinfo_new,
456 			      struct lease_ctx_info *lctx)
457 {
458 	struct lease *lease = opinfo_new->o_lease;
459 
460 	opinfo_new->level = SMB2_OPLOCK_LEVEL_II;
461 
462 	if (lctx) {
463 		lease->state = SMB2_LEASE_READ_CACHING_LE;
464 		if (lctx->req_state & SMB2_LEASE_HANDLE_CACHING_LE)
465 			lease->state |= SMB2_LEASE_HANDLE_CACHING_LE;
466 		memcpy(lease->lease_key, lctx->lease_key, SMB2_LEASE_KEY_SIZE);
467 	}
468 }
469 
470 /**
471  * grant_none_oplock() - grant none oplock or none lease
472  * @opinfo_new:	new oplock info object
473  * @lctx:	lease context information
474  *
475  * Return:      0
476  */
477 static void grant_none_oplock(struct oplock_info *opinfo_new,
478 			      struct lease_ctx_info *lctx)
479 {
480 	struct lease *lease = opinfo_new->o_lease;
481 
482 	opinfo_new->level = SMB2_OPLOCK_LEVEL_NONE;
483 
484 	if (lctx) {
485 		lease->state = 0;
486 		memcpy(lease->lease_key, lctx->lease_key, SMB2_LEASE_KEY_SIZE);
487 	}
488 }
489 
490 static inline int compare_guid_key(struct oplock_info *opinfo,
491 				   const char *guid1, const char *key1)
492 {
493 	const char *guid2, *key2;
494 
495 	guid2 = opinfo->conn->ClientGUID;
496 	key2 = opinfo->o_lease->lease_key;
497 	if (!memcmp(guid1, guid2, SMB2_CLIENT_GUID_SIZE) &&
498 	    !memcmp(key1, key2, SMB2_LEASE_KEY_SIZE))
499 		return 1;
500 
501 	return 0;
502 }
503 
504 /**
505  * same_client_has_lease() - check whether current lease request is
506  *		from lease owner of file
507  * @ci:		master file pointer
508  * @client_guid:	Client GUID
509  * @lctx:		lease context information
510  *
511  * Return:      oplock(lease) object on success, otherwise NULL
512  */
513 static struct oplock_info *same_client_has_lease(struct ksmbd_inode *ci,
514 						 char *client_guid,
515 						 struct lease_ctx_info *lctx)
516 {
517 	int ret;
518 	struct lease *lease;
519 	struct oplock_info *opinfo;
520 	struct oplock_info *m_opinfo = NULL;
521 
522 	if (!lctx)
523 		return NULL;
524 
525 	/*
526 	 * Compare lease key and client_guid to know request from same owner
527 	 * of same client
528 	 */
529 	down_read(&ci->m_lock);
530 	list_for_each_entry(opinfo, &ci->m_op_list, op_entry) {
531 		if (!opinfo->is_lease || !opinfo->conn)
532 			continue;
533 		lease = opinfo->o_lease;
534 
535 		ret = compare_guid_key(opinfo, client_guid, lctx->lease_key);
536 		if (ret) {
537 			m_opinfo = opinfo;
538 			/* skip upgrading lease about breaking lease */
539 			if (atomic_read(&opinfo->breaking_cnt))
540 				continue;
541 
542 			/* upgrading lease */
543 			if ((atomic_read(&ci->op_count) +
544 			     atomic_read(&ci->sop_count)) == 1) {
545 				if (lease->state != SMB2_LEASE_NONE_LE &&
546 				    lease->state == (lctx->req_state & lease->state)) {
547 					lease->epoch++;
548 					lease->state |= lctx->req_state;
549 					if (lctx->req_state &
550 						SMB2_LEASE_WRITE_CACHING_LE)
551 						lease_read_to_write(opinfo);
552 
553 				}
554 			} else if ((atomic_read(&ci->op_count) +
555 				    atomic_read(&ci->sop_count)) > 1) {
556 				if (lctx->req_state ==
557 				    (SMB2_LEASE_READ_CACHING_LE |
558 				     SMB2_LEASE_HANDLE_CACHING_LE)) {
559 					lease->epoch++;
560 					lease->state = lctx->req_state;
561 				}
562 			}
563 
564 			if (lctx->req_state && lease->state ==
565 			    SMB2_LEASE_NONE_LE) {
566 				lease->epoch++;
567 				lease_none_upgrade(opinfo, lctx->req_state);
568 			}
569 		}
570 	}
571 	up_read(&ci->m_lock);
572 
573 	return m_opinfo;
574 }
575 
576 static void wait_for_break_ack(struct oplock_info *opinfo)
577 {
578 	int rc = 0;
579 
580 	rc = wait_event_interruptible_timeout(opinfo->oplock_q,
581 					      opinfo->op_state == OPLOCK_STATE_NONE ||
582 					      opinfo->op_state == OPLOCK_CLOSING,
583 					      OPLOCK_WAIT_TIME);
584 
585 	/* is this a timeout ? */
586 	if (!rc) {
587 		if (opinfo->is_lease)
588 			opinfo->o_lease->state = SMB2_LEASE_NONE_LE;
589 		opinfo->level = SMB2_OPLOCK_LEVEL_NONE;
590 		opinfo->op_state = OPLOCK_STATE_NONE;
591 	}
592 }
593 
594 static void wake_up_oplock_break(struct oplock_info *opinfo)
595 {
596 	clear_bit_unlock(0, &opinfo->pending_break);
597 	/* memory barrier is needed for wake_up_bit() */
598 	smp_mb__after_atomic();
599 	wake_up_bit(&opinfo->pending_break, 0);
600 }
601 
602 static int oplock_break_pending(struct oplock_info *opinfo, int req_op_level)
603 {
604 	while (test_and_set_bit(0, &opinfo->pending_break)) {
605 		wait_on_bit(&opinfo->pending_break, 0, TASK_UNINTERRUPTIBLE);
606 
607 		/* Not immediately break to none. */
608 		opinfo->open_trunc = 0;
609 
610 		if (opinfo->op_state == OPLOCK_CLOSING)
611 			return -ENOENT;
612 		else if (opinfo->level <= req_op_level) {
613 			if (opinfo->is_lease &&
614 			    opinfo->o_lease->state !=
615 			     (SMB2_LEASE_HANDLE_CACHING_LE |
616 			      SMB2_LEASE_READ_CACHING_LE))
617 				return 1;
618 		}
619 	}
620 
621 	if (opinfo->level <= req_op_level) {
622 		if (opinfo->is_lease &&
623 		    opinfo->o_lease->state !=
624 		     (SMB2_LEASE_HANDLE_CACHING_LE |
625 		      SMB2_LEASE_READ_CACHING_LE)) {
626 			wake_up_oplock_break(opinfo);
627 			return 1;
628 		}
629 	}
630 	return 0;
631 }
632 
633 /**
634  * __smb2_oplock_break_noti() - send smb2 oplock break cmd from conn
635  * to client
636  * @wk:     smb work object
637  *
638  * There are two ways this function can be called. 1- while file open we break
639  * from exclusive/batch lock to levelII oplock and 2- while file write/truncate
640  * we break from levelII oplock no oplock.
641  * work->request_buf contains oplock_info.
