cifs: fix incorrect handling of smb2_set_sparse() return in smb3_simple_falloc
[muen/linux.git] / fs / cifs / smb2ops.c
1 /*
2  *  SMB2 version specific operations
3  *
4  *  Copyright (c) 2012, Jeff Layton <jlayton@redhat.com>
5  *
6  *  This library is free software; you can redistribute it and/or modify
7  *  it under the terms of the GNU General Public License v2 as published
8  *  by the Free Software Foundation.
9  *
10  *  This library is distributed in the hope that it will be useful,
11  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
12  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See
13  *  the GNU Lesser General Public License for more details.
14  *
15  *  You should have received a copy of the GNU Lesser General Public License
16  *  along with this library; if not, write to the Free Software
17  *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
18  */
19
20 #include <linux/pagemap.h>
21 #include <linux/vfs.h>
22 #include <linux/falloc.h>
23 #include <linux/scatterlist.h>
24 #include <linux/uuid.h>
25 #include <crypto/aead.h>
26 #include "cifsglob.h"
27 #include "smb2pdu.h"
28 #include "smb2proto.h"
29 #include "cifsproto.h"
30 #include "cifs_debug.h"
31 #include "cifs_unicode.h"
32 #include "smb2status.h"
33 #include "smb2glob.h"
34 #include "cifs_ioctl.h"
35 #include "smbdirect.h"
36
37 /* Change credits for different ops and return the total number of credits */
38 static int
39 change_conf(struct TCP_Server_Info *server)
40 {
41         server->credits += server->echo_credits + server->oplock_credits;
42         server->oplock_credits = server->echo_credits = 0;
43         switch (server->credits) {
44         case 0:
45                 return 0;
46         case 1:
47                 server->echoes = false;
48                 server->oplocks = false;
49                 break;
50         case 2:
51                 server->echoes = true;
52                 server->oplocks = false;
53                 server->echo_credits = 1;
54                 break;
55         default:
56                 server->echoes = true;
57                 if (enable_oplocks) {
58                         server->oplocks = true;
59                         server->oplock_credits = 1;
60                 } else
61                         server->oplocks = false;
62
63                 server->echo_credits = 1;
64         }
65         server->credits -= server->echo_credits + server->oplock_credits;
66         return server->credits + server->echo_credits + server->oplock_credits;
67 }
68
69 static void
70 smb2_add_credits(struct TCP_Server_Info *server,
71                  const struct cifs_credits *credits, const int optype)
72 {
73         int *val, rc = -1;
74         unsigned int add = credits->value;
75         unsigned int instance = credits->instance;
76         bool reconnect_detected = false;
77
78         spin_lock(&server->req_lock);
79         val = server->ops->get_credits_field(server, optype);
80
81         /* eg found case where write overlapping reconnect messed up credits */
82         if (((optype & CIFS_OP_MASK) == CIFS_NEG_OP) && (*val != 0))
83                 trace_smb3_reconnect_with_invalid_credits(server->CurrentMid,
84                         server->hostname, *val);
85         if ((instance == 0) || (instance == server->reconnect_instance))
86                 *val += add;
87         else
88                 reconnect_detected = true;
89
90         if (*val > 65000) {
91                 *val = 65000; /* Don't get near 64K credits, avoid srv bugs */
92                 printk_once(KERN_WARNING "server overflowed SMB3 credits\n");
93         }
94         server->in_flight--;
95         if (server->in_flight == 0 && (optype & CIFS_OP_MASK) != CIFS_NEG_OP)
96                 rc = change_conf(server);
97         /*
98          * Sometimes server returns 0 credits on oplock break ack - we need to
99          * rebalance credits in this case.
100          */
101         else if (server->in_flight > 0 && server->oplock_credits == 0 &&
102                  server->oplocks) {
103                 if (server->credits > 1) {
104                         server->credits--;
105                         server->oplock_credits++;
106                 }
107         }
108         spin_unlock(&server->req_lock);
109         wake_up(&server->request_q);
110
111         if (reconnect_detected)
112                 cifs_dbg(FYI, "trying to put %d credits from the old server instance %d\n",
113                          add, instance);
114
115         if (server->tcpStatus == CifsNeedReconnect
116             || server->tcpStatus == CifsExiting)
117                 return;
118
119         switch (rc) {
120         case -1:
121                 /* change_conf hasn't been executed */
122                 break;
123         case 0:
124                 cifs_dbg(VFS, "Possible client or server bug - zero credits\n");
125                 break;
126         case 1:
127                 cifs_dbg(VFS, "disabling echoes and oplocks\n");
128                 break;
129         case 2:
130                 cifs_dbg(FYI, "disabling oplocks\n");
131                 break;
132         default:
133                 cifs_dbg(FYI, "add %u credits total=%d\n", add, rc);
134         }
135 }
136
137 static void
138 smb2_set_credits(struct TCP_Server_Info *server, const int val)
139 {
140         spin_lock(&server->req_lock);
141         server->credits = val;
142         if (val == 1)
143                 server->reconnect_instance++;
144         spin_unlock(&server->req_lock);
145         /* don't log while holding the lock */
146         if (val == 1)
147                 cifs_dbg(FYI, "set credits to 1 due to smb2 reconnect\n");
148 }
149
150 static int *
151 smb2_get_credits_field(struct TCP_Server_Info *server, const int optype)
152 {
153         switch (optype) {
154         case CIFS_ECHO_OP:
155                 return &server->echo_credits;
156         case CIFS_OBREAK_OP:
157                 return &server->oplock_credits;
158         default:
159                 return &server->credits;
160         }
161 }
162
163 static unsigned int
164 smb2_get_credits(struct mid_q_entry *mid)
165 {
166         struct smb2_sync_hdr *shdr = (struct smb2_sync_hdr *)mid->resp_buf;
167
168         if (mid->mid_state == MID_RESPONSE_RECEIVED
169             || mid->mid_state == MID_RESPONSE_MALFORMED)
170                 return le16_to_cpu(shdr->CreditRequest);
171
172         return 0;
173 }
174
175 static int
176 smb2_wait_mtu_credits(struct TCP_Server_Info *server, unsigned int size,
177                       unsigned int *num, struct cifs_credits *credits)
178 {
179         int rc = 0;
180         unsigned int scredits;
181
182         spin_lock(&server->req_lock);
183         while (1) {
184                 if (server->credits <= 0) {
185                         spin_unlock(&server->req_lock);
186                         cifs_num_waiters_inc(server);
187                         rc = wait_event_killable(server->request_q,
188                                 has_credits(server, &server->credits, 1));
189                         cifs_num_waiters_dec(server);
190                         if (rc)
191                                 return rc;
192                         spin_lock(&server->req_lock);
193                 } else {
194                         if (server->tcpStatus == CifsExiting) {
195                                 spin_unlock(&server->req_lock);
196                                 return -ENOENT;
197                         }
198
199                         scredits = server->credits;
200                         /* can deadlock with reopen */
201                         if (scredits <= 8) {
202                                 *num = SMB2_MAX_BUFFER_SIZE;
203                                 credits->value = 0;
