• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1 // SPDX-License-Identifier: GPL-2.0
2 /*
3  *  SMB2 version specific operations
4  *
5  *  Copyright (c) 2012, Jeff Layton <jlayton@redhat.com>
6  */
7 
8 #include <linux/pagemap.h>
9 #include <linux/vfs.h>
10 #include <linux/falloc.h>
11 #include <linux/scatterlist.h>
12 #include <linux/uuid.h>
13 #include <linux/sort.h>
14 #include <crypto/aead.h>
15 #include <linux/fiemap.h>
16 #include "cifsfs.h"
17 #include "cifsglob.h"
18 #include "smb2pdu.h"
19 #include "smb2proto.h"
20 #include "cifsproto.h"
21 #include "cifs_debug.h"
22 #include "cifs_unicode.h"
23 #include "smb2status.h"
24 #include "smb2glob.h"
25 #include "cifs_ioctl.h"
26 #include "smbdirect.h"
27 
28 /* Change credits for different ops and return the total number of credits */
29 static int
change_conf(struct TCP_Server_Info * server)30 change_conf(struct TCP_Server_Info *server)
31 {
32 	server->credits += server->echo_credits + server->oplock_credits;
33 	server->oplock_credits = server->echo_credits = 0;
34 	switch (server->credits) {
35 	case 0:
36 		return 0;
37 	case 1:
38 		server->echoes = false;
39 		server->oplocks = false;
40 		break;
41 	case 2:
42 		server->echoes = true;
43 		server->oplocks = false;
44 		server->echo_credits = 1;
45 		break;
46 	default:
47 		server->echoes = true;
48 		if (enable_oplocks) {
49 			server->oplocks = true;
50 			server->oplock_credits = 1;
51 		} else
52 			server->oplocks = false;
53 
54 		server->echo_credits = 1;
55 	}
56 	server->credits -= server->echo_credits + server->oplock_credits;
57 	return server->credits + server->echo_credits + server->oplock_credits;
58 }
59 
60 static void
smb2_add_credits(struct TCP_Server_Info * server,const struct cifs_credits * credits,const int optype)61 smb2_add_credits(struct TCP_Server_Info *server,
62 		 const struct cifs_credits *credits, const int optype)
63 {
64 	int *val, rc = -1;
65 	unsigned int add = credits->value;
66 	unsigned int instance = credits->instance;
67 	bool reconnect_detected = false;
68 
69 	spin_lock(&server->req_lock);
70 	val = server->ops->get_credits_field(server, optype);
71 
72 	/* eg found case where write overlapping reconnect messed up credits */
73 	if (((optype & CIFS_OP_MASK) == CIFS_NEG_OP) && (*val != 0))
74 		trace_smb3_reconnect_with_invalid_credits(server->CurrentMid,
75 			server->hostname, *val, add);
76 	if ((instance == 0) || (instance == server->reconnect_instance))
77 		*val += add;
78 	else
79 		reconnect_detected = true;
80 
81 	if (*val > 65000) {
82 		*val = 65000; /* Don't get near 64K credits, avoid srv bugs */
83 		pr_warn_once("server overflowed SMB3 credits\n");
84 	}
85 	server->in_flight--;
86 	if (server->in_flight == 0 && (optype & CIFS_OP_MASK) != CIFS_NEG_OP)
87 		rc = change_conf(server);
88 	/*
89 	 * Sometimes server returns 0 credits on oplock break ack - we need to
90 	 * rebalance credits in this case.
91 	 */
92 	else if (server->in_flight > 0 && server->oplock_credits == 0 &&
93 		 server->oplocks) {
94 		if (server->credits > 1) {
95 			server->credits--;
96 			server->oplock_credits++;
97 		}
98 	}
99 	spin_unlock(&server->req_lock);
100 	wake_up(&server->request_q);
101 
102 	if (reconnect_detected)
103 		cifs_dbg(FYI, "trying to put %d credits from the old server instance %d\n",
104 			 add, instance);
105 
106 	if (server->tcpStatus == CifsNeedReconnect
107 	    || server->tcpStatus == CifsExiting)
108 		return;
109 
110 	switch (rc) {
111 	case -1:
112 		/* change_conf hasn't been executed */
113 		break;
114 	case 0:
115 		cifs_server_dbg(VFS, "Possible client or server bug - zero credits\n");
116 		break;
117 	case 1:
118 		cifs_server_dbg(VFS, "disabling echoes and oplocks\n");
119 		break;
120 	case 2:
121 		cifs_dbg(FYI, "disabling oplocks\n");
122 		break;
123 	default:
124 		trace_smb3_add_credits(server->CurrentMid,
125 			server->hostname, rc, add);
126 		cifs_dbg(FYI, "add %u credits total=%d\n", add, rc);
127 	}
128 }
129 
130 static void
smb2_set_credits(struct TCP_Server_Info * server,const int val)131 smb2_set_credits(struct TCP_Server_Info *server, const int val)
132 {
133 	spin_lock(&server->req_lock);
134 	server->credits = val;
135 	if (val == 1)
136 		server->reconnect_instance++;
137 	spin_unlock(&server->req_lock);
138 	/* don't log while holding the lock */
139 	if (val == 1)
140 		cifs_dbg(FYI, "set credits to 1 due to smb2 reconnect\n");
141 }
142 
143 static int *
smb2_get_credits_field(struct TCP_Server_Info * server,const int optype)144 smb2_get_credits_field(struct TCP_Server_Info *server, const int optype)
145 {
146 	switch (optype) {
147 	case CIFS_ECHO_OP:
148 		return &server->echo_credits;
149 	case CIFS_OBREAK_OP:
150 		return &server->oplock_credits;
151 	default:
152 		return &server->credits;
153 	}
154 }
155 
156 static unsigned int
smb2_get_credits(struct mid_q_entry * mid)157 smb2_get_credits(struct mid_q_entry *mid)
158 {
159 	return mid->credits_received;
160 }
161 
162 static int
smb2_wait_mtu_credits(struct TCP_Server_Info * server,unsigned int size,unsigned int * num,struct cifs_credits * credits)163 smb2_wait_mtu_credits(struct TCP_Server_Info *server, unsigned int size,
164 		      unsigned int *num, struct cifs_credits *credits)
165 {
166 	int rc = 0;
167 	unsigned int scredits;
168 
169 	spin_lock(&server->req_lock);
170 	while (1) {
171 		if (server->credits <= 0) {
172 			spin_unlock(&server->req_lock);
173 			cifs_num_waiters_inc(server);
174 			rc = wait_event_killable(server->request_q,
175 				has_credits(server, &server->credits, 1));
176 			cifs_num_waiters_dec(server);
177 			if (rc)
178 				return rc;
179 			spin_lock(&server->req_lock);
180 		} else {
181 			if (server->tcpStatus == CifsExiting) {
182 				spin_unlock(&server->req_lock);
183 				return -ENOENT;
184 			}
185 
186 			scredits = server->credits;
187 			/* can deadlock with reopen */
188 			if (scredits <= 8) {
189 				*num = SMB2_MAX_BUFFER_SIZE;
190 				credits->value = 0;
191 				credits->instance = 0;
192 				break;
193 			}
194 
195 			/* leave some credits for reopen and other ops */
196 			scredits -= 8;
197 			*num = min_t(unsigned int, size,
198 				     scredits * SMB2_MAX_BUFFER_SIZE);
199 
200 			credits->value =
201 				DIV_ROUND_UP(*num, SMB2_MAX_BUFFER_SIZE);
202 			credits->instance = server->reconnect_instance;
203 			server->credits -= credits->value;
204 			server->in_flight++;
205 			if (server->in_flight > server->max_in_flight)
206 				server->max_in_flight = server->in_flight;
207 			break;
208 		}
209 	}
210 	spin_unlock(&server->req_lock);
211 	return rc;
212 }
213 
214 static int
smb2_adjust_credits(struct TCP_Server_Info * server,struct cifs_credits * credits,const unsigned int payload_size)215 smb2_adjust_credits(struct TCP_Server_Info *server,
216 		    struct cifs_credits *credits,
217 		    const unsigned int payload_size)
218 {
219 	int new_val = DIV_ROUND_UP(payload_size, SMB2_MAX_BUFFER_SIZE);
220 
221 	if (!credits->value || credits->value == new_val)
222 		return 0;
223 
224 	if (credits->value < new_val) {
225 		WARN_ONCE(1, "request has less credits (%d) than required (%d)",
226 			  credits->value, new_val);
227 		return -ENOTSUPP;
228 	}
229 
230 	spin_lock(&server->req_lock);
231 
232 	if (server->reconnect_instance != credits->instance) {
233 		spin_unlock(&server->req_lock);
234 		cifs_server_dbg(VFS, "trying to return %d credits to old session\n",
235 			 credits->value - new_val);
236 		return -EAGAIN;
237 	}
238 
239 	server->credits += credits->value - new_val;
240 	spin_unlock(&server->req_lock);
241 	wake_up(&server->request_q);
242 	credits->value = new_val;
243 	return 0;
244 }
245 
246 static __u64
smb2_get_next_mid(struct TCP_Server_Info * server)247 smb2_get_next_mid(struct TCP_Server_Info *server)
248 {
249 	__u64 mid;
250 	/* for SMB2 we need the current value */
251 	spin_lock(&GlobalMid_Lock);
252 	mid = server->CurrentMid++;
253 	spin_unlock(&GlobalMid_Lock);
254 	return mid;
255 }
256 
257 static void
smb2_revert_current_mid(struct TCP_Server_Info * server,const unsigned int val)258 smb2_revert_current_mid(struct TCP_Server_Info *server, const unsigned int val)
259 {
260 	spin_lock(&GlobalMid_Lock);
261 	if (server->CurrentMid >= val)
262 		server->CurrentMid -= val;
263 	spin_unlock(&GlobalMid_Lock);
264 }
265 
266 static struct mid_q_entry *
__smb2_find_mid(struct TCP_Server_Info * server,char * buf,bool dequeue)267 __smb2_find_mid(struct TCP_Server_Info *server, char *buf, bool dequeue)
268 {
269 	struct mid_q_entry *mid;
270 	struct smb2_sync_hdr *shdr = (struct smb2_sync_hdr *)buf;
271 	__u64 wire_mid = le64_to_cpu(shdr->MessageId);
272 
273 	if (shdr->ProtocolId == SMB2_TRANSFORM_PROTO_NUM) {
274 		cifs_server_dbg(VFS, "Encrypted frame parsing not supported yet\n");
275 		return NULL;
276 	}
277 
278 	spin_lock(&GlobalMid_Lock);
279 	list_for_each_entry(mid, &server->pending_mid_q, qhead) {
280 		if ((mid->mid == wire_mid) &&
281 		    (mid->mid_state == MID_REQUEST_SUBMITTED) &&
282 		    (mid->command == shdr->Command)) {
283 			kref_get(&mid->refcount);
284 			if (dequeue) {
285 				list_del_init(&mid->qhead);
286 				mid->mid_flags |= MID_DELETED;
287 			}
288 			spin_unlock(&GlobalMid_Lock);
289 			return mid;
290 		}
291 	}
292 	spin_unlock(&GlobalMid_Lock);
293 	return NULL;
294 }
295 
296 static struct mid_q_entry *
smb2_find_mid(struct TCP_Server_Info * server,char * buf)297 smb2_find_mid(struct TCP_Server_Info *server, char *buf)
298 {
299 	return __smb2_find_mid(server, buf, false);
300 }
301 
302 static struct mid_q_entry *
smb2_find_dequeue_mid(struct TCP_Server_Info * server,char * buf)303 smb2_find_dequeue_mid(struct TCP_Server_Info *server, char *buf)
304 {
305 	return __smb2_find_mid(server, buf, true);
306 }
307 
308 static void
smb2_dump_detail(void * buf,struct TCP_Server_Info * server)309 smb2_dump_detail(void *buf, struct TCP_Server_Info *server)
310 {
311 #ifdef CONFIG_CIFS_DEBUG2
312 	struct smb2_sync_hdr *shdr = (struct smb2_sync_hdr *)buf;
313 
314 	cifs_server_dbg(VFS, "Cmd: %d Err: 0x%x Flags: 0x%x Mid: %llu Pid: %d\n",
315 		 shdr->Command, shdr->Status, shdr->Flags, shdr->MessageId,
316 		 shdr->ProcessId);
317 	cifs_server_dbg(VFS, "smb buf %p len %u\n", buf,
318 		 server->ops->calc_smb_size(buf, server));
319 #endif
320 }
321 
322 static bool
smb2_need_neg(struct TCP_Server_Info * server)323 smb2_need_neg(struct TCP_Server_Info *server)
324 {
325 	return server->max_read == 0;
326 }
327 
328 static int
smb2_negotiate(const unsigned int xid,struct cifs_ses * ses)329 smb2_negotiate(const unsigned int xid, struct cifs_ses *ses)
330 {
331 	int rc;
332 
333 	cifs_ses_server(ses)->CurrentMid = 0;
334 	rc = SMB2_negotiate(xid, ses);
335 	/* BB we probably don't need to retry with modern servers */
336 	if (rc == -EAGAIN)
337 		rc = -EHOSTDOWN;
338 	return rc;
339 }
340 
341 static unsigned int
smb2_negotiate_wsize(struct cifs_tcon * tcon,struct smb_vol * volume_info)342 smb2_negotiate_wsize(struct cifs_tcon *tcon, struct smb_vol *volume_info)
343 {
344 	struct TCP_Server_Info *server = tcon->ses->server;
345 	unsigned int wsize;
346 
347 	/* start with specified wsize, or default */
348 	wsize = volume_info->wsize ? volume_info->wsize : CIFS_DEFAULT_IOSIZE;
349 	wsize = min_t(unsigned int, wsize, server->max_write);
350 	if (!(server->capabilities & SMB2_GLOBAL_CAP_LARGE_MTU))
351 		wsize = min_t(unsigned int, wsize, SMB2_MAX_BUFFER_SIZE);
352 
353 	return wsize;
354 }
355 
356 static unsigned int
smb3_negotiate_wsize(struct cifs_tcon * tcon,struct smb_vol * volume_info)357 smb3_negotiate_wsize(struct cifs_tcon *tcon, struct smb_vol *volume_info)
358 {
359 	struct TCP_Server_Info *server = tcon->ses->server;
360 	unsigned int wsize;
361 
362 	/* start with specified wsize, or default */
363 	wsize = volume_info->wsize ? volume_info->wsize : SMB3_DEFAULT_IOSIZE;
364 	wsize = min_t(unsigned int, wsize, server->max_write);
365 #ifdef CONFIG_CIFS_SMB_DIRECT
366 	if (server->rdma) {
367 		if (server->sign)
368 			/*
369 			 * Account for SMB2 data transfer packet header and
370 			 * possible encryption header
371 			 */
372 			wsize = min_t(unsigned int,
373 				wsize,
374 				server->smbd_conn->max_fragmented_send_size -
375 					SMB2_READWRITE_PDU_HEADER_SIZE -
376 					sizeof(struct smb2_transform_hdr));
377 		else
378 			wsize = min_t(unsigned int,
379 				wsize, server->smbd_conn->max_readwrite_size);
380 	}
381 #endif
382 	if (!(server->capabilities & SMB2_GLOBAL_CAP_LARGE_MTU))
383 		wsize = min_t(unsigned int, wsize, SMB2_MAX_BUFFER_SIZE);
384 
385 	return wsize;
386 }
387 
388 static unsigned int
smb2_negotiate_rsize(struct cifs_tcon * tcon,struct smb_vol * volume_info)389 smb2_negotiate_rsize(struct cifs_tcon *tcon, struct smb_vol *volume_info)
390 {
391 	struct TCP_Server_Info *server = tcon->ses->server;
392 	unsigned int rsize;
393 
394 	/* start with specified rsize, or default */
395 	rsize = volume_info->rsize ? volume_info->rsize : CIFS_DEFAULT_IOSIZE;
396 	rsize = min_t(unsigned int, rsize, server->max_read);
397 
398 	if (!(server->capabilities & SMB2_GLOBAL_CAP_LARGE_MTU))
399 		rsize = min_t(unsigned int, rsize, SMB2_MAX_BUFFER_SIZE);
400 
401 	return rsize;
402 }
403 
404 static unsigned int
smb3_negotiate_rsize(struct cifs_tcon * tcon,struct smb_vol * volume_info)405 smb3_negotiate_rsize(struct cifs_tcon *tcon, struct smb_vol *volume_info)
406 {
407 	struct TCP_Server_Info *server = tcon->ses->server;
408 	unsigned int rsize;
409 
410 	/* start with specified rsize, or default */
411 	rsize = volume_info->rsize ? volume_info->rsize : SMB3_DEFAULT_IOSIZE;
412 	rsize = min_t(unsigned int, rsize, server->max_read);
413 #ifdef CONFIG_CIFS_SMB_DIRECT
414 	if (server->rdma) {
415 		if (server->sign)
416 			/*
417 			 * Account for SMB2 data transfer packet header and
418 			 * possible encryption header
419 			 */
420 			rsize = min_t(unsigned int,
421 				rsize,
422 				server->smbd_conn->max_fragmented_recv_size -
423 					SMB2_READWRITE_PDU_HEADER_SIZE -
424 					sizeof(struct smb2_transform_hdr));
425 		else
426 			rsize = min_t(unsigned int,
427 				rsize, server->smbd_conn->max_readwrite_size);
428 	}
429 #endif
430 
431 	if (!(server->capabilities & SMB2_GLOBAL_CAP_LARGE_MTU))
432 		rsize = min_t(unsigned int, rsize, SMB2_MAX_BUFFER_SIZE);
433 
434 	return rsize;
435 }
436 
437 static int
parse_server_interfaces(struct network_interface_info_ioctl_rsp * buf,size_t buf_len,struct cifs_server_iface ** iface_list,size_t * iface_count)438 parse_server_interfaces(struct network_interface_info_ioctl_rsp *buf,
439 			size_t buf_len,
440 			struct cifs_server_iface **iface_list,
441 			size_t *iface_count)
442 {
443 	struct network_interface_info_ioctl_rsp *p;
444 	struct sockaddr_in *addr4;
445 	struct sockaddr_in6 *addr6;
446 	struct iface_info_ipv4 *p4;
447 	struct iface_info_ipv6 *p6;
448 	struct cifs_server_iface *info;
449 	ssize_t bytes_left;
450 	size_t next = 0;
451 	int nb_iface = 0;
452 	int rc = 0;
453 
454 	*iface_list = NULL;
455 	*iface_count = 0;
456 
457 	/*
458 	 * Fist pass: count and sanity check
459 	 */
460 
461 	bytes_left = buf_len;
462 	p = buf;
463 	while (bytes_left >= sizeof(*p)) {
464 		nb_iface++;
465 		next = le32_to_cpu(p->Next);
466 		if (!next) {
467 			bytes_left -= sizeof(*p);
468 			break;
469 		}
470 		p = (struct network_interface_info_ioctl_rsp *)((u8 *)p+next);
471 		bytes_left -= next;
472 	}
473 
474 	if (!nb_iface) {
475 		cifs_dbg(VFS, "%s: malformed interface info\n", __func__);
476 		rc = -EINVAL;
477 		goto out;
478 	}
479 
480 	/* Azure rounds the buffer size up 8, to a 16 byte boundary */
481 	if ((bytes_left > 8) || p->Next)
482 		cifs_dbg(VFS, "%s: incomplete interface info\n", __func__);
483 
484 
485 	/*
486 	 * Second pass: extract info to internal structure
487 	 */
488 
489 	*iface_list = kcalloc(nb_iface, sizeof(**iface_list), GFP_KERNEL);
490 	if (!*iface_list) {
491 		rc = -ENOMEM;
492 		goto out;
493 	}
494 
495 	info = *iface_list;
496 	bytes_left = buf_len;
497 	p = buf;
498 	while (bytes_left >= sizeof(*p)) {
499 		info->speed = le64_to_cpu(p->LinkSpeed);
500 		info->rdma_capable = le32_to_cpu(p->Capability & RDMA_CAPABLE) ? 1 : 0;
501 		info->rss_capable = le32_to_cpu(p->Capability & RSS_CAPABLE) ? 1 : 0;
502 
503 		cifs_dbg(FYI, "%s: adding iface %zu\n", __func__, *iface_count);
504 		cifs_dbg(FYI, "%s: speed %zu bps\n", __func__, info->speed);
505 		cifs_dbg(FYI, "%s: capabilities 0x%08x\n", __func__,
506 			 le32_to_cpu(p->Capability));
507 
508 		switch (p->Family) {
509 		/*
510 		 * The kernel and wire socket structures have the same
511 		 * layout and use network byte order but make the
512 		 * conversion explicit in case either one changes.
513 		 */
514 		case INTERNETWORK:
515 			addr4 = (struct sockaddr_in *)&info->sockaddr;
516 			p4 = (struct iface_info_ipv4 *)p->Buffer;
517 			addr4->sin_family = AF_INET;
518 			memcpy(&addr4->sin_addr, &p4->IPv4Address, 4);
519 
520 			/* [MS-SMB2] 2.2.32.5.1.1 Clients MUST ignore these */
521 			addr4->sin_port = cpu_to_be16(CIFS_PORT);
522 
523 			cifs_dbg(FYI, "%s: ipv4 %pI4\n", __func__,
524 				 &addr4->sin_addr);
525 			break;
526 		case INTERNETWORKV6:
527 			addr6 =	(struct sockaddr_in6 *)&info->sockaddr;
528 			p6 = (struct iface_info_ipv6 *)p->Buffer;
529 			addr6->sin6_family = AF_INET6;
530 			memcpy(&addr6->sin6_addr, &p6->IPv6Address, 16);
531 
532 			/* [MS-SMB2] 2.2.32.5.1.2 Clients MUST ignore these */
533 			addr6->sin6_flowinfo = 0;
534 			addr6->sin6_scope_id = 0;
535 			addr6->sin6_port = cpu_to_be16(CIFS_PORT);
536 
537 			cifs_dbg(FYI, "%s: ipv6 %pI6\n", __func__,
538 				 &addr6->sin6_addr);
539 			break;
540 		default:
541 			cifs_dbg(VFS,
542 				 "%s: skipping unsupported socket family\n",
543 				 __func__);
544 			goto next_iface;
545 		}
546 
547 		(*iface_count)++;
548 		info++;
549 next_iface:
550 		next = le32_to_cpu(p->Next);
551 		if (!next)
552 			break;
553 		p = (struct network_interface_info_ioctl_rsp *)((u8 *)p+next);
554 		bytes_left -= next;
555 	}
556 
557 	if (!*iface_count) {
558 		rc = -EINVAL;
559 		goto out;
560 	}
561 
562 out:
563 	if (rc) {
564 		kfree(*iface_list);
565 		*iface_count = 0;
566 		*iface_list = NULL;
567 	}
568 	return rc;
569 }
570 
compare_iface(const void * ia,const void * ib)571 static int compare_iface(const void *ia, const void *ib)
572 {
573 	const struct cifs_server_iface *a = (struct cifs_server_iface *)ia;
574 	const struct cifs_server_iface *b = (struct cifs_server_iface *)ib;
575 
576 	return a->speed == b->speed ? 0 : (a->speed > b->speed ? -1 : 1);
577 }
578 
579 static int
SMB3_request_interfaces(const unsigned int xid,struct cifs_tcon * tcon)580 SMB3_request_interfaces(const unsigned int xid, struct cifs_tcon *tcon)
581 {
582 	int rc;
583 	unsigned int ret_data_len = 0;
584 	struct network_interface_info_ioctl_rsp *out_buf = NULL;
585 	struct cifs_server_iface *iface_list;
586 	size_t iface_count;
587 	struct cifs_ses *ses = tcon->ses;
588 
589 	rc = SMB2_ioctl(xid, tcon, NO_FILE_ID, NO_FILE_ID,
590 			FSCTL_QUERY_NETWORK_INTERFACE_INFO,
591 			NULL /* no data input */, 0 /* no data input */,
592 			CIFSMaxBufSize, (char **)&out_buf, &ret_data_len);
593 	if (rc == -EOPNOTSUPP) {
594 		cifs_dbg(FYI,
595 			 "server does not support query network interfaces\n");
596 		goto out;
597 	} else if (rc != 0) {
598 		cifs_tcon_dbg(VFS, "error %d on ioctl to get interface list\n", rc);
599 		goto out;
600 	}
601 
602 	rc = parse_server_interfaces(out_buf, ret_data_len,
603 				     &iface_list, &iface_count);
604 	if (rc)
605 		goto out;
606 
607 	/* sort interfaces from fastest to slowest */
608 	sort(iface_list, iface_count, sizeof(*iface_list), compare_iface, NULL);
609 
610 	spin_lock(&ses->iface_lock);
611 	kfree(ses->iface_list);
612 	ses->iface_list = iface_list;
613 	ses->iface_count = iface_count;
614 	ses->iface_last_update = jiffies;
615 	spin_unlock(&ses->iface_lock);
616 
617 out:
618 	kfree(out_buf);
619 	return rc;
620 }
621 
622 static void
smb2_close_cached_fid(struct kref * ref)623 smb2_close_cached_fid(struct kref *ref)
624 {
625 	struct cached_fid *cfid = container_of(ref, struct cached_fid,
626 					       refcount);
627 
628 	if (cfid->is_valid) {
629 		cifs_dbg(FYI, "clear cached root file handle\n");
630 		SMB2_close(0, cfid->tcon, cfid->fid->persistent_fid,
631 			   cfid->fid->volatile_fid);
632 		cfid->is_valid = false;
633 		cfid->file_all_info_is_valid = false;
634 		cfid->has_lease = false;
635 	}
636 }
637 
close_shroot(struct cached_fid * cfid)638 void close_shroot(struct cached_fid *cfid)
639 {
640 	mutex_lock(&cfid->fid_mutex);
641 	kref_put(&cfid->refcount, smb2_close_cached_fid);
642 	mutex_unlock(&cfid->fid_mutex);
643 }
644 
close_shroot_lease_locked(struct cached_fid * cfid)645 void close_shroot_lease_locked(struct cached_fid *cfid)
646 {
647 	if (cfid->has_lease) {
648 		cfid->has_lease = false;
649 		kref_put(&cfid->refcount, smb2_close_cached_fid);
650 	}
651 }
652 
close_shroot_lease(struct cached_fid * cfid)653 void close_shroot_lease(struct cached_fid *cfid)
654 {
655 	mutex_lock(&cfid->fid_mutex);
656 	close_shroot_lease_locked(cfid);
657 	mutex_unlock(&cfid->fid_mutex);
658 }
659 
660 void
smb2_cached_lease_break(struct work_struct * work)661 smb2_cached_lease_break(struct work_struct *work)
662 {
663 	struct cached_fid *cfid = container_of(work,
664 				struct cached_fid, lease_break);
665 
666 	close_shroot_lease(cfid);
667 }
668 
669 /*
670  * Open the directory at the root of a share
671  */
open_shroot(unsigned int xid,struct cifs_tcon * tcon,struct cifs_sb_info * cifs_sb,struct cached_fid ** cfid)672 int open_shroot(unsigned int xid, struct cifs_tcon *tcon,
673 		struct cifs_sb_info *cifs_sb,
674 		struct cached_fid **cfid)
675 {
676 	struct cifs_ses *ses = tcon->ses;
677 	struct TCP_Server_Info *server = ses->server;
678 	struct cifs_open_parms oparms;
679 	struct smb2_create_rsp *o_rsp = NULL;
680 	struct smb2_query_info_rsp *qi_rsp = NULL;
681 	int resp_buftype[2];
682 	struct smb_rqst rqst[2];
683 	struct kvec rsp_iov[2];
684 	struct kvec open_iov[SMB2_CREATE_IOV_SIZE];
685 	struct kvec qi_iov[1];
686 	int rc, flags = 0;
687 	__le16 utf16_path = 0; /* Null - since an open of top of share */
688 	u8 oplock = SMB2_OPLOCK_LEVEL_II;
689 	struct cifs_fid *pfid;
690 
691 	mutex_lock(&tcon->crfid.fid_mutex);
692 	if (tcon->crfid.is_valid) {
693 		cifs_dbg(FYI, "found a cached root file handle\n");
694 		*cfid = &tcon->crfid;
695 		kref_get(&tcon->crfid.refcount);
696 		mutex_unlock(&tcon->crfid.fid_mutex);
697 		return 0;
698 	}
699 
700 	/*
701 	 * We do not hold the lock for the open because in case
702 	 * SMB2_open needs to reconnect, it will end up calling
703 	 * cifs_mark_open_files_invalid() which takes the lock again
704 	 * thus causing a deadlock
705 	 */
706 
707 	mutex_unlock(&tcon->crfid.fid_mutex);
708 
709 	if (smb3_encryption_required(tcon))
710 		flags |= CIFS_TRANSFORM_REQ;
711 
712 	if (!server->ops->new_lease_key)
713 		return -EIO;
714 
715 	pfid = tcon->crfid.fid;
716 	server->ops->new_lease_key(pfid);
717 
718 	memset(rqst, 0, sizeof(rqst));
719 	resp_buftype[0] = resp_buftype[1] = CIFS_NO_BUFFER;
720 	memset(rsp_iov, 0, sizeof(rsp_iov));
721 
722 	/* Open */
723 	memset(&open_iov, 0, sizeof(open_iov));
724 	rqst[0].rq_iov = open_iov;
725 	rqst[0].rq_nvec = SMB2_CREATE_IOV_SIZE;
726 
727 	oparms.tcon = tcon;
728 	oparms.create_options = cifs_create_options(cifs_sb, 0);
729 	oparms.desired_access = FILE_READ_ATTRIBUTES;
730 	oparms.disposition = FILE_OPEN;
731 	oparms.fid = pfid;
732 	oparms.reconnect = false;
733 
734 	rc = SMB2_open_init(tcon, server,
735 			    &rqst[0], &oplock, &oparms, &utf16_path);
736 	if (rc)
737 		goto oshr_free;
738 	smb2_set_next_command(tcon, &rqst[0]);
739 
740 	memset(&qi_iov, 0, sizeof(qi_iov));
741 	rqst[1].rq_iov = qi_iov;
742 	rqst[1].rq_nvec = 1;
743 
744 	rc = SMB2_query_info_init(tcon, server,
745 				  &rqst[1], COMPOUND_FID,
746 				  COMPOUND_FID, FILE_ALL_INFORMATION,
747 				  SMB2_O_INFO_FILE, 0,
748 				  sizeof(struct smb2_file_all_info) +
749 				  PATH_MAX * 2, 0, NULL);
750 	if (rc)
751 		goto oshr_free;
752 
753 	smb2_set_related(&rqst[1]);
754 
755 	rc = compound_send_recv(xid, ses, server,
756 				flags, 2, rqst,
757 				resp_buftype, rsp_iov);
758 	mutex_lock(&tcon->crfid.fid_mutex);
759 
760 	/*
761 	 * Now we need to check again as the cached root might have
762 	 * been successfully re-opened from a concurrent process
763 	 */
764 
765 	if (tcon->crfid.is_valid) {
766 		/* work was already done */
767 
768 		/* stash fids for close() later */
769 		struct cifs_fid fid = {
770 			.persistent_fid = pfid->persistent_fid,
771 			.volatile_fid = pfid->volatile_fid,
772 		};
773 
774 		/*
775 		 * caller expects this func to set pfid to a valid
776 		 * cached root, so we copy the existing one and get a
777 		 * reference.