642  */
643 static void __smb2_oplock_break_noti(struct work_struct *wk)
644 {
645 	struct smb2_oplock_break *rsp = NULL;
646 	struct ksmbd_work *work = container_of(wk, struct ksmbd_work, work);
647 	struct oplock_break_info *br_info = work->request_buf;
648 	struct smb2_hdr *rsp_hdr;
649 	struct ksmbd_file *fp;
650 
651 	fp = ksmbd_lookup_global_fd(br_info->fid);
652 	if (!fp)
653 		goto out;
654 
655 	if (allocate_interim_rsp_buf(work)) {
656 		pr_err("smb2_allocate_rsp_buf failed! ");
657 		ksmbd_fd_put(work, fp);
658 		goto out;
659 	}
660 
661 	rsp_hdr = smb2_get_msg(work->response_buf);
662 	memset(rsp_hdr, 0, sizeof(struct smb2_hdr) + 2);
663 	rsp_hdr->ProtocolId = SMB2_PROTO_NUMBER;
664 	rsp_hdr->StructureSize = SMB2_HEADER_STRUCTURE_SIZE;
665 	rsp_hdr->CreditRequest = cpu_to_le16(0);
666 	rsp_hdr->Command = SMB2_OPLOCK_BREAK;
667 	rsp_hdr->Flags = (SMB2_FLAGS_SERVER_TO_REDIR);
668 	rsp_hdr->NextCommand = 0;
669 	rsp_hdr->MessageId = cpu_to_le64(-1);
670 	rsp_hdr->Id.SyncId.ProcessId = 0;
671 	rsp_hdr->Id.SyncId.TreeId = 0;
672 	rsp_hdr->SessionId = 0;
673 	memset(rsp_hdr->Signature, 0, 16);
674 
675 	rsp = smb2_get_msg(work->response_buf);
676 
677 	rsp->StructureSize = cpu_to_le16(24);
678 	if (!br_info->open_trunc &&
679 	    (br_info->level == SMB2_OPLOCK_LEVEL_BATCH ||
680 	     br_info->level == SMB2_OPLOCK_LEVEL_EXCLUSIVE))
681 		rsp->OplockLevel = SMB2_OPLOCK_LEVEL_II;
682 	else
683 		rsp->OplockLevel = SMB2_OPLOCK_LEVEL_NONE;
684 	rsp->Reserved = 0;
685 	rsp->Reserved2 = 0;
686 	rsp->PersistentFid = fp->persistent_id;
687 	rsp->VolatileFid = fp->volatile_id;
688 
689 	ksmbd_fd_put(work, fp);
690 	if (ksmbd_iov_pin_rsp(work, (void *)rsp,
691 			      sizeof(struct smb2_oplock_break)))
692 		goto out;
693 
694 	ksmbd_debug(OPLOCK,
695 		    "sending oplock break v_id %llu p_id = %llu lock level = %d\n",
696 		    rsp->VolatileFid, rsp->PersistentFid, rsp->OplockLevel);
697 
698 	ksmbd_conn_write(work);
699 
700 out:
701 	ksmbd_free_work_struct(work);
702 }
703 
704 /**
705  * smb2_oplock_break_noti() - send smb2 exclusive/batch to level2 oplock
706  *		break command from server to client
707  * @opinfo:		oplock info object
708  *
709  * Return:      0 on success, otherwise error
710  */
711 static int smb2_oplock_break_noti(struct oplock_info *opinfo)
712 {
713 	struct ksmbd_conn *conn = opinfo->conn;
714 	struct oplock_break_info *br_info;
715 	int ret = 0;
716 	struct ksmbd_work *work = ksmbd_alloc_work_struct();
717 
718 	if (!work)
719 		return -ENOMEM;
720 
721 	br_info = kmalloc(sizeof(struct oplock_break_info), GFP_KERNEL);
722 	if (!br_info) {
723 		ksmbd_free_work_struct(work);
724 		return -ENOMEM;
725 	}
726 
727 	br_info->level = opinfo->level;
728 	br_info->fid = opinfo->fid;
729 	br_info->open_trunc = opinfo->open_trunc;
730 
731 	work->request_buf = (char *)br_info;
732 	work->conn = conn;
733 	work->sess = opinfo->sess;
734 
735 	if (opinfo->op_state == OPLOCK_ACK_WAIT) {
736 		INIT_WORK(&work->work, __smb2_oplock_break_noti);
737 		ksmbd_queue_work(work);
738 
739 		wait_for_break_ack(opinfo);
740 	} else {
741 		__smb2_oplock_break_noti(&work->work);
742 		if (opinfo->level == SMB2_OPLOCK_LEVEL_II)
743 			opinfo->level = SMB2_OPLOCK_LEVEL_NONE;
744 	}
745 	return ret;
746 }
747 
748 /**
749  * __smb2_lease_break_noti() - send lease break command from server
750  * to client
751  * @wk:     smb work object
752  */
753 static void __smb2_lease_break_noti(struct work_struct *wk)
754 {
755 	struct smb2_lease_break *rsp = NULL;
756 	struct ksmbd_work *work = container_of(wk, struct ksmbd_work, work);
757 	struct lease_break_info *br_info = work->request_buf;
758 	struct smb2_hdr *rsp_hdr;
759 
760 	if (allocate_interim_rsp_buf(work)) {
761 		ksmbd_debug(OPLOCK, "smb2_allocate_rsp_buf failed! ");
762 		goto out;
763 	}
764 
765 	rsp_hdr = smb2_get_msg(work->response_buf);
766 	memset(rsp_hdr, 0, sizeof(struct smb2_hdr) + 2);
767 	rsp_hdr->ProtocolId = SMB2_PROTO_NUMBER;
768 	rsp_hdr->StructureSize = SMB2_HEADER_STRUCTURE_SIZE;
769 	rsp_hdr->CreditRequest = cpu_to_le16(0);
770 	rsp_hdr->Command = SMB2_OPLOCK_BREAK;
771 	rsp_hdr->Flags = (SMB2_FLAGS_SERVER_TO_REDIR);
772 	rsp_hdr->NextCommand = 0;
773 	rsp_hdr->MessageId = cpu_to_le64(-1);
774 	rsp_hdr->Id.SyncId.ProcessId = 0;
775 	rsp_hdr->Id.SyncId.TreeId = 0;
776 	rsp_hdr->SessionId = 0;
777 	memset(rsp_hdr->Signature, 0, 16);
778 
779 	rsp = smb2_get_msg(work->response_buf);
780 	rsp->StructureSize = cpu_to_le16(44);
781 	rsp->Epoch = br_info->epoch;
782 	rsp->Flags = 0;
783 
784 	if (br_info->curr_state & (SMB2_LEASE_WRITE_CACHING_LE |
785 			SMB2_LEASE_HANDLE_CACHING_LE))
786 		rsp->Flags = SMB2_NOTIFY_BREAK_LEASE_FLAG_ACK_REQUIRED;
787 
788 	memcpy(rsp->LeaseKey, br_info->lease_key, SMB2_LEASE_KEY_SIZE);
789 	rsp->CurrentLeaseState = br_info->curr_state;
790 	rsp->NewLeaseState = br_info->new_state;
791 	rsp->BreakReason = 0;
792 	rsp->AccessMaskHint = 0;
793 	rsp->ShareMaskHint = 0;
794 
795 	if (ksmbd_iov_pin_rsp(work, (void *)rsp,
796 			      sizeof(struct smb2_lease_break)))
797 		goto out;
798 
799 	ksmbd_conn_write(work);
800 
801 out:
802 	ksmbd_free_work_struct(work);
803 }
804 
805 /**
806  * smb2_lease_break_noti() - break lease when a new client request
807  *			write lease
808  * @opinfo:		conains lease state information
809  *
810  * Return:	0 on success, otherwise error
811  */
812 static int smb2_lease_break_noti(struct oplock_info *opinfo)
813 {
814 	struct ksmbd_conn *conn = opinfo->conn;
815 	struct list_head *tmp, *t;
816 	struct ksmbd_work *work;
817 	struct lease_break_info *br_info;
818 	struct lease *lease = opinfo->o_lease;
819 
820 	work = ksmbd_alloc_work_struct();
821 	if (!work)
822 		return -ENOMEM;
823 