204                                 credits->instance = 0;
205                                 break;
206                         }
207
208                         /* leave some credits for reopen and other ops */
209                         scredits -= 8;
210                         *num = min_t(unsigned int, size,
211                                      scredits * SMB2_MAX_BUFFER_SIZE);
212
213                         credits->value =
214                                 DIV_ROUND_UP(*num, SMB2_MAX_BUFFER_SIZE);
215                         credits->instance = server->reconnect_instance;
216                         server->credits -= credits->value;
217                         server->in_flight++;
218                         break;
219                 }
220         }
221         spin_unlock(&server->req_lock);
222         return rc;
223 }
224
225 static int
226 smb2_adjust_credits(struct TCP_Server_Info *server,
227                     struct cifs_credits *credits,
228                     const unsigned int payload_size)
229 {
230         int new_val = DIV_ROUND_UP(payload_size, SMB2_MAX_BUFFER_SIZE);
231
232         if (!credits->value || credits->value == new_val)
233                 return 0;
234
235         if (credits->value < new_val) {
236                 WARN_ONCE(1, "request has less credits (%d) than required (%d)",
237                           credits->value, new_val);
238                 return -ENOTSUPP;
239         }
240
241         spin_lock(&server->req_lock);
242
243         if (server->reconnect_instance != credits->instance) {
244                 spin_unlock(&server->req_lock);
245                 cifs_dbg(VFS, "trying to return %d credits to old session\n",
246                          credits->value - new_val);
247                 return -EAGAIN;
248         }
249
250         server->credits += credits->value - new_val;
251         spin_unlock(&server->req_lock);
252         wake_up(&server->request_q);
253         credits->value = new_val;
254         return 0;
255 }
256
257 static __u64
258 smb2_get_next_mid(struct TCP_Server_Info *server)
259 {
260         __u64 mid;
261         /* for SMB2 we need the current value */
262         spin_lock(&GlobalMid_Lock);
263         mid = server->CurrentMid++;
264         spin_unlock(&GlobalMid_Lock);
265         return mid;
266 }
267
268 static void
269 smb2_revert_current_mid(struct TCP_Server_Info *server, const unsigned int val)
270 {
271         spin_lock(&GlobalMid_Lock);
272         if (server->CurrentMid >= val)
273                 server->CurrentMid -= val;
274         spin_unlock(&GlobalMid_Lock);
275 }
276
277 static struct mid_q_entry *
278 smb2_find_mid(struct TCP_Server_Info *server, char *buf)
279 {
280         struct mid_q_entry *mid;
281         struct smb2_sync_hdr *shdr = (struct smb2_sync_hdr *)buf;
282         __u64 wire_mid = le64_to_cpu(shdr->MessageId);
283
284         if (shdr->ProtocolId == SMB2_TRANSFORM_PROTO_NUM) {
285                 cifs_dbg(VFS, "encrypted frame parsing not supported yet");
286                 return NULL;
287         }
288
289         spin_lock(&GlobalMid_Lock);
290         list_for_each_entry(mid, &server->pending_mid_q, qhead) {
291                 if ((mid->mid == wire_mid) &&
292                     (mid->mid_state == MID_REQUEST_SUBMITTED) &&
293                     (mid->command == shdr->Command)) {
294                         kref_get(&mid->refcount);
295                         spin_unlock(&GlobalMid_Lock);
296                         return mid;
297                 }
298         }
299         spin_unlock(&GlobalMid_Lock);
300         return NULL;
301 }
302
303 static void
304 smb2_dump_detail(void *buf, struct TCP_Server_Info *server)
305 {
306 #ifdef CONFIG_CIFS_DEBUG2
307         struct smb2_sync_hdr *shdr = (struct smb2_sync_hdr *)buf;
308
309         cifs_dbg(VFS, "Cmd: %d Err: 0x%x Flags: 0x%x Mid: %llu Pid: %d\n",
310                  shdr->Command, shdr->Status, shdr->Flags, shdr->MessageId,
311                  shdr->ProcessId);
312         cifs_dbg(VFS, "smb buf %p len %u\n", buf,
313                  server->ops->calc_smb_size(buf, server));
314 #endif
315 }
316
317 static bool
318 smb2_need_neg(struct TCP_Server_Info *server)
319 {
320         return server->max_read == 0;
321 }
322
323 static int
324 smb2_negotiate(const unsigned int xid, struct cifs_ses *ses)
325 {
326         int rc;
327         ses->server->CurrentMid = 0;
328         rc = SMB2_negotiate(xid, ses);
329         /* BB we probably don't need to retry with modern servers */
330         if (rc == -EAGAIN)
331                 rc = -EHOSTDOWN;
332         return rc;
333 }
334
335 static unsigned int
336 smb2_negotiate_wsize(struct cifs_tcon *tcon, struct smb_vol *volume_info)
337 {
338         struct TCP_Server_Info *server = tcon->ses->server;
339         unsigned int wsize;
340
341         /* start with specified wsize, or default */
342         wsize = volume_info->wsize ? volume_info->wsize : CIFS_DEFAULT_IOSIZE;
343         wsize = min_t(unsigned int, wsize, server->max_write);
344 #ifdef CONFIG_CIFS_SMB_DIRECT
345         if (server->rdma) {
346                 if (server->sign)
347                         wsize = min_t(unsigned int,
348                                 wsize, server->smbd_conn->max_fragmented_send_size);
349                 else
350                         wsize = min_t(unsigned int,
351                                 wsize, server->smbd_conn->max_readwrite_size);
352         }
353 #endif
354         if (!(server->capabilities & SMB2_GLOBAL_CAP_LARGE_MTU))
355                 wsize = min_t(unsigned int, wsize, SMB2_MAX_BUFFER_SIZE);
356
357         return wsize;
358 }
359
360 static unsigned int
361 smb3_negotiate_wsize(struct cifs_tcon *tcon, struct smb_vol *volume_info)
362 {
363         struct TCP_Server_Info *server = tcon->ses->server;
364         unsigned int wsize;
365
366         /* start with specified wsize, or default */
367         wsize = volume_info->wsize ? volume_info->wsize : SMB3_DEFAULT_IOSIZE;
368         wsize = min_t(unsigned int, wsize, server->max_write);
369 #ifdef CONFIG_CIFS_SMB_DIRECT
370         if (server->rdma) {
371                 if (server->sign)
372                         wsize = min_t(unsigned int,
373                                 wsize, server->smbd_conn->max_fragmented_send_size);
374                 else
375                         wsize = min_t(unsigned int,
376                                 wsize, server->smbd_conn->max_readwrite_size);
377         }
378 #endif
379         if (!(server->capabilities & SMB2_GLOBAL_CAP_LARGE_MTU))
380                 wsize = min_t(unsigned int, wsize, SMB2_MAX_BUFFER_SIZE);
381
382         return wsize;
383 }
384
385 static unsigned int
386 smb2_negotiate_rsize(struct cifs_tcon *tcon, struct smb_vol *volume_info)
387 {
388         struct TCP_Server_Info *server = tcon->ses->server;
389         unsigned int rsize;
390
391         /* start with specified rsize, or default */
392         rsize = volume_info->rsize ? volume_info->rsize : CIFS_DEFAULT_IOSIZE;
393         rsize = min_t(unsigned int, rsize, server->max_read);
394 #ifdef CONFIG_CIFS_SMB_DIRECT
395         if (server->rdma) {
396                 if (server->sign)
397                         rsize = min_t(unsigned int,
398                                 rsize, server->smbd_conn->max_fragmented_recv_size);
399                 else
400                         rsize = min_t(unsigned int,
401                                 rsize, server->smbd_conn->max_readwrite_size);
402         }
403 #endif
404
405         if (!(server->capabilities & SMB2_GLOBAL_CAP_LARGE_MTU))
406                 rsize = min_t(unsigned int, rsize, SMB2_MAX_BUFFER_SIZE);
407
408         return rsize;
409 }
410
411 static unsigned int