778 		 */
779 		memcpy(pfid, tcon->crfid.fid, sizeof(*pfid));
780 		kref_get(&tcon->crfid.refcount);
781 
782 		mutex_unlock(&tcon->crfid.fid_mutex);
783 
784 		if (rc == 0) {
785 			/* close extra handle outside of crit sec */
786 			SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid);
787 		}
788 		rc = 0;
789 		goto oshr_free;
790 	}
791 
792 	/* Cached root is still invalid, continue normaly */
793 
794 	if (rc) {
795 		if (rc == -EREMCHG) {
796 			tcon->need_reconnect = true;
797 			pr_warn_once("server share %s deleted\n",
798 				     tcon->treeName);
799 		}
800 		goto oshr_exit;
801 	}
802 
803 	atomic_inc(&tcon->num_remote_opens);
804 
805 	o_rsp = (struct smb2_create_rsp *)rsp_iov[0].iov_base;
806 	oparms.fid->persistent_fid = o_rsp->PersistentFileId;
807 	oparms.fid->volatile_fid = o_rsp->VolatileFileId;
808 #ifdef CONFIG_CIFS_DEBUG2
809 	oparms.fid->mid = le64_to_cpu(o_rsp->sync_hdr.MessageId);
810 #endif /* CIFS_DEBUG2 */
811 
812 	memcpy(tcon->crfid.fid, pfid, sizeof(struct cifs_fid));
813 	tcon->crfid.tcon = tcon;
814 	tcon->crfid.is_valid = true;
815 	kref_init(&tcon->crfid.refcount);
816 
817 	/* BB TBD check to see if oplock level check can be removed below */
818 	if (o_rsp->OplockLevel == SMB2_OPLOCK_LEVEL_LEASE) {
819 		kref_get(&tcon->crfid.refcount);
820 		tcon->crfid.has_lease = true;
821 		smb2_parse_contexts(server, o_rsp,
822 				&oparms.fid->epoch,
823 				    oparms.fid->lease_key, &oplock,
824 				    NULL, NULL);
825 	} else
826 		goto oshr_exit;
827 
828 	qi_rsp = (struct smb2_query_info_rsp *)rsp_iov[1].iov_base;
829 	if (le32_to_cpu(qi_rsp->OutputBufferLength) < sizeof(struct smb2_file_all_info))
830 		goto oshr_exit;
831 	if (!smb2_validate_and_copy_iov(
832 				le16_to_cpu(qi_rsp->OutputBufferOffset),
833 				sizeof(struct smb2_file_all_info),
834 				&rsp_iov[1], sizeof(struct smb2_file_all_info),
835 				(char *)&tcon->crfid.file_all_info))
836 		tcon->crfid.file_all_info_is_valid = true;
837 
838 oshr_exit:
839 	mutex_unlock(&tcon->crfid.fid_mutex);
840 oshr_free:
841 	SMB2_open_free(&rqst[0]);
842 	SMB2_query_info_free(&rqst[1]);
843 	free_rsp_buf(resp_buftype[0], rsp_iov[0].iov_base);
844 	free_rsp_buf(resp_buftype[1], rsp_iov[1].iov_base);
845 	if (rc == 0)
846 		*cfid = &tcon->crfid;
847 	return rc;
848 }
849 
850 static void
smb3_qfs_tcon(const unsigned int xid,struct cifs_tcon * tcon,struct cifs_sb_info * cifs_sb)851 smb3_qfs_tcon(const unsigned int xid, struct cifs_tcon *tcon,
852 	      struct cifs_sb_info *cifs_sb)
853 {
854 	int rc;
855 	__le16 srch_path = 0; /* Null - open root of share */
856 	u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
857 	struct cifs_open_parms oparms;
858 	struct cifs_fid fid;
859 	bool no_cached_open = tcon->nohandlecache;
860 	struct cached_fid *cfid = NULL;
861 
862 	oparms.tcon = tcon;
863 	oparms.desired_access = FILE_READ_ATTRIBUTES;
864 	oparms.disposition = FILE_OPEN;
865 	oparms.create_options = cifs_create_options(cifs_sb, 0);
866 	oparms.fid = &fid;
867 	oparms.reconnect = false;
868 
869 	if (no_cached_open) {
870 		rc = SMB2_open(xid, &oparms, &srch_path, &oplock, NULL, NULL,
871 			       NULL, NULL);
872 	} else {
873 		rc = open_shroot(xid, tcon, cifs_sb, &cfid);
874 		if (rc == 0)
875 			memcpy(&fid, cfid->fid, sizeof(struct cifs_fid));
876 	}
877 	if (rc)
878 		return;
879 
880 	SMB3_request_interfaces(xid, tcon);
881 
882 	SMB2_QFS_attr(xid, tcon, fid.persistent_fid, fid.volatile_fid,
883 			FS_ATTRIBUTE_INFORMATION);
884 	SMB2_QFS_attr(xid, tcon, fid.persistent_fid, fid.volatile_fid,
885 			FS_DEVICE_INFORMATION);
886 	SMB2_QFS_attr(xid, tcon, fid.persistent_fid, fid.volatile_fid,
887 			FS_VOLUME_INFORMATION);
888 	SMB2_QFS_attr(xid, tcon, fid.persistent_fid, fid.volatile_fid,
889 			FS_SECTOR_SIZE_INFORMATION); /* SMB3 specific */
890 	if (no_cached_open)
891 		SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid);
892 	else
893 		close_shroot(cfid);
894 }
895 
896 static void
smb2_qfs_tcon(const unsigned int xid,struct cifs_tcon * tcon,struct cifs_sb_info * cifs_sb)897 smb2_qfs_tcon(const unsigned int xid, struct cifs_tcon *tcon,
898 	      struct cifs_sb_info *cifs_sb)
899 {
900 	int rc;
901 	__le16 srch_path = 0; /* Null - open root of share */
902 	u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
903 	struct cifs_open_parms oparms;
904 	struct cifs_fid fid;
905 
906 	oparms.tcon = tcon;
907 	oparms.desired_access = FILE_READ_ATTRIBUTES;
908 	oparms.disposition = FILE_OPEN;
909 	oparms.create_options = cifs_create_options(cifs_sb, 0);
910 	oparms.fid = &fid;
911 	oparms.reconnect = false;
912 
913 	rc = SMB2_open(xid, &oparms, &srch_path, &oplock, NULL, NULL,
914 		       NULL, NULL);
915 	if (rc)
916 		return;
917 
918 	SMB2_QFS_attr(xid, tcon, fid.persistent_fid, fid.volatile_fid,
919 			FS_ATTRIBUTE_INFORMATION);
920 	SMB2_QFS_attr(xid, tcon, fid.persistent_fid, fid.volatile_fid,
921 			FS_DEVICE_INFORMATION);
922 	SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid);
923 }
924 
925 static int
smb2_is_path_accessible(const unsigned int xid,struct cifs_tcon * tcon,struct cifs_sb_info * cifs_sb,const char * full_path)926 smb2_is_path_accessible(const unsigned int xid, struct cifs_tcon *tcon,
927 			struct cifs_sb_info *cifs_sb, const char *full_path)
928 {
929 	int rc;
930 	__le16 *utf16_path;
931 	__u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
932 	struct cifs_open_parms oparms;
933 	struct cifs_fid fid;
934 
935 	if ((*full_path == 0) && tcon->crfid.is_valid)
936 		return 0;
937 
938 	utf16_path = cifs_convert_path_to_utf16(full_path, cifs_sb);
939 	if (!utf16_path)
940 		return -ENOMEM;
941 
942 	oparms.tcon = tcon;
943 	oparms.desired_access = FILE_READ_ATTRIBUTES;
944 	oparms.disposition = FILE_OPEN;
945 	oparms.create_options = cifs_create_options(cifs_sb, 0);
946 	oparms.fid = &fid;
947 	oparms.reconnect = false;
948 
949 	rc = SMB2_open(xid, &oparms, utf16_path, &oplock, NULL, NULL, NULL,
950 		       NULL);
951 	if (rc) {
952 		kfree(utf16_path);
953 		return rc;
954 	}
955 
956 	rc = SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid);
957 	kfree(utf16_path);
958 	return rc;
959 }
960 
961 static int
smb2_get_srv_inum(const unsigned int xid,struct cifs_tcon * tcon,struct cifs_sb_info * cifs_sb,const char * full_path,u64 * uniqueid,FILE_ALL_INFO * data)962 smb2_get_srv_inum(const unsigned int xid, struct cifs_tcon *tcon,
963 		  struct cifs_sb_info *cifs_sb, const char *full_path,
964 		  u64 *uniqueid, FILE_ALL_INFO *data)
965 {
966 	*uniqueid = le64_to_cpu(data->IndexNumber);
967 	return 0;
968 }
969 
970 static int
smb2_query_file_info(const unsigned int xid,struct cifs_tcon * tcon,struct cifs_fid * fid,FILE_ALL_INFO * data)971 smb2_query_file_info(const unsigned int xid, struct cifs_tcon *tcon,
972 		     struct cifs_fid *fid, FILE_ALL_INFO *data)
973 {
974 	int rc;
975 	struct smb2_file_all_info *smb2_data;
976 
977 	smb2_data = kzalloc(sizeof(struct smb2_file_all_info) + PATH_MAX * 2,
978 			    GFP_KERNEL);
979 	if (smb2_data == NULL)
980 		return -ENOMEM;
981 
982 	rc = SMB2_query_info(xid, tcon, fid->persistent_fid, fid->volatile_fid,
983 			     smb2_data);
984 	if (!rc)
985 		move_smb2_info_to_cifs(data, smb2_data);
986 	kfree(smb2_data);
987 	return rc;
988 }
989 
990 #ifdef CONFIG_CIFS_XATTR
991 static ssize_t
move_smb2_ea_to_cifs(char * dst,size_t dst_size,struct smb2_file_full_ea_info * src,size_t src_size,const unsigned char * ea_name)992 move_smb2_ea_to_cifs(char *dst, size_t dst_size,
993 		     struct smb2_file_full_ea_info *src, size_t src_size,
994 		     const unsigned char *ea_name)
995 {
996 	int rc = 0;
997 	unsigned int ea_name_len = ea_name ? strlen(ea_name) : 0;
998 	char *name, *value;
999 	size_t buf_size = dst_size;
1000 	size_t name_len, value_len, user_name_len;
1001 
1002 	while (src_size > 0) {
1003 		name_len = (size_t)src->ea_name_length;
1004 		value_len = (size_t)le16_to_cpu(src->ea_value_length);
1005 
1006 		if (name_len == 0)
1007 			break;
1008 
1009 		if (src_size < 8 + name_len + 1 + value_len) {
1010 			cifs_dbg(FYI, "EA entry goes beyond length of list\n");
1011 			rc = -EIO;
1012 			goto out;
1013 		}
1014 
1015 		name = &src->ea_data[0];
1016 		value = &src->ea_data[src->ea_name_length + 1];
1017 
1018 		if (ea_name) {
1019 			if (ea_name_len == name_len &&
1020 			    memcmp(ea_name, name, name_len) == 0) {
1021 				rc = value_len;
1022 				if (dst_size == 0)
1023 					goto out;
1024 				if (dst_size < value_len) {
1025 					rc = -ERANGE;
1026 					goto out;
1027 				}
1028 				memcpy(dst, value, value_len);
1029 				goto out;
1030 			}
1031 		} else {
1032 			/* 'user.' plus a terminating null */
1033 			user_name_len = 5 + 1 + name_len;
1034 
1035 			if (buf_size == 0) {
1036 				/* skip copy - calc size only */
1037 				rc += user_name_len;
1038 			} else if (dst_size >= user_name_len) {
1039 				dst_size -= user_name_len;
1040 				memcpy(dst, "user.", 5);
1041 				dst += 5;
1042 				memcpy(dst, src->ea_data, name_len);
1043 				dst += name_len;
1044 				*dst = 0;
1045 				++dst;
1046 				rc += user_name_len;
1047 			} else {
1048 				/* stop before overrun buffer */
1049 				rc = -ERANGE;
1050 				break;
1051 			}
1052 		}
1053 
1054 		if (!src->next_entry_offset)
1055 			break;
1056 
1057 		if (src_size < le32_to_cpu(src->next_entry_offset)) {
1058 			/* stop before overrun buffer */
1059 			rc = -ERANGE;
1060 			break;
1061 		}
1062 		src_size -= le32_to_cpu(src->next_entry_offset);
1063 		src = (void *)((char *)src +
1064 			       le32_to_cpu(src->next_entry_offset));
1065 	}
1066 
1067 	/* didn't find the named attribute */
1068 	if (ea_name)
1069 		rc = -ENODATA;
1070 
1071 out:
1072 	return (ssize_t)rc;
1073 }
1074 
1075 static ssize_t
smb2_query_eas(const unsigned int xid,struct cifs_tcon * tcon,const unsigned char * path,const unsigned char * ea_name,char * ea_data,size_t buf_size,struct cifs_sb_info * cifs_sb)1076 smb2_query_eas(const unsigned int xid, struct cifs_tcon *tcon,
1077 	       const unsigned char *path, const unsigned char *ea_name,
1078 	       char *ea_data, size_t buf_size,
1079 	       struct cifs_sb_info *cifs_sb)
1080 {
1081 	int rc;
1082 	__le16 *utf16_path;
1083 	struct kvec rsp_iov = {NULL, 0};
1084 	int buftype = CIFS_NO_BUFFER;
1085 	struct smb2_query_info_rsp *rsp;
1086 	struct smb2_file_full_ea_info *info = NULL;
1087 
1088 	utf16_path = cifs_convert_path_to_utf16(path, cifs_sb);
1089 	if (!utf16_path)
1090 		return -ENOMEM;
1091 
1092 	rc = smb2_query_info_compound(xid, tcon, utf16_path,
1093 				      FILE_READ_EA,
1094 				      FILE_FULL_EA_INFORMATION,
1095 				      SMB2_O_INFO_FILE,
1096 				      CIFSMaxBufSize -
1097 				      MAX_SMB2_CREATE_RESPONSE_SIZE -
1098 				      MAX_SMB2_CLOSE_RESPONSE_SIZE,
1099 				      &rsp_iov, &buftype, cifs_sb);
1100 	if (rc) {
1101 		/*
1102 		 * If ea_name is NULL (listxattr) and there are no EAs,
1103 		 * return 0 as it's not an error. Otherwise, the specified
1104 		 * ea_name was not found.
1105 		 */
1106 		if (!ea_name && rc == -ENODATA)
1107 			rc = 0;
1108 		goto qeas_exit;
1109 	}
1110 
1111 	rsp = (struct smb2_query_info_rsp *)rsp_iov.iov_base;
1112 	rc = smb2_validate_iov(le16_to_cpu(rsp->OutputBufferOffset),
1113 			       le32_to_cpu(rsp->OutputBufferLength),
1114 			       &rsp_iov,
1115 			       sizeof(struct smb2_file_full_ea_info));
1116 	if (rc)
1117 		goto qeas_exit;
1118 
1119 	info = (struct smb2_file_full_ea_info *)(
1120 			le16_to_cpu(rsp->OutputBufferOffset) + (char *)rsp);
1121 	rc = move_smb2_ea_to_cifs(ea_data, buf_size, info,
1122 			le32_to_cpu(rsp->OutputBufferLength), ea_name);
1123 
1124  qeas_exit:
1125 	kfree(utf16_path);
1126 	free_rsp_buf(buftype, rsp_iov.iov_base);
1127 	return rc;
1128 }
1129 
1130 
1131 static int
smb2_set_ea(const unsigned int xid,struct cifs_tcon * tcon,const char * path,const char * ea_name,const void * ea_value,const __u16 ea_value_len,const struct nls_table * nls_codepage,struct cifs_sb_info * cifs_sb)1132 smb2_set_ea(const unsigned int xid, struct cifs_tcon *tcon,
1133 	    const char *path, const char *ea_name, const void *ea_value,
1134 	    const __u16 ea_value_len, const struct nls_table *nls_codepage,
1135 	    struct cifs_sb_info *cifs_sb)
1136 {
1137 	struct cifs_ses *ses = tcon->ses;
1138 	struct TCP_Server_Info *server = cifs_pick_channel(ses);
1139 	__le16 *utf16_path = NULL;
1140 	int ea_name_len = strlen(ea_name);
1141 	int flags = CIFS_CP_CREATE_CLOSE_OP;
1142 	int len;
1143 	struct smb_rqst rqst[3];
1144 	int resp_buftype[3];
1145 	struct kvec rsp_iov[3];
1146 	struct kvec open_iov[SMB2_CREATE_IOV_SIZE];
1147 	struct cifs_open_parms oparms;
1148 	__u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
1149 	struct cifs_fid fid;
1150 	struct kvec si_iov[SMB2_SET_INFO_IOV_SIZE];
1151 	unsigned int size[1];
1152 	void *data[1];
1153 	struct smb2_file_full_ea_info *ea = NULL;
1154 	struct kvec close_iov[1];
1155 	struct smb2_query_info_rsp *rsp;
1156 	int rc, used_len = 0;
1157 
1158 	if (smb3_encryption_required(tcon))
1159 		flags |= CIFS_TRANSFORM_REQ;
1160 
1161 	if (ea_name_len > 255)
1162 		return -EINVAL;
1163 
1164 	utf16_path = cifs_convert_path_to_utf16(path, cifs_sb);
1165 	if (!utf16_path)
1166 		return -ENOMEM;
1167 
1168 	memset(rqst, 0, sizeof(rqst));
1169 	resp_buftype[0] = resp_buftype[1] = resp_buftype[2] = CIFS_NO_BUFFER;
1170 	memset(rsp_iov, 0, sizeof(rsp_iov));
1171 
1172 	if (ses->server->ops->query_all_EAs) {
1173 		if (!ea_value) {
1174 			rc = ses->server->ops->query_all_EAs(xid, tcon, path,
1175 							     ea_name, NULL, 0,
1176 							     cifs_sb);
1177 			if (rc == -ENODATA)
1178 				goto sea_exit;
1179 		} else {
1180 			/* If we are adding a attribute we should first check
1181 			 * if there will be enough space available to store
1182 			 * the new EA. If not we should not add it since we
1183 			 * would not be able to even read the EAs back.
1184 			 */
1185 			rc = smb2_query_info_compound(xid, tcon, utf16_path,
1186 				      FILE_READ_EA,
1187 				      FILE_FULL_EA_INFORMATION,
1188 				      SMB2_O_INFO_FILE,
1189 				      CIFSMaxBufSize -
1190 				      MAX_SMB2_CREATE_RESPONSE_SIZE -
1191 				      MAX_SMB2_CLOSE_RESPONSE_SIZE,
1192 				      &rsp_iov[1], &resp_buftype[1], cifs_sb);
1193 			if (rc == 0) {
1194 				rsp = (struct smb2_query_info_rsp *)rsp_iov[1].iov_base;
1195 				used_len = le32_to_cpu(rsp->OutputBufferLength);
1196 			}
1197 			free_rsp_buf(resp_buftype[1], rsp_iov[1].iov_base);
1198 			resp_buftype[1] = CIFS_NO_BUFFER;
1199 			memset(&rsp_iov[1], 0, sizeof(rsp_iov[1]));
1200 			rc = 0;
1201 
1202 			/* Use a fudge factor of 256 bytes in case we collide
1203 			 * with a different set_EAs command.
1204 			 */
1205 			if(CIFSMaxBufSize - MAX_SMB2_CREATE_RESPONSE_SIZE -
1206 			   MAX_SMB2_CLOSE_RESPONSE_SIZE - 256 <
1207 			   used_len + ea_name_len + ea_value_len + 1) {
1208 				rc = -ENOSPC;
1209 				goto sea_exit;
1210 			}
1211 		}
1212 	}
1213 
1214 	/* Open */
1215 	memset(&open_iov, 0, sizeof(open_iov));
1216 	rqst[0].rq_iov = open_iov;
1217 	rqst[0].rq_nvec = SMB2_CREATE_IOV_SIZE;
1218 
1219 	memset(&oparms, 0, sizeof(oparms));
1220 	oparms.tcon = tcon;
1221 	oparms.desired_access = FILE_WRITE_EA;
1222 	oparms.disposition = FILE_OPEN;
1223 	oparms.create_options = cifs_create_options(cifs_sb, 0);
1224 	oparms.fid = &fid;
1225 	oparms.reconnect = false;
1226 
1227 	rc = SMB2_open_init(tcon, server,
1228 			    &rqst[0], &oplock, &oparms, utf16_path);
1229 	if (rc)
1230 		goto sea_exit;
1231 	smb2_set_next_command(tcon, &rqst[0]);
1232 
1233 
1234 	/* Set Info */
1235 	memset(&si_iov, 0, sizeof(si_iov));
1236 	rqst[1].rq_iov = si_iov;
1237 	rqst[1].rq_nvec = 1;
1238 
1239 	len = sizeof(*ea) + ea_name_len + ea_value_len + 1;
1240 	ea = kzalloc(len, GFP_KERNEL);
1241 	if (ea == NULL) {
1242 		rc = -ENOMEM;
1243 		goto sea_exit;
1244 	}
1245 
1246 	ea->ea_name_length = ea_name_len;
1247 	ea->ea_value_length = cpu_to_le16(ea_value_len);
1248 	memcpy(ea->ea_data, ea_name, ea_name_len + 1);
1249 	memcpy(ea->ea_data + ea_name_len + 1, ea_value, ea_value_len);
1250 
1251 	size[0] = len;
1252 	data[0] = ea;
1253 
1254 	rc = SMB2_set_info_init(tcon, server,
1255 				&rqst[1], COMPOUND_FID,
1256 				COMPOUND_FID, current->tgid,
1257 				FILE_FULL_EA_INFORMATION,
1258 				SMB2_O_INFO_FILE, 0, data, size);
1259 	if (rc)
1260 		goto sea_exit;
1261 	smb2_set_next_command(tcon, &rqst[1]);
1262 	smb2_set_related(&rqst[1]);
1263 
1264 
1265 	/* Close */
1266 	memset(&close_iov, 0, sizeof(close_iov));
1267 	rqst[2].rq_iov = close_iov;
1268 	rqst[2].rq_nvec = 1;
1269 	rc = SMB2_close_init(tcon, server,
1270 			     &rqst[2], COMPOUND_FID, COMPOUND_FID, false);
1271 	if (rc)
1272 		goto sea_exit;
1273 	smb2_set_related(&rqst[2]);
1274 
1275 	rc = compound_send_recv(xid, ses, server,
1276 				flags, 3, rqst,
1277 				resp_buftype, rsp_iov);
1278 	/* no need to bump num_remote_opens because handle immediately closed */
1279 
1280  sea_exit:
1281 	kfree(ea);
1282 	kfree(utf16_path);
1283 	SMB2_open_free(&rqst[0]);
1284 	SMB2_set_info_free(&rqst[1]);
1285 	SMB2_close_free(&rqst[2]);
1286 	free_rsp_buf(resp_buftype[0], rsp_iov[0].iov_base);
1287 	free_rsp_buf(resp_buftype[1], rsp_iov[1].iov_base);
1288 	free_rsp_buf(resp_buftype[2], rsp_iov[2].iov_base);
1289 	return rc;
1290 }
1291 #endif
1292 
1293 static bool
smb2_can_echo(struct TCP_Server_Info * server)1294 smb2_can_echo(struct TCP_Server_Info *server)
1295 {
1296 	return server->echoes;
1297 }
1298 
1299 static void
smb2_clear_stats(struct cifs_tcon * tcon)1300 smb2_clear_stats(struct cifs_tcon *tcon)
1301 {
1302 	int i;
1303 
1304 	for (i = 0; i < NUMBER_OF_SMB2_COMMANDS; i++) {
1305 		atomic_set(&tcon->stats.smb2_stats.smb2_com_sent[i], 0);
1306 		atomic_set(&tcon->stats.smb2_stats.smb2_com_failed[i], 0);
1307 	}
1308 }
1309 
1310 static void
smb2_dump_share_caps(struct seq_file * m,struct cifs_tcon * tcon)1311 smb2_dump_share_caps(struct seq_file *m, struct cifs_tcon *tcon)
1312 {
1313 	seq_puts(m, "\n\tShare Capabilities:");
1314 	if (tcon->capabilities & SMB2_SHARE_CAP_DFS)
1315 		seq_puts(m, " DFS,");
1316 	if (tcon->capabilities & SMB2_SHARE_CAP_CONTINUOUS_AVAILABILITY)
1317 		seq_puts(m, " CONTINUOUS AVAILABILITY,");
1318 	if (tcon->capabilities & SMB2_SHARE_CAP_SCALEOUT)
1319 		seq_puts(m, " SCALEOUT,");
1320 	if (tcon->capabilities & SMB2_SHARE_CAP_CLUSTER)
1321 		seq_puts(m, " CLUSTER,");
1322 	if (tcon->capabilities & SMB2_SHARE_CAP_ASYMMETRIC)
1323 		seq_puts(m, " ASYMMETRIC,");
1324 	if (tcon->capabilities == 0)
1325 		seq_puts(m, " None");
1326 	if (tcon->ss_flags & SSINFO_FLAGS_ALIGNED_DEVICE)
1327 		seq_puts(m, " Aligned,");
1328 	if (tcon->ss_flags & SSINFO_FLAGS_PARTITION_ALIGNED_ON_DEVICE)
1329 		seq_puts(m, " Partition Aligned,");
1330 	if (tcon->ss_flags & SSINFO_FLAGS_NO_SEEK_PENALTY)
1331 		seq_puts(m, " SSD,");
1332 	if (tcon->ss_flags & SSINFO_FLAGS_TRIM_ENABLED)
1333 		seq_puts(m, " TRIM-support,");
1334 
1335 	seq_printf(m, "\tShare Flags: 0x%x", tcon->share_flags);
1336 	seq_printf(m, "\n\ttid: 0x%x", tcon->tid);
1337 	if (tcon->perf_sector_size)
1338 		seq_printf(m, "\tOptimal sector size: 0x%x",
1339 			   tcon->perf_sector_size);
1340 	seq_printf(m, "\tMaximal Access: 0x%x", tcon->maximal_access);
1341 }
1342 
1343 static void
smb2_print_stats(struct seq_file * m,struct cifs_tcon * tcon)1344 smb2_print_stats(struct seq_file *m, struct cifs_tcon *tcon)
1345 {
1346 	atomic_t *sent = tcon->stats.smb2_stats.smb2_com_sent;
1347 	atomic_t *failed = tcon->stats.smb2_stats.smb2_com_failed;
1348 
1349 	/*
1350 	 *  Can't display SMB2_NEGOTIATE, SESSION_SETUP, LOGOFF, CANCEL and ECHO
1351 	 *  totals (requests sent) since those SMBs are per-session not per tcon
1352 	 */
1353 	seq_printf(m, "\nBytes read: %llu  Bytes written: %llu",
1354 		   (long long)(tcon->bytes_read),
1355 		   (long long)(tcon->bytes_written));
1356 	seq_printf(m, "\nOpen files: %d total (local), %d open on server",
1357 		   atomic_read(&tcon->num_local_opens),
1358 		   atomic_read(&tcon->num_remote_opens));
1359 	seq_printf(m, "\nTreeConnects: %d total %d failed",
1360 		   atomic_read(&sent[SMB2_TREE_CONNECT_HE]),
1361 		   atomic_read(&failed[SMB2_TREE_CONNECT_HE]));
1362 	seq_printf(m, "\nTreeDisconnects: %d total %d failed",
1363 		   atomic_read(&sent[SMB2_TREE_DISCONNECT_HE]),
1364 		   atomic_read(&failed[SMB2_TREE_DISCONNECT_HE]));
1365 	seq_printf(m, "\nCreates: %d total %d failed",
1366 		   atomic_read(&sent[SMB2_CREATE_HE]),
1367 		   atomic_read(&failed[SMB2_CREATE_HE]));
1368 	seq_printf(m, "\nCloses: %d total %d failed",
1369 		   atomic_read(&sent[SMB2_CLOSE_HE]),
1370 		   atomic_read(&failed[SMB2_CLOSE_HE]));
1371 	seq_printf(m, "\nFlushes: %d total %d failed",
1372 		   atomic_read(&sent[SMB2_FLUSH_HE]),
1373 		   atomic_read(&failed[SMB2_FLUSH_HE]));
1374 	seq_printf(m, "\nReads: %d total %d failed",
1375 		   atomic_read(&sent[SMB2_READ_HE]),
1376 		   atomic_read(&failed[SMB2_READ_HE]));
1377 	seq_printf(m, "\nWrites: %d total %d failed",
1378 		   atomic_read(&sent[SMB2_WRITE_HE]),
1379 		   atomic_read(&failed[SMB2_WRITE_HE]));
1380 	seq_printf(m, "\nLocks: %d total %d failed",
1381 		   atomic_read(&sent[SMB2_LOCK_HE]),
1382 		   atomic_read(&failed[SMB2_LOCK_HE]));
1383 	seq_printf(m, "\nIOCTLs: %d total %d failed",
1384 		   atomic_read(&sent[SMB2_IOCTL_HE]),
1385 		   atomic_read(&failed[SMB2_IOCTL_HE]));
1386 	seq_printf(m, "\nQueryDirectories: %d total %d failed",
1387 		   atomic_read(&sent[SMB2_QUERY_DIRECTORY_HE]),
1388 		   atomic_read(&failed[SMB2_QUERY_DIRECTORY_HE]));
1389 	seq_printf(m, "\nChangeNotifies: %d total %d failed",
1390 		   atomic_read(&sent[SMB2_CHANGE_NOTIFY_HE]),
1391 		   atomic_read(&failed[SMB2_CHANGE_NOTIFY_HE]));
1392 	seq_printf(m, "\nQueryInfos: %d total %d failed",
1393 		   atomic_read(&sent[SMB2_QUERY_INFO_HE]),
1394 		   atomic_read(&failed[SMB2_QUERY_INFO_HE]));
1395 	seq_printf(m, "\nSetInfos: %d total %d failed",
1396 		   atomic_read(&sent[SMB2_SET_INFO_HE]),
1397 		   atomic_read(&failed[SMB2_SET_INFO_HE]));
1398 	seq_printf(m, "\nOplockBreaks: %d sent %d failed",
1399 		   atomic_read(&sent[SMB2_OPLOCK_BREAK_HE]),
1400 		   atomic_read(&failed[SMB2_OPLOCK_BREAK_HE]));
1401 }
1402 
1403 static void
smb2_set_fid(struct cifsFileInfo * cfile,struct cifs_fid * fid,__u32 oplock)1404 smb2_set_fid(struct cifsFileInfo *cfile, struct cifs_fid *fid, __u32 oplock)
1405 {
1406 	struct cifsInodeInfo *cinode = CIFS_I(d_inode(cfile->dentry));
1407 	struct TCP_Server_Info *server = tlink_tcon(cfile->tlink)->ses->server;
1408 
1409 	cfile->fid.persistent_fid = fid->persistent_fid;
1410 	cfile->fid.volatile_fid = fid->volatile_fid;
1411 	cfile->fid.access = fid->access;
1412 #ifdef CONFIG_CIFS_DEBUG2
1413 	cfile->fid.mid = fid->mid;
1414 #endif /* CIFS_DEBUG2 */
1415 	server->ops->set_oplock_level(cinode, oplock, fid->epoch,
1416 				      &fid->purge_cache);
1417 	cinode->can_cache_brlcks = CIFS_CACHE_WRITE(cinode);
1418 	memcpy(cfile->fid.create_guid, fid->create_guid, 16);
1419 }
1420 
1421 static void
smb2_close_file(const unsigned int xid,struct cifs_tcon * tcon,struct cifs_fid * fid)1422 smb2_close_file(const unsigned int xid, struct cifs_tcon *tcon,
1423 		struct cifs_fid *fid)
1424 {
1425 	SMB2_close(xid, tcon, fid->persistent_fid, fid->volatile_fid);
1426 }
1427 
1428 static void
smb2_close_getattr(const unsigned int xid,struct cifs_tcon * tcon,struct cifsFileInfo * cfile)1429 smb2_close_getattr(const unsigned int xid, struct cifs_tcon *tcon,
1430 		   struct cifsFileInfo *cfile)
1431 {
1432 	struct smb2_file_network_open_info file_inf;
1433 	struct inode *inode;
1434 	int rc;
1435 
1436 	rc = __SMB2_close(xid, tcon, cfile->fid.persistent_fid,
1437 		   cfile->fid.volatile_fid, &file_inf);
1438 	if (rc)
1439 		return;
1440 
1441 	inode = d_inode(cfile->dentry);
1442 
1443 	spin_lock(&inode->i_lock);
1444 	CIFS_I(inode)->time = jiffies;
1445 
1446 	/* Creation time should not need to be updated on close */
1447 	if (file_inf.LastWriteTime)
1448 		inode->i_mtime = cifs_NTtimeToUnix(file_inf.LastWriteTime);
1449 	if (file_inf.ChangeTime)
1450 		inode->i_ctime = cifs_NTtimeToUnix(file_inf.ChangeTime);
1451 	if (file_inf.LastAccessTime)
1452 		inode->i_atime = cifs_NTtimeToUnix(file_inf.LastAccessTime);
1453 
1454 	/*
1455 	 * i_blocks is not related to (i_size / i_blksize),
1456 	 * but instead 512 byte (2**9) size is required for
1457 	 * calculating num blocks.