824 	br_info = kmalloc(sizeof(struct lease_break_info), GFP_KERNEL);
825 	if (!br_info) {
826 		ksmbd_free_work_struct(work);
827 		return -ENOMEM;
828 	}
829 
830 	br_info->curr_state = lease->state;
831 	br_info->new_state = lease->new_state;
832 	if (lease->version == 2)
833 		br_info->epoch = cpu_to_le16(++lease->epoch);
834 	else
835 		br_info->epoch = 0;
836 	memcpy(br_info->lease_key, lease->lease_key, SMB2_LEASE_KEY_SIZE);
837 
838 	work->request_buf = (char *)br_info;
839 	work->conn = conn;
840 	work->sess = opinfo->sess;
841 
842 	if (opinfo->op_state == OPLOCK_ACK_WAIT) {
843 		list_for_each_safe(tmp, t, &opinfo->interim_list) {
844 			struct ksmbd_work *in_work;
845 
846 			in_work = list_entry(tmp, struct ksmbd_work,
847 					     interim_entry);
848 			setup_async_work(in_work, NULL, NULL);
849 			smb2_send_interim_resp(in_work, STATUS_PENDING);
850 			list_del_init(&in_work->interim_entry);
851 			release_async_work(in_work);
852 		}
853 		INIT_WORK(&work->work, __smb2_lease_break_noti);
854 		ksmbd_queue_work(work);
855 		wait_for_break_ack(opinfo);
856 	} else {
857 		__smb2_lease_break_noti(&work->work);
858 		if (opinfo->o_lease->new_state == SMB2_LEASE_NONE_LE) {
859 			opinfo->level = SMB2_OPLOCK_LEVEL_NONE;
860 			opinfo->o_lease->state = SMB2_LEASE_NONE_LE;
861 		}
862 	}
863 	return 0;
864 }
865 
866 static void wait_lease_breaking(struct oplock_info *opinfo)
867 {
868 	if (!opinfo->is_lease)
869 		return;
870 
871 	wake_up_interruptible_all(&opinfo->oplock_brk);
872 	if (atomic_read(&opinfo->breaking_cnt)) {
873 		int ret = 0;
874 
875 		ret = wait_event_interruptible_timeout(opinfo->oplock_brk,
876 						       atomic_read(&opinfo->breaking_cnt) == 0,
877 						       HZ);
878 		if (!ret)
879 			atomic_set(&opinfo->breaking_cnt, 0);
880 	}
881 }
882 
883 static int oplock_break(struct oplock_info *brk_opinfo, int req_op_level)
884 {
885 	int err = 0;
886 
887 	/* Need to break exclusive/batch oplock, write lease or overwrite_if */
888 	ksmbd_debug(OPLOCK,
889 		    "request to send oplock(level : 0x%x) break notification\n",
890 		    brk_opinfo->level);
891 
892 	if (brk_opinfo->is_lease) {
893 		struct lease *lease = brk_opinfo->o_lease;
894 
895 		atomic_inc(&brk_opinfo->breaking_cnt);
896 		err = oplock_break_pending(brk_opinfo, req_op_level);
897 		if (err)
898 			return err < 0 ? err : 0;
899 
900 		if (brk_opinfo->open_trunc) {
901 			/*
902 			 * Create overwrite break trigger the lease break to
903 			 * none.
904 			 */
905 			lease->new_state = SMB2_LEASE_NONE_LE;
906 		} else {
907 			if (lease->state & SMB2_LEASE_WRITE_CACHING_LE) {
908 				if (lease->state & SMB2_LEASE_HANDLE_CACHING_LE)
909 					lease->new_state =
910 						SMB2_LEASE_READ_CACHING_LE |
911 						SMB2_LEASE_HANDLE_CACHING_LE;
912 				else
913 					lease->new_state =
914 						SMB2_LEASE_READ_CACHING_LE;
915 			} else {
916 				if (lease->state & SMB2_LEASE_HANDLE_CACHING_LE &&
917 						!lease->is_dir)
918 					lease->new_state =
919 						SMB2_LEASE_READ_CACHING_LE;
920 				else
921 					lease->new_state = SMB2_LEASE_NONE_LE;
922 			}
923 		}
924 
925 		if (lease->state & (SMB2_LEASE_WRITE_CACHING_LE |
926 				SMB2_LEASE_HANDLE_CACHING_LE))
927 			brk_opinfo->op_state = OPLOCK_ACK_WAIT;
928 		else
929 			atomic_dec(&brk_opinfo->breaking_cnt);
930 	} else {
931 		err = oplock_break_pending(brk_opinfo, req_op_level);
932 		if (err)
933 			return err < 0 ? err : 0;
934 
935 		if (brk_opinfo->level == SMB2_OPLOCK_LEVEL_BATCH ||
936 		    brk_opinfo->level == SMB2_OPLOCK_LEVEL_EXCLUSIVE)
937 			brk_opinfo->op_state = OPLOCK_ACK_WAIT;
938 	}
939 
940 	if (brk_opinfo->is_lease)
941 		err = smb2_lease_break_noti(brk_opinfo);
942 	else
943 		err = smb2_oplock_break_noti(brk_opinfo);
944 
945 	ksmbd_debug(OPLOCK, "oplock granted = %d\n", brk_opinfo->level);
946 	if (brk_opinfo->op_state == OPLOCK_CLOSING)
947 		err = -ENOENT;
948 	wake_up_oplock_break(brk_opinfo);
949 
950 	wait_lease_breaking(brk_opinfo);
951 
952 	return err;
953 }
954 
955 void destroy_lease_table(struct ksmbd_conn *conn)
956 {
957 	struct lease_table *lb, *lbtmp;
958 	struct oplock_info *opinfo;
959 
960 	write_lock(&lease_list_lock);
961 	if (list_empty(&lease_table_list)) {
962 		write_unlock(&lease_list_lock);
963 		return;
964 	}
965 
966 	list_for_each_entry_safe(lb, lbtmp, &lease_table_list, l_entry) {
967 		if (conn && memcmp(lb->client_guid, conn->ClientGUID,
968 				   SMB2_CLIENT_GUID_SIZE))
969 			continue;
970 again:
971 		rcu_read_lock();
972 		list_for_each_entry_rcu(opinfo, &lb->lease_list,
973 					lease_entry) {
974 			rcu_read_unlock();
975 			lease_del_list(opinfo);
976 			goto again;
977 		}
978 		rcu_read_unlock();
979 		list_del(&lb->l_entry);
980 		kfree(lb);
981 	}
982 	write_unlock(&lease_list_lock);
983 }
984 
985 int find_same_lease_key(struct ksmbd_session *sess, struct ksmbd_inode *ci,
986 			struct lease_ctx_info *lctx)
987 {
988 	struct oplock_info *opinfo;
989 	int err = 0;
990 	struct lease_table *lb;
991 
992 	if (!lctx)
993 		return err;
994 
995 	read_lock(&lease_list_lock);
996 	if (list_empty(&lease_table_list)) {
997 		read_unlock(&lease_list_lock);
998 		return 0;
999 	}
1000 
1001 	list_for_each_entry(lb, &lease_table_list, l_entry) {
1002 		if (!memcmp(lb->client_guid, sess->ClientGUID,
1003 			    SMB2_CLIENT_GUID_SIZE))
1004 			goto found;
1005 	}
1006 	read_unlock(&lease_list_lock);
1007 
1008 	return 0;
1009 
1010 found:
1011 	rcu_read_lock();
1012 	list_for_each_entry_rcu(opinfo, &lb->lease_list, lease_entry) {
1013 		if (!atomic_inc_not_zero(&opinfo->refcount))
1014 			continue;
1015 		rcu_read_unlock();
1016 		if (opinfo->o_fp->f_ci == ci)
1017 			goto op_next;
1018 		err = compare_guid_key(opinfo, sess->ClientGUID,