412 smb3_negotiate_rsize(struct cifs_tcon *tcon, struct smb_vol *volume_info)
413 {
414         struct TCP_Server_Info *server = tcon->ses->server;
415         unsigned int rsize;
416
417         /* start with specified rsize, or default */
418         rsize = volume_info->rsize ? volume_info->rsize : SMB3_DEFAULT_IOSIZE;
419         rsize = min_t(unsigned int, rsize, server->max_read);
420 #ifdef CONFIG_CIFS_SMB_DIRECT
421         if (server->rdma) {
422                 if (server->sign)
423                         rsize = min_t(unsigned int,
424                                 rsize, server->smbd_conn->max_fragmented_recv_size);
425                 else
426                         rsize = min_t(unsigned int,
427                                 rsize, server->smbd_conn->max_readwrite_size);
428         }
429 #endif
430
431         if (!(server->capabilities & SMB2_GLOBAL_CAP_LARGE_MTU))
432                 rsize = min_t(unsigned int, rsize, SMB2_MAX_BUFFER_SIZE);
433
434         return rsize;
435 }
436
437 static int
438 parse_server_interfaces(struct network_interface_info_ioctl_rsp *buf,
439                         size_t buf_len,
440                         struct cifs_server_iface **iface_list,
441                         size_t *iface_count)
442 {
443         struct network_interface_info_ioctl_rsp *p;
444         struct sockaddr_in *addr4;
445         struct sockaddr_in6 *addr6;
446         struct iface_info_ipv4 *p4;
447         struct iface_info_ipv6 *p6;
448         struct cifs_server_iface *info;
449         ssize_t bytes_left;
450         size_t next = 0;
451         int nb_iface = 0;
452         int rc = 0;
453
454         *iface_list = NULL;
455         *iface_count = 0;
456
457         /*
458          * Fist pass: count and sanity check
459          */
460
461         bytes_left = buf_len;
462         p = buf;
463         while (bytes_left >= sizeof(*p)) {
464                 nb_iface++;
465                 next = le32_to_cpu(p->Next);
466                 if (!next) {
467                         bytes_left -= sizeof(*p);
468                         break;
469                 }
470                 p = (struct network_interface_info_ioctl_rsp *)((u8 *)p+next);
471                 bytes_left -= next;
472         }
473
474         if (!nb_iface) {
475                 cifs_dbg(VFS, "%s: malformed interface info\n", __func__);
476                 rc = -EINVAL;
477                 goto out;
478         }
479
480         if (bytes_left || p->Next)
481                 cifs_dbg(VFS, "%s: incomplete interface info\n", __func__);
482
483
484         /*
485          * Second pass: extract info to internal structure
486          */
487
488         *iface_list = kcalloc(nb_iface, sizeof(**iface_list), GFP_KERNEL);
489         if (!*iface_list) {
490                 rc = -ENOMEM;
491                 goto out;
492         }
493
494         info = *iface_list;
495         bytes_left = buf_len;
496         p = buf;
497         while (bytes_left >= sizeof(*p)) {
498                 info->speed = le64_to_cpu(p->LinkSpeed);
499                 info->rdma_capable = le32_to_cpu(p->Capability & RDMA_CAPABLE);
500                 info->rss_capable = le32_to_cpu(p->Capability & RSS_CAPABLE);
501
502                 cifs_dbg(FYI, "%s: adding iface %zu\n", __func__, *iface_count);
503                 cifs_dbg(FYI, "%s: speed %zu bps\n", __func__, info->speed);
504                 cifs_dbg(FYI, "%s: capabilities 0x%08x\n", __func__,
505                          le32_to_cpu(p->Capability));
506
507                 switch (p->Family) {
508                 /*
509                  * The kernel and wire socket structures have the same
510                  * layout and use network byte order but make the
511                  * conversion explicit in case either one changes.
512                  */
513                 case INTERNETWORK:
514                         addr4 = (struct sockaddr_in *)&info->sockaddr;
515                         p4 = (struct iface_info_ipv4 *)p->Buffer;
516                         addr4->sin_family = AF_INET;
517                         memcpy(&addr4->sin_addr, &p4->IPv4Address, 4);
518
519                         /* [MS-SMB2] 2.2.32.5.1.1 Clients MUST ignore these */
520                         addr4->sin_port = cpu_to_be16(CIFS_PORT);
521
522                         cifs_dbg(FYI, "%s: ipv4 %pI4\n", __func__,
523                                  &addr4->sin_addr);
524                         break;
525                 case INTERNETWORKV6:
526                         addr6 = (struct sockaddr_in6 *)&info->sockaddr;
527                         p6 = (struct iface_info_ipv6 *)p->Buffer;
528                         addr6->sin6_family = AF_INET6;
529                         memcpy(&addr6->sin6_addr, &p6->IPv6Address, 16);
530
531                         /* [MS-SMB2] 2.2.32.5.1.2 Clients MUST ignore these */
532                         addr6->sin6_flowinfo = 0;
533                         addr6->sin6_scope_id = 0;
534                         addr6->sin6_port = cpu_to_be16(CIFS_PORT);
535
536                         cifs_dbg(FYI, "%s: ipv6 %pI6\n", __func__,
537                                  &addr6->sin6_addr);
538                         break;
539                 default:
540                         cifs_dbg(VFS,
541                                  "%s: skipping unsupported socket family\n",
542                                  __func__);
543                         goto next_iface;
544                 }
545
546                 (*iface_count)++;
547                 info++;
548 next_iface:
549                 next = le32_to_cpu(p->Next);
550                 if (!next)
551                         break;
552                 p = (struct network_interface_info_ioctl_rsp *)((u8 *)p+next);
553                 bytes_left -= next;
554         }
555
556         if (!*iface_count) {
557                 rc = -EINVAL;
558                 goto out;
559         }
560
561 out:
562         if (rc) {
563                 kfree(*iface_list);
564                 *iface_count = 0;
565                 *iface_list = NULL;
566         }
567         return rc;
568 }
569
570
571 static int
572 SMB3_request_interfaces(const unsigned int xid, struct cifs_tcon *tcon)
573 {
574         int rc;
575         unsigned int ret_data_len = 0;
576         struct network_interface_info_ioctl_rsp *out_buf = NULL;
577         struct cifs_server_iface *iface_list;
578         size_t iface_count;
579         struct cifs_ses *ses = tcon->ses;
580
581         rc = SMB2_ioctl(xid, tcon, NO_FILE_ID, NO_FILE_ID,
582                         FSCTL_QUERY_NETWORK_INTERFACE_INFO, true /* is_fsctl */,
583                         NULL /* no data input */, 0 /* no data input */,
584                         (char **)&out_buf, &ret_data_len);
585         if (rc == -EOPNOTSUPP) {
586                 cifs_dbg(FYI,
587                          "server does not support query network interfaces\n");
588                 goto out;
589         } else if (rc != 0) {
590                 cifs_dbg(VFS, "error %d on ioctl to get interface list\n", rc);
591                 goto out;
592         }
593
594         rc = parse_server_interfaces(out_buf, ret_data_len,
595                                      &iface_list, &iface_count);
596         if (rc)
597                 goto out;
598
599         spin_lock(&ses->iface_lock);
600         kfree(ses->iface_list);
601         ses->iface_list = iface_list;
602         ses->iface_count = iface_count;
603         ses->iface_last_update = jiffies;
604         spin_unlock(&ses->iface_lock);
605
606 out:
607         kfree(out_buf);
608         return rc;
609 }
610
611 static void
612 smb2_close_cached_fid(struct kref *ref)
613 {
614         struct cached_fid *cfid = container_of(ref, struct cached_fid,