1458 	 */
1459 	if (le64_to_cpu(file_inf.AllocationSize) > 4096)
1460 		inode->i_blocks =
1461 			(512 - 1 + le64_to_cpu(file_inf.AllocationSize)) >> 9;
1462 
1463 	/* End of file and Attributes should not have to be updated on close */
1464 	spin_unlock(&inode->i_lock);
1465 }
1466 
1467 static int
SMB2_request_res_key(const unsigned int xid,struct cifs_tcon * tcon,u64 persistent_fid,u64 volatile_fid,struct copychunk_ioctl * pcchunk)1468 SMB2_request_res_key(const unsigned int xid, struct cifs_tcon *tcon,
1469 		     u64 persistent_fid, u64 volatile_fid,
1470 		     struct copychunk_ioctl *pcchunk)
1471 {
1472 	int rc;
1473 	unsigned int ret_data_len;
1474 	struct resume_key_req *res_key;
1475 
1476 	rc = SMB2_ioctl(xid, tcon, persistent_fid, volatile_fid,
1477 			FSCTL_SRV_REQUEST_RESUME_KEY, NULL, 0 /* no input */,
1478 			CIFSMaxBufSize, (char **)&res_key, &ret_data_len);
1479 
1480 	if (rc) {
1481 		cifs_tcon_dbg(VFS, "refcpy ioctl error %d getting resume key\n", rc);
1482 		goto req_res_key_exit;
1483 	}
1484 	if (ret_data_len < sizeof(struct resume_key_req)) {
1485 		cifs_tcon_dbg(VFS, "Invalid refcopy resume key length\n");
1486 		rc = -EINVAL;
1487 		goto req_res_key_exit;
1488 	}
1489 	memcpy(pcchunk->SourceKey, res_key->ResumeKey, COPY_CHUNK_RES_KEY_SIZE);
1490 
1491 req_res_key_exit:
1492 	kfree(res_key);
1493 	return rc;
1494 }
1495 
1496 struct iqi_vars {
1497 	struct smb_rqst rqst[3];
1498 	struct kvec rsp_iov[3];
1499 	struct kvec open_iov[SMB2_CREATE_IOV_SIZE];
1500 	struct kvec qi_iov[1];
1501 	struct kvec io_iov[SMB2_IOCTL_IOV_SIZE];
1502 	struct kvec si_iov[SMB2_SET_INFO_IOV_SIZE];
1503 	struct kvec close_iov[1];
1504 };
1505 
1506 static int
smb2_ioctl_query_info(const unsigned int xid,struct cifs_tcon * tcon,struct cifs_sb_info * cifs_sb,__le16 * path,int is_dir,unsigned long p)1507 smb2_ioctl_query_info(const unsigned int xid,
1508 		      struct cifs_tcon *tcon,
1509 		      struct cifs_sb_info *cifs_sb,
1510 		      __le16 *path, int is_dir,
1511 		      unsigned long p)
1512 {
1513 	struct iqi_vars *vars;
1514 	struct smb_rqst *rqst;
1515 	struct kvec *rsp_iov;
1516 	struct cifs_ses *ses = tcon->ses;
1517 	struct TCP_Server_Info *server = cifs_pick_channel(ses);
1518 	char __user *arg = (char __user *)p;
1519 	struct smb_query_info qi;
1520 	struct smb_query_info __user *pqi;
1521 	int rc = 0;
1522 	int flags = CIFS_CP_CREATE_CLOSE_OP;
1523 	struct smb2_query_info_rsp *qi_rsp = NULL;
1524 	struct smb2_ioctl_rsp *io_rsp = NULL;
1525 	void *buffer = NULL;
1526 	int resp_buftype[3];
1527 	struct cifs_open_parms oparms;
1528 	u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
1529 	struct cifs_fid fid;
1530 	unsigned int size[2];
1531 	void *data[2];
1532 	int create_options = is_dir ? CREATE_NOT_FILE : CREATE_NOT_DIR;
1533 	void (*free_req1_func)(struct smb_rqst *r);
1534 
1535 	vars = kzalloc(sizeof(*vars), GFP_ATOMIC);
1536 	if (vars == NULL)
1537 		return -ENOMEM;
1538 	rqst = &vars->rqst[0];
1539 	rsp_iov = &vars->rsp_iov[0];
1540 
1541 	resp_buftype[0] = resp_buftype[1] = resp_buftype[2] = CIFS_NO_BUFFER;
1542 
1543 	if (copy_from_user(&qi, arg, sizeof(struct smb_query_info))) {
1544 		rc = -EFAULT;
1545 		goto free_vars;
1546 	}
1547 	if (qi.output_buffer_length > 1024) {
1548 		rc = -EINVAL;
1549 		goto free_vars;
1550 	}
1551 
1552 	if (!ses || !server) {
1553 		rc = -EIO;
1554 		goto free_vars;
1555 	}
1556 
1557 	if (smb3_encryption_required(tcon))
1558 		flags |= CIFS_TRANSFORM_REQ;
1559 
1560 	if (qi.output_buffer_length) {
1561 		buffer = memdup_user(arg + sizeof(struct smb_query_info), qi.output_buffer_length);
1562 		if (IS_ERR(buffer)) {
1563 			rc = PTR_ERR(buffer);
1564 			goto free_vars;
1565 		}
1566 	}
1567 
1568 	/* Open */
1569 	rqst[0].rq_iov = &vars->open_iov[0];
1570 	rqst[0].rq_nvec = SMB2_CREATE_IOV_SIZE;
1571 
1572 	memset(&oparms, 0, sizeof(oparms));
1573 	oparms.tcon = tcon;
1574 	oparms.disposition = FILE_OPEN;
1575 	oparms.create_options = cifs_create_options(cifs_sb, create_options);
1576 	oparms.fid = &fid;
1577 	oparms.reconnect = false;
1578 
1579 	if (qi.flags & PASSTHRU_FSCTL) {
1580 		switch (qi.info_type & FSCTL_DEVICE_ACCESS_MASK) {
1581 		case FSCTL_DEVICE_ACCESS_FILE_READ_WRITE_ACCESS:
1582 			oparms.desired_access = FILE_READ_DATA | FILE_WRITE_DATA | FILE_READ_ATTRIBUTES | SYNCHRONIZE;
1583 			break;
1584 		case FSCTL_DEVICE_ACCESS_FILE_ANY_ACCESS:
1585 			oparms.desired_access = GENERIC_ALL;
1586 			break;
1587 		case FSCTL_DEVICE_ACCESS_FILE_READ_ACCESS:
1588 			oparms.desired_access = GENERIC_READ;
1589 			break;
1590 		case FSCTL_DEVICE_ACCESS_FILE_WRITE_ACCESS:
1591 			oparms.desired_access = GENERIC_WRITE;
1592 			break;
1593 		}
1594 	} else if (qi.flags & PASSTHRU_SET_INFO) {
1595 		oparms.desired_access = GENERIC_WRITE;
1596 	} else {
1597 		oparms.desired_access = FILE_READ_ATTRIBUTES | READ_CONTROL;
1598 	}
1599 
1600 	rc = SMB2_open_init(tcon, server,
1601 			    &rqst[0], &oplock, &oparms, path);
1602 	if (rc)
1603 		goto free_output_buffer;
1604 	smb2_set_next_command(tcon, &rqst[0]);
1605 
1606 	/* Query */
1607 	if (qi.flags & PASSTHRU_FSCTL) {
1608 		/* Can eventually relax perm check since server enforces too */
1609 		if (!capable(CAP_SYS_ADMIN)) {
1610 			rc = -EPERM;
1611 			goto free_open_req;
1612 		}
1613 		rqst[1].rq_iov = &vars->io_iov[0];
1614 		rqst[1].rq_nvec = SMB2_IOCTL_IOV_SIZE;
1615 
1616 		rc = SMB2_ioctl_init(tcon, server, &rqst[1], COMPOUND_FID, COMPOUND_FID,
1617 				     qi.info_type, buffer, qi.output_buffer_length,
1618 				     CIFSMaxBufSize - MAX_SMB2_CREATE_RESPONSE_SIZE -
1619 				     MAX_SMB2_CLOSE_RESPONSE_SIZE);
1620 		free_req1_func = SMB2_ioctl_free;
1621 	} else if (qi.flags == PASSTHRU_SET_INFO) {
1622 		/* Can eventually relax perm check since server enforces too */
1623 		if (!capable(CAP_SYS_ADMIN)) {
1624 			rc = -EPERM;
1625 			goto free_open_req;
1626 		}
1627 		if (qi.output_buffer_length < 8) {
1628 			rc = -EINVAL;
1629 			goto free_open_req;
1630 		}
1631 		rqst[1].rq_iov = &vars->si_iov[0];
1632 		rqst[1].rq_nvec = 1;
1633 
1634 		/* MS-FSCC 2.4.13 FileEndOfFileInformation */
1635 		size[0] = 8;
1636 		data[0] = buffer;
1637 
1638 		rc = SMB2_set_info_init(tcon, server, &rqst[1], COMPOUND_FID, COMPOUND_FID,
1639 					current->tgid, FILE_END_OF_FILE_INFORMATION,
1640 					SMB2_O_INFO_FILE, 0, data, size);
1641 		free_req1_func = SMB2_set_info_free;
1642 	} else if (qi.flags == PASSTHRU_QUERY_INFO) {
1643 		rqst[1].rq_iov = &vars->qi_iov[0];
1644 		rqst[1].rq_nvec = 1;
1645 
1646 		rc = SMB2_query_info_init(tcon, server,
1647 				  &rqst[1], COMPOUND_FID,
1648 				  COMPOUND_FID, qi.file_info_class,
1649 				  qi.info_type, qi.additional_information,
1650 				  qi.input_buffer_length,
1651 				  qi.output_buffer_length, buffer);
1652 		free_req1_func = SMB2_query_info_free;
1653 	} else { /* unknown flags */
1654 		cifs_tcon_dbg(VFS, "Invalid passthru query flags: 0x%x\n",
1655 			      qi.flags);
1656 		rc = -EINVAL;
1657 	}
1658 
1659 	if (rc)
1660 		goto free_open_req;
1661 	smb2_set_next_command(tcon, &rqst[1]);
1662 	smb2_set_related(&rqst[1]);
1663 
1664 	/* Close */
1665 	rqst[2].rq_iov = &vars->close_iov[0];
1666 	rqst[2].rq_nvec = 1;
1667 
1668 	rc = SMB2_close_init(tcon, server,
1669 			     &rqst[2], COMPOUND_FID, COMPOUND_FID, false);
1670 	if (rc)
1671 		goto free_req_1;
1672 	smb2_set_related(&rqst[2]);
1673 
1674 	rc = compound_send_recv(xid, ses, server,
1675 				flags, 3, rqst,
1676 				resp_buftype, rsp_iov);
1677 	if (rc)
1678 		goto out;
1679 
1680 	/* No need to bump num_remote_opens since handle immediately closed */
1681 	if (qi.flags & PASSTHRU_FSCTL) {
1682 		pqi = (struct smb_query_info __user *)arg;
1683 		io_rsp = (struct smb2_ioctl_rsp *)rsp_iov[1].iov_base;
1684 		if (le32_to_cpu(io_rsp->OutputCount) < qi.input_buffer_length)
1685 			qi.input_buffer_length = le32_to_cpu(io_rsp->OutputCount);
1686 		if (qi.input_buffer_length > 0 &&
1687 		    le32_to_cpu(io_rsp->OutputOffset) + qi.input_buffer_length
1688 		    > rsp_iov[1].iov_len) {
1689 			rc = -EFAULT;
1690 			goto out;
1691 		}
1692 
1693 		if (copy_to_user(&pqi->input_buffer_length,
1694 				 &qi.input_buffer_length,
1695 				 sizeof(qi.input_buffer_length))) {
1696 			rc = -EFAULT;
1697 			goto out;
1698 		}
1699 
1700 		if (copy_to_user((void __user *)pqi + sizeof(struct smb_query_info),
1701 				 (const void *)io_rsp + le32_to_cpu(io_rsp->OutputOffset),
1702 				 qi.input_buffer_length))
1703 			rc = -EFAULT;
1704 	} else {
1705 		pqi = (struct smb_query_info __user *)arg;
1706 		qi_rsp = (struct smb2_query_info_rsp *)rsp_iov[1].iov_base;
1707 		if (le32_to_cpu(qi_rsp->OutputBufferLength) < qi.input_buffer_length)
1708 			qi.input_buffer_length = le32_to_cpu(qi_rsp->OutputBufferLength);
1709 		if (copy_to_user(&pqi->input_buffer_length,
1710 				 &qi.input_buffer_length,
1711 				 sizeof(qi.input_buffer_length))) {
1712 			rc = -EFAULT;
1713 			goto out;
1714 		}
1715 
1716 		if (copy_to_user(pqi + 1, qi_rsp->Buffer,
1717 				 qi.input_buffer_length))
1718 			rc = -EFAULT;
1719 	}
1720 
1721 out:
1722 	free_rsp_buf(resp_buftype[0], rsp_iov[0].iov_base);
1723 	free_rsp_buf(resp_buftype[1], rsp_iov[1].iov_base);
1724 	free_rsp_buf(resp_buftype[2], rsp_iov[2].iov_base);
1725 	SMB2_close_free(&rqst[2]);
1726 free_req_1:
1727 	free_req1_func(&rqst[1]);
1728 free_open_req:
1729 	SMB2_open_free(&rqst[0]);
1730 free_output_buffer:
1731 	kfree(buffer);
1732 free_vars:
1733 	kfree(vars);
1734 	return rc;
1735 }
1736 
1737 static ssize_t
smb2_copychunk_range(const unsigned int xid,struct cifsFileInfo * srcfile,struct cifsFileInfo * trgtfile,u64 src_off,u64 len,u64 dest_off)1738 smb2_copychunk_range(const unsigned int xid,
1739 			struct cifsFileInfo *srcfile,
1740 			struct cifsFileInfo *trgtfile, u64 src_off,
1741 			u64 len, u64 dest_off)
1742 {
1743 	int rc;
1744 	unsigned int ret_data_len;
1745 	struct copychunk_ioctl *pcchunk;
1746 	struct copychunk_ioctl_rsp *retbuf = NULL;
1747 	struct cifs_tcon *tcon;
1748 	int chunks_copied = 0;
1749 	bool chunk_sizes_updated = false;
1750 	ssize_t bytes_written, total_bytes_written = 0;
1751 	struct inode *inode;
1752 
1753 	pcchunk = kmalloc(sizeof(struct copychunk_ioctl), GFP_KERNEL);
1754 
1755 	/*
1756 	 * We need to flush all unwritten data before we can send the
1757 	 * copychunk ioctl to the server.
1758 	 */
1759 	inode = d_inode(trgtfile->dentry);
1760 	filemap_write_and_wait(inode->i_mapping);
1761 
1762 	if (pcchunk == NULL)
1763 		return -ENOMEM;
1764 
1765 	cifs_dbg(FYI, "%s: about to call request res key\n", __func__);
1766 	/* Request a key from the server to identify the source of the copy */
1767 	rc = SMB2_request_res_key(xid, tlink_tcon(srcfile->tlink),
1768 				srcfile->fid.persistent_fid,
1769 				srcfile->fid.volatile_fid, pcchunk);
1770 
1771 	/* Note: request_res_key sets res_key null only if rc !=0 */
1772 	if (rc)
1773 		goto cchunk_out;
1774 
1775 	/* For now array only one chunk long, will make more flexible later */
1776 	pcchunk->ChunkCount = cpu_to_le32(1);
1777 	pcchunk->Reserved = 0;
1778 	pcchunk->Reserved2 = 0;
1779 
1780 	tcon = tlink_tcon(trgtfile->tlink);
1781 
1782 	while (len > 0) {
1783 		pcchunk->SourceOffset = cpu_to_le64(src_off);
1784 		pcchunk->TargetOffset = cpu_to_le64(dest_off);
1785 		pcchunk->Length =
1786 			cpu_to_le32(min_t(u32, len, tcon->max_bytes_chunk));
1787 
1788 		/* Request server copy to target from src identified by key */
1789 		kfree(retbuf);
1790 		retbuf = NULL;
1791 		rc = SMB2_ioctl(xid, tcon, trgtfile->fid.persistent_fid,
1792 			trgtfile->fid.volatile_fid, FSCTL_SRV_COPYCHUNK_WRITE,
1793 			(char *)pcchunk, sizeof(struct copychunk_ioctl),
1794 			CIFSMaxBufSize, (char **)&retbuf, &ret_data_len);
1795 		if (rc == 0) {
1796 			if (ret_data_len !=
1797 					sizeof(struct copychunk_ioctl_rsp)) {
1798 				cifs_tcon_dbg(VFS, "Invalid cchunk response size\n");
1799 				rc = -EIO;
1800 				goto cchunk_out;
1801 			}
1802 			if (retbuf->TotalBytesWritten == 0) {
1803 				cifs_dbg(FYI, "no bytes copied\n");
1804 				rc = -EIO;
1805 				goto cchunk_out;
1806 			}
1807 			/*
1808 			 * Check if server claimed to write more than we asked
1809 			 */
1810 			if (le32_to_cpu(retbuf->TotalBytesWritten) >
1811 			    le32_to_cpu(pcchunk->Length)) {
1812 				cifs_tcon_dbg(VFS, "Invalid copy chunk response\n");
1813 				rc = -EIO;
1814 				goto cchunk_out;
1815 			}
1816 			if (le32_to_cpu(retbuf->ChunksWritten) != 1) {
1817 				cifs_tcon_dbg(VFS, "Invalid num chunks written\n");
1818 				rc = -EIO;
1819 				goto cchunk_out;
1820 			}
1821 			chunks_copied++;
1822 
1823 			bytes_written = le32_to_cpu(retbuf->TotalBytesWritten);
1824 			src_off += bytes_written;
1825 			dest_off += bytes_written;
1826 			len -= bytes_written;
1827 			total_bytes_written += bytes_written;
1828 
1829 			cifs_dbg(FYI, "Chunks %d PartialChunk %d Total %zu\n",
1830 				le32_to_cpu(retbuf->ChunksWritten),
1831 				le32_to_cpu(retbuf->ChunkBytesWritten),
1832 				bytes_written);
1833 		} else if (rc == -EINVAL) {
1834 			if (ret_data_len != sizeof(struct copychunk_ioctl_rsp))
1835 				goto cchunk_out;
1836 
1837 			cifs_dbg(FYI, "MaxChunks %d BytesChunk %d MaxCopy %d\n",
1838 				le32_to_cpu(retbuf->ChunksWritten),
1839 				le32_to_cpu(retbuf->ChunkBytesWritten),
1840 				le32_to_cpu(retbuf->TotalBytesWritten));
1841 
1842 			/*
1843 			 * Check if this is the first request using these sizes,
1844 			 * (ie check if copy succeed once with original sizes
1845 			 * and check if the server gave us different sizes after
1846 			 * we already updated max sizes on previous request).
1847 			 * if not then why is the server returning an error now
1848 			 */
1849 			if ((chunks_copied != 0) || chunk_sizes_updated)
1850 				goto cchunk_out;
1851 
1852 			/* Check that server is not asking us to grow size */
1853 			if (le32_to_cpu(retbuf->ChunkBytesWritten) <
1854 					tcon->max_bytes_chunk)
1855 				tcon->max_bytes_chunk =
1856 					le32_to_cpu(retbuf->ChunkBytesWritten);
1857 			else
1858 				goto cchunk_out; /* server gave us bogus size */
1859 
1860 			/* No need to change MaxChunks since already set to 1 */
1861 			chunk_sizes_updated = true;
1862 		} else
1863 			goto cchunk_out;
1864 	}
1865 
1866 cchunk_out:
1867 	kfree(pcchunk);
1868 	kfree(retbuf);
1869 	if (rc)
1870 		return rc;
1871 	else
1872 		return total_bytes_written;
1873 }
1874 
1875 static int
smb2_flush_file(const unsigned int xid,struct cifs_tcon * tcon,struct cifs_fid * fid)1876 smb2_flush_file(const unsigned int xid, struct cifs_tcon *tcon,
1877 		struct cifs_fid *fid)
1878 {
1879 	return SMB2_flush(xid, tcon, fid->persistent_fid, fid->volatile_fid);
1880 }
1881 
1882 static unsigned int
smb2_read_data_offset(char * buf)1883 smb2_read_data_offset(char *buf)
1884 {
1885 	struct smb2_read_rsp *rsp = (struct smb2_read_rsp *)buf;
1886 
1887 	return rsp->DataOffset;
1888 }
1889 
1890 static unsigned int
smb2_read_data_length(char * buf,bool in_remaining)1891 smb2_read_data_length(char *buf, bool in_remaining)
1892 {
1893 	struct smb2_read_rsp *rsp = (struct smb2_read_rsp *)buf;
1894 
1895 	if (in_remaining)
1896 		return le32_to_cpu(rsp->DataRemaining);
1897 
1898 	return le32_to_cpu(rsp->DataLength);
1899 }
1900 
1901 
1902 static int
smb2_sync_read(const unsigned int xid,struct cifs_fid * pfid,struct cifs_io_parms * parms,unsigned int * bytes_read,char ** buf,int * buf_type)1903 smb2_sync_read(const unsigned int xid, struct cifs_fid *pfid,
1904 	       struct cifs_io_parms *parms, unsigned int *bytes_read,
1905 	       char **buf, int *buf_type)
1906 {
1907 	parms->persistent_fid = pfid->persistent_fid;
1908 	parms->volatile_fid = pfid->volatile_fid;
1909 	return SMB2_read(xid, parms, bytes_read, buf, buf_type);
1910 }
1911 
1912 static int
smb2_sync_write(const unsigned int xid,struct cifs_fid * pfid,struct cifs_io_parms * parms,unsigned int * written,struct kvec * iov,unsigned long nr_segs)1913 smb2_sync_write(const unsigned int xid, struct cifs_fid *pfid,
1914 		struct cifs_io_parms *parms, unsigned int *written,
1915 		struct kvec *iov, unsigned long nr_segs)
1916 {
1917 
1918 	parms->persistent_fid = pfid->persistent_fid;
1919 	parms->volatile_fid = pfid->volatile_fid;
1920 	return SMB2_write(xid, parms, written, iov, nr_segs);
1921 }
1922 
1923 /* Set or clear the SPARSE_FILE attribute based on value passed in setsparse */
smb2_set_sparse(const unsigned int xid,struct cifs_tcon * tcon,struct cifsFileInfo * cfile,struct inode * inode,__u8 setsparse)1924 static bool smb2_set_sparse(const unsigned int xid, struct cifs_tcon *tcon,
1925 		struct cifsFileInfo *cfile, struct inode *inode, __u8 setsparse)
1926 {
1927 	struct cifsInodeInfo *cifsi;
1928 	int rc;
1929 
1930 	cifsi = CIFS_I(inode);
1931 
1932 	/* if file already sparse don't bother setting sparse again */
1933 	if ((cifsi->cifsAttrs & FILE_ATTRIBUTE_SPARSE_FILE) && setsparse)
1934 		return true; /* already sparse */
1935 
1936 	if (!(cifsi->cifsAttrs & FILE_ATTRIBUTE_SPARSE_FILE) && !setsparse)
1937 		return true; /* already not sparse */
1938 
1939 	/*
1940 	 * Can't check for sparse support on share the usual way via the
1941 	 * FS attribute info (FILE_SUPPORTS_SPARSE_FILES) on the share
1942 	 * since Samba server doesn't set the flag on the share, yet
1943 	 * supports the set sparse FSCTL and returns sparse correctly
1944 	 * in the file attributes. If we fail setting sparse though we
1945 	 * mark that server does not support sparse files for this share
1946 	 * to avoid repeatedly sending the unsupported fsctl to server
1947 	 * if the file is repeatedly extended.
1948 	 */
1949 	if (tcon->broken_sparse_sup)
1950 		return false;
1951 
1952 	rc = SMB2_ioctl(xid, tcon, cfile->fid.persistent_fid,
1953 			cfile->fid.volatile_fid, FSCTL_SET_SPARSE,
1954 			&setsparse, 1, CIFSMaxBufSize, NULL, NULL);
1955 	if (rc) {
1956 		tcon->broken_sparse_sup = true;
1957 		cifs_dbg(FYI, "set sparse rc = %d\n", rc);
1958 		return false;
1959 	}
1960 
1961 	if (setsparse)
1962 		cifsi->cifsAttrs |= FILE_ATTRIBUTE_SPARSE_FILE;
1963 	else
1964 		cifsi->cifsAttrs &= (~FILE_ATTRIBUTE_SPARSE_FILE);
1965 
1966 	return true;
1967 }
1968 
1969 static int
smb2_set_file_size(const unsigned int xid,struct cifs_tcon * tcon,struct cifsFileInfo * cfile,__u64 size,bool set_alloc)1970 smb2_set_file_size(const unsigned int xid, struct cifs_tcon *tcon,
1971 		   struct cifsFileInfo *cfile, __u64 size, bool set_alloc)
1972 {
1973 	__le64 eof = cpu_to_le64(size);
1974 	struct inode *inode;
1975 
1976 	/*
1977 	 * If extending file more than one page make sparse. Many Linux fs
1978 	 * make files sparse by default when extending via ftruncate
1979 	 */
1980 	inode = d_inode(cfile->dentry);
1981 
1982 	if (!set_alloc && (size > inode->i_size + 8192)) {
1983 		__u8 set_sparse = 1;
1984 
1985 		/* whether set sparse succeeds or not, extend the file */
1986 		smb2_set_sparse(xid, tcon, cfile, inode, set_sparse);
1987 	}
1988 
1989 	return SMB2_set_eof(xid, tcon, cfile->fid.persistent_fid,
1990 			    cfile->fid.volatile_fid, cfile->pid, &eof);
1991 }
1992 
1993 static int
smb2_duplicate_extents(const unsigned int xid,struct cifsFileInfo * srcfile,struct cifsFileInfo * trgtfile,u64 src_off,u64 len,u64 dest_off)1994 smb2_duplicate_extents(const unsigned int xid,
1995 			struct cifsFileInfo *srcfile,
1996 			struct cifsFileInfo *trgtfile, u64 src_off,
1997 			u64 len, u64 dest_off)
1998 {
1999 	int rc;
2000 	unsigned int ret_data_len;
2001 	struct inode *inode;
2002 	struct duplicate_extents_to_file dup_ext_buf;
2003 	struct cifs_tcon *tcon = tlink_tcon(trgtfile->tlink);
2004 
2005 	/* server fileays advertise duplicate extent support with this flag */
2006 	if ((le32_to_cpu(tcon->fsAttrInfo.Attributes) &
2007 	     FILE_SUPPORTS_BLOCK_REFCOUNTING) == 0)
2008 		return -EOPNOTSUPP;
2009 
2010 	dup_ext_buf.VolatileFileHandle = srcfile->fid.volatile_fid;
2011 	dup_ext_buf.PersistentFileHandle = srcfile->fid.persistent_fid;
2012 	dup_ext_buf.SourceFileOffset = cpu_to_le64(src_off);
2013 	dup_ext_buf.TargetFileOffset = cpu_to_le64(dest_off);
2014 	dup_ext_buf.ByteCount = cpu_to_le64(len);
2015 	cifs_dbg(FYI, "Duplicate extents: src off %lld dst off %lld len %lld\n",
2016 		src_off, dest_off, len);
2017 
2018 	inode = d_inode(trgtfile->dentry);
2019 	if (inode->i_size < dest_off + len) {
2020 		rc = smb2_set_file_size(xid, tcon, trgtfile, dest_off + len, false);
2021 		if (rc)
2022 			goto duplicate_extents_out;
2023 
2024 		/*
2025 		 * Although also could set plausible allocation size (i_blocks)
2026 		 * here in addition to setting the file size, in reflink
2027 		 * it is likely that the target file is sparse. Its allocation
2028 		 * size will be queried on next revalidate, but it is important
2029 		 * to make sure that file's cached size is updated immediately
2030 		 */
2031 		cifs_setsize(inode, dest_off + len);
2032 	}
2033 	rc = SMB2_ioctl(xid, tcon, trgtfile->fid.persistent_fid,
2034 			trgtfile->fid.volatile_fid,
2035 			FSCTL_DUPLICATE_EXTENTS_TO_FILE,
2036 			(char *)&dup_ext_buf,
2037 			sizeof(struct duplicate_extents_to_file),
2038 			CIFSMaxBufSize, NULL,
2039 			&ret_data_len);
2040 
2041 	if (ret_data_len > 0)
2042 		cifs_dbg(FYI, "Non-zero response length in duplicate extents\n");
2043 
2044 duplicate_extents_out:
2045 	return rc;
2046 }
2047 
2048 static int
smb2_set_compression(const unsigned int xid,struct cifs_tcon * tcon,struct cifsFileInfo * cfile)2049 smb2_set_compression(const unsigned int xid, struct cifs_tcon *tcon,
2050 		   struct cifsFileInfo *cfile)
2051 {
2052 	return SMB2_set_compression(xid, tcon, cfile->fid.persistent_fid,
2053 			    cfile->fid.volatile_fid);
2054 }
2055 
2056 static int
smb3_set_integrity(const unsigned int xid,struct cifs_tcon * tcon,struct cifsFileInfo * cfile)2057 smb3_set_integrity(const unsigned int xid, struct cifs_tcon *tcon,
2058 		   struct cifsFileInfo *cfile)
2059 {
2060 	struct fsctl_set_integrity_information_req integr_info;
2061 	unsigned int ret_data_len;
2062 
2063 	integr_info.ChecksumAlgorithm = cpu_to_le16(CHECKSUM_TYPE_UNCHANGED);
2064 	integr_info.Flags = 0;
2065 	integr_info.Reserved = 0;
2066 
2067 	return SMB2_ioctl(xid, tcon, cfile->fid.persistent_fid,
2068 			cfile->fid.volatile_fid,
2069 			FSCTL_SET_INTEGRITY_INFORMATION,
2070 			(char *)&integr_info,
2071 			sizeof(struct fsctl_set_integrity_information_req),
2072 			CIFSMaxBufSize, NULL,
2073 			&ret_data_len);
2074 
2075 }
2076 
2077 /* GMT Token is @GMT-YYYY.MM.DD-HH.MM.SS Unicode which is 48 bytes + null */
2078 #define GMT_TOKEN_SIZE 50
2079 
2080 #define MIN_SNAPSHOT_ARRAY_SIZE 16 /* See MS-SMB2 section 3.3.5.15.1 */
2081 
2082 /*
2083  * Input buffer contains (empty) struct smb_snapshot array with size filled in
2084  * For output see struct SRV_SNAPSHOT_ARRAY in MS-SMB2 section 2.2.32.2
2085  */
2086 static int
smb3_enum_snapshots(const unsigned int xid,struct cifs_tcon * tcon,struct cifsFileInfo * cfile,void __user * ioc_buf)2087 smb3_enum_snapshots(const unsigned int xid, struct cifs_tcon *tcon,
2088 		   struct cifsFileInfo *cfile, void __user *ioc_buf)
2089 {
2090 	char *retbuf = NULL;
2091 	unsigned int ret_data_len = 0;
2092 	int rc;
2093 	u32 max_response_size;
2094 	struct smb_snapshot_array snapshot_in;
2095 
2096 	/*
2097 	 * On the first query to enumerate the list of snapshots available
2098 	 * for this volume the buffer begins with 0 (number of snapshots
2099 	 * which can be returned is zero since at that point we do not know
2100 	 * how big the buffer needs to be). On the second query,
2101 	 * it (ret_data_len) is set to number of snapshots so we can
2102 	 * know to set the maximum response size larger (see below).
2103 	 */
2104 	if (get_user(ret_data_len, (unsigned int __user *)ioc_buf))
2105 		return -EFAULT;
2106 
2107 	/*
2108 	 * Note that for snapshot queries that servers like Azure expect that
2109 	 * the first query be minimal size (and just used to get the number/size
2110 	 * of previous versions) so response size must be specified as EXACTLY
2111 	 * sizeof(struct snapshot_array) which is 16 when rounded up to multiple
2112 	 * of eight bytes.
2113 	 */
2114 	if (ret_data_len == 0)
2115 		max_response_size = MIN_SNAPSHOT_ARRAY_SIZE;
2116 	else
2117 		max_response_size = CIFSMaxBufSize;
2118 
2119 	rc = SMB2_ioctl(xid, tcon, cfile->fid.persistent_fid,
2120 			cfile->fid.volatile_fid,
2121 			FSCTL_SRV_ENUMERATE_SNAPSHOTS,
2122 			NULL, 0 /* no input data */, max_response_size,
2123 			(char **)&retbuf,
2124 			&ret_data_len);
2125 	cifs_dbg(FYI, "enum snaphots ioctl returned %d and ret buflen is %d\n",
2126 			rc, ret_data_len);
2127 	if (rc)
2128 		return rc;
2129 
2130 	if (ret_data_len && (ioc_buf != NULL) && (retbuf != NULL)) {
2131 		/* Fixup buffer */
2132 		if (copy_from_user(&snapshot_in, ioc_buf,
2133 		    sizeof(struct smb_snapshot_array))) {
2134 			rc = -EFAULT;
2135 			kfree(retbuf);
2136 			return rc;
2137 		}
2138 
2139 		/*
2140 		 * Check for min size, ie not large enough to fit even one GMT
2141 		 * token (snapshot).  On the first ioctl some users may pass in
2142 		 * smaller size (or zero) to simply get the size of the array
2143 		 * so the user space caller can allocate sufficient memory
2144 		 * and retry the ioctl again with larger array size sufficient
2145 		 * to hold all of the snapshot GMT tokens on the second try.