1019 				       lctx->lease_key);
1020 		if (err) {
1021 			err = -EINVAL;
1022 			ksmbd_debug(OPLOCK,
1023 				    "found same lease key is already used in other files\n");
1024 			opinfo_put(opinfo);
1025 			goto out;
1026 		}
1027 op_next:
1028 		opinfo_put(opinfo);
1029 		rcu_read_lock();
1030 	}
1031 	rcu_read_unlock();
1032 
1033 out:
1034 	read_unlock(&lease_list_lock);
1035 	return err;
1036 }
1037 
1038 static void copy_lease(struct oplock_info *op1, struct oplock_info *op2)
1039 {
1040 	struct lease *lease1 = op1->o_lease;
1041 	struct lease *lease2 = op2->o_lease;
1042 
1043 	op2->level = op1->level;
1044 	lease2->state = lease1->state;
1045 	memcpy(lease2->lease_key, lease1->lease_key,
1046 	       SMB2_LEASE_KEY_SIZE);
1047 	lease2->duration = lease1->duration;
1048 	lease2->flags = lease1->flags;
1049 	lease2->epoch = lease1->epoch;
1050 	lease2->version = lease1->version;
1051 }
1052 
1053 static int add_lease_global_list(struct oplock_info *opinfo)
1054 {
1055 	struct lease_table *lb;
1056 
1057 	read_lock(&lease_list_lock);
1058 	list_for_each_entry(lb, &lease_table_list, l_entry) {
1059 		if (!memcmp(lb->client_guid, opinfo->conn->ClientGUID,
1060 			    SMB2_CLIENT_GUID_SIZE)) {
1061 			opinfo->o_lease->l_lb = lb;
1062 			lease_add_list(opinfo);
1063 			read_unlock(&lease_list_lock);
1064 			return 0;
1065 		}
1066 	}
1067 	read_unlock(&lease_list_lock);
1068 
1069 	lb = kmalloc(sizeof(struct lease_table), GFP_KERNEL);
1070 	if (!lb)
1071 		return -ENOMEM;
1072 
1073 	memcpy(lb->client_guid, opinfo->conn->ClientGUID,
1074 	       SMB2_CLIENT_GUID_SIZE);
1075 	INIT_LIST_HEAD(&lb->lease_list);
1076 	spin_lock_init(&lb->lb_lock);
1077 	opinfo->o_lease->l_lb = lb;
1078 	lease_add_list(opinfo);
1079 	lb_add(lb);
1080 	return 0;
1081 }
1082 
1083 static void set_oplock_level(struct oplock_info *opinfo, int level,
1084 			     struct lease_ctx_info *lctx)
1085 {
1086 	switch (level) {
1087 	case SMB2_OPLOCK_LEVEL_BATCH:
1088 	case SMB2_OPLOCK_LEVEL_EXCLUSIVE:
1089 		grant_write_oplock(opinfo, level, lctx);
1090 		break;
1091 	case SMB2_OPLOCK_LEVEL_II:
1092 		grant_read_oplock(opinfo, lctx);
1093 		break;
1094 	default:
1095 		grant_none_oplock(opinfo, lctx);
1096 		break;
1097 	}
1098 }
1099 
1100 void smb_send_parent_lease_break_noti(struct ksmbd_file *fp,
1101 				      struct lease_ctx_info *lctx)
1102 {
1103 	struct oplock_info *opinfo;
1104 	struct ksmbd_inode *p_ci = NULL;
1105 
1106 	if (lctx->version != 2)
1107 		return;
1108 
1109 	p_ci = ksmbd_inode_lookup_lock(fp->filp->f_path.dentry->d_parent);
1110 	if (!p_ci)
1111 		return;
1112 
1113 	down_read(&p_ci->m_lock);
1114 	list_for_each_entry(opinfo, &p_ci->m_op_list, op_entry) {
1115 		if (opinfo->conn == NULL || !opinfo->is_lease)
1116 			continue;
1117 
1118 		if (opinfo->o_lease->state != SMB2_OPLOCK_LEVEL_NONE &&
1119 		    (!(lctx->flags & SMB2_LEASE_FLAG_PARENT_LEASE_KEY_SET_LE) ||
1120 		     !compare_guid_key(opinfo, fp->conn->ClientGUID,
1121 				      lctx->parent_lease_key))) {
1122 			if (!atomic_inc_not_zero(&opinfo->refcount))
1123 				continue;
1124 
1125 			atomic_inc(&opinfo->conn->r_count);
1126 			if (ksmbd_conn_releasing(opinfo->conn)) {
1127 				atomic_dec(&opinfo->conn->r_count);
1128 				continue;
1129 			}
1130 
1131 			oplock_break(opinfo, SMB2_OPLOCK_LEVEL_NONE);
1132 			opinfo_conn_put(opinfo);
1133 		}
1134 	}
1135 	up_read(&p_ci->m_lock);
1136 
1137 	ksmbd_inode_put(p_ci);
1138 }
1139 
1140 void smb_lazy_parent_lease_break_close(struct ksmbd_file *fp)
1141 {
1142 	struct oplock_info *opinfo;
1143 	struct ksmbd_inode *p_ci = NULL;
1144 
1145 	rcu_read_lock();
1146 	opinfo = rcu_dereference(fp->f_opinfo);
1147 	rcu_read_unlock();
1148 
1149 	if (!opinfo || !opinfo->is_lease || opinfo->o_lease->version != 2)
1150 		return;
1151 
1152 	p_ci = ksmbd_inode_lookup_lock(fp->filp->f_path.dentry->d_parent);
1153 	if (!p_ci)
1154 		return;
1155 
1156 	down_read(&p_ci->m_lock);
1157 	list_for_each_entry(opinfo, &p_ci->m_op_list, op_entry) {
1158 		if (opinfo->conn == NULL || !opinfo->is_lease)
1159 			continue;
1160 
1161 		if (opinfo->o_lease->state != SMB2_OPLOCK_LEVEL_NONE) {
1162 			if (!atomic_inc_not_zero(&opinfo->refcount))
1163 				continue;
1164 
1165 			atomic_inc(&opinfo->conn->r_count);
1166 			if (ksmbd_conn_releasing(opinfo->conn)) {
1167 				atomic_dec(&opinfo->conn->r_count);
1168 				continue;
1169 			}
1170 			oplock_break(opinfo, SMB2_OPLOCK_LEVEL_NONE);
1171 			opinfo_conn_put(opinfo);
1172 		}
1173 	}
1174 	up_read(&p_ci->m_lock);
1175 
1176 	ksmbd_inode_put(p_ci);
1177 }
1178 
1179 /**
1180  * smb_grant_oplock() - handle oplock/lease request on file open
1181  * @work:		smb work
1182  * @req_op_level:	oplock level
1183  * @pid:		id of open file
1184  * @fp:			ksmbd file pointer
1185  * @tid:		Tree id of connection
1186  * @lctx:		lease context information on file open
1187  * @share_ret:		share mode
1188  *
1189  * Return:      0 on success, otherwise error
1190  */
1191 int smb_grant_oplock(struct ksmbd_work *work, int req_op_level, u64 pid,
1192 		     struct ksmbd_file *fp, __u16 tid,
1193 		     struct lease_ctx_info *lctx, int share_ret)
1194 {
1195 	struct ksmbd_session *sess = work->sess;
1196 	int err = 0;
1197 	struct oplock_info *opinfo = NULL, *prev_opinfo = NULL;
1198 	struct ksmbd_inode *ci = fp->f_ci;
1199 	bool prev_op_has_lease;
1200 	__le32 prev_op_state = 0;
1201 
1202 	/* Only v2 leases handle the directory */
1203 	if (S_ISDIR(file_inode(fp->filp)->i_mode)) {
1204 		if (!lctx || lctx->version != 2 ||
1205 		    (lctx->flags != SMB2_LEASE_FLAG_PARENT_LEASE_KEY_SET_LE &&
1206 		     !lctx->epoch))
1207 			return 0;
1208 	}
1209 
1210 	opinfo = alloc_opinfo(work, pid, tid);
1211 	if (!opinfo)
1212 		return -ENOMEM;