615                                                refcount);
616
617         if (cfid->is_valid) {
618                 cifs_dbg(FYI, "clear cached root file handle\n");
619                 SMB2_close(0, cfid->tcon, cfid->fid->persistent_fid,
620                            cfid->fid->volatile_fid);
621                 cfid->is_valid = false;
622                 cfid->file_all_info_is_valid = false;
623         }
624 }
625
626 void close_shroot(struct cached_fid *cfid)
627 {
628         mutex_lock(&cfid->fid_mutex);
629         kref_put(&cfid->refcount, smb2_close_cached_fid);
630         mutex_unlock(&cfid->fid_mutex);
631 }
632
633 void
634 smb2_cached_lease_break(struct work_struct *work)
635 {
636         struct cached_fid *cfid = container_of(work,
637                                 struct cached_fid, lease_break);
638
639         close_shroot(cfid);
640 }
641
642 /*
643  * Open the directory at the root of a share
644  */
645 int open_shroot(unsigned int xid, struct cifs_tcon *tcon, struct cifs_fid *pfid)
646 {
647         struct cifs_ses *ses = tcon->ses;
648         struct TCP_Server_Info *server = ses->server;
649         struct cifs_open_parms oparms;
650         struct smb2_create_rsp *o_rsp = NULL;
651         struct smb2_query_info_rsp *qi_rsp = NULL;
652         int resp_buftype[2];
653         struct smb_rqst rqst[2];
654         struct kvec rsp_iov[2];
655         struct kvec open_iov[SMB2_CREATE_IOV_SIZE];
656         struct kvec qi_iov[1];
657         int rc, flags = 0;
658         __le16 utf16_path = 0; /* Null - since an open of top of share */
659         u8 oplock = SMB2_OPLOCK_LEVEL_II;
660
661         mutex_lock(&tcon->crfid.fid_mutex);
662         if (tcon->crfid.is_valid) {
663                 cifs_dbg(FYI, "found a cached root file handle\n");
664                 memcpy(pfid, tcon->crfid.fid, sizeof(struct cifs_fid));
665                 kref_get(&tcon->crfid.refcount);
666                 mutex_unlock(&tcon->crfid.fid_mutex);
667                 return 0;
668         }
669
670         if (smb3_encryption_required(tcon))
671                 flags |= CIFS_TRANSFORM_REQ;
672
673         memset(rqst, 0, sizeof(rqst));
674         resp_buftype[0] = resp_buftype[1] = CIFS_NO_BUFFER;
675         memset(rsp_iov, 0, sizeof(rsp_iov));
676
677         /* Open */
678         memset(&open_iov, 0, sizeof(open_iov));
679         rqst[0].rq_iov = open_iov;
680         rqst[0].rq_nvec = SMB2_CREATE_IOV_SIZE;
681
682         oparms.tcon = tcon;
683         oparms.create_options = 0;
684         oparms.desired_access = FILE_READ_ATTRIBUTES;
685         oparms.disposition = FILE_OPEN;
686         oparms.fid = pfid;
687         oparms.reconnect = false;
688
689         rc = SMB2_open_init(tcon, &rqst[0], &oplock, &oparms, &utf16_path);
690         if (rc)
691                 goto oshr_exit;
692         smb2_set_next_command(tcon, &rqst[0]);
693
694         memset(&qi_iov, 0, sizeof(qi_iov));
695         rqst[1].rq_iov = qi_iov;
696         rqst[1].rq_nvec = 1;
697
698         rc = SMB2_query_info_init(tcon, &rqst[1], COMPOUND_FID,
699                                   COMPOUND_FID, FILE_ALL_INFORMATION,
700                                   SMB2_O_INFO_FILE, 0,
701                                   sizeof(struct smb2_file_all_info) +
702                                   PATH_MAX * 2, 0, NULL);
703         if (rc)
704                 goto oshr_exit;
705
706         smb2_set_related(&rqst[1]);
707
708         rc = compound_send_recv(xid, ses, flags, 2, rqst,
709                                 resp_buftype, rsp_iov);
710         if (rc)
711                 goto oshr_exit;
712
713         o_rsp = (struct smb2_create_rsp *)rsp_iov[0].iov_base;
714         oparms.fid->persistent_fid = o_rsp->PersistentFileId;
715         oparms.fid->volatile_fid = o_rsp->VolatileFileId;
716 #ifdef CONFIG_CIFS_DEBUG2
717         oparms.fid->mid = le64_to_cpu(o_rsp->sync_hdr.MessageId);
718 #endif /* CIFS_DEBUG2 */
719
720         if (o_rsp->OplockLevel == SMB2_OPLOCK_LEVEL_LEASE)
721                 oplock = smb2_parse_lease_state(server, o_rsp,
722                                                 &oparms.fid->epoch,
723                                                 oparms.fid->lease_key);
724         else
725                 goto oshr_exit;
726
727
728         memcpy(tcon->crfid.fid, pfid, sizeof(struct cifs_fid));
729         tcon->crfid.tcon = tcon;
730         tcon->crfid.is_valid = true;
731         kref_init(&tcon->crfid.refcount);
732         kref_get(&tcon->crfid.refcount);
733
734
735         qi_rsp = (struct smb2_query_info_rsp *)rsp_iov[1].iov_base;
736         if (le32_to_cpu(qi_rsp->OutputBufferLength) < sizeof(struct smb2_file_all_info))
737                 goto oshr_exit;
738         rc = smb2_validate_and_copy_iov(
739                                 le16_to_cpu(qi_rsp->OutputBufferOffset),
740                                 sizeof(struct smb2_file_all_info),
741                                 &rsp_iov[1], sizeof(struct smb2_file_all_info),
742                                 (char *)&tcon->crfid.file_all_info);
743         if (rc)
744                 goto oshr_exit;
745         tcon->crfid.file_all_info_is_valid = 1;
746
747  oshr_exit:
748         mutex_unlock(&tcon->crfid.fid_mutex);
749         SMB2_open_free(&rqst[0]);
750         SMB2_query_info_free(&rqst[1]);
751         free_rsp_buf(resp_buftype[0], rsp_iov[0].iov_base);
752         free_rsp_buf(resp_buftype[1], rsp_iov[1].iov_base);
753         return rc;
754 }
755
756 static void
757 smb3_qfs_tcon(const unsigned int xid, struct cifs_tcon *tcon)
758 {
759         int rc;
760         __le16 srch_path = 0; /* Null - open root of share */
761         u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
762         struct cifs_open_parms oparms;
763         struct cifs_fid fid;
764         bool no_cached_open = tcon->nohandlecache;
765
766         oparms.tcon = tcon;
767         oparms.desired_access = FILE_READ_ATTRIBUTES;
768         oparms.disposition = FILE_OPEN;
769         oparms.create_options = 0;
770         oparms.fid = &fid;
771         oparms.reconnect = false;
772
773         if (no_cached_open)
774                 rc = SMB2_open(xid, &oparms, &srch_path, &oplock, NULL, NULL,
775                                NULL);
776         else
777                 rc = open_shroot(xid, tcon, &fid);
778
779         if (rc)
780                 return;
781
782         SMB3_request_interfaces(xid, tcon);
783
784         SMB2_QFS_attr(xid, tcon, fid.persistent_fid, fid.volatile_fid,
785                         FS_ATTRIBUTE_INFORMATION);
786         SMB2_QFS_attr(xid, tcon, fid.persistent_fid, fid.volatile_fid,
787                         FS_DEVICE_INFORMATION);
788         SMB2_QFS_attr(xid, tcon, fid.persistent_fid, fid.volatile_fid,
789                         FS_VOLUME_INFORMATION);
790         SMB2_QFS_attr(xid, tcon, fid.persistent_fid, fid.volatile_fid,
791                         FS_SECTOR_SIZE_INFORMATION); /* SMB3 specific */
792         if (no_cached_open)
793                 SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid);
794         else
795                 close_shroot(&tcon->crfid);
796
797         return;
798 }
799
800 static void
801 smb2_qfs_tcon(const unsigned int xid, struct cifs_tcon *tcon)
802 {
803         int rc;
804         __le16 srch_path = 0; /* Null - open root of share */
805         u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
806         struct cifs_open_parms oparms;
807         struct cifs_fid fid;
808
809         oparms.tcon = tcon;
810         oparms.desired_access = FILE_READ_ATTRIBUTES;
811         oparms.disposition = FILE_OPEN;
812         oparms.create_options = 0;
813         oparms.fid = &fid;
814         oparms.reconnect = false;
815