2146 		 */
2147 		if (snapshot_in.snapshot_array_size < GMT_TOKEN_SIZE)
2148 			ret_data_len = sizeof(struct smb_snapshot_array);
2149 
2150 		/*
2151 		 * We return struct SRV_SNAPSHOT_ARRAY, followed by
2152 		 * the snapshot array (of 50 byte GMT tokens) each
2153 		 * representing an available previous version of the data
2154 		 */
2155 		if (ret_data_len > (snapshot_in.snapshot_array_size +
2156 					sizeof(struct smb_snapshot_array)))
2157 			ret_data_len = snapshot_in.snapshot_array_size +
2158 					sizeof(struct smb_snapshot_array);
2159 
2160 		if (copy_to_user(ioc_buf, retbuf, ret_data_len))
2161 			rc = -EFAULT;
2162 	}
2163 
2164 	kfree(retbuf);
2165 	return rc;
2166 }
2167 
2168 
2169 
2170 static int
smb3_notify(const unsigned int xid,struct file * pfile,void __user * ioc_buf)2171 smb3_notify(const unsigned int xid, struct file *pfile,
2172 	    void __user *ioc_buf)
2173 {
2174 	struct smb3_notify notify;
2175 	struct dentry *dentry = pfile->f_path.dentry;
2176 	struct inode *inode = file_inode(pfile);
2177 	struct cifs_sb_info *cifs_sb;
2178 	struct cifs_open_parms oparms;
2179 	struct cifs_fid fid;
2180 	struct cifs_tcon *tcon;
2181 	unsigned char *path = NULL;
2182 	__le16 *utf16_path = NULL;
2183 	u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
2184 	int rc = 0;
2185 
2186 	path = build_path_from_dentry(dentry);
2187 	if (path == NULL)
2188 		return -ENOMEM;
2189 
2190 	cifs_sb = CIFS_SB(inode->i_sb);
2191 
2192 	utf16_path = cifs_convert_path_to_utf16(path, cifs_sb);
2193 	if (utf16_path == NULL) {
2194 		rc = -ENOMEM;
2195 		goto notify_exit;
2196 	}
2197 
2198 	if (copy_from_user(&notify, ioc_buf, sizeof(struct smb3_notify))) {
2199 		rc = -EFAULT;
2200 		goto notify_exit;
2201 	}
2202 
2203 	tcon = cifs_sb_master_tcon(cifs_sb);
2204 	oparms.tcon = tcon;
2205 	oparms.desired_access = FILE_READ_ATTRIBUTES | FILE_READ_DATA;
2206 	oparms.disposition = FILE_OPEN;
2207 	oparms.create_options = cifs_create_options(cifs_sb, 0);
2208 	oparms.fid = &fid;
2209 	oparms.reconnect = false;
2210 
2211 	rc = SMB2_open(xid, &oparms, utf16_path, &oplock, NULL, NULL, NULL,
2212 		       NULL);
2213 	if (rc)
2214 		goto notify_exit;
2215 
2216 	rc = SMB2_change_notify(xid, tcon, fid.persistent_fid, fid.volatile_fid,
2217 				notify.watch_tree, notify.completion_filter);
2218 
2219 	SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid);
2220 
2221 	cifs_dbg(FYI, "change notify for path %s rc %d\n", path, rc);
2222 
2223 notify_exit:
2224 	kfree(path);
2225 	kfree(utf16_path);
2226 	return rc;
2227 }
2228 
2229 static int
smb2_query_dir_first(const unsigned int xid,struct cifs_tcon * tcon,const char * path,struct cifs_sb_info * cifs_sb,struct cifs_fid * fid,__u16 search_flags,struct cifs_search_info * srch_inf)2230 smb2_query_dir_first(const unsigned int xid, struct cifs_tcon *tcon,
2231 		     const char *path, struct cifs_sb_info *cifs_sb,
2232 		     struct cifs_fid *fid, __u16 search_flags,
2233 		     struct cifs_search_info *srch_inf)
2234 {
2235 	__le16 *utf16_path;
2236 	struct smb_rqst rqst[2];
2237 	struct kvec rsp_iov[2];
2238 	int resp_buftype[2];
2239 	struct kvec open_iov[SMB2_CREATE_IOV_SIZE];
2240 	struct kvec qd_iov[SMB2_QUERY_DIRECTORY_IOV_SIZE];
2241 	int rc, flags = 0;
2242 	u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
2243 	struct cifs_open_parms oparms;
2244 	struct smb2_query_directory_rsp *qd_rsp = NULL;
2245 	struct smb2_create_rsp *op_rsp = NULL;
2246 	struct TCP_Server_Info *server = cifs_pick_channel(tcon->ses);
2247 
2248 	utf16_path = cifs_convert_path_to_utf16(path, cifs_sb);
2249 	if (!utf16_path)
2250 		return -ENOMEM;
2251 
2252 	if (smb3_encryption_required(tcon))
2253 		flags |= CIFS_TRANSFORM_REQ;
2254 
2255 	memset(rqst, 0, sizeof(rqst));
2256 	resp_buftype[0] = resp_buftype[1] = CIFS_NO_BUFFER;
2257 	memset(rsp_iov, 0, sizeof(rsp_iov));
2258 
2259 	/* Open */
2260 	memset(&open_iov, 0, sizeof(open_iov));
2261 	rqst[0].rq_iov = open_iov;
2262 	rqst[0].rq_nvec = SMB2_CREATE_IOV_SIZE;
2263 
2264 	oparms.tcon = tcon;
2265 	oparms.desired_access = FILE_READ_ATTRIBUTES | FILE_READ_DATA;
2266 	oparms.disposition = FILE_OPEN;
2267 	oparms.create_options = cifs_create_options(cifs_sb, 0);
2268 	oparms.fid = fid;
2269 	oparms.reconnect = false;
2270 
2271 	rc = SMB2_open_init(tcon, server,
2272 			    &rqst[0], &oplock, &oparms, utf16_path);
2273 	if (rc)
2274 		goto qdf_free;
2275 	smb2_set_next_command(tcon, &rqst[0]);
2276 
2277 	/* Query directory */
2278 	srch_inf->entries_in_buffer = 0;
2279 	srch_inf->index_of_last_entry = 2;
2280 
2281 	memset(&qd_iov, 0, sizeof(qd_iov));
2282 	rqst[1].rq_iov = qd_iov;
2283 	rqst[1].rq_nvec = SMB2_QUERY_DIRECTORY_IOV_SIZE;
2284 
2285 	rc = SMB2_query_directory_init(xid, tcon, server,
2286 				       &rqst[1],
2287 				       COMPOUND_FID, COMPOUND_FID,
2288 				       0, srch_inf->info_level);
2289 	if (rc)
2290 		goto qdf_free;
2291 
2292 	smb2_set_related(&rqst[1]);
2293 
2294 	rc = compound_send_recv(xid, tcon->ses, server,
2295 				flags, 2, rqst,
2296 				resp_buftype, rsp_iov);
2297 
2298 	/* If the open failed there is nothing to do */
2299 	op_rsp = (struct smb2_create_rsp *)rsp_iov[0].iov_base;
2300 	if (op_rsp == NULL || op_rsp->sync_hdr.Status != STATUS_SUCCESS) {
2301 		cifs_dbg(FYI, "query_dir_first: open failed rc=%d\n", rc);
2302 		goto qdf_free;
2303 	}
2304 	fid->persistent_fid = op_rsp->PersistentFileId;
2305 	fid->volatile_fid = op_rsp->VolatileFileId;
2306 
2307 	/* Anything else than ENODATA means a genuine error */
2308 	if (rc && rc != -ENODATA) {
2309 		SMB2_close(xid, tcon, fid->persistent_fid, fid->volatile_fid);
2310 		cifs_dbg(FYI, "query_dir_first: query directory failed rc=%d\n", rc);
2311 		trace_smb3_query_dir_err(xid, fid->persistent_fid,
2312 					 tcon->tid, tcon->ses->Suid, 0, 0, rc);
2313 		goto qdf_free;
2314 	}
2315 
2316 	atomic_inc(&tcon->num_remote_opens);
2317 
2318 	qd_rsp = (struct smb2_query_directory_rsp *)rsp_iov[1].iov_base;
2319 	if (qd_rsp->sync_hdr.Status == STATUS_NO_MORE_FILES) {
2320 		trace_smb3_query_dir_done(xid, fid->persistent_fid,
2321 					  tcon->tid, tcon->ses->Suid, 0, 0);
2322 		srch_inf->endOfSearch = true;
2323 		rc = 0;
2324 		goto qdf_free;
2325 	}
2326 
2327 	rc = smb2_parse_query_directory(tcon, &rsp_iov[1], resp_buftype[1],
2328 					srch_inf);
2329 	if (rc) {
2330 		trace_smb3_query_dir_err(xid, fid->persistent_fid, tcon->tid,
2331 			tcon->ses->Suid, 0, 0, rc);
2332 		goto qdf_free;
2333 	}
2334 	resp_buftype[1] = CIFS_NO_BUFFER;
2335 
2336 	trace_smb3_query_dir_done(xid, fid->persistent_fid, tcon->tid,
2337 			tcon->ses->Suid, 0, srch_inf->entries_in_buffer);
2338 
2339  qdf_free:
2340 	kfree(utf16_path);
2341 	SMB2_open_free(&rqst[0]);
2342 	SMB2_query_directory_free(&rqst[1]);
2343 	free_rsp_buf(resp_buftype[0], rsp_iov[0].iov_base);
2344 	free_rsp_buf(resp_buftype[1], rsp_iov[1].iov_base);
2345 	return rc;
2346 }
2347 
2348 static int
smb2_query_dir_next(const unsigned int xid,struct cifs_tcon * tcon,struct cifs_fid * fid,__u16 search_flags,struct cifs_search_info * srch_inf)2349 smb2_query_dir_next(const unsigned int xid, struct cifs_tcon *tcon,
2350 		    struct cifs_fid *fid, __u16 search_flags,
2351 		    struct cifs_search_info *srch_inf)
2352 {
2353 	return SMB2_query_directory(xid, tcon, fid->persistent_fid,
2354 				    fid->volatile_fid, 0, srch_inf);
2355 }
2356 
2357 static int
smb2_close_dir(const unsigned int xid,struct cifs_tcon * tcon,struct cifs_fid * fid)2358 smb2_close_dir(const unsigned int xid, struct cifs_tcon *tcon,
2359 	       struct cifs_fid *fid)
2360 {
2361 	return SMB2_close(xid, tcon, fid->persistent_fid, fid->volatile_fid);
2362 }
2363 
2364 /*
2365  * If we negotiate SMB2 protocol and get STATUS_PENDING - update
2366  * the number of credits and return true. Otherwise - return false.
2367  */
2368 static bool
smb2_is_status_pending(char * buf,struct TCP_Server_Info * server)2369 smb2_is_status_pending(char *buf, struct TCP_Server_Info *server)
2370 {
2371 	struct smb2_sync_hdr *shdr = (struct smb2_sync_hdr *)buf;
2372 
2373 	if (shdr->Status != STATUS_PENDING)
2374 		return false;
2375 
2376 	if (shdr->CreditRequest) {
2377 		spin_lock(&server->req_lock);
2378 		server->credits += le16_to_cpu(shdr->CreditRequest);
2379 		spin_unlock(&server->req_lock);
2380 		wake_up(&server->request_q);
2381 	}
2382 
2383 	return true;
2384 }
2385 
2386 static bool
smb2_is_session_expired(char * buf)2387 smb2_is_session_expired(char *buf)
2388 {
2389 	struct smb2_sync_hdr *shdr = (struct smb2_sync_hdr *)buf;
2390 
2391 	if (shdr->Status != STATUS_NETWORK_SESSION_EXPIRED &&
2392 	    shdr->Status != STATUS_USER_SESSION_DELETED)
2393 		return false;
2394 
2395 	trace_smb3_ses_expired(shdr->TreeId, shdr->SessionId,
2396 			       le16_to_cpu(shdr->Command),
2397 			       le64_to_cpu(shdr->MessageId));
2398 	cifs_dbg(FYI, "Session expired or deleted\n");
2399 
2400 	return true;
2401 }
2402 
2403 static bool
smb2_is_status_io_timeout(char * buf)2404 smb2_is_status_io_timeout(char *buf)
2405 {
2406 	struct smb2_sync_hdr *shdr = (struct smb2_sync_hdr *)buf;
2407 
2408 	if (shdr->Status == STATUS_IO_TIMEOUT)
2409 		return true;
2410 	else
2411 		return false;
2412 }
2413 
2414 static int
smb2_oplock_response(struct cifs_tcon * tcon,struct cifs_fid * fid,struct cifsInodeInfo * cinode)2415 smb2_oplock_response(struct cifs_tcon *tcon, struct cifs_fid *fid,
2416 		     struct cifsInodeInfo *cinode)
2417 {
2418 	if (tcon->ses->server->capabilities & SMB2_GLOBAL_CAP_LEASING)
2419 		return SMB2_lease_break(0, tcon, cinode->lease_key,
2420 					smb2_get_lease_state(cinode));
2421 
2422 	return SMB2_oplock_break(0, tcon, fid->persistent_fid,
2423 				 fid->volatile_fid,
2424 				 CIFS_CACHE_READ(cinode) ? 1 : 0);
2425 }
2426 
2427 void
smb2_set_related(struct smb_rqst * rqst)2428 smb2_set_related(struct smb_rqst *rqst)
2429 {
2430 	struct smb2_sync_hdr *shdr;
2431 
2432 	shdr = (struct smb2_sync_hdr *)(rqst->rq_iov[0].iov_base);
2433 	if (shdr == NULL) {
2434 		cifs_dbg(FYI, "shdr NULL in smb2_set_related\n");
2435 		return;
2436 	}
2437 	shdr->Flags |= SMB2_FLAGS_RELATED_OPERATIONS;
2438 }
2439 
2440 char smb2_padding[7] = {0, 0, 0, 0, 0, 0, 0};
2441 
2442 void
smb2_set_next_command(struct cifs_tcon * tcon,struct smb_rqst * rqst)2443 smb2_set_next_command(struct cifs_tcon *tcon, struct smb_rqst *rqst)
2444 {
2445 	struct smb2_sync_hdr *shdr;
2446 	struct cifs_ses *ses = tcon->ses;
2447 	struct TCP_Server_Info *server = ses->server;
2448 	unsigned long len = smb_rqst_len(server, rqst);
2449 	int i, num_padding;
2450 
2451 	shdr = (struct smb2_sync_hdr *)(rqst->rq_iov[0].iov_base);
2452 	if (shdr == NULL) {
2453 		cifs_dbg(FYI, "shdr NULL in smb2_set_next_command\n");
2454 		return;
2455 	}
2456 
2457 	/* SMB headers in a compound are 8 byte aligned. */
2458 
2459 	/* No padding needed */
2460 	if (!(len & 7))
2461 		goto finished;
2462 
2463 	num_padding = 8 - (len & 7);
2464 	if (!smb3_encryption_required(tcon)) {
2465 		/*
2466 		 * If we do not have encryption then we can just add an extra
2467 		 * iov for the padding.
2468 		 */
2469 		rqst->rq_iov[rqst->rq_nvec].iov_base = smb2_padding;
2470 		rqst->rq_iov[rqst->rq_nvec].iov_len = num_padding;
2471 		rqst->rq_nvec++;
2472 		len += num_padding;
2473 	} else {
2474 		/*
2475 		 * We can not add a small padding iov for the encryption case
2476 		 * because the encryption framework can not handle the padding
2477 		 * iovs.
2478 		 * We have to flatten this into a single buffer and add
2479 		 * the padding to it.
2480 		 */
2481 		for (i = 1; i < rqst->rq_nvec; i++) {
2482 			memcpy(rqst->rq_iov[0].iov_base +
2483 			       rqst->rq_iov[0].iov_len,
2484 			       rqst->rq_iov[i].iov_base,
2485 			       rqst->rq_iov[i].iov_len);
2486 			rqst->rq_iov[0].iov_len += rqst->rq_iov[i].iov_len;
2487 		}
2488 		memset(rqst->rq_iov[0].iov_base + rqst->rq_iov[0].iov_len,
2489 		       0, num_padding);
2490 		rqst->rq_iov[0].iov_len += num_padding;
2491 		len += num_padding;
2492 		rqst->rq_nvec = 1;
2493 	}
2494 
2495  finished:
2496 	shdr->NextCommand = cpu_to_le32(len);
2497 }
2498 
2499 /*
2500  * Passes the query info response back to the caller on success.
2501  * Caller need to free this with free_rsp_buf().
2502  */
2503 int
smb2_query_info_compound(const unsigned int xid,struct cifs_tcon * tcon,__le16 * utf16_path,u32 desired_access,u32 class,u32 type,u32 output_len,struct kvec * rsp,int * buftype,struct cifs_sb_info * cifs_sb)2504 smb2_query_info_compound(const unsigned int xid, struct cifs_tcon *tcon,
2505 			 __le16 *utf16_path, u32 desired_access,
2506 			 u32 class, u32 type, u32 output_len,
2507 			 struct kvec *rsp, int *buftype,
2508 			 struct cifs_sb_info *cifs_sb)
2509 {
2510 	struct cifs_ses *ses = tcon->ses;
2511 	struct TCP_Server_Info *server = cifs_pick_channel(ses);
2512 	int flags = CIFS_CP_CREATE_CLOSE_OP;
2513 	struct smb_rqst rqst[3];
2514 	int resp_buftype[3];
2515 	struct kvec rsp_iov[3];
2516 	struct kvec open_iov[SMB2_CREATE_IOV_SIZE];
2517 	struct kvec qi_iov[1];
2518 	struct kvec close_iov[1];
2519 	u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
2520 	struct cifs_open_parms oparms;
2521 	struct cifs_fid fid;
2522 	int rc;
2523 
2524 	if (smb3_encryption_required(tcon))
2525 		flags |= CIFS_TRANSFORM_REQ;
2526 
2527 	memset(rqst, 0, sizeof(rqst));
2528 	resp_buftype[0] = resp_buftype[1] = resp_buftype[2] = CIFS_NO_BUFFER;
2529 	memset(rsp_iov, 0, sizeof(rsp_iov));
2530 
2531 	memset(&open_iov, 0, sizeof(open_iov));
2532 	rqst[0].rq_iov = open_iov;
2533 	rqst[0].rq_nvec = SMB2_CREATE_IOV_SIZE;
2534 
2535 	oparms.tcon = tcon;
2536 	oparms.desired_access = desired_access;
2537 	oparms.disposition = FILE_OPEN;
2538 	oparms.create_options = cifs_create_options(cifs_sb, 0);
2539 	oparms.fid = &fid;
2540 	oparms.reconnect = false;
2541 
2542 	rc = SMB2_open_init(tcon, server,
2543 			    &rqst[0], &oplock, &oparms, utf16_path);
2544 	if (rc)
2545 		goto qic_exit;
2546 	smb2_set_next_command(tcon, &rqst[0]);
2547 
2548 	memset(&qi_iov, 0, sizeof(qi_iov));
2549 	rqst[1].rq_iov = qi_iov;
2550 	rqst[1].rq_nvec = 1;
2551 
2552 	rc = SMB2_query_info_init(tcon, server,
2553 				  &rqst[1], COMPOUND_FID, COMPOUND_FID,
2554 				  class, type, 0,
2555 				  output_len, 0,
2556 				  NULL);
2557 	if (rc)
2558 		goto qic_exit;
2559 	smb2_set_next_command(tcon, &rqst[1]);
2560 	smb2_set_related(&rqst[1]);
2561 
2562 	memset(&close_iov, 0, sizeof(close_iov));
2563 	rqst[2].rq_iov = close_iov;
2564 	rqst[2].rq_nvec = 1;
2565 
2566 	rc = SMB2_close_init(tcon, server,
2567 			     &rqst[2], COMPOUND_FID, COMPOUND_FID, false);
2568 	if (rc)
2569 		goto qic_exit;
2570 	smb2_set_related(&rqst[2]);
2571 
2572 	rc = compound_send_recv(xid, ses, server,
2573 				flags, 3, rqst,
2574 				resp_buftype, rsp_iov);
2575 	if (rc) {
2576 		free_rsp_buf(resp_buftype[1], rsp_iov[1].iov_base);
2577 		if (rc == -EREMCHG) {
2578 			tcon->need_reconnect = true;
2579 			pr_warn_once("server share %s deleted\n",
2580 				     tcon->treeName);
2581 		}
2582 		goto qic_exit;
2583 	}
2584 	*rsp = rsp_iov[1];
2585 	*buftype = resp_buftype[1];
2586 
2587  qic_exit:
2588 	SMB2_open_free(&rqst[0]);
2589 	SMB2_query_info_free(&rqst[1]);
2590 	SMB2_close_free(&rqst[2]);
2591 	free_rsp_buf(resp_buftype[0], rsp_iov[0].iov_base);
2592 	free_rsp_buf(resp_buftype[2], rsp_iov[2].iov_base);
2593 	return rc;
2594 }
2595 
2596 static int
smb2_queryfs(const unsigned int xid,struct cifs_tcon * tcon,struct cifs_sb_info * cifs_sb,struct kstatfs * buf)2597 smb2_queryfs(const unsigned int xid, struct cifs_tcon *tcon,
2598 	     struct cifs_sb_info *cifs_sb, struct kstatfs *buf)
2599 {
2600 	struct smb2_query_info_rsp *rsp;
2601 	struct smb2_fs_full_size_info *info = NULL;
2602 	__le16 utf16_path = 0; /* Null - open root of share */
2603 	struct kvec rsp_iov = {NULL, 0};
2604 	int buftype = CIFS_NO_BUFFER;
2605 	int rc;
2606 
2607 
2608 	rc = smb2_query_info_compound(xid, tcon, &utf16_path,
2609 				      FILE_READ_ATTRIBUTES,
2610 				      FS_FULL_SIZE_INFORMATION,
2611 				      SMB2_O_INFO_FILESYSTEM,
2612 				      sizeof(struct smb2_fs_full_size_info),
2613 				      &rsp_iov, &buftype, cifs_sb);
2614 	if (rc)
2615 		goto qfs_exit;
2616 
2617 	rsp = (struct smb2_query_info_rsp *)rsp_iov.iov_base;
2618 	buf->f_type = SMB2_MAGIC_NUMBER;
2619 	info = (struct smb2_fs_full_size_info *)(
2620 		le16_to_cpu(rsp->OutputBufferOffset) + (char *)rsp);
2621 	rc = smb2_validate_iov(le16_to_cpu(rsp->OutputBufferOffset),
2622 			       le32_to_cpu(rsp->OutputBufferLength),
2623 			       &rsp_iov,
2624 			       sizeof(struct smb2_fs_full_size_info));
2625 	if (!rc)
2626 		smb2_copy_fs_info_to_kstatfs(info, buf);
2627 
2628 qfs_exit:
2629 	free_rsp_buf(buftype, rsp_iov.iov_base);
2630 	return rc;
2631 }
2632 
2633 static int
smb311_queryfs(const unsigned int xid,struct cifs_tcon * tcon,struct cifs_sb_info * cifs_sb,struct kstatfs * buf)2634 smb311_queryfs(const unsigned int xid, struct cifs_tcon *tcon,
2635 	       struct cifs_sb_info *cifs_sb, struct kstatfs *buf)
2636 {
2637 	int rc;
2638 	__le16 srch_path = 0; /* Null - open root of share */
2639 	u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
2640 	struct cifs_open_parms oparms;
2641 	struct cifs_fid fid;
2642 
2643 	if (!tcon->posix_extensions)
2644 		return smb2_queryfs(xid, tcon, cifs_sb, buf);
2645 
2646 	oparms.tcon = tcon;
2647 	oparms.desired_access = FILE_READ_ATTRIBUTES;
2648 	oparms.disposition = FILE_OPEN;
2649 	oparms.create_options = cifs_create_options(cifs_sb, 0);
2650 	oparms.fid = &fid;
2651 	oparms.reconnect = false;
2652 
2653 	rc = SMB2_open(xid, &oparms, &srch_path, &oplock, NULL, NULL,
2654 		       NULL, NULL);
2655 	if (rc)
2656 		return rc;
2657 
2658 	rc = SMB311_posix_qfs_info(xid, tcon, fid.persistent_fid,
2659 				   fid.volatile_fid, buf);
2660 	buf->f_type = SMB2_MAGIC_NUMBER;
2661 	SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid);
2662 	return rc;
2663 }
2664 
2665 static bool
smb2_compare_fids(struct cifsFileInfo * ob1,struct cifsFileInfo * ob2)2666 smb2_compare_fids(struct cifsFileInfo *ob1, struct cifsFileInfo *ob2)
2667 {
2668 	return ob1->fid.persistent_fid == ob2->fid.persistent_fid &&
2669 	       ob1->fid.volatile_fid == ob2->fid.volatile_fid;
2670 }
2671 
2672 static int
smb2_mand_lock(const unsigned int xid,struct cifsFileInfo * cfile,__u64 offset,__u64 length,__u32 type,int lock,int unlock,bool wait)2673 smb2_mand_lock(const unsigned int xid, struct cifsFileInfo *cfile, __u64 offset,
2674 	       __u64 length, __u32 type, int lock, int unlock, bool wait)
2675 {
2676 	if (unlock && !lock)
2677 		type = SMB2_LOCKFLAG_UNLOCK;
2678 	return SMB2_lock(xid, tlink_tcon(cfile->tlink),
2679 			 cfile->fid.persistent_fid, cfile->fid.volatile_fid,
2680 			 current->tgid, length, offset, type, wait);
2681 }
2682 
2683 static void
smb2_get_lease_key(struct inode * inode,struct cifs_fid * fid)2684 smb2_get_lease_key(struct inode *inode, struct cifs_fid *fid)
2685 {
2686 	memcpy(fid->lease_key, CIFS_I(inode)->lease_key, SMB2_LEASE_KEY_SIZE);
2687 }
2688 
2689 static void
smb2_set_lease_key(struct inode * inode,struct cifs_fid * fid)2690 smb2_set_lease_key(struct inode *inode, struct cifs_fid *fid)
2691 {
2692 	memcpy(CIFS_I(inode)->lease_key, fid->lease_key, SMB2_LEASE_KEY_SIZE);
2693 }
2694 
2695 static void
smb2_new_lease_key(struct cifs_fid * fid)2696 smb2_new_lease_key(struct cifs_fid *fid)
2697 {
2698 	generate_random_uuid(fid->lease_key);
2699 }
2700 
2701 static int
smb2_get_dfs_refer(const unsigned int xid,struct cifs_ses * ses,const char * search_name,struct dfs_info3_param ** target_nodes,unsigned int * num_of_nodes,const struct nls_table * nls_codepage,int remap)2702 smb2_get_dfs_refer(const unsigned int xid, struct cifs_ses *ses,
2703 		   const char *search_name,
2704 		   struct dfs_info3_param **target_nodes,
2705 		   unsigned int *num_of_nodes,
2706 		   const struct nls_table *nls_codepage, int remap)
2707 {
2708 	int rc;
2709 	__le16 *utf16_path = NULL;
2710 	int utf16_path_len = 0;
2711 	struct cifs_tcon *tcon;
2712 	struct fsctl_get_dfs_referral_req *dfs_req = NULL;
2713 	struct get_dfs_referral_rsp *dfs_rsp = NULL;
2714 	u32 dfs_req_size = 0, dfs_rsp_size = 0;
2715 
2716 	cifs_dbg(FYI, "%s: path: %s\n", __func__, search_name);
2717 
2718 	/*
2719 	 * Try to use the IPC tcon, otherwise just use any
2720 	 */
2721 	tcon = ses->tcon_ipc;
2722 	if (tcon == NULL) {
2723 		spin_lock(&cifs_tcp_ses_lock);
2724 		tcon = list_first_entry_or_null(&ses->tcon_list,
2725 						struct cifs_tcon,
2726 						tcon_list);
2727 		if (tcon)
2728 			tcon->tc_count++;
2729 		spin_unlock(&cifs_tcp_ses_lock);
2730 	}
2731 
2732 	if (tcon == NULL) {
2733 		cifs_dbg(VFS, "session %p has no tcon available for a dfs referral request\n",
2734 			 ses);
2735 		rc = -ENOTCONN;
2736 		goto out;
2737 	}
2738 
2739 	utf16_path = cifs_strndup_to_utf16(search_name, PATH_MAX,
2740 					   &utf16_path_len,
2741 					   nls_codepage, remap);
2742 	if (!utf16_path) {
2743 		rc = -ENOMEM;
2744 		goto out;
2745 	}
2746 
2747 	dfs_req_size = sizeof(*dfs_req) + utf16_path_len;
2748 	dfs_req = kzalloc(dfs_req_size, GFP_KERNEL);
2749 	if (!dfs_req) {
2750 		rc = -ENOMEM;
2751 		goto out;
2752 	}
2753 
2754 	/* Highest DFS referral version understood */
2755 	dfs_req->MaxReferralLevel = DFS_VERSION;
2756 
2757 	/* Path to resolve in an UTF-16 null-terminated string */
2758 	memcpy(dfs_req->RequestFileName, utf16_path, utf16_path_len);
2759 
2760 	do {
2761 		rc = SMB2_ioctl(xid, tcon, NO_FILE_ID, NO_FILE_ID,
2762 				FSCTL_DFS_GET_REFERRALS,
2763 				(char *)dfs_req, dfs_req_size, CIFSMaxBufSize,
2764 				(char **)&dfs_rsp, &dfs_rsp_size);
2765 	} while (rc == -EAGAIN);
2766 
2767 	if (rc) {
2768 		if ((rc != -ENOENT) && (rc != -EOPNOTSUPP))
2769 			cifs_tcon_dbg(VFS, "ioctl error in %s rc=%d\n", __func__, rc);
2770 		goto out;
2771 	}
2772 
2773 	rc = parse_dfs_referrals(dfs_rsp, dfs_rsp_size,
2774 				 num_of_nodes, target_nodes,
2775 				 nls_codepage, remap, search_name,
2776 				 true /* is_unicode */);
2777 	if (rc) {
2778 		cifs_tcon_dbg(VFS, "parse error in %s rc=%d\n", __func__, rc);
2779 		goto out;
2780 	}
2781 
2782  out:
2783 	if (tcon && !tcon->ipc) {
2784 		/* ipc tcons are not refcounted */
2785 		spin_lock(&cifs_tcp_ses_lock);
2786 		tcon->tc_count--;
2787 		spin_unlock(&cifs_tcp_ses_lock);
2788 	}
2789 	kfree(utf16_path);
2790 	kfree(dfs_req);
2791 	kfree(dfs_rsp);
2792 	return rc;
2793 }
2794 
2795 static int
parse_reparse_posix(struct reparse_posix_data * symlink_buf,u32 plen,char ** target_path,struct cifs_sb_info * cifs_sb)2796 parse_reparse_posix(struct reparse_posix_data *symlink_buf,
2797 		      u32 plen, char **target_path,
2798 		      struct cifs_sb_info *cifs_sb)
2799 {
2800 	unsigned int len;
2801 
2802 	/* See MS-FSCC 2.1.2.6 for the 'NFS' style reparse tags */
2803 	len = le16_to_cpu(symlink_buf->ReparseDataLength);
2804 
2805 	if (le64_to_cpu(symlink_buf->InodeType) != NFS_SPECFILE_LNK) {
2806 		cifs_dbg(VFS, "%lld not a supported symlink type\n",
2807 			le64_to_cpu(symlink_buf->InodeType));
2808 		return -EOPNOTSUPP;
2809 	}
2810 
2811 	*target_path = cifs_strndup_from_utf16(
2812 				symlink_buf->PathBuffer,
2813 				len, true, cifs_sb->local_nls);
2814 	if (!(*target_path))
2815 		return -ENOMEM;
2816 
2817 	convert_delimiter(*target_path, '/');
2818 	cifs_dbg(FYI, "%s: target path: %s\n", __func__, *target_path);
2819 
2820 	return 0;
2821 }
2822 
2823 static int
parse_reparse_symlink(struct reparse_symlink_data_buffer * symlink_buf,u32 plen,char ** target_path,struct cifs_sb_info * cifs_sb)2824 parse_reparse_symlink(struct reparse_symlink_data_buffer *symlink_buf,
2825 		      u32 plen, char **target_path,
2826 		      struct cifs_sb_info *cifs_sb)
2827 {
2828 	unsigned int sub_len;
2829 	unsigned int sub_offset;
2830 
2831 	/* We handle Symbolic Link reparse tag here. See: MS-FSCC 2.1.2.4 */
2832 
2833 	sub_offset = le16_to_cpu(symlink_buf->SubstituteNameOffset);
2834 	sub_len = le16_to_cpu(symlink_buf->SubstituteNameLength);
2835 	if (sub_offset + 20 > plen ||
2836 	    sub_offset + sub_len + 20 > plen) {
2837 		cifs_dbg(VFS, "srv returned malformed symlink buffer\n");
2838 		return -EIO;
2839 	}
2840 
2841 	*target_path = cifs_strndup_from_utf16(
2842 				symlink_buf->PathBuffer + sub_offset,
2843 				sub_len, true, cifs_sb->local_nls);
2844 	if (!(*target_path))
2845 		return -ENOMEM;
2846 
2847 	convert_delimiter(*target_path, '/');
2848 	cifs_dbg(FYI, "%s: target path: %s\n", __func__, *target_path);
2849 
2850 	return 0;
2851 }
2852 
2853 static int
parse_reparse_point(struct reparse_data_buffer * buf,u32 plen,char ** target_path,struct cifs_sb_info * cifs_sb)2854 parse_reparse_point(struct reparse_data_buffer *buf,
2855 		    u32 plen, char **target_path,
2856 		    struct cifs_sb_info *cifs_sb)
2857 {
2858 	if (plen < sizeof(struct reparse_data_buffer)) {
2859 		cifs_dbg(VFS, "reparse buffer is too small. Must be at least 8 bytes but was %d\n",
2860 			 plen);
2861 		return -EIO;
2862 	}
2863 
2864 	if (plen < le16_to_cpu(buf->ReparseDataLength) +
2865 	    sizeof(struct reparse_data_buffer)) {
2866 		cifs_dbg(VFS, "srv returned invalid reparse buf length: %d\n",
2867 			 plen);
2868 		return -EIO;
2869 	}
2870 
2871 	/* See MS-FSCC 2.1.2 */
2872 	switch (le32_to_cpu(buf->ReparseTag)) {
2873 	case IO_REPARSE_TAG_NFS:
2874 		return parse_reparse_posix(
2875 			(struct reparse_posix_data *)buf,
2876 			plen, target_path, cifs_sb);
2877 	case IO_REPARSE_TAG_SYMLINK:
2878 		return parse_reparse_symlink(
2879 			(struct reparse_symlink_data_buffer *)buf,
2880 			plen, target_path, cifs_sb);
2881 	default:
2882 		cifs_dbg(VFS, "srv returned unknown symlink buffer tag:0x%08x\n",
2883 			 le32_to_cpu(buf->ReparseTag));
2884 		return -EOPNOTSUPP;
2885 	}
2886 }
2887 
2888 #define SMB2_SYMLINK_STRUCT_SIZE \
2889 	(sizeof(struct smb2_err_rsp) - 1 + sizeof(struct smb2_symlink_err_rsp))
2890 
2891 static int
smb2_query_symlink(const unsigned int xid,struct cifs_tcon * tcon,struct cifs_sb_info * cifs_sb,const char * full_path,char ** target_path,bool is_reparse_point)2892 smb2_query_symlink(const unsigned int xid, struct cifs_tcon *tcon,
2893 		   struct cifs_sb_info *cifs_sb, const char *full_path,
2894 		   char **target_path, bool is_reparse_point)
2895 {
2896 	int rc;
2897 	__le16 *utf16_path = NULL;
2898 	__u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
2899 	struct cifs_open_parms oparms;
2900 	struct cifs_fid fid;
2901 	struct kvec err_iov = {NULL, 0};
2902 	struct smb2_err_rsp *err_buf = NULL;
2903 	struct smb2_symlink_err_rsp *symlink;
2904 	struct TCP_Server_Info *server = cifs_pick_channel(tcon->ses);
2905 	unsigned int sub_len;
2906 	unsigned int sub_offset;
2907 	unsigned int print_len;
2908 	unsigned int print_offset;
2909 	int flags = CIFS_CP_CREATE_CLOSE_OP;
2910 	struct smb_rqst rqst[3];
2911 	int resp_buftype[3];
2912 	struct kvec rsp_iov[3];
2913 	struct kvec open_iov[SMB2_CREATE_IOV_SIZE];
2914 	struct kvec io_iov[SMB2_IOCTL_IOV_SIZE];
2915 	struct kvec close_iov[1];
2916 	struct smb2_create_rsp *create_rsp;
2917 	struct smb2_ioctl_rsp *ioctl_rsp;
2918 	struct reparse_data_buffer *reparse_buf;
2919 	int create_options = is_reparse_point ? OPEN_REPARSE_POINT : 0;
2920 	u32 plen;
2921 
2922 	cifs_dbg(FYI, "%s: path: %s\n", __func__, full_path);
2923 
2924 	*target_path = NULL;
2925 
2926 	if (smb3_encryption_required(tcon))
2927 		flags |= CIFS_TRANSFORM_REQ;
2928 
2929 	memset(rqst, 0, sizeof(rqst));
2930 	resp_buftype[0] = resp_buftype[1] = resp_buftype[2] = CIFS_NO_BUFFER;
2931 	memset(rsp_iov, 0, sizeof(rsp_iov));
2932 
2933 	utf16_path = cifs_convert_path_to_utf16(full_path, cifs_sb);
2934 	if (!utf16_path)
2935 		return -ENOMEM;
2936 
2937 	/* Open */
2938 	memset(&open_iov, 0, sizeof(open_iov));
2939 	rqst[0].rq_iov = open_iov;
2940 	rqst[0].rq_nvec = SMB2_CREATE_IOV_SIZE;
2941 
2942 	memset(&oparms, 0, sizeof(oparms));
2943 	oparms.tcon = tcon;
2944 	oparms.desired_access = FILE_READ_ATTRIBUTES;
2945 	oparms.disposition = FILE_OPEN;
2946 	oparms.create_options = cifs_create_options(cifs_sb, create_options);
2947 	oparms.fid = &fid;
2948 	oparms.reconnect = false;
2949 
2950 	rc = SMB2_open_init(tcon, server,
2951 			    &rqst[0], &oplock, &oparms, utf16_path);
2952 	if (rc)
2953 		goto querty_exit;
2954 	smb2_set_next_command(tcon, &rqst[0]);
2955 
2956 
2957 	/* IOCTL */
2958 	memset(&io_iov, 0, sizeof(io_iov));
2959 	rqst[1].rq_iov = io_iov;
2960 	rqst[1].rq_nvec = SMB2_IOCTL_IOV_SIZE;
2961 
2962 	rc = SMB2_ioctl_init(tcon, server,
2963 			     &rqst[1], fid.persistent_fid,
2964 			     fid.volatile_fid, FSCTL_GET_REPARSE_POINT, NULL, 0,
2965 			     CIFSMaxBufSize -
2966 			     MAX_SMB2_CREATE_RESPONSE_SIZE -
2967 			     MAX_SMB2_CLOSE_RESPONSE_SIZE);
2968 	if (rc)
2969 		goto querty_exit;
2970 
2971 	smb2_set_next_command(tcon, &rqst[1]);
2972 	smb2_set_related(&rqst[1]);
2973 
2974 
2975 	/* Close */
2976 	memset(&close_iov, 0, sizeof(close_iov));
2977 	rqst[2].rq_iov = close_iov;
2978 	rqst[2].rq_nvec = 1;
2979 
2980 	rc = SMB2_close_init(tcon, server,
2981 			     &rqst[2], COMPOUND_FID, COMPOUND_FID, false);
2982 	if (rc)
2983 		goto querty_exit;
2984 
2985 	smb2_set_related(&rqst[2]);
2986 
2987 	rc = compound_send_recv(xid, tcon->ses, server,
2988 				flags, 3, rqst,
2989 				resp_buftype, rsp_iov);
2990 
2991 	create_rsp = rsp_iov[0].iov_base;
2992 	if (create_rsp && create_rsp->sync_hdr.Status)
2993 		err_iov = rsp_iov[0];
2994 	ioctl_rsp = rsp_iov[1].iov_base;
2995 
2996 	/*
2997 	 * Open was successful and we got an ioctl response.