1213 
1214 	if (lctx) {
1215 		err = alloc_lease(opinfo, lctx);
1216 		if (err)
1217 			goto err_out;
1218 		opinfo->is_lease = 1;
1219 	}
1220 
1221 	/* ci does not have any oplock */
1222 	if (!opinfo_count(fp))
1223 		goto set_lev;
1224 
1225 	/* grant none-oplock if second open is trunc */
1226 	if (fp->attrib_only && fp->cdoption != FILE_OVERWRITE_IF_LE &&
1227 	    fp->cdoption != FILE_OVERWRITE_LE &&
1228 	    fp->cdoption != FILE_SUPERSEDE_LE) {
1229 		req_op_level = SMB2_OPLOCK_LEVEL_NONE;
1230 		goto set_lev;
1231 	}
1232 
1233 	if (lctx) {
1234 		struct oplock_info *m_opinfo;
1235 
1236 		/* is lease already granted ? */
1237 		m_opinfo = same_client_has_lease(ci, sess->ClientGUID,
1238 						 lctx);
1239 		if (m_opinfo) {
1240 			copy_lease(m_opinfo, opinfo);
1241 			if (atomic_read(&m_opinfo->breaking_cnt))
1242 				opinfo->o_lease->flags =
1243 					SMB2_LEASE_FLAG_BREAK_IN_PROGRESS_LE;
1244 			goto out;
1245 		}
1246 	}
1247 	prev_opinfo = opinfo_get_list(ci);
1248 	if (!prev_opinfo ||
1249 	    (prev_opinfo->level == SMB2_OPLOCK_LEVEL_NONE && lctx)) {
1250 		opinfo_conn_put(prev_opinfo);
1251 		goto set_lev;
1252 	}
1253 	prev_op_has_lease = prev_opinfo->is_lease;
1254 	if (prev_op_has_lease)
1255 		prev_op_state = prev_opinfo->o_lease->state;
1256 
1257 	if (share_ret < 0 &&
1258 	    prev_opinfo->level == SMB2_OPLOCK_LEVEL_EXCLUSIVE) {
1259 		err = share_ret;
1260 		opinfo_conn_put(prev_opinfo);
1261 		goto err_out;
1262 	}
1263 
1264 	if (prev_opinfo->level != SMB2_OPLOCK_LEVEL_BATCH &&
1265 	    prev_opinfo->level != SMB2_OPLOCK_LEVEL_EXCLUSIVE) {
1266 		opinfo_conn_put(prev_opinfo);
1267 		goto op_break_not_needed;
1268 	}
1269 
1270 	list_add(&work->interim_entry, &prev_opinfo->interim_list);
1271 	err = oplock_break(prev_opinfo, SMB2_OPLOCK_LEVEL_II);
1272 	opinfo_conn_put(prev_opinfo);
1273 	if (err == -ENOENT)
1274 		goto set_lev;
1275 	/* Check all oplock was freed by close */
1276 	else if (err < 0)
1277 		goto err_out;
1278 
1279 op_break_not_needed:
1280 	if (share_ret < 0) {
1281 		err = share_ret;
1282 		goto err_out;
1283 	}
1284 
1285 	if (req_op_level != SMB2_OPLOCK_LEVEL_NONE)
1286 		req_op_level = SMB2_OPLOCK_LEVEL_II;
1287 
1288 	/* grant fixed oplock on stacked locking between lease and oplock */
1289 	if (prev_op_has_lease && !lctx)
1290 		if (prev_op_state & SMB2_LEASE_HANDLE_CACHING_LE)
1291 			req_op_level = SMB2_OPLOCK_LEVEL_NONE;
1292 
1293 	if (!prev_op_has_lease && lctx) {
1294 		req_op_level = SMB2_OPLOCK_LEVEL_II;
1295 		lctx->req_state = SMB2_LEASE_READ_CACHING_LE;
1296 	}
1297 
1298 set_lev:
1299 	set_oplock_level(opinfo, req_op_level, lctx);
1300 
1301 out:
1302 	rcu_assign_pointer(fp->f_opinfo, opinfo);
1303 	opinfo->o_fp = fp;
1304 
1305 	opinfo_count_inc(fp);
1306 	opinfo_add(opinfo);
1307 	if (opinfo->is_lease) {
1308 		err = add_lease_global_list(opinfo);
1309 		if (err)
1310 			goto err_out;
1311 	}
1312 
1313 	return 0;
1314 err_out:
1315 	free_opinfo(opinfo);
1316 	return err;
1317 }
1318 
1319 /**
1320  * smb_break_all_write_oplock() - break batch/exclusive oplock to level2
1321  * @work:	smb work
1322  * @fp:		ksmbd file pointer
1323  * @is_trunc:	truncate on open
1324  */
1325 static void smb_break_all_write_oplock(struct ksmbd_work *work,
1326 				       struct ksmbd_file *fp, int is_trunc)
1327 {
1328 	struct oplock_info *brk_opinfo;
1329 
1330 	brk_opinfo = opinfo_get_list(fp->f_ci);
1331 	if (!brk_opinfo)
1332 		return;
1333 	if (brk_opinfo->level != SMB2_OPLOCK_LEVEL_BATCH &&
1334 	    brk_opinfo->level != SMB2_OPLOCK_LEVEL_EXCLUSIVE) {
1335 		opinfo_conn_put(brk_opinfo);
1336 		return;
1337 	}
1338 
1339 	brk_opinfo->open_trunc = is_trunc;
1340 	list_add(&work->interim_entry, &brk_opinfo->interim_list);
1341 	oplock_break(brk_opinfo, SMB2_OPLOCK_LEVEL_II);
1342 	opinfo_conn_put(brk_opinfo);
1343 }
1344 
1345 /**
1346  * smb_break_all_levII_oplock() - send level2 oplock or read lease break command
1347  *	from server to client
1348  * @work:	smb work
1349  * @fp:		ksmbd file pointer
1350  * @is_trunc:	truncate on open
1351  */
1352 void smb_break_all_levII_oplock(struct ksmbd_work *work, struct ksmbd_file *fp,
1353 				int is_trunc)
1354 {
1355 	struct oplock_info *op, *brk_op;
1356 	struct ksmbd_inode *ci;
1357 	struct ksmbd_conn *conn = work->conn;
1358 
1359 	if (!test_share_config_flag(work->tcon->share_conf,
1360 				    KSMBD_SHARE_FLAG_OPLOCKS))
1361 		return;
1362 
1363 	ci = fp->f_ci;
1364 	op = opinfo_get(fp);
1365 
1366 	rcu_read_lock();
1367 	list_for_each_entry_rcu(brk_op, &ci->m_op_list, op_entry) {
1368 		if (brk_op->conn == NULL)
1369 			continue;
1370 
1371 		if (!atomic_inc_not_zero(&brk_op->refcount))
1372 			continue;
1373 
1374 		atomic_inc(&brk_op->conn->r_count);
1375 		if (ksmbd_conn_releasing(brk_op->conn)) {
1376 			atomic_dec(&brk_op->conn->r_count);
1377 			continue;
1378 		}
1379 
1380 		rcu_read_unlock();
1381 		if (brk_op->is_lease && (brk_op->o_lease->state &
1382 		    (~(SMB2_LEASE_READ_CACHING_LE |
1383 				SMB2_LEASE_HANDLE_CACHING_LE)))) {
1384 			ksmbd_debug(OPLOCK, "unexpected lease state(0x%x)\n",
1385 				    brk_op->o_lease->state);
1386 			goto next;
1387 		} else if (brk_op->level !=
1388 				SMB2_OPLOCK_LEVEL_II) {
1389 			ksmbd_debug(OPLOCK, "unexpected oplock(0x%x)\n",
1390 				    brk_op->level);
1391 			goto next;
1392 		}
1393 
1394 		/* Skip oplock being break to none */
1395 		if (brk_op->is_lease &&
1396 		    brk_op->o_lease->new_state == SMB2_LEASE_NONE_LE &&
1397 		    atomic_read(&brk_op->breaking_cnt))
1398 			goto next;
1399 
1400 		if (op && op->is_lease && brk_op->is_lease &&
1401 		    !memcmp(conn->ClientGUID, brk_op->conn->ClientGUID,
1402 			    SMB2_CLIENT_GUID_SIZE) &&