816         rc = SMB2_open(xid, &oparms, &srch_path, &oplock, NULL, NULL, NULL);
817         if (rc)
818                 return;
819
820         SMB2_QFS_attr(xid, tcon, fid.persistent_fid, fid.volatile_fid,
821                         FS_ATTRIBUTE_INFORMATION);
822         SMB2_QFS_attr(xid, tcon, fid.persistent_fid, fid.volatile_fid,
823                         FS_DEVICE_INFORMATION);
824         SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid);
825         return;
826 }
827
828 static int
829 smb2_is_path_accessible(const unsigned int xid, struct cifs_tcon *tcon,
830                         struct cifs_sb_info *cifs_sb, const char *full_path)
831 {
832         int rc;
833         __le16 *utf16_path;
834         __u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
835         struct cifs_open_parms oparms;
836         struct cifs_fid fid;
837
838         if ((*full_path == 0) && tcon->crfid.is_valid)
839                 return 0;
840
841         utf16_path = cifs_convert_path_to_utf16(full_path, cifs_sb);
842         if (!utf16_path)
843                 return -ENOMEM;
844
845         oparms.tcon = tcon;
846         oparms.desired_access = FILE_READ_ATTRIBUTES;
847         oparms.disposition = FILE_OPEN;
848         if (backup_cred(cifs_sb))
849                 oparms.create_options = CREATE_OPEN_BACKUP_INTENT;
850         else
851                 oparms.create_options = 0;
852         oparms.fid = &fid;
853         oparms.reconnect = false;
854
855         rc = SMB2_open(xid, &oparms, utf16_path, &oplock, NULL, NULL, NULL);
856         if (rc) {
857                 kfree(utf16_path);
858                 return rc;
859         }
860
861         rc = SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid);
862         kfree(utf16_path);
863         return rc;
864 }
865
866 static int
867 smb2_get_srv_inum(const unsigned int xid, struct cifs_tcon *tcon,
868                   struct cifs_sb_info *cifs_sb, const char *full_path,
869                   u64 *uniqueid, FILE_ALL_INFO *data)
870 {
871         *uniqueid = le64_to_cpu(data->IndexNumber);
872         return 0;
873 }
874
875 static int
876 smb2_query_file_info(const unsigned int xid, struct cifs_tcon *tcon,
877                      struct cifs_fid *fid, FILE_ALL_INFO *data)
878 {
879         int rc;
880         struct smb2_file_all_info *smb2_data;
881
882         smb2_data = kzalloc(sizeof(struct smb2_file_all_info) + PATH_MAX * 2,
883                             GFP_KERNEL);
884         if (smb2_data == NULL)
885                 return -ENOMEM;
886
887         rc = SMB2_query_info(xid, tcon, fid->persistent_fid, fid->volatile_fid,
888                              smb2_data);
889         if (!rc)
890                 move_smb2_info_to_cifs(data, smb2_data);
891         kfree(smb2_data);
892         return rc;
893 }
894
895 #ifdef CONFIG_CIFS_XATTR
896 static ssize_t
897 move_smb2_ea_to_cifs(char *dst, size_t dst_size,
898                      struct smb2_file_full_ea_info *src, size_t src_size,
899                      const unsigned char *ea_name)
900 {
901         int rc = 0;
902         unsigned int ea_name_len = ea_name ? strlen(ea_name) : 0;
903         char *name, *value;
904         size_t buf_size = dst_size;
905         size_t name_len, value_len, user_name_len;
906
907         while (src_size > 0) {
908                 name = &src->ea_data[0];
909                 name_len = (size_t)src->ea_name_length;
910                 value = &src->ea_data[src->ea_name_length + 1];
911                 value_len = (size_t)le16_to_cpu(src->ea_value_length);
912
913                 if (name_len == 0) {
914                         break;
915                 }
916
917                 if (src_size < 8 + name_len + 1 + value_len) {
918                         cifs_dbg(FYI, "EA entry goes beyond length of list\n");
919                         rc = -EIO;
920                         goto out;
921                 }
922
923                 if (ea_name) {
924                         if (ea_name_len == name_len &&
925                             memcmp(ea_name, name, name_len) == 0) {
926                                 rc = value_len;
927                                 if (dst_size == 0)
928                                         goto out;
929                                 if (dst_size < value_len) {
930                                         rc = -ERANGE;
931                                         goto out;
932                                 }
933                                 memcpy(dst, value, value_len);
934                                 goto out;
935                         }
936                 } else {
937                         /* 'user.' plus a terminating null */
938                         user_name_len = 5 + 1 + name_len;
939
940                         if (buf_size == 0) {
941                                 /* skip copy - calc size only */
942                                 rc += user_name_len;
943                         } else if (dst_size >= user_name_len) {
944                                 dst_size -= user_name_len;
945                                 memcpy(dst, "user.", 5);
946                                 dst += 5;
947                                 memcpy(dst, src->ea_data, name_len);
948                                 dst += name_len;
949                                 *dst = 0;
950                                 ++dst;
951                                 rc += user_name_len;
952                         } else {
953                                 /* stop before overrun buffer */
954                                 rc = -ERANGE;
955                                 break;
956                         }
957                 }
958
959                 if (!src->next_entry_offset)
960                         break;
961
962                 if (src_size < le32_to_cpu(src->next_entry_offset)) {
963                         /* stop before overrun buffer */
964                         rc = -ERANGE;
965                         break;
966                 }
967                 src_size -= le32_to_cpu(src->next_entry_offset);
968                 src = (void *)((char *)src +
969                                le32_to_cpu(src->next_entry_offset));
970         }
971
972         /* didn't find the named attribute */
973         if (ea_name)
974                 rc = -ENODATA;
975
976 out:
977         return (ssize_t)rc;
978 }
979
980 static ssize_t
981 smb2_query_eas(const unsigned int xid, struct cifs_tcon *tcon,
982                const unsigned char *path, const unsigned char *ea_name,
983                char *ea_data, size_t buf_size,
984                struct cifs_sb_info *cifs_sb)
985 {
986         int rc;
987         __le16 *utf16_path;
988         struct kvec rsp_iov = {NULL, 0};
989         int buftype = CIFS_NO_BUFFER;
990         struct smb2_query_info_rsp *rsp;
991         struct smb2_file_full_ea_info *info = NULL;
992
993         utf16_path = cifs_convert_path_to_utf16(path, cifs_sb);
994         if (!utf16_path)
995                 return -ENOMEM;
996
997         rc = smb2_query_info_compound(xid, tcon, utf16_path,
998                                       FILE_READ_EA,
999                                       FILE_FULL_EA_INFORMATION,
1000                                       SMB2_O_INFO_FILE,
1001                                       CIFSMaxBufSize -
1002                                       MAX_SMB2_CREATE_RESPONSE_SIZE -
1003                                       MAX_SMB2_CLOSE_RESPONSE_SIZE,
1004                                       &rsp_iov, &buftype, cifs_sb);
1005         if (rc) {
1006                 /*
1007                  * If ea_name is NULL (listxattr) and there are no EAs,
1008                  * return 0 as it's not an error. Otherwise, the specified
1009                  * ea_name was not found.