2998 	 */
2999 	if ((rc == 0) && (is_reparse_point)) {
3000 		/* See MS-FSCC 2.3.23 */
3001 
3002 		reparse_buf = (struct reparse_data_buffer *)
3003 			((char *)ioctl_rsp +
3004 			 le32_to_cpu(ioctl_rsp->OutputOffset));
3005 		plen = le32_to_cpu(ioctl_rsp->OutputCount);
3006 
3007 		if (plen + le32_to_cpu(ioctl_rsp->OutputOffset) >
3008 		    rsp_iov[1].iov_len) {
3009 			cifs_tcon_dbg(VFS, "srv returned invalid ioctl len: %d\n",
3010 				 plen);
3011 			rc = -EIO;
3012 			goto querty_exit;
3013 		}
3014 
3015 		rc = parse_reparse_point(reparse_buf, plen, target_path,
3016 					 cifs_sb);
3017 		goto querty_exit;
3018 	}
3019 
3020 	if (!rc || !err_iov.iov_base) {
3021 		rc = -ENOENT;
3022 		goto querty_exit;
3023 	}
3024 
3025 	err_buf = err_iov.iov_base;
3026 	if (le32_to_cpu(err_buf->ByteCount) < sizeof(struct smb2_symlink_err_rsp) ||
3027 	    err_iov.iov_len < SMB2_SYMLINK_STRUCT_SIZE) {
3028 		rc = -EINVAL;
3029 		goto querty_exit;
3030 	}
3031 
3032 	symlink = (struct smb2_symlink_err_rsp *)err_buf->ErrorData;
3033 	if (le32_to_cpu(symlink->SymLinkErrorTag) != SYMLINK_ERROR_TAG ||
3034 	    le32_to_cpu(symlink->ReparseTag) != IO_REPARSE_TAG_SYMLINK) {
3035 		rc = -EINVAL;
3036 		goto querty_exit;
3037 	}
3038 
3039 	/* open must fail on symlink - reset rc */
3040 	rc = 0;
3041 	sub_len = le16_to_cpu(symlink->SubstituteNameLength);
3042 	sub_offset = le16_to_cpu(symlink->SubstituteNameOffset);
3043 	print_len = le16_to_cpu(symlink->PrintNameLength);
3044 	print_offset = le16_to_cpu(symlink->PrintNameOffset);
3045 
3046 	if (err_iov.iov_len < SMB2_SYMLINK_STRUCT_SIZE + sub_offset + sub_len) {
3047 		rc = -EINVAL;
3048 		goto querty_exit;
3049 	}
3050 
3051 	if (err_iov.iov_len <
3052 	    SMB2_SYMLINK_STRUCT_SIZE + print_offset + print_len) {
3053 		rc = -EINVAL;
3054 		goto querty_exit;
3055 	}
3056 
3057 	*target_path = cifs_strndup_from_utf16(
3058 				(char *)symlink->PathBuffer + sub_offset,
3059 				sub_len, true, cifs_sb->local_nls);
3060 	if (!(*target_path)) {
3061 		rc = -ENOMEM;
3062 		goto querty_exit;
3063 	}
3064 	convert_delimiter(*target_path, '/');
3065 	cifs_dbg(FYI, "%s: target path: %s\n", __func__, *target_path);
3066 
3067  querty_exit:
3068 	cifs_dbg(FYI, "query symlink rc %d\n", rc);
3069 	kfree(utf16_path);
3070 	SMB2_open_free(&rqst[0]);
3071 	SMB2_ioctl_free(&rqst[1]);
3072 	SMB2_close_free(&rqst[2]);
3073 	free_rsp_buf(resp_buftype[0], rsp_iov[0].iov_base);
3074 	free_rsp_buf(resp_buftype[1], rsp_iov[1].iov_base);
3075 	free_rsp_buf(resp_buftype[2], rsp_iov[2].iov_base);
3076 	return rc;
3077 }
3078 
3079 int
smb2_query_reparse_tag(const unsigned int xid,struct cifs_tcon * tcon,struct cifs_sb_info * cifs_sb,const char * full_path,__u32 * tag)3080 smb2_query_reparse_tag(const unsigned int xid, struct cifs_tcon *tcon,
3081 		   struct cifs_sb_info *cifs_sb, const char *full_path,
3082 		   __u32 *tag)
3083 {
3084 	int rc;
3085 	__le16 *utf16_path = NULL;
3086 	__u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
3087 	struct cifs_open_parms oparms;
3088 	struct cifs_fid fid;
3089 	struct TCP_Server_Info *server = cifs_pick_channel(tcon->ses);
3090 	int flags = CIFS_CP_CREATE_CLOSE_OP;
3091 	struct smb_rqst rqst[3];
3092 	int resp_buftype[3];
3093 	struct kvec rsp_iov[3];
3094 	struct kvec open_iov[SMB2_CREATE_IOV_SIZE];
3095 	struct kvec io_iov[SMB2_IOCTL_IOV_SIZE];
3096 	struct kvec close_iov[1];
3097 	struct smb2_ioctl_rsp *ioctl_rsp;
3098 	struct reparse_data_buffer *reparse_buf;
3099 	u32 plen;
3100 
3101 	cifs_dbg(FYI, "%s: path: %s\n", __func__, full_path);
3102 
3103 	if (smb3_encryption_required(tcon))
3104 		flags |= CIFS_TRANSFORM_REQ;
3105 
3106 	memset(rqst, 0, sizeof(rqst));
3107 	resp_buftype[0] = resp_buftype[1] = resp_buftype[2] = CIFS_NO_BUFFER;
3108 	memset(rsp_iov, 0, sizeof(rsp_iov));
3109 
3110 	utf16_path = cifs_convert_path_to_utf16(full_path, cifs_sb);
3111 	if (!utf16_path)
3112 		return -ENOMEM;
3113 
3114 	/*
3115 	 * setup smb2open - TODO add optimization to call cifs_get_readable_path
3116 	 * to see if there is a handle already open that we can use
3117 	 */
3118 	memset(&open_iov, 0, sizeof(open_iov));
3119 	rqst[0].rq_iov = open_iov;
3120 	rqst[0].rq_nvec = SMB2_CREATE_IOV_SIZE;
3121 
3122 	memset(&oparms, 0, sizeof(oparms));
3123 	oparms.tcon = tcon;
3124 	oparms.desired_access = FILE_READ_ATTRIBUTES;
3125 	oparms.disposition = FILE_OPEN;
3126 	oparms.create_options = cifs_create_options(cifs_sb, OPEN_REPARSE_POINT);
3127 	oparms.fid = &fid;
3128 	oparms.reconnect = false;
3129 
3130 	rc = SMB2_open_init(tcon, server,
3131 			    &rqst[0], &oplock, &oparms, utf16_path);
3132 	if (rc)
3133 		goto query_rp_exit;
3134 	smb2_set_next_command(tcon, &rqst[0]);
3135 
3136 
3137 	/* IOCTL */
3138 	memset(&io_iov, 0, sizeof(io_iov));
3139 	rqst[1].rq_iov = io_iov;
3140 	rqst[1].rq_nvec = SMB2_IOCTL_IOV_SIZE;
3141 
3142 	rc = SMB2_ioctl_init(tcon, server,
3143 			     &rqst[1], COMPOUND_FID,
3144 			     COMPOUND_FID, FSCTL_GET_REPARSE_POINT, NULL, 0,
3145 			     CIFSMaxBufSize -
3146 			     MAX_SMB2_CREATE_RESPONSE_SIZE -
3147 			     MAX_SMB2_CLOSE_RESPONSE_SIZE);
3148 	if (rc)
3149 		goto query_rp_exit;
3150 
3151 	smb2_set_next_command(tcon, &rqst[1]);
3152 	smb2_set_related(&rqst[1]);
3153 
3154 
3155 	/* Close */
3156 	memset(&close_iov, 0, sizeof(close_iov));
3157 	rqst[2].rq_iov = close_iov;
3158 	rqst[2].rq_nvec = 1;
3159 
3160 	rc = SMB2_close_init(tcon, server,
3161 			     &rqst[2], COMPOUND_FID, COMPOUND_FID, false);
3162 	if (rc)
3163 		goto query_rp_exit;
3164 
3165 	smb2_set_related(&rqst[2]);
3166 
3167 	rc = compound_send_recv(xid, tcon->ses, server,
3168 				flags, 3, rqst,
3169 				resp_buftype, rsp_iov);
3170 
3171 	ioctl_rsp = rsp_iov[1].iov_base;
3172 
3173 	/*
3174 	 * Open was successful and we got an ioctl response.
3175 	 */
3176 	if (rc == 0) {
3177 		/* See MS-FSCC 2.3.23 */
3178 
3179 		reparse_buf = (struct reparse_data_buffer *)
3180 			((char *)ioctl_rsp +
3181 			 le32_to_cpu(ioctl_rsp->OutputOffset));
3182 		plen = le32_to_cpu(ioctl_rsp->OutputCount);
3183 
3184 		if (plen + le32_to_cpu(ioctl_rsp->OutputOffset) >
3185 		    rsp_iov[1].iov_len) {
3186 			cifs_tcon_dbg(FYI, "srv returned invalid ioctl len: %d\n",
3187 				 plen);
3188 			rc = -EIO;
3189 			goto query_rp_exit;
3190 		}
3191 		*tag = le32_to_cpu(reparse_buf->ReparseTag);
3192 	}
3193 
3194  query_rp_exit:
3195 	kfree(utf16_path);
3196 	SMB2_open_free(&rqst[0]);
3197 	SMB2_ioctl_free(&rqst[1]);
3198 	SMB2_close_free(&rqst[2]);
3199 	free_rsp_buf(resp_buftype[0], rsp_iov[0].iov_base);
3200 	free_rsp_buf(resp_buftype[1], rsp_iov[1].iov_base);
3201 	free_rsp_buf(resp_buftype[2], rsp_iov[2].iov_base);
3202 	return rc;
3203 }
3204 
3205 static struct cifs_ntsd *
get_smb2_acl_by_fid(struct cifs_sb_info * cifs_sb,const struct cifs_fid * cifsfid,u32 * pacllen)3206 get_smb2_acl_by_fid(struct cifs_sb_info *cifs_sb,
3207 		const struct cifs_fid *cifsfid, u32 *pacllen)
3208 {
3209 	struct cifs_ntsd *pntsd = NULL;
3210 	unsigned int xid;
3211 	int rc = -EOPNOTSUPP;
3212 	struct tcon_link *tlink = cifs_sb_tlink(cifs_sb);
3213 
3214 	if (IS_ERR(tlink))
3215 		return ERR_CAST(tlink);
3216 
3217 	xid = get_xid();
3218 	cifs_dbg(FYI, "trying to get acl\n");
3219 
3220 	rc = SMB2_query_acl(xid, tlink_tcon(tlink), cifsfid->persistent_fid,
3221 			    cifsfid->volatile_fid, (void **)&pntsd, pacllen);
3222 	free_xid(xid);
3223 
3224 	cifs_put_tlink(tlink);
3225 
3226 	cifs_dbg(FYI, "%s: rc = %d ACL len %d\n", __func__, rc, *pacllen);
3227 	if (rc)
3228 		return ERR_PTR(rc);
3229 	return pntsd;
3230 
3231 }
3232 
3233 static struct cifs_ntsd *
get_smb2_acl_by_path(struct cifs_sb_info * cifs_sb,const char * path,u32 * pacllen)3234 get_smb2_acl_by_path(struct cifs_sb_info *cifs_sb,
3235 		const char *path, u32 *pacllen)
3236 {
3237 	struct cifs_ntsd *pntsd = NULL;
3238 	u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
3239 	unsigned int xid;
3240 	int rc;
3241 	struct cifs_tcon *tcon;
3242 	struct tcon_link *tlink = cifs_sb_tlink(cifs_sb);
3243 	struct cifs_fid fid;
3244 	struct cifs_open_parms oparms;
3245 	__le16 *utf16_path;
3246 
3247 	cifs_dbg(FYI, "get smb3 acl for path %s\n", path);
3248 	if (IS_ERR(tlink))
3249 		return ERR_CAST(tlink);
3250 
3251 	tcon = tlink_tcon(tlink);
3252 	xid = get_xid();
3253 
3254 	utf16_path = cifs_convert_path_to_utf16(path, cifs_sb);
3255 	if (!utf16_path) {
3256 		rc = -ENOMEM;
3257 		free_xid(xid);
3258 		return ERR_PTR(rc);
3259 	}
3260 
3261 	oparms.tcon = tcon;
3262 	oparms.desired_access = READ_CONTROL;
3263 	oparms.disposition = FILE_OPEN;
3264 	/*
3265 	 * When querying an ACL, even if the file is a symlink we want to open
3266 	 * the source not the target, and so the protocol requires that the
3267 	 * client specify this flag when opening a reparse point
3268 	 */
3269 	oparms.create_options = cifs_create_options(cifs_sb, 0) | OPEN_REPARSE_POINT;
3270 	oparms.fid = &fid;
3271 	oparms.reconnect = false;
3272 
3273 	rc = SMB2_open(xid, &oparms, utf16_path, &oplock, NULL, NULL, NULL,
3274 		       NULL);
3275 	kfree(utf16_path);
3276 	if (!rc) {
3277 		rc = SMB2_query_acl(xid, tlink_tcon(tlink), fid.persistent_fid,
3278 			    fid.volatile_fid, (void **)&pntsd, pacllen);
3279 		SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid);
3280 	}
3281 
3282 	cifs_put_tlink(tlink);
3283 	free_xid(xid);
3284 
3285 	cifs_dbg(FYI, "%s: rc = %d ACL len %d\n", __func__, rc, *pacllen);
3286 	if (rc)
3287 		return ERR_PTR(rc);
3288 	return pntsd;
3289 }
3290 
3291 static int
set_smb2_acl(struct cifs_ntsd * pnntsd,__u32 acllen,struct inode * inode,const char * path,int aclflag)3292 set_smb2_acl(struct cifs_ntsd *pnntsd, __u32 acllen,
3293 		struct inode *inode, const char *path, int aclflag)
3294 {
3295 	u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
3296 	unsigned int xid;
3297 	int rc, access_flags = 0;
3298 	struct cifs_tcon *tcon;
3299 	struct cifs_sb_info *cifs_sb = CIFS_SB(inode->i_sb);
3300 	struct tcon_link *tlink = cifs_sb_tlink(cifs_sb);
3301 	struct cifs_fid fid;
3302 	struct cifs_open_parms oparms;
3303 	__le16 *utf16_path;
3304 
3305 	cifs_dbg(FYI, "set smb3 acl for path %s\n", path);
3306 	if (IS_ERR(tlink))
3307 		return PTR_ERR(tlink);
3308 
3309 	tcon = tlink_tcon(tlink);
3310 	xid = get_xid();
3311 
3312 	if (aclflag == CIFS_ACL_OWNER || aclflag == CIFS_ACL_GROUP)
3313 		access_flags = WRITE_OWNER;
3314 	else
3315 		access_flags = WRITE_DAC;
3316 
3317 	utf16_path = cifs_convert_path_to_utf16(path, cifs_sb);
3318 	if (!utf16_path) {
3319 		rc = -ENOMEM;
3320 		free_xid(xid);
3321 		return rc;
3322 	}
3323 
3324 	oparms.tcon = tcon;
3325 	oparms.desired_access = access_flags;
3326 	oparms.create_options = cifs_create_options(cifs_sb, 0);
3327 	oparms.disposition = FILE_OPEN;
3328 	oparms.path = path;
3329 	oparms.fid = &fid;
3330 	oparms.reconnect = false;
3331 
3332 	rc = SMB2_open(xid, &oparms, utf16_path, &oplock, NULL, NULL,
3333 		       NULL, NULL);
3334 	kfree(utf16_path);
3335 	if (!rc) {
3336 		rc = SMB2_set_acl(xid, tlink_tcon(tlink), fid.persistent_fid,
3337 			    fid.volatile_fid, pnntsd, acllen, aclflag);
3338 		SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid);
3339 	}
3340 
3341 	cifs_put_tlink(tlink);
3342 	free_xid(xid);
3343 	return rc;
3344 }
3345 
3346 /* Retrieve an ACL from the server */
3347 static struct cifs_ntsd *
get_smb2_acl(struct cifs_sb_info * cifs_sb,struct inode * inode,const char * path,u32 * pacllen)3348 get_smb2_acl(struct cifs_sb_info *cifs_sb,
3349 				      struct inode *inode, const char *path,
3350 				      u32 *pacllen)
3351 {
3352 	struct cifs_ntsd *pntsd = NULL;
3353 	struct cifsFileInfo *open_file = NULL;
3354 
3355 	if (inode)
3356 		open_file = find_readable_file(CIFS_I(inode), true);
3357 	if (!open_file)
3358 		return get_smb2_acl_by_path(cifs_sb, path, pacllen);
3359 
3360 	pntsd = get_smb2_acl_by_fid(cifs_sb, &open_file->fid, pacllen);
3361 	cifsFileInfo_put(open_file);
3362 	return pntsd;
3363 }
3364 
smb3_zero_range(struct file * file,struct cifs_tcon * tcon,loff_t offset,loff_t len,bool keep_size)3365 static long smb3_zero_range(struct file *file, struct cifs_tcon *tcon,
3366 			    loff_t offset, loff_t len, bool keep_size)
3367 {
3368 	struct cifs_ses *ses = tcon->ses;
3369 	struct inode *inode;
3370 	struct cifsInodeInfo *cifsi;
3371 	struct cifsFileInfo *cfile = file->private_data;
3372 	struct file_zero_data_information fsctl_buf;
3373 	long rc;
3374 	unsigned int xid;
3375 	__le64 eof;
3376 
3377 	xid = get_xid();
3378 
3379 	inode = d_inode(cfile->dentry);
3380 	cifsi = CIFS_I(inode);
3381 
3382 	trace_smb3_zero_enter(xid, cfile->fid.persistent_fid, tcon->tid,
3383 			      ses->Suid, offset, len);
3384 
3385 	/*
3386 	 * We zero the range through ioctl, so we need remove the page caches
3387 	 * first, otherwise the data may be inconsistent with the server.
3388 	 */
3389 	truncate_pagecache_range(inode, offset, offset + len - 1);
3390 
3391 	/* if file not oplocked can't be sure whether asking to extend size */
3392 	if (!CIFS_CACHE_READ(cifsi))
3393 		if (keep_size == false) {
3394 			rc = -EOPNOTSUPP;
3395 			trace_smb3_zero_err(xid, cfile->fid.persistent_fid,
3396 				tcon->tid, ses->Suid, offset, len, rc);
3397 			free_xid(xid);
3398 			return rc;
3399 		}
3400 
3401 	cifs_dbg(FYI, "Offset %lld len %lld\n", offset, len);
3402 
3403 	fsctl_buf.FileOffset = cpu_to_le64(offset);
3404 	fsctl_buf.BeyondFinalZero = cpu_to_le64(offset + len);
3405 
3406 	rc = SMB2_ioctl(xid, tcon, cfile->fid.persistent_fid,
3407 			cfile->fid.volatile_fid, FSCTL_SET_ZERO_DATA,
3408 			(char *)&fsctl_buf,
3409 			sizeof(struct file_zero_data_information),
3410 			0, NULL, NULL);
3411 	if (rc)
3412 		goto zero_range_exit;
3413 
3414 	/*
3415 	 * do we also need to change the size of the file?
3416 	 */
3417 	if (keep_size == false && i_size_read(inode) < offset + len) {
3418 		eof = cpu_to_le64(offset + len);
3419 		rc = SMB2_set_eof(xid, tcon, cfile->fid.persistent_fid,
3420 				  cfile->fid.volatile_fid, cfile->pid, &eof);
3421 	}
3422 
3423  zero_range_exit:
3424 	free_xid(xid);
3425 	if (rc)
3426 		trace_smb3_zero_err(xid, cfile->fid.persistent_fid, tcon->tid,
3427 			      ses->Suid, offset, len, rc);
3428 	else
3429 		trace_smb3_zero_done(xid, cfile->fid.persistent_fid, tcon->tid,
3430 			      ses->Suid, offset, len);
3431 	return rc;
3432 }
3433 
smb3_punch_hole(struct file * file,struct cifs_tcon * tcon,loff_t offset,loff_t len)3434 static long smb3_punch_hole(struct file *file, struct cifs_tcon *tcon,
3435 			    loff_t offset, loff_t len)
3436 {
3437 	struct inode *inode = file_inode(file);
3438 	struct cifsFileInfo *cfile = file->private_data;
3439 	struct file_zero_data_information fsctl_buf;
3440 	long rc;
3441 	unsigned int xid;
3442 	__u8 set_sparse = 1;
3443 
3444 	xid = get_xid();
3445 
3446 	inode_lock(inode);
3447 	/* Need to make file sparse, if not already, before freeing range. */
3448 	/* Consider adding equivalent for compressed since it could also work */
3449 	if (!smb2_set_sparse(xid, tcon, cfile, inode, set_sparse)) {
3450 		rc = -EOPNOTSUPP;
3451 		goto out;
3452 	}
3453 
3454 	/*
3455 	 * We implement the punch hole through ioctl, so we need remove the page
3456 	 * caches first, otherwise the data may be inconsistent with the server.
3457 	 */
3458 	truncate_pagecache_range(inode, offset, offset + len - 1);
3459 
3460 	cifs_dbg(FYI, "Offset %lld len %lld\n", offset, len);
3461 
3462 	fsctl_buf.FileOffset = cpu_to_le64(offset);
3463 	fsctl_buf.BeyondFinalZero = cpu_to_le64(offset + len);
3464 
3465 	rc = SMB2_ioctl(xid, tcon, cfile->fid.persistent_fid,
3466 			cfile->fid.volatile_fid, FSCTL_SET_ZERO_DATA,
3467 			(char *)&fsctl_buf,
3468 			sizeof(struct file_zero_data_information),
3469 			CIFSMaxBufSize, NULL, NULL);
3470 out:
3471 	inode_unlock(inode);
3472 	free_xid(xid);
3473 	return rc;
3474 }
3475 
smb3_simple_fallocate_write_range(unsigned int xid,struct cifs_tcon * tcon,struct cifsFileInfo * cfile,loff_t off,loff_t len,char * buf)3476 static int smb3_simple_fallocate_write_range(unsigned int xid,
3477 					     struct cifs_tcon *tcon,
3478 					     struct cifsFileInfo *cfile,
3479 					     loff_t off, loff_t len,
3480 					     char *buf)
3481 {
3482 	struct cifs_io_parms io_parms = {0};
3483 	int nbytes;
3484 	int rc = 0;
3485 	struct kvec iov[2];
3486 
3487 	io_parms.netfid = cfile->fid.netfid;
3488 	io_parms.pid = current->tgid;
3489 	io_parms.tcon = tcon;
3490 	io_parms.persistent_fid = cfile->fid.persistent_fid;
3491 	io_parms.volatile_fid = cfile->fid.volatile_fid;
3492 
3493 	while (len) {
3494 		io_parms.offset = off;
3495 		io_parms.length = len;
3496 		if (io_parms.length > SMB2_MAX_BUFFER_SIZE)
3497 			io_parms.length = SMB2_MAX_BUFFER_SIZE;
3498 		/* iov[0] is reserved for smb header */
3499 		iov[1].iov_base = buf;
3500 		iov[1].iov_len = io_parms.length;
3501 		rc = SMB2_write(xid, &io_parms, &nbytes, iov, 1);
3502 		if (rc)
3503 			break;
3504 		if (nbytes > len)
3505 			return -EINVAL;
3506 		buf += nbytes;
3507 		off += nbytes;
3508 		len -= nbytes;
3509 	}
3510 	return rc;
3511 }
3512 
smb3_simple_fallocate_range(unsigned int xid,struct cifs_tcon * tcon,struct cifsFileInfo * cfile,loff_t off,loff_t len)3513 static int smb3_simple_fallocate_range(unsigned int xid,
3514 				       struct cifs_tcon *tcon,
3515 				       struct cifsFileInfo *cfile,
3516 				       loff_t off, loff_t len)
3517 {
3518 	struct file_allocated_range_buffer in_data, *out_data = NULL, *tmp_data;
3519 	u32 out_data_len;
3520 	char *buf = NULL;
3521 	loff_t l;
3522 	int rc;
3523 
3524 	in_data.file_offset = cpu_to_le64(off);
3525 	in_data.length = cpu_to_le64(len);
3526 	rc = SMB2_ioctl(xid, tcon, cfile->fid.persistent_fid,
3527 			cfile->fid.volatile_fid,
3528 			FSCTL_QUERY_ALLOCATED_RANGES,
3529 			(char *)&in_data, sizeof(in_data),
3530 			1024 * sizeof(struct file_allocated_range_buffer),
3531 			(char **)&out_data, &out_data_len);
3532 	if (rc)
3533 		goto out;
3534 
3535 	buf = kzalloc(1024 * 1024, GFP_KERNEL);
3536 	if (buf == NULL) {
3537 		rc = -ENOMEM;
3538 		goto out;
3539 	}
3540 
3541 	tmp_data = out_data;
3542 	while (len) {
3543 		/*
3544 		 * The rest of the region is unmapped so write it all.
3545 		 */
3546 		if (out_data_len == 0) {
3547 			rc = smb3_simple_fallocate_write_range(xid, tcon,
3548 					       cfile, off, len, buf);
3549 			goto out;
3550 		}
3551 
3552 		if (out_data_len < sizeof(struct file_allocated_range_buffer)) {
3553 			rc = -EINVAL;
3554 			goto out;
3555 		}
3556 
3557 		if (off < le64_to_cpu(tmp_data->file_offset)) {
3558 			/*
3559 			 * We are at a hole. Write until the end of the region
3560 			 * or until the next allocated data,
3561 			 * whichever comes next.
3562 			 */
3563 			l = le64_to_cpu(tmp_data->file_offset) - off;
3564 			if (len < l)
3565 				l = len;
3566 			rc = smb3_simple_fallocate_write_range(xid, tcon,
3567 					       cfile, off, l, buf);
3568 			if (rc)
3569 				goto out;
3570 			off = off + l;
3571 			len = len - l;
3572 			if (len == 0)
3573 				goto out;
3574 		}
3575 		/*
3576 		 * We are at a section of allocated data, just skip forward
3577 		 * until the end of the data or the end of the region
3578 		 * we are supposed to fallocate, whichever comes first.
3579 		 */
3580 		l = le64_to_cpu(tmp_data->length);
3581 		if (len < l)
3582 			l = len;
3583 		off += l;
3584 		len -= l;
3585 
3586 		tmp_data = &tmp_data[1];
3587 		out_data_len -= sizeof(struct file_allocated_range_buffer);
3588 	}
3589 
3590  out:
3591 	kfree(out_data);
3592 	kfree(buf);
3593 	return rc;
3594 }
3595 
3596 
smb3_simple_falloc(struct file * file,struct cifs_tcon * tcon,loff_t off,loff_t len,bool keep_size)3597 static long smb3_simple_falloc(struct file *file, struct cifs_tcon *tcon,
3598 			    loff_t off, loff_t len, bool keep_size)
3599 {
3600 	struct inode *inode;
3601 	struct cifsInodeInfo *cifsi;
3602 	struct cifsFileInfo *cfile = file->private_data;
3603 	long rc = -EOPNOTSUPP;
3604 	unsigned int xid;
3605 	__le64 eof;
3606 
3607 	xid = get_xid();
3608 
3609 	inode = d_inode(cfile->dentry);
3610 	cifsi = CIFS_I(inode);
3611 
3612 	trace_smb3_falloc_enter(xid, cfile->fid.persistent_fid, tcon->tid,
3613 				tcon->ses->Suid, off, len);
3614 	/* if file not oplocked can't be sure whether asking to extend size */
3615 	if (!CIFS_CACHE_READ(cifsi))
3616 		if (keep_size == false) {
3617 			trace_smb3_falloc_err(xid, cfile->fid.persistent_fid,
3618 				tcon->tid, tcon->ses->Suid, off, len, rc);
3619 			free_xid(xid);
3620 			return rc;
3621 		}
3622 
3623 	/*
3624 	 * Extending the file
3625 	 */
3626 	if ((keep_size == false) && i_size_read(inode) < off + len) {
3627 		rc = inode_newsize_ok(inode, off + len);
3628 		if (rc)
3629 			goto out;
3630 
3631 		if (cifsi->cifsAttrs & FILE_ATTRIBUTE_SPARSE_FILE)
3632 			smb2_set_sparse(xid, tcon, cfile, inode, false);
3633 
3634 		eof = cpu_to_le64(off + len);
3635 		rc = SMB2_set_eof(xid, tcon, cfile->fid.persistent_fid,
3636 				  cfile->fid.volatile_fid, cfile->pid, &eof);
3637 		if (rc == 0) {
3638 			cifsi->server_eof = off + len;
3639 			cifs_setsize(inode, off + len);
3640 			cifs_truncate_page(inode->i_mapping, inode->i_size);
3641 			truncate_setsize(inode, off + len);
3642 		}
3643 		goto out;
3644 	}
3645 
3646 	/*
3647 	 * Files are non-sparse by default so falloc may be a no-op
3648 	 * Must check if file sparse. If not sparse, and since we are not
3649 	 * extending then no need to do anything since file already allocated
3650 	 */
3651 	if ((cifsi->cifsAttrs & FILE_ATTRIBUTE_SPARSE_FILE) == 0) {
3652 		rc = 0;
3653 		goto out;
3654 	}
3655 
3656 	if (keep_size == true) {
3657 		/*
3658 		 * We can not preallocate pages beyond the end of the file
3659 		 * in SMB2
3660 		 */
3661 		if (off >= i_size_read(inode)) {
3662 			rc = 0;
3663 			goto out;
3664 		}
3665 		/*
3666 		 * For fallocates that are partially beyond the end of file,
3667 		 * clamp len so we only fallocate up to the end of file.
3668 		 */
3669 		if (off + len > i_size_read(inode)) {
3670 			len = i_size_read(inode) - off;
3671 		}
3672 	}
3673 
3674 	if ((keep_size == true) || (i_size_read(inode) >= off + len)) {
3675 		/*
3676 		 * At this point, we are trying to fallocate an internal
3677 		 * regions of a sparse file. Since smb2 does not have a
3678 		 * fallocate command we have two otions on how to emulate this.