1403 		    !memcmp(op->o_lease->lease_key, brk_op->o_lease->lease_key,
1404 			    SMB2_LEASE_KEY_SIZE))
1405 			goto next;
1406 		brk_op->open_trunc = is_trunc;
1407 		oplock_break(brk_op, SMB2_OPLOCK_LEVEL_NONE);
1408 next:
1409 		opinfo_conn_put(brk_op);
1410 		rcu_read_lock();
1411 	}
1412 	rcu_read_unlock();
1413 
1414 	if (op)
1415 		opinfo_put(op);
1416 }
1417 
1418 /**
1419  * smb_break_all_oplock() - break both batch/exclusive and level2 oplock
1420  * @work:	smb work
1421  * @fp:		ksmbd file pointer
1422  */
1423 void smb_break_all_oplock(struct ksmbd_work *work, struct ksmbd_file *fp)
1424 {
1425 	if (!test_share_config_flag(work->tcon->share_conf,
1426 				    KSMBD_SHARE_FLAG_OPLOCKS))
1427 		return;
1428 
1429 	smb_break_all_write_oplock(work, fp, 1);
1430 	smb_break_all_levII_oplock(work, fp, 1);
1431 }
1432 
1433 /**
1434  * smb2_map_lease_to_oplock() - map lease state to corresponding oplock type
1435  * @lease_state:     lease type
1436  *
1437  * Return:      0 if no mapping, otherwise corresponding oplock type
1438  */
1439 __u8 smb2_map_lease_to_oplock(__le32 lease_state)
1440 {
1441 	if (lease_state == (SMB2_LEASE_HANDLE_CACHING_LE |
1442 			    SMB2_LEASE_READ_CACHING_LE |
1443 			    SMB2_LEASE_WRITE_CACHING_LE)) {
1444 		return SMB2_OPLOCK_LEVEL_BATCH;
1445 	} else if (lease_state != SMB2_LEASE_WRITE_CACHING_LE &&
1446 		 lease_state & SMB2_LEASE_WRITE_CACHING_LE) {
1447 		if (!(lease_state & SMB2_LEASE_HANDLE_CACHING_LE))
1448 			return SMB2_OPLOCK_LEVEL_EXCLUSIVE;
1449 	} else if (lease_state & SMB2_LEASE_READ_CACHING_LE) {
1450 		return SMB2_OPLOCK_LEVEL_II;
1451 	}
1452 	return 0;
1453 }
1454 
1455 /**
1456  * create_lease_buf() - create lease context for open cmd response
1457  * @rbuf:	buffer to create lease context response
1458  * @lease:	buffer to stored parsed lease state information
1459  */
1460 void create_lease_buf(u8 *rbuf, struct lease *lease)
1461 {
1462 	if (lease->version == 2) {
1463 		struct create_lease_v2 *buf = (struct create_lease_v2 *)rbuf;
1464 
1465 		memset(buf, 0, sizeof(struct create_lease_v2));
1466 		memcpy(buf->lcontext.LeaseKey, lease->lease_key,
1467 		       SMB2_LEASE_KEY_SIZE);
1468 		buf->lcontext.LeaseFlags = lease->flags;
1469 		buf->lcontext.Epoch = cpu_to_le16(lease->epoch);
1470 		buf->lcontext.LeaseState = lease->state;
1471 		if (lease->flags == SMB2_LEASE_FLAG_PARENT_LEASE_KEY_SET_LE)
1472 			memcpy(buf->lcontext.ParentLeaseKey, lease->parent_lease_key,
1473 			       SMB2_LEASE_KEY_SIZE);
1474 		buf->ccontext.DataOffset = cpu_to_le16(offsetof
1475 				(struct create_lease_v2, lcontext));
1476 		buf->ccontext.DataLength = cpu_to_le32(sizeof(struct lease_context_v2));
1477 		buf->ccontext.NameOffset = cpu_to_le16(offsetof
1478 				(struct create_lease_v2, Name));
1479 		buf->ccontext.NameLength = cpu_to_le16(4);
1480 		buf->Name[0] = 'R';
1481 		buf->Name[1] = 'q';
1482 		buf->Name[2] = 'L';
1483 		buf->Name[3] = 's';
1484 	} else {
1485 		struct create_lease *buf = (struct create_lease *)rbuf;
1486 
1487 		memset(buf, 0, sizeof(struct create_lease));
1488 		memcpy(buf->lcontext.LeaseKey, lease->lease_key, SMB2_LEASE_KEY_SIZE);
1489 		buf->lcontext.LeaseFlags = lease->flags;
1490 		buf->lcontext.LeaseState = lease->state;
1491 		buf->ccontext.DataOffset = cpu_to_le16(offsetof
1492 				(struct create_lease, lcontext));
1493 		buf->ccontext.DataLength = cpu_to_le32(sizeof(struct lease_context));
1494 		buf->ccontext.NameOffset = cpu_to_le16(offsetof
1495 				(struct create_lease, Name));
1496 		buf->ccontext.NameLength = cpu_to_le16(4);
1497 		buf->Name[0] = 'R';
1498 		buf->Name[1] = 'q';
1499 		buf->Name[2] = 'L';
1500 		buf->Name[3] = 's';
1501 	}
1502 }
1503 
1504 /**
1505  * parse_lease_state() - parse lease context containted in file open request
1506  * @open_req:	buffer containing smb2 file open(create) request
1507  *
1508  * Return:  oplock state, -ENOENT if create lease context not found
1509  */
1510 struct lease_ctx_info *parse_lease_state(void *open_req)
1511 {
1512 	struct create_context *cc;
1513 	struct smb2_create_req *req = (struct smb2_create_req *)open_req;
1514 	struct lease_ctx_info *lreq;
1515 
1516 	cc = smb2_find_context_vals(req, SMB2_CREATE_REQUEST_LEASE, 4);
1517 	if (IS_ERR_OR_NULL(cc))
1518 		return NULL;
1519 
1520 	lreq = kzalloc(sizeof(struct lease_ctx_info), GFP_KERNEL);
1521 	if (!lreq)
1522 		return NULL;
1523 
1524 	if (sizeof(struct lease_context_v2) == le32_to_cpu(cc->DataLength)) {
1525 		struct create_lease_v2 *lc = (struct create_lease_v2 *)cc;
1526 
1527 		memcpy(lreq->lease_key, lc->lcontext.LeaseKey, SMB2_LEASE_KEY_SIZE);
1528 		lreq->req_state = lc->lcontext.LeaseState;
1529 		lreq->flags = lc->lcontext.LeaseFlags;
1530 		lreq->epoch = lc->lcontext.Epoch;
1531 		lreq->duration = lc->lcontext.LeaseDuration;
1532 		if (lreq->flags == SMB2_LEASE_FLAG_PARENT_LEASE_KEY_SET_LE)
1533 			memcpy(lreq->parent_lease_key, lc->lcontext.ParentLeaseKey,
1534 			       SMB2_LEASE_KEY_SIZE);
1535 		lreq->version = 2;
1536 	} else {
1537 		struct create_lease *lc = (struct create_lease *)cc;
1538 
1539 		memcpy(lreq->lease_key, lc->lcontext.LeaseKey, SMB2_LEASE_KEY_SIZE);
1540 		lreq->req_state = lc->lcontext.LeaseState;
1541 		lreq->flags = lc->lcontext.LeaseFlags;
1542 		lreq->duration = lc->lcontext.LeaseDuration;
1543 		lreq->version = 1;
1544 	}
1545 	return lreq;
1546 }
1547 
1548 /**
1549  * smb2_find_context_vals() - find a particular context info in open request
1550  * @open_req:	buffer containing smb2 file open(create) request
1551  * @tag:	context name to search for
1552  * @tag_len:	the length of tag
1553  *
1554  * Return:	pointer to requested context, NULL if @str context not found
1555  *		or error pointer if name length is invalid.