1010                  */
1011                 if (!ea_name && rc == -ENODATA)
1012                         rc = 0;
1013                 goto qeas_exit;
1014         }
1015
1016         rsp = (struct smb2_query_info_rsp *)rsp_iov.iov_base;
1017         rc = smb2_validate_iov(le16_to_cpu(rsp->OutputBufferOffset),
1018                                le32_to_cpu(rsp->OutputBufferLength),
1019                                &rsp_iov,
1020                                sizeof(struct smb2_file_full_ea_info));
1021         if (rc)
1022                 goto qeas_exit;
1023
1024         info = (struct smb2_file_full_ea_info *)(
1025                         le16_to_cpu(rsp->OutputBufferOffset) + (char *)rsp);
1026         rc = move_smb2_ea_to_cifs(ea_data, buf_size, info,
1027                         le32_to_cpu(rsp->OutputBufferLength), ea_name);
1028
1029  qeas_exit:
1030         kfree(utf16_path);
1031         free_rsp_buf(buftype, rsp_iov.iov_base);
1032         return rc;
1033 }
1034
1035
1036 static int
1037 smb2_set_ea(const unsigned int xid, struct cifs_tcon *tcon,
1038             const char *path, const char *ea_name, const void *ea_value,
1039             const __u16 ea_value_len, const struct nls_table *nls_codepage,
1040             struct cifs_sb_info *cifs_sb)
1041 {
1042         struct cifs_ses *ses = tcon->ses;
1043         __le16 *utf16_path = NULL;
1044         int ea_name_len = strlen(ea_name);
1045         int flags = 0;
1046         int len;
1047         struct smb_rqst rqst[3];
1048         int resp_buftype[3];
1049         struct kvec rsp_iov[3];
1050         struct kvec open_iov[SMB2_CREATE_IOV_SIZE];
1051         struct cifs_open_parms oparms;
1052         __u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
1053         struct cifs_fid fid;
1054         struct kvec si_iov[SMB2_SET_INFO_IOV_SIZE];
1055         unsigned int size[1];
1056         void *data[1];
1057         struct smb2_file_full_ea_info *ea = NULL;
1058         struct kvec close_iov[1];
1059         int rc;
1060
1061         if (smb3_encryption_required(tcon))
1062                 flags |= CIFS_TRANSFORM_REQ;
1063
1064         if (ea_name_len > 255)
1065                 return -EINVAL;
1066
1067         utf16_path = cifs_convert_path_to_utf16(path, cifs_sb);
1068         if (!utf16_path)
1069                 return -ENOMEM;
1070
1071         memset(rqst, 0, sizeof(rqst));
1072         resp_buftype[0] = resp_buftype[1] = resp_buftype[2] = CIFS_NO_BUFFER;
1073         memset(rsp_iov, 0, sizeof(rsp_iov));
1074
1075         if (ses->server->ops->query_all_EAs) {
1076                 if (!ea_value) {
1077                         rc = ses->server->ops->query_all_EAs(xid, tcon, path,
1078                                                              ea_name, NULL, 0,
1079                                                              cifs_sb);
1080                         if (rc == -ENODATA)
1081                                 goto sea_exit;
1082                 }
1083         }
1084
1085         /* Open */
1086         memset(&open_iov, 0, sizeof(open_iov));
1087         rqst[0].rq_iov = open_iov;
1088         rqst[0].rq_nvec = SMB2_CREATE_IOV_SIZE;
1089
1090         memset(&oparms, 0, sizeof(oparms));
1091         oparms.tcon = tcon;
1092         oparms.desired_access = FILE_WRITE_EA;
1093         oparms.disposition = FILE_OPEN;
1094         if (backup_cred(cifs_sb))
1095                 oparms.create_options = CREATE_OPEN_BACKUP_INTENT;
1096         else
1097                 oparms.create_options = 0;
1098         oparms.fid = &fid;
1099         oparms.reconnect = false;
1100
1101         rc = SMB2_open_init(tcon, &rqst[0], &oplock, &oparms, utf16_path);
1102         if (rc)
1103                 goto sea_exit;
1104         smb2_set_next_command(tcon, &rqst[0]);
1105
1106
1107         /* Set Info */
1108         memset(&si_iov, 0, sizeof(si_iov));
1109         rqst[1].rq_iov = si_iov;
1110         rqst[1].rq_nvec = 1;
1111
1112         len = sizeof(ea) + ea_name_len + ea_value_len + 1;
1113         ea = kzalloc(len, GFP_KERNEL);
1114         if (ea == NULL) {
1115                 rc = -ENOMEM;
1116                 goto sea_exit;
1117         }
1118
1119         ea->ea_name_length = ea_name_len;
1120         ea->ea_value_length = cpu_to_le16(ea_value_len);
1121         memcpy(ea->ea_data, ea_name, ea_name_len + 1);
1122         memcpy(ea->ea_data + ea_name_len + 1, ea_value, ea_value_len);
1123
1124         size[0] = len;
1125         data[0] = ea;
1126
1127         rc = SMB2_set_info_init(tcon, &rqst[1], COMPOUND_FID,
1128                                 COMPOUND_FID, current->tgid,
1129                                 FILE_FULL_EA_INFORMATION,
1130                                 SMB2_O_INFO_FILE, 0, data, size);
1131         smb2_set_next_command(tcon, &rqst[1]);
1132         smb2_set_related(&rqst[1]);
1133
1134
1135         /* Close */
1136         memset(&close_iov, 0, sizeof(close_iov));
1137         rqst[2].rq_iov = close_iov;
1138         rqst[2].rq_nvec = 1;
1139         rc = SMB2_close_init(tcon, &rqst[2], COMPOUND_FID, COMPOUND_FID);
1140         smb2_set_related(&rqst[2]);
1141
1142         rc = compound_send_recv(xid, ses, flags, 3, rqst,
1143                                 resp_buftype, rsp_iov);
1144
1145  sea_exit:
1146         kfree(ea);
1147         kfree(utf16_path);
1148         SMB2_open_free(&rqst[0]);
1149         SMB2_set_info_free(&rqst[1]);
1150         SMB2_close_free(&rqst[2]);
1151         free_rsp_buf(resp_buftype[0], rsp_iov[0].iov_base);
1152         free_rsp_buf(resp_buftype[1], rsp_iov[1].iov_base);
1153         free_rsp_buf(resp_buftype[2], rsp_iov[2].iov_base);
1154         return rc;
1155 }
1156 #endif
1157
1158 static bool
1159 smb2_can_echo(struct TCP_Server_Info *server)
1160 {
1161         return server->echoes;
1162 }
1163
1164 static void
1165 smb2_clear_stats(struct cifs_tcon *tcon)
1166 {
1167         int i;
1168         for (i = 0; i < NUMBER_OF_SMB2_COMMANDS; i++) {
1169                 atomic_set(&tcon->stats.smb2_stats.smb2_com_sent[i], 0);
1170                 atomic_set(&tcon->stats.smb2_stats.smb2_com_failed[i], 0);
1171         }
1172 }
1173
1174 static void
1175 smb2_dump_share_caps(struct seq_file *m, struct cifs_tcon *tcon)
1176 {
1177         seq_puts(m, "\n\tShare Capabilities:");
1178         if (tcon->capabilities & SMB2_SHARE_CAP_DFS)
1179                 seq_puts(m, " DFS,");
1180         if (tcon->capabilities & SMB2_SHARE_CAP_CONTINUOUS_AVAILABILITY)
1181                 seq_puts(m, " CONTINUOUS AVAILABILITY,");
1182         if (tcon->capabilities & SMB2_SHARE_CAP_SCALEOUT)
1183                 seq_puts(m, " SCALEOUT,");