3679 		 * We can either turn the entire file to become non-sparse
3680 		 * which we only do if the fallocate is for virtually
3681 		 * the whole file,  or we can overwrite the region with zeroes
3682 		 * using SMB2_write, which could be prohibitevly expensive
3683 		 * if len is large.
3684 		 */
3685 		/*
3686 		 * We are only trying to fallocate a small region so
3687 		 * just write it with zero.
3688 		 */
3689 		if (len <= 1024 * 1024) {
3690 			rc = smb3_simple_fallocate_range(xid, tcon, cfile,
3691 							 off, len);
3692 			goto out;
3693 		}
3694 
3695 		/*
3696 		 * Check if falloc starts within first few pages of file
3697 		 * and ends within a few pages of the end of file to
3698 		 * ensure that most of file is being forced to be
3699 		 * fallocated now. If so then setting whole file sparse
3700 		 * ie potentially making a few extra pages at the beginning
3701 		 * or end of the file non-sparse via set_sparse is harmless.
3702 		 */
3703 		if ((off > 8192) || (off + len + 8192 < i_size_read(inode))) {
3704 			rc = -EOPNOTSUPP;
3705 			goto out;
3706 		}
3707 	}
3708 
3709 	smb2_set_sparse(xid, tcon, cfile, inode, false);
3710 	rc = 0;
3711 
3712 out:
3713 	if (rc)
3714 		trace_smb3_falloc_err(xid, cfile->fid.persistent_fid, tcon->tid,
3715 				tcon->ses->Suid, off, len, rc);
3716 	else
3717 		trace_smb3_falloc_done(xid, cfile->fid.persistent_fid, tcon->tid,
3718 				tcon->ses->Suid, off, len);
3719 
3720 	free_xid(xid);
3721 	return rc;
3722 }
3723 
smb3_llseek(struct file * file,struct cifs_tcon * tcon,loff_t offset,int whence)3724 static loff_t smb3_llseek(struct file *file, struct cifs_tcon *tcon, loff_t offset, int whence)
3725 {
3726 	struct cifsFileInfo *wrcfile, *cfile = file->private_data;
3727 	struct cifsInodeInfo *cifsi;
3728 	struct inode *inode;
3729 	int rc = 0;
3730 	struct file_allocated_range_buffer in_data, *out_data = NULL;
3731 	u32 out_data_len;
3732 	unsigned int xid;
3733 
3734 	if (whence != SEEK_HOLE && whence != SEEK_DATA)
3735 		return generic_file_llseek(file, offset, whence);
3736 
3737 	inode = d_inode(cfile->dentry);
3738 	cifsi = CIFS_I(inode);
3739 
3740 	if (offset < 0 || offset >= i_size_read(inode))
3741 		return -ENXIO;
3742 
3743 	xid = get_xid();
3744 	/*
3745 	 * We need to be sure that all dirty pages are written as they
3746 	 * might fill holes on the server.
3747 	 * Note that we also MUST flush any written pages since at least
3748 	 * some servers (Windows2016) will not reflect recent writes in
3749 	 * QUERY_ALLOCATED_RANGES until SMB2_flush is called.
3750 	 */
3751 	wrcfile = find_writable_file(cifsi, FIND_WR_ANY);
3752 	if (wrcfile) {
3753 		filemap_write_and_wait(inode->i_mapping);
3754 		smb2_flush_file(xid, tcon, &wrcfile->fid);
3755 		cifsFileInfo_put(wrcfile);
3756 	}
3757 
3758 	if (!(cifsi->cifsAttrs & FILE_ATTRIBUTE_SPARSE_FILE)) {
3759 		if (whence == SEEK_HOLE)
3760 			offset = i_size_read(inode);
3761 		goto lseek_exit;
3762 	}
3763 
3764 	in_data.file_offset = cpu_to_le64(offset);
3765 	in_data.length = cpu_to_le64(i_size_read(inode));
3766 
3767 	rc = SMB2_ioctl(xid, tcon, cfile->fid.persistent_fid,
3768 			cfile->fid.volatile_fid,
3769 			FSCTL_QUERY_ALLOCATED_RANGES,
3770 			(char *)&in_data, sizeof(in_data),
3771 			sizeof(struct file_allocated_range_buffer),
3772 			(char **)&out_data, &out_data_len);
3773 	if (rc == -E2BIG)
3774 		rc = 0;
3775 	if (rc)
3776 		goto lseek_exit;
3777 
3778 	if (whence == SEEK_HOLE && out_data_len == 0)
3779 		goto lseek_exit;
3780 
3781 	if (whence == SEEK_DATA && out_data_len == 0) {
3782 		rc = -ENXIO;
3783 		goto lseek_exit;
3784 	}
3785 
3786 	if (out_data_len < sizeof(struct file_allocated_range_buffer)) {
3787 		rc = -EINVAL;
3788 		goto lseek_exit;
3789 	}
3790 	if (whence == SEEK_DATA) {
3791 		offset = le64_to_cpu(out_data->file_offset);
3792 		goto lseek_exit;
3793 	}
3794 	if (offset < le64_to_cpu(out_data->file_offset))
3795 		goto lseek_exit;
3796 
3797 	offset = le64_to_cpu(out_data->file_offset) + le64_to_cpu(out_data->length);
3798 
3799  lseek_exit:
3800 	free_xid(xid);
3801 	kfree(out_data);
3802 	if (!rc)
3803 		return vfs_setpos(file, offset, inode->i_sb->s_maxbytes);
3804 	else
3805 		return rc;
3806 }
3807 
smb3_fiemap(struct cifs_tcon * tcon,struct cifsFileInfo * cfile,struct fiemap_extent_info * fei,u64 start,u64 len)3808 static int smb3_fiemap(struct cifs_tcon *tcon,
3809 		       struct cifsFileInfo *cfile,
3810 		       struct fiemap_extent_info *fei, u64 start, u64 len)
3811 {
3812 	unsigned int xid;
3813 	struct file_allocated_range_buffer in_data, *out_data;
3814 	u32 out_data_len;
3815 	int i, num, rc, flags, last_blob;
3816 	u64 next;
3817 
3818 	rc = fiemap_prep(d_inode(cfile->dentry), fei, start, &len, 0);
3819 	if (rc)
3820 		return rc;
3821 
3822 	xid = get_xid();
3823  again:
3824 	in_data.file_offset = cpu_to_le64(start);
3825 	in_data.length = cpu_to_le64(len);
3826 
3827 	rc = SMB2_ioctl(xid, tcon, cfile->fid.persistent_fid,
3828 			cfile->fid.volatile_fid,
3829 			FSCTL_QUERY_ALLOCATED_RANGES,
3830 			(char *)&in_data, sizeof(in_data),
3831 			1024 * sizeof(struct file_allocated_range_buffer),
3832 			(char **)&out_data, &out_data_len);
3833 	if (rc == -E2BIG) {
3834 		last_blob = 0;
3835 		rc = 0;
3836 	} else
3837 		last_blob = 1;
3838 	if (rc)
3839 		goto out;
3840 
3841 	if (out_data_len && out_data_len < sizeof(struct file_allocated_range_buffer)) {
3842 		rc = -EINVAL;
3843 		goto out;
3844 	}
3845 	if (out_data_len % sizeof(struct file_allocated_range_buffer)) {
3846 		rc = -EINVAL;
3847 		goto out;
3848 	}
3849 
3850 	num = out_data_len / sizeof(struct file_allocated_range_buffer);
3851 	for (i = 0; i < num; i++) {
3852 		flags = 0;
3853 		if (i == num - 1 && last_blob)
3854 			flags |= FIEMAP_EXTENT_LAST;
3855 
3856 		rc = fiemap_fill_next_extent(fei,
3857 				le64_to_cpu(out_data[i].file_offset),
3858 				le64_to_cpu(out_data[i].file_offset),
3859 				le64_to_cpu(out_data[i].length),
3860 				flags);
3861 		if (rc < 0)
3862 			goto out;
3863 		if (rc == 1) {
3864 			rc = 0;
3865 			goto out;
3866 		}
3867 	}
3868 
3869 	if (!last_blob) {
3870 		next = le64_to_cpu(out_data[num - 1].file_offset) +
3871 		  le64_to_cpu(out_data[num - 1].length);
3872 		len = len - (next - start);
3873 		start = next;
3874 		goto again;
3875 	}
3876 
3877  out:
3878 	free_xid(xid);
3879 	kfree(out_data);
3880 	return rc;
3881 }
3882 
smb3_fallocate(struct file * file,struct cifs_tcon * tcon,int mode,loff_t off,loff_t len)3883 static long smb3_fallocate(struct file *file, struct cifs_tcon *tcon, int mode,
3884 			   loff_t off, loff_t len)
3885 {
3886 	/* KEEP_SIZE already checked for by do_fallocate */
3887 	if (mode & FALLOC_FL_PUNCH_HOLE)
3888 		return smb3_punch_hole(file, tcon, off, len);
3889 	else if (mode & FALLOC_FL_ZERO_RANGE) {
3890 		if (mode & FALLOC_FL_KEEP_SIZE)
3891 			return smb3_zero_range(file, tcon, off, len, true);
3892 		return smb3_zero_range(file, tcon, off, len, false);
3893 	} else if (mode == FALLOC_FL_KEEP_SIZE)
3894 		return smb3_simple_falloc(file, tcon, off, len, true);
3895 	else if (mode == 0)
3896 		return smb3_simple_falloc(file, tcon, off, len, false);
3897 
3898 	return -EOPNOTSUPP;
3899 }
3900 
3901 static void
smb2_downgrade_oplock(struct TCP_Server_Info * server,struct cifsInodeInfo * cinode,__u32 oplock,unsigned int epoch,bool * purge_cache)3902 smb2_downgrade_oplock(struct TCP_Server_Info *server,
3903 		      struct cifsInodeInfo *cinode, __u32 oplock,
3904 		      unsigned int epoch, bool *purge_cache)
3905 {
3906 	server->ops->set_oplock_level(cinode, oplock, 0, NULL);
3907 }
3908 
3909 static void
3910 smb21_set_oplock_level(struct cifsInodeInfo *cinode, __u32 oplock,
3911 		       unsigned int epoch, bool *purge_cache);
3912 
3913 static void
smb3_downgrade_oplock(struct TCP_Server_Info * server,struct cifsInodeInfo * cinode,__u32 oplock,unsigned int epoch,bool * purge_cache)3914 smb3_downgrade_oplock(struct TCP_Server_Info *server,
3915 		       struct cifsInodeInfo *cinode, __u32 oplock,
3916 		       unsigned int epoch, bool *purge_cache)
3917 {
3918 	unsigned int old_state = cinode->oplock;
3919 	unsigned int old_epoch = cinode->epoch;
3920 	unsigned int new_state;
3921 
3922 	if (epoch > old_epoch) {
3923 		smb21_set_oplock_level(cinode, oplock, 0, NULL);
3924 		cinode->epoch = epoch;
3925 	}
3926 
3927 	new_state = cinode->oplock;
3928 	*purge_cache = false;
3929 
3930 	if ((old_state & CIFS_CACHE_READ_FLG) != 0 &&
3931 	    (new_state & CIFS_CACHE_READ_FLG) == 0)
3932 		*purge_cache = true;
3933 	else if (old_state == new_state && (epoch - old_epoch > 1))
3934 		*purge_cache = true;
3935 }
3936 
3937 static void
smb2_set_oplock_level(struct cifsInodeInfo * cinode,__u32 oplock,unsigned int epoch,bool * purge_cache)3938 smb2_set_oplock_level(struct cifsInodeInfo *cinode, __u32 oplock,
3939 		      unsigned int epoch, bool *purge_cache)
3940 {
3941 	oplock &= 0xFF;
3942 	if (oplock == SMB2_OPLOCK_LEVEL_NOCHANGE)
3943 		return;
3944 	if (oplock == SMB2_OPLOCK_LEVEL_BATCH) {
3945 		cinode->oplock = CIFS_CACHE_RHW_FLG;
3946 		cifs_dbg(FYI, "Batch Oplock granted on inode %p\n",
3947 			 &cinode->vfs_inode);
3948 	} else if (oplock == SMB2_OPLOCK_LEVEL_EXCLUSIVE) {
3949 		cinode->oplock = CIFS_CACHE_RW_FLG;
3950 		cifs_dbg(FYI, "Exclusive Oplock granted on inode %p\n",
3951 			 &cinode->vfs_inode);
3952 	} else if (oplock == SMB2_OPLOCK_LEVEL_II) {
3953 		cinode->oplock = CIFS_CACHE_READ_FLG;
3954 		cifs_dbg(FYI, "Level II Oplock granted on inode %p\n",
3955 			 &cinode->vfs_inode);
3956 	} else
3957 		cinode->oplock = 0;
3958 }
3959 
3960 static void
smb21_set_oplock_level(struct cifsInodeInfo * cinode,__u32 oplock,unsigned int epoch,bool * purge_cache)3961 smb21_set_oplock_level(struct cifsInodeInfo *cinode, __u32 oplock,
3962 		       unsigned int epoch, bool *purge_cache)
3963 {
3964 	char message[5] = {0};
3965 	unsigned int new_oplock = 0;
3966 
3967 	oplock &= 0xFF;
3968 	if (oplock == SMB2_OPLOCK_LEVEL_NOCHANGE)
3969 		return;
3970 
3971 	/* Check if the server granted an oplock rather than a lease */
3972 	if (oplock & SMB2_OPLOCK_LEVEL_EXCLUSIVE)
3973 		return smb2_set_oplock_level(cinode, oplock, epoch,
3974 					     purge_cache);
3975 
3976 	if (oplock & SMB2_LEASE_READ_CACHING_HE) {
3977 		new_oplock |= CIFS_CACHE_READ_FLG;
3978 		strcat(message, "R");
3979 	}
3980 	if (oplock & SMB2_LEASE_HANDLE_CACHING_HE) {
3981 		new_oplock |= CIFS_CACHE_HANDLE_FLG;
3982 		strcat(message, "H");
3983 	}
3984 	if (oplock & SMB2_LEASE_WRITE_CACHING_HE) {
3985 		new_oplock |= CIFS_CACHE_WRITE_FLG;
3986 		strcat(message, "W");
3987 	}
3988 	if (!new_oplock)
3989 		strncpy(message, "None", sizeof(message));
3990 
3991 	cinode->oplock = new_oplock;
3992 	cifs_dbg(FYI, "%s Lease granted on inode %p\n", message,
3993 		 &cinode->vfs_inode);
3994 }
3995 
3996 static void
smb3_set_oplock_level(struct cifsInodeInfo * cinode,__u32 oplock,unsigned int epoch,bool * purge_cache)3997 smb3_set_oplock_level(struct cifsInodeInfo *cinode, __u32 oplock,
3998 		      unsigned int epoch, bool *purge_cache)
3999 {
4000 	unsigned int old_oplock = cinode->oplock;
4001 
4002 	smb21_set_oplock_level(cinode, oplock, epoch, purge_cache);
4003 
4004 	if (purge_cache) {
4005 		*purge_cache = false;
4006 		if (old_oplock == CIFS_CACHE_READ_FLG) {
4007 			if (cinode->oplock == CIFS_CACHE_READ_FLG &&
4008 			    (epoch - cinode->epoch > 0))
4009 				*purge_cache = true;
4010 			else if (cinode->oplock == CIFS_CACHE_RH_FLG &&
4011 				 (epoch - cinode->epoch > 1))
4012 				*purge_cache = true;
4013 			else if (cinode->oplock == CIFS_CACHE_RHW_FLG &&
4014 				 (epoch - cinode->epoch > 1))
4015 				*purge_cache = true;
4016 			else if (cinode->oplock == 0 &&
4017 				 (epoch - cinode->epoch > 0))
4018 				*purge_cache = true;
4019 		} else if (old_oplock == CIFS_CACHE_RH_FLG) {
4020 			if (cinode->oplock == CIFS_CACHE_RH_FLG &&
4021 			    (epoch - cinode->epoch > 0))
4022 				*purge_cache = true;
4023 			else if (cinode->oplock == CIFS_CACHE_RHW_FLG &&
4024 				 (epoch - cinode->epoch > 1))
4025 				*purge_cache = true;
4026 		}
4027 		cinode->epoch = epoch;
4028 	}
4029 }
4030 
4031 #ifdef CONFIG_CIFS_ALLOW_INSECURE_LEGACY
4032 static bool
smb2_is_read_op(__u32 oplock)4033 smb2_is_read_op(__u32 oplock)
4034 {
4035 	return oplock == SMB2_OPLOCK_LEVEL_II;
4036 }
4037 #endif /* CIFS_ALLOW_INSECURE_LEGACY */
4038 
4039 static bool
smb21_is_read_op(__u32 oplock)4040 smb21_is_read_op(__u32 oplock)
4041 {
4042 	return (oplock & SMB2_LEASE_READ_CACHING_HE) &&
4043 	       !(oplock & SMB2_LEASE_WRITE_CACHING_HE);
4044 }
4045 
4046 static __le32
map_oplock_to_lease(u8 oplock)4047 map_oplock_to_lease(u8 oplock)
4048 {
4049 	if (oplock == SMB2_OPLOCK_LEVEL_EXCLUSIVE)
4050 		return SMB2_LEASE_WRITE_CACHING | SMB2_LEASE_READ_CACHING;
4051 	else if (oplock == SMB2_OPLOCK_LEVEL_II)
4052 		return SMB2_LEASE_READ_CACHING;
4053 	else if (oplock == SMB2_OPLOCK_LEVEL_BATCH)
4054 		return SMB2_LEASE_HANDLE_CACHING | SMB2_LEASE_READ_CACHING |
4055 		       SMB2_LEASE_WRITE_CACHING;
4056 	return 0;
4057 }
4058 
4059 static char *
smb2_create_lease_buf(u8 * lease_key,u8 oplock)4060 smb2_create_lease_buf(u8 *lease_key, u8 oplock)
4061 {
4062 	struct create_lease *buf;
4063 
4064 	buf = kzalloc(sizeof(struct create_lease), GFP_KERNEL);
4065 	if (!buf)
4066 		return NULL;
4067 
4068 	memcpy(&buf->lcontext.LeaseKey, lease_key, SMB2_LEASE_KEY_SIZE);
4069 	buf->lcontext.LeaseState = map_oplock_to_lease(oplock);
4070 
4071 	buf->ccontext.DataOffset = cpu_to_le16(offsetof
4072 					(struct create_lease, lcontext));
4073 	buf->ccontext.DataLength = cpu_to_le32(sizeof(struct lease_context));
4074 	buf->ccontext.NameOffset = cpu_to_le16(offsetof
4075 				(struct create_lease, Name));
4076 	buf->ccontext.NameLength = cpu_to_le16(4);
4077 	/* SMB2_CREATE_REQUEST_LEASE is "RqLs" */
4078 	buf->Name[0] = 'R';
4079 	buf->Name[1] = 'q';
4080 	buf->Name[2] = 'L';
4081 	buf->Name[3] = 's';
4082 	return (char *)buf;
4083 }
4084 
4085 static char *
smb3_create_lease_buf(u8 * lease_key,u8 oplock)4086 smb3_create_lease_buf(u8 *lease_key, u8 oplock)
4087 {
4088 	struct create_lease_v2 *buf;
4089 
4090 	buf = kzalloc(sizeof(struct create_lease_v2), GFP_KERNEL);
4091 	if (!buf)
4092 		return NULL;
4093 
4094 	memcpy(&buf->lcontext.LeaseKey, lease_key, SMB2_LEASE_KEY_SIZE);
4095 	buf->lcontext.LeaseState = map_oplock_to_lease(oplock);
4096 
4097 	buf->ccontext.DataOffset = cpu_to_le16(offsetof
4098 					(struct create_lease_v2, lcontext));
4099 	buf->ccontext.DataLength = cpu_to_le32(sizeof(struct lease_context_v2));
4100 	buf->ccontext.NameOffset = cpu_to_le16(offsetof
4101 				(struct create_lease_v2, Name));
4102 	buf->ccontext.NameLength = cpu_to_le16(4);
4103 	/* SMB2_CREATE_REQUEST_LEASE is "RqLs" */
4104 	buf->Name[0] = 'R';
4105 	buf->Name[1] = 'q';
4106 	buf->Name[2] = 'L';
4107 	buf->Name[3] = 's';
4108 	return (char *)buf;
4109 }
4110 
4111 static __u8
smb2_parse_lease_buf(void * buf,unsigned int * epoch,char * lease_key)4112 smb2_parse_lease_buf(void *buf, unsigned int *epoch, char *lease_key)
4113 {
4114 	struct create_lease *lc = (struct create_lease *)buf;
4115 
4116 	*epoch = 0; /* not used */
4117 	if (lc->lcontext.LeaseFlags & SMB2_LEASE_FLAG_BREAK_IN_PROGRESS)
4118 		return SMB2_OPLOCK_LEVEL_NOCHANGE;
4119 	return le32_to_cpu(lc->lcontext.LeaseState);
4120 }
4121 
4122 static __u8
smb3_parse_lease_buf(void * buf,unsigned int * epoch,char * lease_key)4123 smb3_parse_lease_buf(void *buf, unsigned int *epoch, char *lease_key)
4124 {
4125 	struct create_lease_v2 *lc = (struct create_lease_v2 *)buf;
4126 
4127 	*epoch = le16_to_cpu(lc->lcontext.Epoch);
4128 	if (lc->lcontext.LeaseFlags & SMB2_LEASE_FLAG_BREAK_IN_PROGRESS)
4129 		return SMB2_OPLOCK_LEVEL_NOCHANGE;
4130 	if (lease_key)
4131 		memcpy(lease_key, &lc->lcontext.LeaseKey, SMB2_LEASE_KEY_SIZE);
4132 	return le32_to_cpu(lc->lcontext.LeaseState);
4133 }
4134 
4135 static unsigned int
smb2_wp_retry_size(struct inode * inode)4136 smb2_wp_retry_size(struct inode *inode)
4137 {
4138 	return min_t(unsigned int, CIFS_SB(inode->i_sb)->wsize,
4139 		     SMB2_MAX_BUFFER_SIZE);
4140 }
4141 
4142 static bool
smb2_dir_needs_close(struct cifsFileInfo * cfile)4143 smb2_dir_needs_close(struct cifsFileInfo *cfile)
4144 {
4145 	return !cfile->invalidHandle;
4146 }
4147 
4148 static void
fill_transform_hdr(struct smb2_transform_hdr * tr_hdr,unsigned int orig_len,struct smb_rqst * old_rq,__le16 cipher_type)4149 fill_transform_hdr(struct smb2_transform_hdr *tr_hdr, unsigned int orig_len,
4150 		   struct smb_rqst *old_rq, __le16 cipher_type)
4151 {
4152 	struct smb2_sync_hdr *shdr =
4153 			(struct smb2_sync_hdr *)old_rq->rq_iov[0].iov_base;
4154 
4155 	memset(tr_hdr, 0, sizeof(struct smb2_transform_hdr));
4156 	tr_hdr->ProtocolId = SMB2_TRANSFORM_PROTO_NUM;
4157 	tr_hdr->OriginalMessageSize = cpu_to_le32(orig_len);
4158 	tr_hdr->Flags = cpu_to_le16(0x01);
4159 	if ((cipher_type == SMB2_ENCRYPTION_AES128_GCM) ||
4160 	    (cipher_type == SMB2_ENCRYPTION_AES256_GCM))
4161 		get_random_bytes(&tr_hdr->Nonce, SMB3_AES_GCM_NONCE);
4162 	else
4163 		get_random_bytes(&tr_hdr->Nonce, SMB3_AES_CCM_NONCE);
4164 	memcpy(&tr_hdr->SessionId, &shdr->SessionId, 8);
4165 }
4166 
smb2_aead_req_alloc(struct crypto_aead * tfm,const struct smb_rqst * rqst,int num_rqst,const u8 * sig,u8 ** iv,struct aead_request ** req,struct scatterlist ** sgl,unsigned int * num_sgs)4167 static void *smb2_aead_req_alloc(struct crypto_aead *tfm, const struct smb_rqst *rqst,
4168 				 int num_rqst, const u8 *sig, u8 **iv,
4169 				 struct aead_request **req, struct scatterlist **sgl,
4170 				 unsigned int *num_sgs)
4171 {
4172 	unsigned int req_size = sizeof(**req) + crypto_aead_reqsize(tfm);
4173 	unsigned int iv_size = crypto_aead_ivsize(tfm);
4174 	unsigned int len;
4175 	u8 *p;
4176 
4177 	*num_sgs = cifs_get_num_sgs(rqst, num_rqst, sig);
4178 
4179 	len = iv_size;
4180 	len += crypto_aead_alignmask(tfm) & ~(crypto_tfm_ctx_alignment() - 1);
4181 	len = ALIGN(len, crypto_tfm_ctx_alignment());
4182 	len += req_size;
4183 	len = ALIGN(len, __alignof__(struct scatterlist));
4184 	len += *num_sgs * sizeof(**sgl);
4185 
4186 	p = kmalloc(len, GFP_ATOMIC);
4187 	if (!p)
4188 		return NULL;
4189 
4190 	*iv = (u8 *)PTR_ALIGN(p, crypto_aead_alignmask(tfm) + 1);
4191 	*req = (struct aead_request *)PTR_ALIGN(*iv + iv_size,
4192 						crypto_tfm_ctx_alignment());
4193 	*sgl = (struct scatterlist *)PTR_ALIGN((u8 *)*req + req_size,
4194 					       __alignof__(struct scatterlist));
4195 	return p;
4196 }
4197 
smb2_get_aead_req(struct crypto_aead * tfm,const struct smb_rqst * rqst,int num_rqst,const u8 * sig,u8 ** iv,struct aead_request ** req,struct scatterlist ** sgl)4198 static void *smb2_get_aead_req(struct crypto_aead *tfm, const struct smb_rqst *rqst,
4199 			       int num_rqst, const u8 *sig, u8 **iv,
4200 			       struct aead_request **req, struct scatterlist **sgl)
4201 {
4202 	unsigned int off, len, skip;
4203 	struct scatterlist *sg;
4204 	unsigned int num_sgs;
4205 	unsigned long addr;
4206 	int i, j;
4207 	void *p;
4208 
4209 	p = smb2_aead_req_alloc(tfm, rqst, num_rqst, sig, iv, req, sgl, &num_sgs);
4210 	if (!p)
4211 		return NULL;
4212 
4213 	sg_init_table(*sgl, num_sgs);
4214 	sg = *sgl;
4215 
4216 	/* Assumes the first rqst has a transform header as the first iov.
4217 	 * I.e.
4218 	 * rqst[0].rq_iov[0]  is transform header
4219 	 * rqst[0].rq_iov[1+] data to be encrypted/decrypted
4220 	 * rqst[1+].rq_iov[0+] data to be encrypted/decrypted
4221 	 */
4222 	for (i = 0; i < num_rqst; i++) {
4223 		/*
4224 		 * The first rqst has a transform header where the
4225 		 * first 20 bytes are not part of the encrypted blob.
4226 		 */
4227 		for (j = 0; j < rqst[i].rq_nvec; j++) {
4228 			struct kvec *iov = &rqst[i].rq_iov[j];
4229 
4230 			skip = (i == 0) && (j == 0) ? 20 : 0;
4231 			addr = (unsigned long)iov->iov_base + skip;
4232 			len = iov->iov_len - skip;
4233 			sg = cifs_sg_set_buf(sg, (void *)addr, len);
4234 		}
4235 		for (j = 0; j < rqst[i].rq_npages; j++) {
4236 			rqst_page_get_length(&rqst[i], j, &len, &off);
4237 			sg_set_page(sg++, rqst[i].rq_pages[j], len, off);
4238 		}
4239 	}
4240 	cifs_sg_set_buf(sg, sig, SMB2_SIGNATURE_SIZE);
4241 
4242 	return p;
4243 }
4244 
4245 static int
smb2_get_enc_key(struct TCP_Server_Info * server,__u64 ses_id,int enc,u8 * key)4246 smb2_get_enc_key(struct TCP_Server_Info *server, __u64 ses_id, int enc, u8 *key)
4247 {
4248 	struct cifs_ses *ses;
4249 	u8 *ses_enc_key;
4250 
4251 	spin_lock(&cifs_tcp_ses_lock);
4252 	list_for_each_entry(server, &cifs_tcp_ses_list, tcp_ses_list) {
4253 		list_for_each_entry(ses, &server->smb_ses_list, smb_ses_list) {
4254 			if (ses->Suid == ses_id) {
4255 				ses_enc_key = enc ? ses->smb3encryptionkey :
4256 					ses->smb3decryptionkey;
4257 				memcpy(key, ses_enc_key, SMB3_ENC_DEC_KEY_SIZE);
4258 				spin_unlock(&cifs_tcp_ses_lock);
4259 				return 0;
4260 			}
4261 		}
4262 	}
4263 	spin_unlock(&cifs_tcp_ses_lock);
4264 
4265 	return -EAGAIN;
4266 }
4267 /*
4268  * Encrypt or decrypt @rqst message. @rqst[0] has the following format:
4269  * iov[0]   - transform header (associate data),
4270  * iov[1-N] - SMB2 header and pages - data to encrypt.
4271  * On success return encrypted data in iov[1-N] and pages, leave iov[0]
4272  * untouched.
4273  */
4274 static int
crypt_message(struct TCP_Server_Info * server,int num_rqst,struct smb_rqst * rqst,int enc)4275 crypt_message(struct TCP_Server_Info *server, int num_rqst,
4276 	      struct smb_rqst *rqst, int enc)
4277 {
4278 	struct smb2_transform_hdr *tr_hdr =
4279 		(struct smb2_transform_hdr *)rqst[0].rq_iov[0].iov_base;
4280 	unsigned int assoc_data_len = sizeof(struct smb2_transform_hdr) - 20;
4281 	int rc = 0;
4282 	struct scatterlist *sg;
4283 	u8 sign[SMB2_SIGNATURE_SIZE] = {};
4284 	u8 key[SMB3_ENC_DEC_KEY_SIZE];
4285 	struct aead_request *req;
4286 	u8 *iv;
4287 	DECLARE_CRYPTO_WAIT(wait);
4288 	struct crypto_aead *tfm;
4289 	unsigned int crypt_len = le32_to_cpu(tr_hdr->OriginalMessageSize);
4290 	void *creq;
4291 
4292 	rc = smb2_get_enc_key(server, tr_hdr->SessionId, enc, key);
4293 	if (rc) {
4294 		cifs_server_dbg(VFS, "%s: Could not get %scryption key\n", __func__,
4295 			 enc ? "en" : "de");
4296 		return rc;
4297 	}
4298 
4299 	rc = smb3_crypto_aead_allocate(server);
4300 	if (rc) {
4301 		cifs_server_dbg(VFS, "%s: crypto alloc failed\n", __func__);
4302 		return rc;
4303 	}
4304 
4305 	tfm = enc ? server->secmech.ccmaesencrypt :
4306 						server->secmech.ccmaesdecrypt;
4307 
4308 	if ((server->cipher_type == SMB2_ENCRYPTION_AES256_CCM) ||
4309 		(server->cipher_type == SMB2_ENCRYPTION_AES256_GCM))
4310 		rc = crypto_aead_setkey(tfm, key, SMB3_GCM256_CRYPTKEY_SIZE);
4311 	else
4312 		rc = crypto_aead_setkey(tfm, key, SMB3_GCM128_CRYPTKEY_SIZE);
4313 
4314 	if (rc) {
4315 		cifs_server_dbg(VFS, "%s: Failed to set aead key %d\n", __func__, rc);
4316 		return rc;
4317 	}
4318 
4319 	rc = crypto_aead_setauthsize(tfm, SMB2_SIGNATURE_SIZE);
4320 	if (rc) {
4321 		cifs_server_dbg(VFS, "%s: Failed to set authsize %d\n", __func__, rc);
4322 		return rc;
4323 	}
4324 
4325 	creq = smb2_get_aead_req(tfm, rqst, num_rqst, sign, &iv, &req, &sg);
4326 	if (unlikely(!creq))
4327 		return -ENOMEM;
4328 
4329 	if (!enc) {
4330 		memcpy(sign, &tr_hdr->Signature, SMB2_SIGNATURE_SIZE);
4331 		crypt_len += SMB2_SIGNATURE_SIZE;
4332 	}
4333 
4334 	if ((server->cipher_type == SMB2_ENCRYPTION_AES128_GCM) ||
4335 	    (server->cipher_type == SMB2_ENCRYPTION_AES256_GCM))
4336 		memcpy(iv, (char *)tr_hdr->Nonce, SMB3_AES_GCM_NONCE);
4337 	else {
4338 		iv[0] = 3;
4339 		memcpy(iv + 1, (char *)tr_hdr->Nonce, SMB3_AES_CCM_NONCE);
4340 	}
4341 
4342 	aead_request_set_tfm(req, tfm);
4343 	aead_request_set_crypt(req, sg, sg, crypt_len, iv);
4344 	aead_request_set_ad(req, assoc_data_len);
4345 
4346 	aead_request_set_callback(req, CRYPTO_TFM_REQ_MAY_BACKLOG,
4347 				  crypto_req_done, &wait);
4348 
4349 	rc = crypto_wait_req(enc ? crypto_aead_encrypt(req)
4350 				: crypto_aead_decrypt(req), &wait);
4351 
4352 	if (!rc && enc)
4353 		memcpy(&tr_hdr->Signature, sign, SMB2_SIGNATURE_SIZE);
4354 
4355 	kfree_sensitive(creq);
4356 	return rc;
4357 }
4358 
4359 void
smb3_free_compound_rqst(int num_rqst,struct smb_rqst * rqst)4360 smb3_free_compound_rqst(int num_rqst, struct smb_rqst *rqst)
4361 {
4362 	int i, j;
4363 
4364 	for (i = 0; i < num_rqst; i++) {
4365 		if (rqst[i].rq_pages) {
4366 			for (j = rqst[i].rq_npages - 1; j >= 0; j--)
4367 				put_page(rqst[i].rq_pages[j]);
4368 			kfree(rqst[i].rq_pages);
4369 		}
4370 	}
4371 }
4372 
4373 /*
4374  * This function will initialize new_rq and encrypt the content.