1556  */
1557 struct create_context *smb2_find_context_vals(void *open_req, const char *tag, int tag_len)
1558 {
1559 	struct create_context *cc;
1560 	unsigned int next = 0;
1561 	char *name;
1562 	struct smb2_create_req *req = (struct smb2_create_req *)open_req;
1563 	unsigned int remain_len, name_off, name_len, value_off, value_len,
1564 		     cc_len;
1565 
1566 	/*
1567 	 * CreateContextsOffset and CreateContextsLength are guaranteed to
1568 	 * be valid because of ksmbd_smb2_check_message().
1569 	 */
1570 	cc = (struct create_context *)((char *)req +
1571 				       le32_to_cpu(req->CreateContextsOffset));
1572 	remain_len = le32_to_cpu(req->CreateContextsLength);
1573 	do {
1574 		cc = (struct create_context *)((char *)cc + next);
1575 		if (remain_len < offsetof(struct create_context, Buffer))
1576 			return ERR_PTR(-EINVAL);
1577 
1578 		next = le32_to_cpu(cc->Next);
1579 		name_off = le16_to_cpu(cc->NameOffset);
1580 		name_len = le16_to_cpu(cc->NameLength);
1581 		value_off = le16_to_cpu(cc->DataOffset);
1582 		value_len = le32_to_cpu(cc->DataLength);
1583 		cc_len = next ? next : remain_len;
1584 
1585 		if ((next & 0x7) != 0 ||
1586 		    next > remain_len ||
1587 		    name_off != offsetof(struct create_context, Buffer) ||
1588 		    name_len < 4 ||
1589 		    name_off + name_len > cc_len ||
1590 		    (value_off & 0x7) != 0 ||
1591 		    (value_len && value_off < name_off + (name_len < 8 ? 8 : name_len)) ||
1592 		    ((u64)value_off + value_len > cc_len))
1593 			return ERR_PTR(-EINVAL);
1594 
1595 		name = (char *)cc + name_off;
1596 		if (name_len == tag_len && !memcmp(name, tag, name_len))
1597 			return cc;
1598 
1599 		remain_len -= next;
1600 	} while (next != 0);
1601 
1602 	return NULL;
1603 }
1604 
1605 /**
1606  * create_durable_rsp_buf() - create durable handle context
1607  * @cc:	buffer to create durable context response
1608  */
1609 void create_durable_rsp_buf(char *cc)
1610 {
1611 	struct create_durable_rsp *buf;
1612 
1613 	buf = (struct create_durable_rsp *)cc;
1614 	memset(buf, 0, sizeof(struct create_durable_rsp));
1615 	buf->ccontext.DataOffset = cpu_to_le16(offsetof
1616 			(struct create_durable_rsp, Data));
1617 	buf->ccontext.DataLength = cpu_to_le32(8);
1618 	buf->ccontext.NameOffset = cpu_to_le16(offsetof
1619 			(struct create_durable_rsp, Name));
1620 	buf->ccontext.NameLength = cpu_to_le16(4);
1621 	/* SMB2_CREATE_DURABLE_HANDLE_RESPONSE is "DHnQ" */
1622 	buf->Name[0] = 'D';
1623 	buf->Name[1] = 'H';
1624 	buf->Name[2] = 'n';
1625 	buf->Name[3] = 'Q';
1626 }
1627 
1628 /**
1629  * create_durable_v2_rsp_buf() - create durable handle v2 context
1630  * @cc:	buffer to create durable context response
1631  * @fp: ksmbd file pointer
1632  */
1633 void create_durable_v2_rsp_buf(char *cc, struct ksmbd_file *fp)
1634 {
1635 	struct create_durable_v2_rsp *buf;
1636 
1637 	buf = (struct create_durable_v2_rsp *)cc;
1638 	memset(buf, 0, sizeof(struct create_durable_rsp));
1639 	buf->ccontext.DataOffset = cpu_to_le16(offsetof
1640 			(struct create_durable_rsp, Data));
1641 	buf->ccontext.DataLength = cpu_to_le32(8);
1642 	buf->ccontext.NameOffset = cpu_to_le16(offsetof
1643 			(struct create_durable_rsp, Name));
1644 	buf->ccontext.NameLength = cpu_to_le16(4);
1645 	/* SMB2_CREATE_DURABLE_HANDLE_RESPONSE_V2 is "DH2Q" */
1646 	buf->Name[0] = 'D';
1647 	buf->Name[1] = 'H';
1648 	buf->Name[2] = '2';
1649 	buf->Name[3] = 'Q';
1650 
1651 	buf->Timeout = cpu_to_le32(fp->durable_timeout);
1652 	if (fp->is_persistent)
1653 		buf->Flags = cpu_to_le32(SMB2_DHANDLE_FLAG_PERSISTENT);
1654 }
1655 
1656 /**
1657  * create_mxac_rsp_buf() - create query maximal access context
1658  * @cc:			buffer to create maximal access context response
1659  * @maximal_access:	maximal access
1660  */
1661 void create_mxac_rsp_buf(char *cc, int maximal_access)
1662 {
1663 	struct create_mxac_rsp *buf;
1664 
1665 	buf = (struct create_mxac_rsp *)cc;
1666 	memset(buf, 0, sizeof(struct create_mxac_rsp));
1667 	buf->ccontext.DataOffset = cpu_to_le16(offsetof
1668 			(struct create_mxac_rsp, QueryStatus));
1669 	buf->ccontext.DataLength = cpu_to_le32(8);
1670 	buf->ccontext.NameOffset = cpu_to_le16(offsetof
1671 			(struct create_mxac_rsp, Name));
1672 	buf->ccontext.NameLength = cpu_to_le16(4);
1673 	/* SMB2_CREATE_QUERY_MAXIMAL_ACCESS_RESPONSE is "MxAc" */
1674 	buf->Name[0] = 'M';
1675 	buf->Name[1] = 'x';
1676 	buf->Name[2] = 'A';
1677 	buf->Name[3] = 'c';
1678 
1679 	buf->QueryStatus = STATUS_SUCCESS;
1680 	buf->MaximalAccess = cpu_to_le32(maximal_access);
1681 }
1682 
1683 void create_disk_id_rsp_buf(char *cc, __u64 file_id, __u64 vol_id)
1684 {
1685 	struct create_disk_id_rsp *buf;
1686 
1687 	buf = (struct create_disk_id_rsp *)cc;
1688 	memset(buf, 0, sizeof(struct create_disk_id_rsp));
1689 	buf->ccontext.DataOffset = cpu_to_le16(offsetof
1690 			(struct create_disk_id_rsp, DiskFileId));
1691 	buf->ccontext.DataLength = cpu_to_le32(32);
1692 	buf->ccontext.NameOffset = cpu_to_le16(offsetof
1693 			(struct create_mxac_rsp, Name));
1694 	buf->ccontext.NameLength = cpu_to_le16(4);
1695 	/* SMB2_CREATE_QUERY_ON_DISK_ID_RESPONSE is "QFid" */
1696 	buf->Name[0] = 'Q';
1697 	buf->Name[1] = 'F';
1698 	buf->Name[2] = 'i';
1699 	buf->Name[3] = 'd';
1700 
1701 	buf->DiskFileId = cpu_to_le64(file_id);
1702 	buf->VolumeId = cpu_to_le64(vol_id);
1703 }
1704 
1705 /**
1706  * create_posix_rsp_buf() - create posix extension context
1707  * @cc:	buffer to create posix on posix response
1708  * @fp: ksmbd file pointer
1709  */
1710 void create_posix_rsp_buf(char *cc, struct ksmbd_file *fp)
1711 {
1712 	struct create_posix_rsp *buf;
1713 	struct inode *inode = file_inode(fp->filp);
1714 	struct mnt_idmap *idmap = file_mnt_idmap(fp->filp);
1715 	vfsuid_t vfsuid = i_uid_into_vfsuid(idmap, inode);
1716 	vfsgid_t vfsgid = i_gid_into_vfsgid(idmap, inode);
1717 
1718 	buf = (struct create_posix_rsp *)cc;
1719 	memset(buf, 0, sizeof(struct create_posix_rsp));
1720 	buf->ccontext.DataOffset = cpu_to_le16(offsetof
1721 			(struct create_posix_rsp, nlink));
1722 	/*
1723 	 * DataLength = nlink(4) + reparse_tag(4) + mode(4) +
1724 	 * domain sid(28) + unix group sid(16).