1184         if (tcon->capabilities & SMB2_SHARE_CAP_CLUSTER)
1185                 seq_puts(m, " CLUSTER,");
1186         if (tcon->capabilities & SMB2_SHARE_CAP_ASYMMETRIC)
1187                 seq_puts(m, " ASYMMETRIC,");
1188         if (tcon->capabilities == 0)
1189                 seq_puts(m, " None");
1190         if (tcon->ss_flags & SSINFO_FLAGS_ALIGNED_DEVICE)
1191                 seq_puts(m, " Aligned,");
1192         if (tcon->ss_flags & SSINFO_FLAGS_PARTITION_ALIGNED_ON_DEVICE)
1193                 seq_puts(m, " Partition Aligned,");
1194         if (tcon->ss_flags & SSINFO_FLAGS_NO_SEEK_PENALTY)
1195                 seq_puts(m, " SSD,");
1196         if (tcon->ss_flags & SSINFO_FLAGS_TRIM_ENABLED)
1197                 seq_puts(m, " TRIM-support,");
1198
1199         seq_printf(m, "\tShare Flags: 0x%x", tcon->share_flags);
1200         seq_printf(m, "\n\ttid: 0x%x", tcon->tid);
1201         if (tcon->perf_sector_size)
1202                 seq_printf(m, "\tOptimal sector size: 0x%x",
1203                            tcon->perf_sector_size);
1204         seq_printf(m, "\tMaximal Access: 0x%x", tcon->maximal_access);
1205 }
1206
1207 static void
1208 smb2_print_stats(struct seq_file *m, struct cifs_tcon *tcon)
1209 {
1210         atomic_t *sent = tcon->stats.smb2_stats.smb2_com_sent;
1211         atomic_t *failed = tcon->stats.smb2_stats.smb2_com_failed;
1212
1213         /*
1214          *  Can't display SMB2_NEGOTIATE, SESSION_SETUP, LOGOFF, CANCEL and ECHO
1215          *  totals (requests sent) since those SMBs are per-session not per tcon
1216          */
1217         seq_printf(m, "\nBytes read: %llu  Bytes written: %llu",
1218                    (long long)(tcon->bytes_read),
1219                    (long long)(tcon->bytes_written));
1220         seq_printf(m, "\nOpen files: %d total (local), %d open on server",
1221                    atomic_read(&tcon->num_local_opens),
1222                    atomic_read(&tcon->num_remote_opens));
1223         seq_printf(m, "\nTreeConnects: %d total %d failed",
1224                    atomic_read(&sent[SMB2_TREE_CONNECT_HE]),
1225                    atomic_read(&failed[SMB2_TREE_CONNECT_HE]));
1226         seq_printf(m, "\nTreeDisconnects: %d total %d failed",
1227                    atomic_read(&sent[SMB2_TREE_DISCONNECT_HE]),
1228                    atomic_read(&failed[SMB2_TREE_DISCONNECT_HE]));
1229         seq_printf(m, "\nCreates: %d total %d failed",
1230                    atomic_read(&sent[SMB2_CREATE_HE]),
1231                    atomic_read(&failed[SMB2_CREATE_HE]));
1232         seq_printf(m, "\nCloses: %d total %d failed",
1233                    atomic_read(&sent[SMB2_CLOSE_HE]),
1234                    atomic_read(&failed[SMB2_CLOSE_HE]));
1235         seq_printf(m, "\nFlushes: %d total %d failed",
1236                    atomic_read(&sent[SMB2_FLUSH_HE]),
1237                    atomic_read(&failed[SMB2_FLUSH_HE]));
1238         seq_printf(m, "\nReads: %d total %d failed",
1239                    atomic_read(&sent[SMB2_READ_HE]),
1240                    atomic_read(&failed[SMB2_READ_HE]));
1241         seq_printf(m, "\nWrites: %d total %d failed",
1242                    atomic_read(&sent[SMB2_WRITE_HE]),
1243                    atomic_read(&failed[SMB2_WRITE_HE]));
1244         seq_printf(m, "\nLocks: %d total %d failed",
1245                    atomic_read(&sent[SMB2_LOCK_HE]),
1246                    atomic_read(&failed[SMB2_LOCK_HE]));
1247         seq_printf(m, "\nIOCTLs: %d total %d failed",
1248                    atomic_read(&sent[SMB2_IOCTL_HE]),
1249                    atomic_read(&failed[SMB2_IOCTL_HE]));
1250         seq_printf(m, "\nQueryDirectories: %d total %d failed",
1251                    atomic_read(&sent[SMB2_QUERY_DIRECTORY_HE]),
1252                    atomic_read(&failed[SMB2_QUERY_DIRECTORY_HE]));
1253         seq_printf(m, "\nChangeNotifies: %d total %d failed",
1254                    atomic_read(&sent[SMB2_CHANGE_NOTIFY_HE]),
1255                    atomic_read(&failed[SMB2_CHANGE_NOTIFY_HE]));
1256         seq_printf(m, "\nQueryInfos: %d total %d failed",
1257                    atomic_read(&sent[SMB2_QUERY_INFO_HE]),
1258                    atomic_read(&failed[SMB2_QUERY_INFO_HE]));
1259         seq_printf(m, "\nSetInfos: %d total %d failed",
1260                    atomic_read(&sent[SMB2_SET_INFO_HE]),
1261                    atomic_read(&failed[SMB2_SET_INFO_HE]));
1262         seq_printf(m, "\nOplockBreaks: %d sent %d failed",
1263                    atomic_read(&sent[SMB2_OPLOCK_BREAK_HE]),
1264                    atomic_read(&failed[SMB2_OPLOCK_BREAK_HE]));
1265 }
1266
1267 static void
1268 smb2_set_fid(struct cifsFileInfo *cfile, struct cifs_fid *fid, __u32 oplock)
1269 {
1270         struct cifsInodeInfo *cinode = CIFS_I(d_inode(cfile->dentry));
1271         struct TCP_Server_Info *server = tlink_tcon(cfile->tlink)->ses->server;
1272
1273         cfile->fid.persistent_fid = fid->persistent_fid;
1274         cfile->fid.volatile_fid = fid->volatile_fid;
1275 #ifdef CONFIG_CIFS_DEBUG2
1276         cfile->fid.mid = fid->mid;
1277 #endif /* CIFS_DEBUG2 */
1278         server->ops->set_oplock_level(cinode, oplock, fid->epoch,
1279                                       &fid->purge_cache);
1280         cinode->can_cache_brlcks = CIFS_CACHE_WRITE(cinode);
1281         memcpy(cfile->fid.create_guid, fid->create_guid, 16);
1282 }
1283
1284 static void
1285 smb2_close_file(const unsigned int xid, struct cifs_tcon *tcon,
1286                 struct cifs_fid *fid)
1287 {
1288         SMB2_close(xid, tcon, fid->persistent_fid, fid->volatile_fid);
1289 }
1290
1291 static int
1292 SMB2_request_res_key(const unsigned int xid, struct cifs_tcon *tcon,
1293                      u64 persistent_fid, u64 volatile_fid,
1294                      struct copychunk_ioctl *pcchunk)
1295 {
1296         int rc;
1297         unsigned int ret_data_len;
1298         struct resume_key_req *res_key;
1299
1300         rc = SMB2_ioctl(xid, tcon, persistent_fid, volatile_fid,
1301                         FSCTL_SRV_REQUEST_RESUME_KEY, true /* is_fsctl */,
1302                         NULL, 0 /* no input */,
1303                         (char **)&res_key, &ret_data_len);
1304
1305         if (rc) {
1306                 cifs_dbg(VFS, "refcpy ioctl error %d getting resume key\n", rc);
1307                 goto req_res_key_exit;
1308         }
1309         if (ret_data_len < sizeof(struct resume_key_req)) {
1310                 cifs_dbg(VFS, "Invalid refcopy resume key length\n");
1311                 rc = -EINVAL;
1312                 goto req_res_key_exit;
1313         }