4375  * The first entry, new_rq[0], only contains a single iov which contains
4376  * a smb2_transform_hdr and is pre-allocated by the caller.
4377  * This function then populates new_rq[1+] with the content from olq_rq[0+].
4378  *
4379  * The end result is an array of smb_rqst structures where the first structure
4380  * only contains a single iov for the transform header which we then can pass
4381  * to crypt_message().
4382  *
4383  * new_rq[0].rq_iov[0] :  smb2_transform_hdr pre-allocated by the caller
4384  * new_rq[1+].rq_iov[*] == old_rq[0+].rq_iov[*] : SMB2/3 requests
4385  */
4386 static int
smb3_init_transform_rq(struct TCP_Server_Info * server,int num_rqst,struct smb_rqst * new_rq,struct smb_rqst * old_rq)4387 smb3_init_transform_rq(struct TCP_Server_Info *server, int num_rqst,
4388 		       struct smb_rqst *new_rq, struct smb_rqst *old_rq)
4389 {
4390 	struct page **pages;
4391 	struct smb2_transform_hdr *tr_hdr = new_rq[0].rq_iov[0].iov_base;
4392 	unsigned int npages;
4393 	unsigned int orig_len = 0;
4394 	int i, j;
4395 	int rc = -ENOMEM;
4396 
4397 	for (i = 1; i < num_rqst; i++) {
4398 		npages = old_rq[i - 1].rq_npages;
4399 		pages = kmalloc_array(npages, sizeof(struct page *),
4400 				      GFP_KERNEL);
4401 		if (!pages)
4402 			goto err_free;
4403 
4404 		new_rq[i].rq_pages = pages;
4405 		new_rq[i].rq_npages = npages;
4406 		new_rq[i].rq_offset = old_rq[i - 1].rq_offset;
4407 		new_rq[i].rq_pagesz = old_rq[i - 1].rq_pagesz;
4408 		new_rq[i].rq_tailsz = old_rq[i - 1].rq_tailsz;
4409 		new_rq[i].rq_iov = old_rq[i - 1].rq_iov;
4410 		new_rq[i].rq_nvec = old_rq[i - 1].rq_nvec;
4411 
4412 		orig_len += smb_rqst_len(server, &old_rq[i - 1]);
4413 
4414 		for (j = 0; j < npages; j++) {
4415 			pages[j] = alloc_page(GFP_KERNEL|__GFP_HIGHMEM);
4416 			if (!pages[j])
4417 				goto err_free;
4418 		}
4419 
4420 		/* copy pages form the old */
4421 		for (j = 0; j < npages; j++) {
4422 			char *dst, *src;
4423 			unsigned int offset, len;
4424 
4425 			rqst_page_get_length(&new_rq[i], j, &len, &offset);
4426 
4427 			dst = (char *) kmap(new_rq[i].rq_pages[j]) + offset;
4428 			src = (char *) kmap(old_rq[i - 1].rq_pages[j]) + offset;
4429 
4430 			memcpy(dst, src, len);
4431 			kunmap(new_rq[i].rq_pages[j]);
4432 			kunmap(old_rq[i - 1].rq_pages[j]);
4433 		}
4434 	}
4435 
4436 	/* fill the 1st iov with a transform header */
4437 	fill_transform_hdr(tr_hdr, orig_len, old_rq, server->cipher_type);
4438 
4439 	rc = crypt_message(server, num_rqst, new_rq, 1);
4440 	cifs_dbg(FYI, "Encrypt message returned %d\n", rc);
4441 	if (rc)
4442 		goto err_free;
4443 
4444 	return rc;
4445 
4446 err_free:
4447 	smb3_free_compound_rqst(num_rqst - 1, &new_rq[1]);
4448 	return rc;
4449 }
4450 
4451 static int
smb3_is_transform_hdr(void * buf)4452 smb3_is_transform_hdr(void *buf)
4453 {
4454 	struct smb2_transform_hdr *trhdr = buf;
4455 
4456 	return trhdr->ProtocolId == SMB2_TRANSFORM_PROTO_NUM;
4457 }
4458 
4459 static int
decrypt_raw_data(struct TCP_Server_Info * server,char * buf,unsigned int buf_data_size,struct page ** pages,unsigned int npages,unsigned int page_data_size,bool is_offloaded)4460 decrypt_raw_data(struct TCP_Server_Info *server, char *buf,
4461 		 unsigned int buf_data_size, struct page **pages,
4462 		 unsigned int npages, unsigned int page_data_size,
4463 		 bool is_offloaded)
4464 {
4465 	struct kvec iov[2];
4466 	struct smb_rqst rqst = {NULL};
4467 	int rc;
4468 
4469 	iov[0].iov_base = buf;
4470 	iov[0].iov_len = sizeof(struct smb2_transform_hdr);
4471 	iov[1].iov_base = buf + sizeof(struct smb2_transform_hdr);
4472 	iov[1].iov_len = buf_data_size;
4473 
4474 	rqst.rq_iov = iov;
4475 	rqst.rq_nvec = 2;
4476 	rqst.rq_pages = pages;
4477 	rqst.rq_npages = npages;
4478 	rqst.rq_pagesz = PAGE_SIZE;
4479 	rqst.rq_tailsz = (page_data_size % PAGE_SIZE) ? : PAGE_SIZE;
4480 
4481 	rc = crypt_message(server, 1, &rqst, 0);
4482 	cifs_dbg(FYI, "Decrypt message returned %d\n", rc);
4483 
4484 	if (rc)
4485 		return rc;
4486 
4487 	memmove(buf, iov[1].iov_base, buf_data_size);
4488 
4489 	if (!is_offloaded)
4490 		server->total_read = buf_data_size + page_data_size;
4491 
4492 	return rc;
4493 }
4494 
4495 static int
read_data_into_pages(struct TCP_Server_Info * server,struct page ** pages,unsigned int npages,unsigned int len)4496 read_data_into_pages(struct TCP_Server_Info *server, struct page **pages,
4497 		     unsigned int npages, unsigned int len)
4498 {
4499 	int i;
4500 	int length;
4501 
4502 	for (i = 0; i < npages; i++) {
4503 		struct page *page = pages[i];
4504 		size_t n;
4505 
4506 		n = len;
4507 		if (len >= PAGE_SIZE) {
4508 			/* enough data to fill the page */
4509 			n = PAGE_SIZE;
4510 			len -= n;
4511 		} else {
4512 			zero_user(page, len, PAGE_SIZE - len);
4513 			len = 0;
4514 		}
4515 		length = cifs_read_page_from_socket(server, page, 0, n);
4516 		if (length < 0)
4517 			return length;
4518 		server->total_read += length;
4519 	}
4520 
4521 	return 0;
4522 }
4523 
4524 static int
init_read_bvec(struct page ** pages,unsigned int npages,unsigned int data_size,unsigned int cur_off,struct bio_vec ** page_vec)4525 init_read_bvec(struct page **pages, unsigned int npages, unsigned int data_size,
4526 	       unsigned int cur_off, struct bio_vec **page_vec)
4527 {
4528 	struct bio_vec *bvec;
4529 	int i;
4530 
4531 	bvec = kcalloc(npages, sizeof(struct bio_vec), GFP_KERNEL);
4532 	if (!bvec)
4533 		return -ENOMEM;
4534 
4535 	for (i = 0; i < npages; i++) {
4536 		bvec[i].bv_page = pages[i];
4537 		bvec[i].bv_offset = (i == 0) ? cur_off : 0;
4538 		bvec[i].bv_len = min_t(unsigned int, PAGE_SIZE, data_size);
4539 		data_size -= bvec[i].bv_len;
4540 	}
4541 
4542 	if (data_size != 0) {
4543 		cifs_dbg(VFS, "%s: something went wrong\n", __func__);
4544 		kfree(bvec);
4545 		return -EIO;
4546 	}
4547 
4548 	*page_vec = bvec;
4549 	return 0;
4550 }
4551 
4552 static int
handle_read_data(struct TCP_Server_Info * server,struct mid_q_entry * mid,char * buf,unsigned int buf_len,struct page ** pages,unsigned int npages,unsigned int page_data_size,bool is_offloaded)4553 handle_read_data(struct TCP_Server_Info *server, struct mid_q_entry *mid,
4554 		 char *buf, unsigned int buf_len, struct page **pages,
4555 		 unsigned int npages, unsigned int page_data_size,
4556 		 bool is_offloaded)
4557 {
4558 	unsigned int data_offset;
4559 	unsigned int data_len;
4560 	unsigned int cur_off;
4561 	unsigned int cur_page_idx;
4562 	unsigned int pad_len;
4563 	struct cifs_readdata *rdata = mid->callback_data;
4564 	struct smb2_sync_hdr *shdr = (struct smb2_sync_hdr *)buf;
4565 	struct bio_vec *bvec = NULL;
4566 	struct iov_iter iter;
4567 	struct kvec iov;
4568 	int length;
4569 	bool use_rdma_mr = false;
4570 
4571 	if (shdr->Command != SMB2_READ) {
4572 		cifs_server_dbg(VFS, "only big read responses are supported\n");
4573 		return -ENOTSUPP;
4574 	}
4575 
4576 	if (server->ops->is_session_expired &&
4577 	    server->ops->is_session_expired(buf)) {
4578 		if (!is_offloaded)
4579 			cifs_reconnect(server);
4580 		return -1;
4581 	}
4582 
4583 	if (server->ops->is_status_pending &&
4584 			server->ops->is_status_pending(buf, server))
4585 		return -1;
4586 
4587 	/* set up first two iov to get credits */
4588 	rdata->iov[0].iov_base = buf;
4589 	rdata->iov[0].iov_len = 0;
4590 	rdata->iov[1].iov_base = buf;
4591 	rdata->iov[1].iov_len =
4592 		min_t(unsigned int, buf_len, server->vals->read_rsp_size);
4593 	cifs_dbg(FYI, "0: iov_base=%p iov_len=%zu\n",
4594 		 rdata->iov[0].iov_base, rdata->iov[0].iov_len);
4595 	cifs_dbg(FYI, "1: iov_base=%p iov_len=%zu\n",
4596 		 rdata->iov[1].iov_base, rdata->iov[1].iov_len);
4597 
4598 	rdata->result = server->ops->map_error(buf, true);
4599 	if (rdata->result != 0) {
4600 		cifs_dbg(FYI, "%s: server returned error %d\n",
4601 			 __func__, rdata->result);
4602 		/* normal error on read response */
4603 		if (is_offloaded)
4604 			mid->mid_state = MID_RESPONSE_RECEIVED;
4605 		else
4606 			dequeue_mid(mid, false);
4607 		return 0;
4608 	}
4609 
4610 	data_offset = server->ops->read_data_offset(buf);
4611 #ifdef CONFIG_CIFS_SMB_DIRECT
4612 	use_rdma_mr = rdata->mr;
4613 #endif
4614 	data_len = server->ops->read_data_length(buf, use_rdma_mr);
4615 
4616 	if (data_offset < server->vals->read_rsp_size) {
4617 		/*
4618 		 * win2k8 sometimes sends an offset of 0 when the read
4619 		 * is beyond the EOF. Treat it as if the data starts just after
4620 		 * the header.
4621 		 */
4622 		cifs_dbg(FYI, "%s: data offset (%u) inside read response header\n",
4623 			 __func__, data_offset);
4624 		data_offset = server->vals->read_rsp_size;
4625 	} else if (data_offset > MAX_CIFS_SMALL_BUFFER_SIZE) {
4626 		/* data_offset is beyond the end of smallbuf */
4627 		cifs_dbg(FYI, "%s: data offset (%u) beyond end of smallbuf\n",
4628 			 __func__, data_offset);
4629 		rdata->result = -EIO;
4630 		if (is_offloaded)
4631 			mid->mid_state = MID_RESPONSE_MALFORMED;
4632 		else
4633 			dequeue_mid(mid, rdata->result);
4634 		return 0;
4635 	}
4636 
4637 	pad_len = data_offset - server->vals->read_rsp_size;
4638 
4639 	if (buf_len <= data_offset) {
4640 		/* read response payload is in pages */
4641 		cur_page_idx = pad_len / PAGE_SIZE;
4642 		cur_off = pad_len % PAGE_SIZE;
4643 
4644 		if (cur_page_idx != 0) {
4645 			/* data offset is beyond the 1st page of response */
4646 			cifs_dbg(FYI, "%s: data offset (%u) beyond 1st page of response\n",
4647 				 __func__, data_offset);
4648 			rdata->result = -EIO;
4649 			if (is_offloaded)
4650 				mid->mid_state = MID_RESPONSE_MALFORMED;
4651 			else
4652 				dequeue_mid(mid, rdata->result);
4653 			return 0;
4654 		}
4655 
4656 		if (data_len > page_data_size - pad_len) {
4657 			/* data_len is corrupt -- discard frame */
4658 			rdata->result = -EIO;
4659 			if (is_offloaded)
4660 				mid->mid_state = MID_RESPONSE_MALFORMED;
4661 			else
4662 				dequeue_mid(mid, rdata->result);
4663 			return 0;
4664 		}
4665 
4666 		rdata->result = init_read_bvec(pages, npages, page_data_size,
4667 					       cur_off, &bvec);
4668 		if (rdata->result != 0) {
4669 			if (is_offloaded)
4670 				mid->mid_state = MID_RESPONSE_MALFORMED;
4671 			else
4672 				dequeue_mid(mid, rdata->result);
4673 			return 0;
4674 		}
4675 
4676 		iov_iter_bvec(&iter, WRITE, bvec, npages, data_len);
4677 	} else if (buf_len >= data_offset + data_len) {
4678 		/* read response payload is in buf */
4679 		WARN_ONCE(npages > 0, "read data can be either in buf or in pages");
4680 		iov.iov_base = buf + data_offset;
4681 		iov.iov_len = data_len;
4682 		iov_iter_kvec(&iter, WRITE, &iov, 1, data_len);
4683 	} else {
4684 		/* read response payload cannot be in both buf and pages */
4685 		WARN_ONCE(1, "buf can not contain only a part of read data");
4686 		rdata->result = -EIO;
4687 		if (is_offloaded)
4688 			mid->mid_state = MID_RESPONSE_MALFORMED;
4689 		else
4690 			dequeue_mid(mid, rdata->result);
4691 		return 0;
4692 	}
4693 
4694 	length = rdata->copy_into_pages(server, rdata, &iter);
4695 
4696 	kfree(bvec);
4697 
4698 	if (length < 0)
4699 		return length;
4700 
4701 	if (is_offloaded)
4702 		mid->mid_state = MID_RESPONSE_RECEIVED;
4703 	else
4704 		dequeue_mid(mid, false);
4705 	return length;
4706 }
4707 
4708 struct smb2_decrypt_work {
4709 	struct work_struct decrypt;
4710 	struct TCP_Server_Info *server;
4711 	struct page **ppages;
4712 	char *buf;
4713 	unsigned int npages;
4714 	unsigned int len;
4715 };
4716 
4717 
smb2_decrypt_offload(struct work_struct * work)4718 static void smb2_decrypt_offload(struct work_struct *work)
4719 {
4720 	struct smb2_decrypt_work *dw = container_of(work,
4721 				struct smb2_decrypt_work, decrypt);
4722 	int i, rc;
4723 	struct mid_q_entry *mid;
4724 
4725 	rc = decrypt_raw_data(dw->server, dw->buf, dw->server->vals->read_rsp_size,
4726 			      dw->ppages, dw->npages, dw->len, true);
4727 	if (rc) {
4728 		cifs_dbg(VFS, "error decrypting rc=%d\n", rc);
4729 		goto free_pages;
4730 	}
4731 
4732 	dw->server->lstrp = jiffies;
4733 	mid = smb2_find_dequeue_mid(dw->server, dw->buf);
4734 	if (mid == NULL)
4735 		cifs_dbg(FYI, "mid not found\n");
4736 	else {
4737 		mid->decrypted = true;
4738 		rc = handle_read_data(dw->server, mid, dw->buf,
4739 				      dw->server->vals->read_rsp_size,
4740 				      dw->ppages, dw->npages, dw->len,
4741 				      true);
4742 		if (rc >= 0) {
4743 #ifdef CONFIG_CIFS_STATS2
4744 			mid->when_received = jiffies;
4745 #endif
4746 			mid->callback(mid);
4747 		} else {
4748 			spin_lock(&GlobalMid_Lock);
4749 			if (dw->server->tcpStatus == CifsNeedReconnect) {
4750 				mid->mid_state = MID_RETRY_NEEDED;
4751 				spin_unlock(&GlobalMid_Lock);
4752 				mid->callback(mid);
4753 			} else {
4754 				mid->mid_state = MID_REQUEST_SUBMITTED;
4755 				mid->mid_flags &= ~(MID_DELETED);
4756 				list_add_tail(&mid->qhead,
4757 					&dw->server->pending_mid_q);
4758 				spin_unlock(&GlobalMid_Lock);
4759 			}
4760 		}
4761 		cifs_mid_q_entry_release(mid);
4762 	}
4763 
4764 free_pages:
4765 	for (i = dw->npages-1; i >= 0; i--)
4766 		put_page(dw->ppages[i]);
4767 
4768 	kfree(dw->ppages);
4769 	cifs_small_buf_release(dw->buf);
4770 	kfree(dw);
4771 }
4772 
4773 
4774 static int
receive_encrypted_read(struct TCP_Server_Info * server,struct mid_q_entry ** mid,int * num_mids)4775 receive_encrypted_read(struct TCP_Server_Info *server, struct mid_q_entry **mid,
4776 		       int *num_mids)
4777 {
4778 	char *buf = server->smallbuf;
4779 	struct smb2_transform_hdr *tr_hdr = (struct smb2_transform_hdr *)buf;
4780 	unsigned int npages;
4781 	struct page **pages;
4782 	unsigned int len;
4783 	unsigned int buflen = server->pdu_size;
4784 	int rc;
4785 	int i = 0;
4786 	struct smb2_decrypt_work *dw;
4787 
4788 	*num_mids = 1;
4789 	len = min_t(unsigned int, buflen, server->vals->read_rsp_size +
4790 		sizeof(struct smb2_transform_hdr)) - HEADER_SIZE(server) + 1;
4791 
4792 	rc = cifs_read_from_socket(server, buf + HEADER_SIZE(server) - 1, len);
4793 	if (rc < 0)
4794 		return rc;
4795 	server->total_read += rc;
4796 
4797 	len = le32_to_cpu(tr_hdr->OriginalMessageSize) -
4798 		server->vals->read_rsp_size;
4799 	npages = DIV_ROUND_UP(len, PAGE_SIZE);
4800 
4801 	pages = kmalloc_array(npages, sizeof(struct page *), GFP_KERNEL);
4802 	if (!pages) {
4803 		rc = -ENOMEM;
4804 		goto discard_data;
4805 	}
4806 
4807 	for (; i < npages; i++) {
4808 		pages[i] = alloc_page(GFP_KERNEL|__GFP_HIGHMEM);
4809 		if (!pages[i]) {
4810 			rc = -ENOMEM;
4811 			goto discard_data;
4812 		}
4813 	}
4814 
4815 	/* read read data into pages */
4816 	rc = read_data_into_pages(server, pages, npages, len);
4817 	if (rc)
4818 		goto free_pages;
4819 
4820 	rc = cifs_discard_remaining_data(server);
4821 	if (rc)
4822 		goto free_pages;
4823 
4824 	/*
4825 	 * For large reads, offload to different thread for better performance,
4826 	 * use more cores decrypting which can be expensive
4827 	 */
4828 
4829 	if ((server->min_offload) && (server->in_flight > 1) &&
4830 	    (server->pdu_size >= server->min_offload)) {
4831 		dw = kmalloc(sizeof(struct smb2_decrypt_work), GFP_KERNEL);
4832 		if (dw == NULL)
4833 			goto non_offloaded_decrypt;
4834 
4835 		dw->buf = server->smallbuf;
4836 		server->smallbuf = (char *)cifs_small_buf_get();
4837 
4838 		INIT_WORK(&dw->decrypt, smb2_decrypt_offload);
4839 
4840 		dw->npages = npages;
4841 		dw->server = server;
4842 		dw->ppages = pages;
4843 		dw->len = len;
4844 		queue_work(decrypt_wq, &dw->decrypt);
4845 		*num_mids = 0; /* worker thread takes care of finding mid */
4846 		return -1;
4847 	}
4848 
4849 non_offloaded_decrypt:
4850 	rc = decrypt_raw_data(server, buf, server->vals->read_rsp_size,
4851 			      pages, npages, len, false);
4852 	if (rc)
4853 		goto free_pages;
4854 
4855 	*mid = smb2_find_mid(server, buf);
4856 	if (*mid == NULL)
4857 		cifs_dbg(FYI, "mid not found\n");
4858 	else {
4859 		cifs_dbg(FYI, "mid found\n");
4860 		(*mid)->decrypted = true;
4861 		rc = handle_read_data(server, *mid, buf,
4862 				      server->vals->read_rsp_size,
4863 				      pages, npages, len, false);
4864 	}
4865 
4866 free_pages:
4867 	for (i = i - 1; i >= 0; i--)
4868 		put_page(pages[i]);
4869 	kfree(pages);
4870 	return rc;
4871 discard_data:
4872 	cifs_discard_remaining_data(server);
4873 	goto free_pages;
4874 }
4875 
4876 static int
receive_encrypted_standard(struct TCP_Server_Info * server,struct mid_q_entry ** mids,char ** bufs,int * num_mids)4877 receive_encrypted_standard(struct TCP_Server_Info *server,
4878 			   struct mid_q_entry **mids, char **bufs,
4879 			   int *num_mids)
4880 {
4881 	int ret, length;
4882 	char *buf = server->smallbuf;
4883 	struct smb2_sync_hdr *shdr;
4884 	unsigned int pdu_length = server->pdu_size;
4885 	unsigned int buf_size;
4886 	struct mid_q_entry *mid_entry;
4887 	int next_is_large;
4888 	char *next_buffer = NULL;
4889 
4890 	*num_mids = 0;
4891 
4892 	/* switch to large buffer if too big for a small one */
4893 	if (pdu_length > MAX_CIFS_SMALL_BUFFER_SIZE) {
4894 		server->large_buf = true;
4895 		memcpy(server->bigbuf, buf, server->total_read);
4896 		buf = server->bigbuf;
4897 	}
4898 
4899 	/* now read the rest */
4900 	length = cifs_read_from_socket(server, buf + HEADER_SIZE(server) - 1,
4901 				pdu_length - HEADER_SIZE(server) + 1);
4902 	if (length < 0)
4903 		return length;
4904 	server->total_read += length;
4905 
4906 	buf_size = pdu_length - sizeof(struct smb2_transform_hdr);
4907 	length = decrypt_raw_data(server, buf, buf_size, NULL, 0, 0, false);
4908 	if (length)
4909 		return length;
4910 
4911 	next_is_large = server->large_buf;
4912 one_more:
4913 	shdr = (struct smb2_sync_hdr *)buf;
4914 	if (shdr->NextCommand) {
4915 		if (next_is_large)
4916 			next_buffer = (char *)cifs_buf_get();
4917 		else
4918 			next_buffer = (char *)cifs_small_buf_get();
4919 		memcpy(next_buffer,
4920 		       buf + le32_to_cpu(shdr->NextCommand),
4921 		       pdu_length - le32_to_cpu(shdr->NextCommand));
4922 	}
4923 
4924 	mid_entry = smb2_find_mid(server, buf);
4925 	if (mid_entry == NULL)
4926 		cifs_dbg(FYI, "mid not found\n");
4927 	else {
4928 		cifs_dbg(FYI, "mid found\n");
4929 		mid_entry->decrypted = true;
4930 		mid_entry->resp_buf_size = server->pdu_size;
4931 	}
4932 
4933 	if (*num_mids >= MAX_COMPOUND) {
4934 		cifs_server_dbg(VFS, "too many PDUs in compound\n");
4935 		return -1;
4936 	}
4937 	bufs[*num_mids] = buf;
4938 	mids[(*num_mids)++] = mid_entry;
4939 
4940 	if (mid_entry && mid_entry->handle)
4941 		ret = mid_entry->handle(server, mid_entry);
4942 	else
4943 		ret = cifs_handle_standard(server, mid_entry);
4944 
4945 	if (ret == 0 && shdr->NextCommand) {
4946 		pdu_length -= le32_to_cpu(shdr->NextCommand);
4947 		server->large_buf = next_is_large;
4948 		if (next_is_large)
4949 			server->bigbuf = buf = next_buffer;
4950 		else
4951 			server->smallbuf = buf = next_buffer;
4952 		goto one_more;
4953 	} else if (ret != 0) {
4954 		/*
4955 		 * ret != 0 here means that we didn't get to handle_mid() thus
4956 		 * server->smallbuf and server->bigbuf are still valid. We need
4957 		 * to free next_buffer because it is not going to be used
4958 		 * anywhere.
4959 		 */
4960 		if (next_is_large)
4961 			free_rsp_buf(CIFS_LARGE_BUFFER, next_buffer);
4962 		else
4963 			free_rsp_buf(CIFS_SMALL_BUFFER, next_buffer);
4964 	}
4965 
4966 	return ret;
4967 }
4968 
4969 static int
smb3_receive_transform(struct TCP_Server_Info * server,struct mid_q_entry ** mids,char ** bufs,int * num_mids)4970 smb3_receive_transform(struct TCP_Server_Info *server,
4971 		       struct mid_q_entry **mids, char **bufs, int *num_mids)
4972 {
4973 	char *buf = server->smallbuf;
4974 	unsigned int pdu_length = server->pdu_size;
4975 	struct smb2_transform_hdr *tr_hdr = (struct smb2_transform_hdr *)buf;
4976 	unsigned int orig_len = le32_to_cpu(tr_hdr->OriginalMessageSize);
4977 
4978 	if (pdu_length < sizeof(struct smb2_transform_hdr) +
4979 						sizeof(struct smb2_sync_hdr)) {
4980 		cifs_server_dbg(VFS, "Transform message is too small (%u)\n",
4981 			 pdu_length);
4982 		cifs_reconnect(server);
4983 		return -ECONNABORTED;
4984 	}
4985 
4986 	if (pdu_length < orig_len + sizeof(struct smb2_transform_hdr)) {
4987 		cifs_server_dbg(VFS, "Transform message is broken\n");
4988 		cifs_reconnect(server);
4989 		return -ECONNABORTED;
4990 	}
4991 
4992 	/* TODO: add support for compounds containing READ. */
4993 	if (pdu_length > CIFSMaxBufSize + MAX_HEADER_SIZE(server)) {
4994 		return receive_encrypted_read(server, &mids[0], num_mids);
4995 	}
4996 
4997 	return receive_encrypted_standard(server, mids, bufs, num_mids);
4998 }
4999 
5000 int
smb3_handle_read_data(struct TCP_Server_Info * server,struct mid_q_entry * mid)5001 smb3_handle_read_data(struct TCP_Server_Info *server, struct mid_q_entry *mid)
5002 {
5003 	char *buf = server->large_buf ? server->bigbuf : server->smallbuf;
5004 
5005 	return handle_read_data(server, mid, buf, server->pdu_size,
5006 				NULL, 0, 0, false);
5007 }
5008 
5009 static int
smb2_next_header(char * buf)5010 smb2_next_header(char *buf)
5011 {
5012 	struct smb2_sync_hdr *hdr = (struct smb2_sync_hdr *)buf;
5013 	struct smb2_transform_hdr *t_hdr = (struct smb2_transform_hdr *)buf;
5014 
5015 	if (hdr->ProtocolId == SMB2_TRANSFORM_PROTO_NUM)
5016 		return sizeof(struct smb2_transform_hdr) +
5017 		  le32_to_cpu(t_hdr->OriginalMessageSize);
5018 
5019 	return le32_to_cpu(hdr->NextCommand);
5020 }
5021 
5022 static int
smb2_make_node(unsigned int xid,struct inode * inode,struct dentry * dentry,struct cifs_tcon * tcon,char * full_path,umode_t mode,dev_t dev)5023 smb2_make_node(unsigned int xid, struct inode *inode,
5024 	       struct dentry *dentry, struct cifs_tcon *tcon,
5025 	       char *full_path, umode_t mode, dev_t dev)
5026 {
5027 	struct cifs_sb_info *cifs_sb = CIFS_SB(inode->i_sb);
5028 	int rc = -EPERM;
5029 	FILE_ALL_INFO *buf = NULL;
5030 	struct cifs_io_parms io_parms = {0};
5031 	__u32 oplock = 0;
5032 	struct cifs_fid fid;
5033 	struct cifs_open_parms oparms;
5034 	unsigned int bytes_written;
5035 	struct win_dev *pdev;
5036 	struct kvec iov[2];
5037 
5038 	/*
5039 	 * Check if mounted with mount parm 'sfu' mount parm.
5040 	 * SFU emulation should work with all servers, but only
5041 	 * supports block and char device (no socket & fifo),
5042 	 * and was used by default in earlier versions of Windows
5043 	 */
5044 	if (!(cifs_sb->mnt_cifs_flags & CIFS_MOUNT_UNX_EMUL))
5045 		goto out;
5046 
5047 	/*
5048 	 * TODO: Add ability to create instead via reparse point. Windows (e.g.
5049 	 * their current NFS server) uses this approach to expose special files
5050 	 * over SMB2/SMB3 and Samba will do this with SMB3.1.1 POSIX Extensions
5051 	 */
5052 
5053 	if (!S_ISCHR(mode) && !S_ISBLK(mode))
5054 		goto out;
5055 
5056 	cifs_dbg(FYI, "sfu compat create special file\n");
5057 
5058 	buf = kmalloc(sizeof(FILE_ALL_INFO), GFP_KERNEL);
5059 	if (buf == NULL) {
5060 		rc = -ENOMEM;
5061 		goto out;
5062 	}
5063 
5064 	oparms.tcon = tcon;
5065 	oparms.cifs_sb = cifs_sb;
5066 	oparms.desired_access = GENERIC_WRITE;
5067 	oparms.create_options = cifs_create_options(cifs_sb, CREATE_NOT_DIR |
5068 						    CREATE_OPTION_SPECIAL);
5069 	oparms.disposition = FILE_CREATE;
5070 	oparms.path = full_path;
5071 	oparms.fid = &fid;
5072 	oparms.reconnect = false;
5073 
5074 	if (tcon->ses->server->oplocks)
5075 		oplock = REQ_OPLOCK;
5076 	else
5077 		oplock = 0;
5078 	rc = tcon->ses->server->ops->open(xid, &oparms, &oplock, buf);
5079 	if (rc)
5080 		goto out;
5081 
5082 	/*
5083 	 * BB Do not bother to decode buf since no local inode yet to put
5084 	 * timestamps in, but we can reuse it safely.