1725 	 */
1726 	buf->ccontext.DataLength = cpu_to_le32(56);
1727 	buf->ccontext.NameOffset = cpu_to_le16(offsetof
1728 			(struct create_posix_rsp, Name));
1729 	buf->ccontext.NameLength = cpu_to_le16(POSIX_CTXT_DATA_LEN);
1730 	/* SMB2_CREATE_TAG_POSIX is "0x93AD25509CB411E7B42383DE968BCD7C" */
1731 	buf->Name[0] = 0x93;
1732 	buf->Name[1] = 0xAD;
1733 	buf->Name[2] = 0x25;
1734 	buf->Name[3] = 0x50;
1735 	buf->Name[4] = 0x9C;
1736 	buf->Name[5] = 0xB4;
1737 	buf->Name[6] = 0x11;
1738 	buf->Name[7] = 0xE7;
1739 	buf->Name[8] = 0xB4;
1740 	buf->Name[9] = 0x23;
1741 	buf->Name[10] = 0x83;
1742 	buf->Name[11] = 0xDE;
1743 	buf->Name[12] = 0x96;
1744 	buf->Name[13] = 0x8B;
1745 	buf->Name[14] = 0xCD;
1746 	buf->Name[15] = 0x7C;
1747 
1748 	buf->nlink = cpu_to_le32(inode->i_nlink);
1749 	buf->reparse_tag = cpu_to_le32(fp->volatile_id);
1750 	buf->mode = cpu_to_le32(inode->i_mode & 0777);
1751 	/*
1752 	 * SidBuffer(44) contain two sids(Domain sid(28), UNIX group sid(16)).
1753 	 * Domain sid(28) = revision(1) + num_subauth(1) + authority(6) +
1754 	 *		    sub_auth(4 * 4(num_subauth)) + RID(4).
1755 	 * UNIX group id(16) = revision(1) + num_subauth(1) + authority(6) +
1756 	 *		       sub_auth(4 * 1(num_subauth)) + RID(4).
1757 	 */
1758 	id_to_sid(from_kuid_munged(&init_user_ns, vfsuid_into_kuid(vfsuid)),
1759 		  SIDOWNER, (struct smb_sid *)&buf->SidBuffer[0]);
1760 	id_to_sid(from_kgid_munged(&init_user_ns, vfsgid_into_kgid(vfsgid)),
1761 		  SIDUNIX_GROUP, (struct smb_sid *)&buf->SidBuffer[28]);
1762 }
1763 
1764 /*
1765  * Find lease object(opinfo) for given lease key/fid from lease
1766  * break/file close path.
1767  */
1768 /**
1769  * lookup_lease_in_table() - find a matching lease info object
1770  * @conn:	connection instance
1771  * @lease_key:	lease key to be searched for
1772  *
1773  * Return:      opinfo if found matching opinfo, otherwise NULL
1774  */
1775 struct oplock_info *lookup_lease_in_table(struct ksmbd_conn *conn,
1776 					  char *lease_key)
1777 {
1778 	struct oplock_info *opinfo = NULL, *ret_op = NULL;
1779 	struct lease_table *lt;
1780 	int ret;
1781 
1782 	read_lock(&lease_list_lock);
1783 	list_for_each_entry(lt, &lease_table_list, l_entry) {
1784 		if (!memcmp(lt->client_guid, conn->ClientGUID,
1785 			    SMB2_CLIENT_GUID_SIZE))
1786 			goto found;
1787 	}
1788 
1789 	read_unlock(&lease_list_lock);
1790 	return NULL;
1791 
1792 found:
1793 	rcu_read_lock();
1794 	list_for_each_entry_rcu(opinfo, &lt->lease_list, lease_entry) {
1795 		if (!atomic_inc_not_zero(&opinfo->refcount))
1796 			continue;
1797 		rcu_read_unlock();
1798 		if (!opinfo->op_state || opinfo->op_state == OPLOCK_CLOSING)
1799 			goto op_next;
1800 		if (!(opinfo->o_lease->state &
1801 		      (SMB2_LEASE_HANDLE_CACHING_LE |
1802 		       SMB2_LEASE_WRITE_CACHING_LE)))
1803 			goto op_next;
1804 		ret = compare_guid_key(opinfo, conn->ClientGUID,
1805 				       lease_key);
1806 		if (ret) {
1807 			ksmbd_debug(OPLOCK, "found opinfo\n");
1808 			ret_op = opinfo;
1809 			goto out;
1810 		}
1811 op_next:
1812 		opinfo_put(opinfo);
1813 		rcu_read_lock();
1814 	}
1815 	rcu_read_unlock();
1816 
1817 out:
1818 	read_unlock(&lease_list_lock);
1819 	return ret_op;
1820 }
1821 
1822 int smb2_check_durable_oplock(struct ksmbd_conn *conn,
1823 			      struct ksmbd_share_config *share,
1824 			      struct ksmbd_file *fp,
1825 			      struct lease_ctx_info *lctx,
1826 			      char *name)
1827 {
1828 	struct oplock_info *opinfo = opinfo_get(fp);
1829 	int ret = 0;
1830 
1831 	if (!opinfo)
1832 		return 0;
1833 
1834 	if (opinfo->is_lease == false) {
1835 		if (lctx) {
1836 			pr_err("create context include lease\n");
1837 			ret = -EBADF;
1838 			goto out;
1839 		}
1840 
1841 		if (opinfo->level != SMB2_OPLOCK_LEVEL_BATCH) {
1842 			pr_err("oplock level is not equal to SMB2_OPLOCK_LEVEL_BATCH\n");
1843 			ret = -EBADF;
1844 		}
1845 
1846 		goto out;
1847 	}
1848 
1849 	if (memcmp(conn->ClientGUID, fp->client_guid,
1850 				SMB2_CLIENT_GUID_SIZE)) {
1851 		ksmbd_debug(SMB, "Client guid of fp is not equal to the one of connection\n");
1852 		ret = -EBADF;
1853 		goto out;
1854 	}
1855 
1856 	if (!lctx) {
1857 		ksmbd_debug(SMB, "create context does not include lease\n");
1858 		ret = -EBADF;
1859 		goto out;
1860 	}
1861 
1862 	if (memcmp(opinfo->o_lease->lease_key, lctx->lease_key,
1863 				SMB2_LEASE_KEY_SIZE)) {
1864 		ksmbd_debug(SMB,
1865 			    "lease key of fp does not match lease key in create context\n");
1866 		ret = -EBADF;
1867 		goto out;
1868 	}
1869 
1870 	if (!(opinfo->o_lease->state & SMB2_LEASE_HANDLE_CACHING_LE)) {
1871 		ksmbd_debug(SMB, "lease state does not contain SMB2_LEASE_HANDLE_CACHING\n");
1872 		ret = -EBADF;
1873 		goto out;
1874 	}
1875 
1876 	if (opinfo->o_lease->version != lctx->version) {
1877 		ksmbd_debug(SMB,
1878 			    "lease version of fp does not match the one in create context\n");
1879 		ret = -EBADF;
1880 		goto out;
1881 	}
1882 
1883 	if (!ksmbd_inode_pending_delete(fp))
1884 		ret = ksmbd_validate_name_reconnect(share, fp, name);
1885 out:
1886 	opinfo_put(opinfo);
1887 	return ret;
1888 }
1889