5085 	 */
5086 
5087 	pdev = (struct win_dev *)buf;
5088 	io_parms.pid = current->tgid;
5089 	io_parms.tcon = tcon;
5090 	io_parms.offset = 0;
5091 	io_parms.length = sizeof(struct win_dev);
5092 	iov[1].iov_base = buf;
5093 	iov[1].iov_len = sizeof(struct win_dev);
5094 	if (S_ISCHR(mode)) {
5095 		memcpy(pdev->type, "IntxCHR", 8);
5096 		pdev->major = cpu_to_le64(MAJOR(dev));
5097 		pdev->minor = cpu_to_le64(MINOR(dev));
5098 		rc = tcon->ses->server->ops->sync_write(xid, &fid, &io_parms,
5099 							&bytes_written, iov, 1);
5100 	} else if (S_ISBLK(mode)) {
5101 		memcpy(pdev->type, "IntxBLK", 8);
5102 		pdev->major = cpu_to_le64(MAJOR(dev));
5103 		pdev->minor = cpu_to_le64(MINOR(dev));
5104 		rc = tcon->ses->server->ops->sync_write(xid, &fid, &io_parms,
5105 							&bytes_written, iov, 1);
5106 	}
5107 	tcon->ses->server->ops->close(xid, tcon, &fid);
5108 	d_drop(dentry);
5109 
5110 	/* FIXME: add code here to set EAs */
5111 out:
5112 	kfree(buf);
5113 	return rc;
5114 }
5115 
5116 #ifdef CONFIG_CIFS_ALLOW_INSECURE_LEGACY
5117 struct smb_version_operations smb20_operations = {
5118 	.compare_fids = smb2_compare_fids,
5119 	.setup_request = smb2_setup_request,
5120 	.setup_async_request = smb2_setup_async_request,
5121 	.check_receive = smb2_check_receive,
5122 	.add_credits = smb2_add_credits,
5123 	.set_credits = smb2_set_credits,
5124 	.get_credits_field = smb2_get_credits_field,
5125 	.get_credits = smb2_get_credits,
5126 	.wait_mtu_credits = cifs_wait_mtu_credits,
5127 	.get_next_mid = smb2_get_next_mid,
5128 	.revert_current_mid = smb2_revert_current_mid,
5129 	.read_data_offset = smb2_read_data_offset,
5130 	.read_data_length = smb2_read_data_length,
5131 	.map_error = map_smb2_to_linux_error,
5132 	.find_mid = smb2_find_mid,
5133 	.check_message = smb2_check_message,
5134 	.dump_detail = smb2_dump_detail,
5135 	.clear_stats = smb2_clear_stats,
5136 	.print_stats = smb2_print_stats,
5137 	.is_oplock_break = smb2_is_valid_oplock_break,
5138 	.handle_cancelled_mid = smb2_handle_cancelled_mid,
5139 	.downgrade_oplock = smb2_downgrade_oplock,
5140 	.need_neg = smb2_need_neg,
5141 	.negotiate = smb2_negotiate,
5142 	.negotiate_wsize = smb2_negotiate_wsize,
5143 	.negotiate_rsize = smb2_negotiate_rsize,
5144 	.sess_setup = SMB2_sess_setup,
5145 	.logoff = SMB2_logoff,
5146 	.tree_connect = SMB2_tcon,
5147 	.tree_disconnect = SMB2_tdis,
5148 	.qfs_tcon = smb2_qfs_tcon,
5149 	.is_path_accessible = smb2_is_path_accessible,
5150 	.can_echo = smb2_can_echo,
5151 	.echo = SMB2_echo,
5152 	.query_path_info = smb2_query_path_info,
5153 	.get_srv_inum = smb2_get_srv_inum,
5154 	.query_file_info = smb2_query_file_info,
5155 	.set_path_size = smb2_set_path_size,
5156 	.set_file_size = smb2_set_file_size,
5157 	.set_file_info = smb2_set_file_info,
5158 	.set_compression = smb2_set_compression,
5159 	.mkdir = smb2_mkdir,
5160 	.mkdir_setinfo = smb2_mkdir_setinfo,
5161 	.rmdir = smb2_rmdir,
5162 	.unlink = smb2_unlink,
5163 	.rename = smb2_rename_path,
5164 	.create_hardlink = smb2_create_hardlink,
5165 	.query_symlink = smb2_query_symlink,
5166 	.query_mf_symlink = smb3_query_mf_symlink,
5167 	.create_mf_symlink = smb3_create_mf_symlink,
5168 	.open = smb2_open_file,
5169 	.set_fid = smb2_set_fid,
5170 	.close = smb2_close_file,
5171 	.flush = smb2_flush_file,
5172 	.async_readv = smb2_async_readv,
5173 	.async_writev = smb2_async_writev,
5174 	.sync_read = smb2_sync_read,
5175 	.sync_write = smb2_sync_write,
5176 	.query_dir_first = smb2_query_dir_first,
5177 	.query_dir_next = smb2_query_dir_next,
5178 	.close_dir = smb2_close_dir,
5179 	.calc_smb_size = smb2_calc_size,
5180 	.is_status_pending = smb2_is_status_pending,
5181 	.is_session_expired = smb2_is_session_expired,
5182 	.oplock_response = smb2_oplock_response,
5183 	.queryfs = smb2_queryfs,
5184 	.mand_lock = smb2_mand_lock,
5185 	.mand_unlock_range = smb2_unlock_range,
5186 	.push_mand_locks = smb2_push_mandatory_locks,
5187 	.get_lease_key = smb2_get_lease_key,
5188 	.set_lease_key = smb2_set_lease_key,
5189 	.new_lease_key = smb2_new_lease_key,
5190 	.calc_signature = smb2_calc_signature,
5191 	.is_read_op = smb2_is_read_op,
5192 	.set_oplock_level = smb2_set_oplock_level,
5193 	.create_lease_buf = smb2_create_lease_buf,
5194 	.parse_lease_buf = smb2_parse_lease_buf,
5195 	.copychunk_range = smb2_copychunk_range,
5196 	.wp_retry_size = smb2_wp_retry_size,
5197 	.dir_needs_close = smb2_dir_needs_close,
5198 	.get_dfs_refer = smb2_get_dfs_refer,
5199 	.select_sectype = smb2_select_sectype,
5200 #ifdef CONFIG_CIFS_XATTR
5201 	.query_all_EAs = smb2_query_eas,
5202 	.set_EA = smb2_set_ea,
5203 #endif /* CIFS_XATTR */
5204 	.get_acl = get_smb2_acl,
5205 	.get_acl_by_fid = get_smb2_acl_by_fid,
5206 	.set_acl = set_smb2_acl,
5207 	.next_header = smb2_next_header,
5208 	.ioctl_query_info = smb2_ioctl_query_info,
5209 	.make_node = smb2_make_node,
5210 	.fiemap = smb3_fiemap,
5211 	.llseek = smb3_llseek,
5212 	.is_status_io_timeout = smb2_is_status_io_timeout,
5213 };
5214 #endif /* CIFS_ALLOW_INSECURE_LEGACY */
5215 
5216 struct smb_version_operations smb21_operations = {
5217 	.compare_fids = smb2_compare_fids,
5218 	.setup_request = smb2_setup_request,
5219 	.setup_async_request = smb2_setup_async_request,
5220 	.check_receive = smb2_check_receive,
5221 	.add_credits = smb2_add_credits,
5222 	.set_credits = smb2_set_credits,
5223 	.get_credits_field = smb2_get_credits_field,
5224 	.get_credits = smb2_get_credits,
5225 	.wait_mtu_credits = smb2_wait_mtu_credits,
5226 	.adjust_credits = smb2_adjust_credits,
5227 	.get_next_mid = smb2_get_next_mid,
5228 	.revert_current_mid = smb2_revert_current_mid,
5229 	.read_data_offset = smb2_read_data_offset,
5230 	.read_data_length = smb2_read_data_length,
5231 	.map_error = map_smb2_to_linux_error,
5232 	.find_mid = smb2_find_mid,
5233 	.check_message = smb2_check_message,
5234 	.dump_detail = smb2_dump_detail,
5235 	.clear_stats = smb2_clear_stats,
5236 	.print_stats = smb2_print_stats,
5237 	.is_oplock_break = smb2_is_valid_oplock_break,
5238 	.handle_cancelled_mid = smb2_handle_cancelled_mid,
5239 	.downgrade_oplock = smb2_downgrade_oplock,
5240 	.need_neg = smb2_need_neg,
5241 	.negotiate = smb2_negotiate,
5242 	.negotiate_wsize = smb2_negotiate_wsize,
5243 	.negotiate_rsize = smb2_negotiate_rsize,
5244 	.sess_setup = SMB2_sess_setup,
5245 	.logoff = SMB2_logoff,
5246 	.tree_connect = SMB2_tcon,
5247 	.tree_disconnect = SMB2_tdis,
5248 	.qfs_tcon = smb2_qfs_tcon,
5249 	.is_path_accessible = smb2_is_path_accessible,
5250 	.can_echo = smb2_can_echo,
5251 	.echo = SMB2_echo,
5252 	.query_path_info = smb2_query_path_info,
5253 	.get_srv_inum = smb2_get_srv_inum,
5254 	.query_file_info = smb2_query_file_info,
5255 	.set_path_size = smb2_set_path_size,
5256 	.set_file_size = smb2_set_file_size,
5257 	.set_file_info = smb2_set_file_info,
5258 	.set_compression = smb2_set_compression,
5259 	.mkdir = smb2_mkdir,
5260 	.mkdir_setinfo = smb2_mkdir_setinfo,
5261 	.rmdir = smb2_rmdir,
5262 	.unlink = smb2_unlink,
5263 	.rename = smb2_rename_path,
5264 	.create_hardlink = smb2_create_hardlink,
5265 	.query_symlink = smb2_query_symlink,
5266 	.query_mf_symlink = smb3_query_mf_symlink,
5267 	.create_mf_symlink = smb3_create_mf_symlink,
5268 	.open = smb2_open_file,
5269 	.set_fid = smb2_set_fid,
5270 	.close = smb2_close_file,
5271 	.flush = smb2_flush_file,
5272 	.async_readv = smb2_async_readv,
5273 	.async_writev = smb2_async_writev,
5274 	.sync_read = smb2_sync_read,
5275 	.sync_write = smb2_sync_write,
5276 	.query_dir_first = smb2_query_dir_first,
5277 	.query_dir_next = smb2_query_dir_next,
5278 	.close_dir = smb2_close_dir,
5279 	.calc_smb_size = smb2_calc_size,
5280 	.is_status_pending = smb2_is_status_pending,
5281 	.is_session_expired = smb2_is_session_expired,
5282 	.oplock_response = smb2_oplock_response,
5283 	.queryfs = smb2_queryfs,
5284 	.mand_lock = smb2_mand_lock,
5285 	.mand_unlock_range = smb2_unlock_range,
5286 	.push_mand_locks = smb2_push_mandatory_locks,
5287 	.get_lease_key = smb2_get_lease_key,
5288 	.set_lease_key = smb2_set_lease_key,
5289 	.new_lease_key = smb2_new_lease_key,
5290 	.calc_signature = smb2_calc_signature,
5291 	.is_read_op = smb21_is_read_op,
5292 	.set_oplock_level = smb21_set_oplock_level,
5293 	.create_lease_buf = smb2_create_lease_buf,
5294 	.parse_lease_buf = smb2_parse_lease_buf,
5295 	.copychunk_range = smb2_copychunk_range,
5296 	.wp_retry_size = smb2_wp_retry_size,
5297 	.dir_needs_close = smb2_dir_needs_close,
5298 	.enum_snapshots = smb3_enum_snapshots,
5299 	.notify = smb3_notify,
5300 	.get_dfs_refer = smb2_get_dfs_refer,
5301 	.select_sectype = smb2_select_sectype,
5302 #ifdef CONFIG_CIFS_XATTR
5303 	.query_all_EAs = smb2_query_eas,
5304 	.set_EA = smb2_set_ea,
5305 #endif /* CIFS_XATTR */
5306 	.get_acl = get_smb2_acl,
5307 	.get_acl_by_fid = get_smb2_acl_by_fid,
5308 	.set_acl = set_smb2_acl,
5309 	.next_header = smb2_next_header,
5310 	.ioctl_query_info = smb2_ioctl_query_info,
5311 	.make_node = smb2_make_node,
5312 	.fiemap = smb3_fiemap,
5313 	.llseek = smb3_llseek,
5314 	.is_status_io_timeout = smb2_is_status_io_timeout,
5315 };
5316 
5317 struct smb_version_operations smb30_operations = {
5318 	.compare_fids = smb2_compare_fids,
5319 	.setup_request = smb2_setup_request,
5320 	.setup_async_request = smb2_setup_async_request,
5321 	.check_receive = smb2_check_receive,
5322 	.add_credits = smb2_add_credits,
5323 	.set_credits = smb2_set_credits,
5324 	.get_credits_field = smb2_get_credits_field,
5325 	.get_credits = smb2_get_credits,
5326 	.wait_mtu_credits = smb2_wait_mtu_credits,
5327 	.adjust_credits = smb2_adjust_credits,
5328 	.get_next_mid = smb2_get_next_mid,
5329 	.revert_current_mid = smb2_revert_current_mid,
5330 	.read_data_offset = smb2_read_data_offset,
5331 	.read_data_length = smb2_read_data_length,
5332 	.map_error = map_smb2_to_linux_error,
5333 	.find_mid = smb2_find_mid,
5334 	.check_message = smb2_check_message,
5335 	.dump_detail = smb2_dump_detail,
5336 	.clear_stats = smb2_clear_stats,
5337 	.print_stats = smb2_print_stats,
5338 	.dump_share_caps = smb2_dump_share_caps,
5339 	.is_oplock_break = smb2_is_valid_oplock_break,
5340 	.handle_cancelled_mid = smb2_handle_cancelled_mid,
5341 	.downgrade_oplock = smb3_downgrade_oplock,
5342 	.need_neg = smb2_need_neg,
5343 	.negotiate = smb2_negotiate,
5344 	.negotiate_wsize = smb3_negotiate_wsize,
5345 	.negotiate_rsize = smb3_negotiate_rsize,
5346 	.sess_setup = SMB2_sess_setup,
5347 	.logoff = SMB2_logoff,
5348 	.tree_connect = SMB2_tcon,
5349 	.tree_disconnect = SMB2_tdis,
5350 	.qfs_tcon = smb3_qfs_tcon,
5351 	.is_path_accessible = smb2_is_path_accessible,
5352 	.can_echo = smb2_can_echo,
5353 	.echo = SMB2_echo,
5354 	.query_path_info = smb2_query_path_info,
5355 	/* WSL tags introduced long after smb2.1, enable for SMB3, 3.11 only */
5356 	.query_reparse_tag = smb2_query_reparse_tag,
5357 	.get_srv_inum = smb2_get_srv_inum,
5358 	.query_file_info = smb2_query_file_info,
5359 	.set_path_size = smb2_set_path_size,
5360 	.set_file_size = smb2_set_file_size,
5361 	.set_file_info = smb2_set_file_info,
5362 	.set_compression = smb2_set_compression,
5363 	.mkdir = smb2_mkdir,
5364 	.mkdir_setinfo = smb2_mkdir_setinfo,
5365 	.rmdir = smb2_rmdir,
5366 	.unlink = smb2_unlink,
5367 	.rename = smb2_rename_path,
5368 	.create_hardlink = smb2_create_hardlink,
5369 	.query_symlink = smb2_query_symlink,
5370 	.query_mf_symlink = smb3_query_mf_symlink,
5371 	.create_mf_symlink = smb3_create_mf_symlink,
5372 	.open = smb2_open_file,
5373 	.set_fid = smb2_set_fid,
5374 	.close = smb2_close_file,
5375 	.close_getattr = smb2_close_getattr,
5376 	.flush = smb2_flush_file,
5377 	.async_readv = smb2_async_readv,
5378 	.async_writev = smb2_async_writev,
5379 	.sync_read = smb2_sync_read,
5380 	.sync_write = smb2_sync_write,
5381 	.query_dir_first = smb2_query_dir_first,
5382 	.query_dir_next = smb2_query_dir_next,
5383 	.close_dir = smb2_close_dir,
5384 	.calc_smb_size = smb2_calc_size,
5385 	.is_status_pending = smb2_is_status_pending,
5386 	.is_session_expired = smb2_is_session_expired,
5387 	.oplock_response = smb2_oplock_response,
5388 	.queryfs = smb2_queryfs,
5389 	.mand_lock = smb2_mand_lock,
5390 	.mand_unlock_range = smb2_unlock_range,
5391 	.push_mand_locks = smb2_push_mandatory_locks,
5392 	.get_lease_key = smb2_get_lease_key,
5393 	.set_lease_key = smb2_set_lease_key,
5394 	.new_lease_key = smb2_new_lease_key,
5395 	.generate_signingkey = generate_smb30signingkey,
5396 	.calc_signature = smb3_calc_signature,
5397 	.set_integrity  = smb3_set_integrity,
5398 	.is_read_op = smb21_is_read_op,
5399 	.set_oplock_level = smb3_set_oplock_level,
5400 	.create_lease_buf = smb3_create_lease_buf,
5401 	.parse_lease_buf = smb3_parse_lease_buf,
5402 	.copychunk_range = smb2_copychunk_range,
5403 	.duplicate_extents = smb2_duplicate_extents,
5404 	.validate_negotiate = smb3_validate_negotiate,
5405 	.wp_retry_size = smb2_wp_retry_size,
5406 	.dir_needs_close = smb2_dir_needs_close,
5407 	.fallocate = smb3_fallocate,
5408 	.enum_snapshots = smb3_enum_snapshots,
5409 	.notify = smb3_notify,
5410 	.init_transform_rq = smb3_init_transform_rq,
5411 	.is_transform_hdr = smb3_is_transform_hdr,
5412 	.receive_transform = smb3_receive_transform,
5413 	.get_dfs_refer = smb2_get_dfs_refer,
5414 	.select_sectype = smb2_select_sectype,
5415 #ifdef CONFIG_CIFS_XATTR
5416 	.query_all_EAs = smb2_query_eas,
5417 	.set_EA = smb2_set_ea,
5418 #endif /* CIFS_XATTR */
5419 	.get_acl = get_smb2_acl,
5420 	.get_acl_by_fid = get_smb2_acl_by_fid,
5421 	.set_acl = set_smb2_acl,
5422 	.next_header = smb2_next_header,
5423 	.ioctl_query_info = smb2_ioctl_query_info,
5424 	.make_node = smb2_make_node,
5425 	.fiemap = smb3_fiemap,
5426 	.llseek = smb3_llseek,
5427 	.is_status_io_timeout = smb2_is_status_io_timeout,
5428 };
5429 
5430 struct smb_version_operations smb311_operations = {
5431 	.compare_fids = smb2_compare_fids,
5432 	.setup_request = smb2_setup_request,
5433 	.setup_async_request = smb2_setup_async_request,
5434 	.check_receive = smb2_check_receive,
5435 	.add_credits = smb2_add_credits,
5436 	.set_credits = smb2_set_credits,
5437 	.get_credits_field = smb2_get_credits_field,
5438 	.get_credits = smb2_get_credits,
5439 	.wait_mtu_credits = smb2_wait_mtu_credits,
5440 	.adjust_credits = smb2_adjust_credits,
5441 	.get_next_mid = smb2_get_next_mid,
5442 	.revert_current_mid = smb2_revert_current_mid,
5443 	.read_data_offset = smb2_read_data_offset,
5444 	.read_data_length = smb2_read_data_length,
5445 	.map_error = map_smb2_to_linux_error,
5446 	.find_mid = smb2_find_mid,
5447 	.check_message = smb2_check_message,
5448 	.dump_detail = smb2_dump_detail,
5449 	.clear_stats = smb2_clear_stats,
5450 	.print_stats = smb2_print_stats,
5451 	.dump_share_caps = smb2_dump_share_caps,
5452 	.is_oplock_break = smb2_is_valid_oplock_break,
5453 	.handle_cancelled_mid = smb2_handle_cancelled_mid,
5454 	.downgrade_oplock = smb3_downgrade_oplock,
5455 	.need_neg = smb2_need_neg,
5456 	.negotiate = smb2_negotiate,
5457 	.negotiate_wsize = smb3_negotiate_wsize,
5458 	.negotiate_rsize = smb3_negotiate_rsize,
5459 	.sess_setup = SMB2_sess_setup,
5460 	.logoff = SMB2_logoff,
5461 	.tree_connect = SMB2_tcon,
5462 	.tree_disconnect = SMB2_tdis,
5463 	.qfs_tcon = smb3_qfs_tcon,
5464 	.is_path_accessible = smb2_is_path_accessible,
5465 	.can_echo = smb2_can_echo,
5466 	.echo = SMB2_echo,
5467 	.query_path_info = smb2_query_path_info,
5468 	.query_reparse_tag = smb2_query_reparse_tag,
5469 	.get_srv_inum = smb2_get_srv_inum,
5470 	.query_file_info = smb2_query_file_info,
5471 	.set_path_size = smb2_set_path_size,
5472 	.set_file_size = smb2_set_file_size,
5473 	.set_file_info = smb2_set_file_info,
5474 	.set_compression = smb2_set_compression,
5475 	.mkdir = smb2_mkdir,
5476 	.mkdir_setinfo = smb2_mkdir_setinfo,
5477 	.posix_mkdir = smb311_posix_mkdir,
5478 	.rmdir = smb2_rmdir,
5479 	.unlink = smb2_unlink,
5480 	.rename = smb2_rename_path,
5481 	.create_hardlink = smb2_create_hardlink,
5482 	.query_symlink = smb2_query_symlink,
5483 	.query_mf_symlink = smb3_query_mf_symlink,
5484 	.create_mf_symlink = smb3_create_mf_symlink,
5485 	.open = smb2_open_file,
5486 	.set_fid = smb2_set_fid,
5487 	.close = smb2_close_file,
5488 	.close_getattr = smb2_close_getattr,
5489 	.flush = smb2_flush_file,
5490 	.async_readv = smb2_async_readv,
5491 	.async_writev = smb2_async_writev,
5492 	.sync_read = smb2_sync_read,
5493 	.sync_write = smb2_sync_write,
5494 	.query_dir_first = smb2_query_dir_first,
5495 	.query_dir_next = smb2_query_dir_next,
5496 	.close_dir = smb2_close_dir,
5497 	.calc_smb_size = smb2_calc_size,
5498 	.is_status_pending = smb2_is_status_pending,
5499 	.is_session_expired = smb2_is_session_expired,
5500 	.oplock_response = smb2_oplock_response,
5501 	.queryfs = smb311_queryfs,
5502 	.mand_lock = smb2_mand_lock,
5503 	.mand_unlock_range = smb2_unlock_range,
5504 	.push_mand_locks = smb2_push_mandatory_locks,
5505 	.get_lease_key = smb2_get_lease_key,
5506 	.set_lease_key = smb2_set_lease_key,
5507 	.new_lease_key = smb2_new_lease_key,
5508 	.generate_signingkey = generate_smb311signingkey,
5509 	.calc_signature = smb3_calc_signature,
5510 	.set_integrity  = smb3_set_integrity,
5511 	.is_read_op = smb21_is_read_op,
5512 	.set_oplock_level = smb3_set_oplock_level,
5513 	.create_lease_buf = smb3_create_lease_buf,
5514 	.parse_lease_buf = smb3_parse_lease_buf,
5515 	.copychunk_range = smb2_copychunk_range,
5516 	.duplicate_extents = smb2_duplicate_extents,
5517 /*	.validate_negotiate = smb3_validate_negotiate, */ /* not used in 3.11 */
5518 	.wp_retry_size = smb2_wp_retry_size,
5519 	.dir_needs_close = smb2_dir_needs_close,
5520 	.fallocate = smb3_fallocate,
5521 	.enum_snapshots = smb3_enum_snapshots,
5522 	.notify = smb3_notify,
5523 	.init_transform_rq = smb3_init_transform_rq,
5524 	.is_transform_hdr = smb3_is_transform_hdr,
5525 	.receive_transform = smb3_receive_transform,
5526 	.get_dfs_refer = smb2_get_dfs_refer,
5527 	.select_sectype = smb2_select_sectype,
5528 #ifdef CONFIG_CIFS_XATTR
5529 	.query_all_EAs = smb2_query_eas,
5530 	.set_EA = smb2_set_ea,
5531 #endif /* CIFS_XATTR */
5532 	.get_acl = get_smb2_acl,
5533 	.get_acl_by_fid = get_smb2_acl_by_fid,
5534 	.set_acl = set_smb2_acl,
5535 	.next_header = smb2_next_header,
5536 	.ioctl_query_info = smb2_ioctl_query_info,
5537 	.make_node = smb2_make_node,
5538 	.fiemap = smb3_fiemap,
5539 	.llseek = smb3_llseek,
5540 	.is_status_io_timeout = smb2_is_status_io_timeout,
5541 };
5542 
5543 #ifdef CONFIG_CIFS_ALLOW_INSECURE_LEGACY
5544 struct smb_version_values smb20_values = {
5545 	.version_string = SMB20_VERSION_STRING,
5546 	.protocol_id = SMB20_PROT_ID,
5547 	.req_capabilities = 0, /* MBZ */
5548 	.large_lock_type = 0,
5549 	.exclusive_lock_type = SMB2_LOCKFLAG_EXCLUSIVE_LOCK,
5550 	.shared_lock_type = SMB2_LOCKFLAG_SHARED_LOCK,
5551 	.unlock_lock_type = SMB2_LOCKFLAG_UNLOCK,
5552 	.header_size = sizeof(struct smb2_sync_hdr),
5553 	.header_preamble_size = 0,
5554 	.max_header_size = MAX_SMB2_HDR_SIZE,
5555 	.read_rsp_size = sizeof(struct smb2_read_rsp) - 1,
5556 	.lock_cmd = SMB2_LOCK,
5557 	.cap_unix = 0,
5558 	.cap_nt_find = SMB2_NT_FIND,
5559 	.cap_large_files = SMB2_LARGE_FILES,
5560 	.signing_enabled = SMB2_NEGOTIATE_SIGNING_ENABLED | SMB2_NEGOTIATE_SIGNING_REQUIRED,
5561 	.signing_required = SMB2_NEGOTIATE_SIGNING_REQUIRED,
5562 	.create_lease_size = sizeof(struct create_lease),
5563 };
5564 #endif /* ALLOW_INSECURE_LEGACY */
5565 
5566 struct smb_version_values smb21_values = {
5567 	.version_string = SMB21_VERSION_STRING,
5568 	.protocol_id = SMB21_PROT_ID,
5569 	.req_capabilities = 0, /* MBZ on negotiate req until SMB3 dialect */
5570 	.large_lock_type = 0,
5571 	.exclusive_lock_type = SMB2_LOCKFLAG_EXCLUSIVE_LOCK,
5572 	.shared_lock_type = SMB2_LOCKFLAG_SHARED_LOCK,
5573 	.unlock_lock_type = SMB2_LOCKFLAG_UNLOCK,
5574 	.header_size = sizeof(struct smb2_sync_hdr),
5575 	.header_preamble_size = 0,
5576 	.max_header_size = MAX_SMB2_HDR_SIZE,
5577 	.read_rsp_size = sizeof(struct smb2_read_rsp) - 1,
5578 	.lock_cmd = SMB2_LOCK,
5579 	.cap_unix = 0,
5580 	.cap_nt_find = SMB2_NT_FIND,
5581 	.cap_large_files = SMB2_LARGE_FILES,
5582 	.signing_enabled = SMB2_NEGOTIATE_SIGNING_ENABLED | SMB2_NEGOTIATE_SIGNING_REQUIRED,
5583 	.signing_required = SMB2_NEGOTIATE_SIGNING_REQUIRED,
5584 	.create_lease_size = sizeof(struct create_lease),
5585 };
5586 
5587 struct smb_version_values smb3any_values = {
5588 	.version_string = SMB3ANY_VERSION_STRING,
5589 	.protocol_id = SMB302_PROT_ID, /* doesn't matter, send protocol array */
5590 	.req_capabilities = SMB2_GLOBAL_CAP_DFS | SMB2_GLOBAL_CAP_LEASING | SMB2_GLOBAL_CAP_LARGE_MTU | SMB2_GLOBAL_CAP_PERSISTENT_HANDLES | SMB2_GLOBAL_CAP_ENCRYPTION | SMB2_GLOBAL_CAP_DIRECTORY_LEASING,
5591 	.large_lock_type = 0,
5592 	.exclusive_lock_type = SMB2_LOCKFLAG_EXCLUSIVE_LOCK,
5593 	.shared_lock_type = SMB2_LOCKFLAG_SHARED_LOCK,
5594 	.unlock_lock_type = SMB2_LOCKFLAG_UNLOCK,
5595 	.header_size = sizeof(struct smb2_sync_hdr),
5596 	.header_preamble_size = 0,
5597 	.max_header_size = MAX_SMB2_HDR_SIZE,
5598 	.read_rsp_size = sizeof(struct smb2_read_rsp) - 1,
5599 	.lock_cmd = SMB2_LOCK,
5600 	.cap_unix = 0,
5601 	.cap_nt_find = SMB2_NT_FIND,
5602 	.cap_large_files = SMB2_LARGE_FILES,
5603 	.signing_enabled = SMB2_NEGOTIATE_SIGNING_ENABLED | SMB2_NEGOTIATE_SIGNING_REQUIRED,
5604 	.signing_required = SMB2_NEGOTIATE_SIGNING_REQUIRED,
5605 	.create_lease_size = sizeof(struct create_lease_v2),
5606 };
5607 
5608 struct smb_version_values smbdefault_values = {
5609 	.version_string = SMBDEFAULT_VERSION_STRING,
5610 	.protocol_id = SMB302_PROT_ID, /* doesn't matter, send protocol array */
5611 	.req_capabilities = SMB2_GLOBAL_CAP_DFS | SMB2_GLOBAL_CAP_LEASING | SMB2_GLOBAL_CAP_LARGE_MTU | SMB2_GLOBAL_CAP_PERSISTENT_HANDLES | SMB2_GLOBAL_CAP_ENCRYPTION | SMB2_GLOBAL_CAP_DIRECTORY_LEASING,
5612 	.large_lock_type = 0,
5613 	.exclusive_lock_type = SMB2_LOCKFLAG_EXCLUSIVE_LOCK,
5614 	.shared_lock_type = SMB2_LOCKFLAG_SHARED_LOCK,
5615 	.unlock_lock_type = SMB2_LOCKFLAG_UNLOCK,
5616 	.header_size = sizeof(struct smb2_sync_hdr),
5617 	.header_preamble_size = 0,
5618 	.max_header_size = MAX_SMB2_HDR_SIZE,
5619 	.read_rsp_size = sizeof(struct smb2_read_rsp) - 1,
5620 	.lock_cmd = SMB2_LOCK,
5621 	.cap_unix = 0,
5622 	.cap_nt_find = SMB2_NT_FIND,
5623 	.cap_large_files = SMB2_LARGE_FILES,
5624 	.signing_enabled = SMB2_NEGOTIATE_SIGNING_ENABLED | SMB2_NEGOTIATE_SIGNING_REQUIRED,
5625 	.signing_required = SMB2_NEGOTIATE_SIGNING_REQUIRED,
5626 	.create_lease_size = sizeof(struct create_lease_v2),
5627 };
5628 
5629 struct smb_version_values smb30_values = {
5630 	.version_string = SMB30_VERSION_STRING,
5631 	.protocol_id = SMB30_PROT_ID,
5632 	.req_capabilities = SMB2_GLOBAL_CAP_DFS | SMB2_GLOBAL_CAP_LEASING | SMB2_GLOBAL_CAP_LARGE_MTU | SMB2_GLOBAL_CAP_PERSISTENT_HANDLES | SMB2_GLOBAL_CAP_ENCRYPTION | SMB2_GLOBAL_CAP_DIRECTORY_LEASING,
5633 	.large_lock_type = 0,
5634 	.exclusive_lock_type = SMB2_LOCKFLAG_EXCLUSIVE_LOCK,
5635 	.shared_lock_type = SMB2_LOCKFLAG_SHARED_LOCK,
5636 	.unlock_lock_type = SMB2_LOCKFLAG_UNLOCK,
5637 	.header_size = sizeof(struct smb2_sync_hdr),
5638 	.header_preamble_size = 0,
5639 	.max_header_size = MAX_SMB2_HDR_SIZE,
5640 	.read_rsp_size = sizeof(struct smb2_read_rsp) - 1,
5641 	.lock_cmd = SMB2_LOCK,
5642 	.cap_unix = 0,
5643 	.cap_nt_find = SMB2_NT_FIND,
5644 	.cap_large_files = SMB2_LARGE_FILES,
5645 	.signing_enabled = SMB2_NEGOTIATE_SIGNING_ENABLED | SMB2_NEGOTIATE_SIGNING_REQUIRED,
5646 	.signing_required = SMB2_NEGOTIATE_SIGNING_REQUIRED,
5647 	.create_lease_size = sizeof(struct create_lease_v2),
5648 };
5649 
5650 struct smb_version_values smb302_values = {
5651 	.version_string = SMB302_VERSION_STRING,
5652 	.protocol_id = SMB302_PROT_ID,
5653 	.req_capabilities = SMB2_GLOBAL_CAP_DFS | SMB2_GLOBAL_CAP_LEASING | SMB2_GLOBAL_CAP_LARGE_MTU | SMB2_GLOBAL_CAP_PERSISTENT_HANDLES | SMB2_GLOBAL_CAP_ENCRYPTION | SMB2_GLOBAL_CAP_DIRECTORY_LEASING,
5654 	.large_lock_type = 0,
5655 	.exclusive_lock_type = SMB2_LOCKFLAG_EXCLUSIVE_LOCK,
5656 	.shared_lock_type = SMB2_LOCKFLAG_SHARED_LOCK,
5657 	.unlock_lock_type = SMB2_LOCKFLAG_UNLOCK,
5658 	.header_size = sizeof(struct smb2_sync_hdr),
5659 	.header_preamble_size = 0,
5660 	.max_header_size = MAX_SMB2_HDR_SIZE,
5661 	.read_rsp_size = sizeof(struct smb2_read_rsp) - 1,
5662 	.lock_cmd = SMB2_LOCK,
5663 	.cap_unix = 0,
5664 	.cap_nt_find = SMB2_NT_FIND,
5665 	.cap_large_files = SMB2_LARGE_FILES,
5666 	.signing_enabled = SMB2_NEGOTIATE_SIGNING_ENABLED | SMB2_NEGOTIATE_SIGNING_REQUIRED,
5667 	.signing_required = SMB2_NEGOTIATE_SIGNING_REQUIRED,
5668 	.create_lease_size = sizeof(struct create_lease_v2),
5669 };
5670 
5671 struct smb_version_values smb311_values = {
5672 	.version_string = SMB311_VERSION_STRING,
5673 	.protocol_id = SMB311_PROT_ID,
5674 	.req_capabilities = SMB2_GLOBAL_CAP_DFS | SMB2_GLOBAL_CAP_LEASING | SMB2_GLOBAL_CAP_LARGE_MTU | SMB2_GLOBAL_CAP_PERSISTENT_HANDLES | SMB2_GLOBAL_CAP_ENCRYPTION | SMB2_GLOBAL_CAP_DIRECTORY_LEASING,
5675 	.large_lock_type = 0,
5676 	.exclusive_lock_type = SMB2_LOCKFLAG_EXCLUSIVE_LOCK,
5677 	.shared_lock_type = SMB2_LOCKFLAG_SHARED_LOCK,
5678 	.unlock_lock_type = SMB2_LOCKFLAG_UNLOCK,
5679 	.header_size = sizeof(struct smb2_sync_hdr),
5680 	.header_preamble_size = 0,
5681 	.max_header_size = MAX_SMB2_HDR_SIZE,
5682 	.read_rsp_size = sizeof(struct smb2_read_rsp) - 1,
5683 	.lock_cmd = SMB2_LOCK,
5684 	.cap_unix = 0,
5685 	.cap_nt_find = SMB2_NT_FIND,
5686 	.cap_large_files = SMB2_LARGE_FILES,
5687 	.signing_enabled = SMB2_NEGOTIATE_SIGNING_ENABLED | SMB2_NEGOTIATE_SIGNING_REQUIRED,
5688 	.signing_required = SMB2_NEGOTIATE_SIGNING_REQUIRED,
5689 	.create_lease_size = sizeof(struct create_lease_v2),
5690 };
5691