1314         memcpy(pcchunk->SourceKey, res_key->ResumeKey, COPY_CHUNK_RES_KEY_SIZE);
1315
1316 req_res_key_exit:
1317         kfree(res_key);
1318         return rc;
1319 }
1320
1321 static int
1322 smb2_ioctl_query_info(const unsigned int xid,
1323                       struct cifs_tcon *tcon,
1324                       __le16 *path, int is_dir,
1325                       unsigned long p)
1326 {
1327         struct cifs_ses *ses = tcon->ses;
1328         char __user *arg = (char __user *)p;
1329         struct smb_query_info qi;
1330         struct smb_query_info __user *pqi;
1331         int rc = 0;
1332         int flags = 0;
1333         struct smb2_query_info_rsp *rsp = NULL;
1334         void *buffer = NULL;
1335         struct smb_rqst rqst[3];
1336         int resp_buftype[3];
1337         struct kvec rsp_iov[3];
1338         struct kvec open_iov[SMB2_CREATE_IOV_SIZE];
1339         struct cifs_open_parms oparms;
1340         u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
1341         struct cifs_fid fid;
1342         struct kvec qi_iov[1];
1343         struct kvec close_iov[1];
1344
1345         memset(rqst, 0, sizeof(rqst));
1346         resp_buftype[0] = resp_buftype[1] = resp_buftype[2] = CIFS_NO_BUFFER;
1347         memset(rsp_iov, 0, sizeof(rsp_iov));
1348
1349         if (copy_from_user(&qi, arg, sizeof(struct smb_query_info)))
1350                 return -EFAULT;
1351
1352         if (qi.output_buffer_length > 1024)
1353                 return -EINVAL;
1354
1355         if (!ses || !(ses->server))
1356                 return -EIO;
1357
1358         if (smb3_encryption_required(tcon))
1359                 flags |= CIFS_TRANSFORM_REQ;
1360
1361         buffer = kmalloc(qi.output_buffer_length, GFP_KERNEL);
1362         if (buffer == NULL)
1363                 return -ENOMEM;
1364
1365         if (copy_from_user(buffer, arg + sizeof(struct smb_query_info),
1366                            qi.output_buffer_length)) {
1367                 rc = -EFAULT;
1368                 goto iqinf_exit;
1369         }
1370
1371         /* Open */
1372         memset(&open_iov, 0, sizeof(open_iov));
1373         rqst[0].rq_iov = open_iov;
1374         rqst[0].rq_nvec = SMB2_CREATE_IOV_SIZE;
1375
1376         memset(&oparms, 0, sizeof(oparms));
1377         oparms.tcon = tcon;
1378         oparms.desired_access = FILE_READ_ATTRIBUTES | READ_CONTROL;
1379         oparms.disposition = FILE_OPEN;
1380         if (is_dir)
1381                 oparms.create_options = CREATE_NOT_FILE;
1382         else
1383                 oparms.create_options = CREATE_NOT_DIR;
1384         oparms.fid = &fid;
1385         oparms.reconnect = false;
1386
1387         rc = SMB2_open_init(tcon, &rqst[0], &oplock, &oparms, path);
1388         if (rc)
1389                 goto iqinf_exit;
1390         smb2_set_next_command(tcon, &rqst[0]);
1391
1392         /* Query */
1393         if (qi.flags & PASSTHRU_FSCTL) {
1394                 /* Can eventually relax perm check since server enforces too */
1395                 if (!capable(CAP_SYS_ADMIN))
1396                         rc = -EPERM;
1397                 else  /* TBD: Add code to compound FSCTL */
1398                         rc = -EOPNOTSUPP;
1399         } else if (qi.flags == PASSTHRU_QUERY_INFO) {
1400                 memset(&qi_iov, 0, sizeof(qi_iov));
1401                 rqst[1].rq_iov = qi_iov;
1402                 rqst[1].rq_nvec = 1;
1403
1404                 rc = SMB2_query_info_init(tcon, &rqst[1], COMPOUND_FID,
1405                                   COMPOUND_FID, qi.file_info_class,
1406                                   qi.info_type, qi.additional_information,
1407                                   qi.input_buffer_length,
1408                                   qi.output_buffer_length, buffer);
1409         } else { /* unknown flags */
1410                 cifs_dbg(VFS, "invalid passthru query flags: 0x%x\n", qi.flags);
1411                 rc = -EINVAL;
1412         }
1413
1414         if (rc)
1415                 goto iqinf_exit;
1416         smb2_set_next_command(tcon, &rqst[1]);
1417         smb2_set_related(&rqst[1]);
1418
1419         /* Close */
1420         memset(&close_iov, 0, sizeof(close_iov));
1421         rqst[2].rq_iov = close_iov;
1422         rqst[2].rq_nvec = 1;
1423
1424         rc = SMB2_close_init(tcon, &rqst[2], COMPOUND_FID, COMPOUND_FID);
1425         if (rc)
1426                 goto iqinf_exit;
1427         smb2_set_related(&rqst[2]);
1428
1429         rc = compound_send_recv(xid, ses, flags, 3, rqst,
1430                                 resp_buftype, rsp_iov);
1431         if (rc)
1432                 goto iqinf_exit;
1433         pqi = (struct smb_query_info __user *)arg;
1434         rsp = (struct smb2_query_info_rsp *)rsp_iov[1].iov_base;
1435         if (le32_to_cpu(rsp->OutputBufferLength) < qi.input_buffer_length)
1436                 qi.input_buffer_length = le32_to_cpu(rsp->OutputBufferLength);
1437         if (copy_to_user(&pqi->input_buffer_length, &qi.input_buffer_length,
1438                          sizeof(qi.input_buffer_length))) {
1439                 rc = -EFAULT;
1440                 goto iqinf_exit;
1441         }
1442         if (copy_to_user(pqi + 1, rsp->Buffer, qi.input_buffer_length)) {
1443                 rc = -EFAULT;
1444                 goto iqinf_exit;
1445         }
1446
1447  iqinf_exit:
1448         kfree(buffer);
1449         SMB2_open_free(&rqst[0]);
1450         SMB2_query_info_free(&rqst[1]);
1451         SMB2_close_free(&rqst[2]);
1452         free_rsp_buf(resp_buftype[0], rsp_iov[0].iov_base);
1453         free_rsp_buf(resp_buftype[1], rsp_iov[1].iov_base);
1454         free_rsp_buf(resp_buftype[2], rsp_iov[2].iov_base);
1455         return rc;
1456 }
1457
1458 static ssize_t
1459 smb2_copychunk_range(const unsigned int xid,
1460                         struct cifsFileInfo *srcfile,
1461                         struct cifsFileInfo *trgtfile, u64 src_off,
1462                         u64 len, u64 dest_off)
1463 {
1464         int rc;
1465         unsigned int ret_data_len;
1466         struct copychunk_ioctl *pcchunk;
1467         struct copychunk_ioctl_rsp *retbuf = NULL;
1468         struct cifs_tcon *tcon;
1469         int chunks_copied = 0;
1470         bool chunk_sizes_updated = false;
1471         ssize_t bytes_written, total_bytes_written = 0;
1472
1473         pcchunk = kmalloc(sizeof(struct copychunk_ioctl), GFP_KERNEL);
1474
1475         if (pcchunk == NULL)
1476                 return -ENOMEM;
1477
1478         cifs_dbg(FYI, "in smb2_copychunk_range - about to call request res key\n");
1479         /* Request a key from the server to identify the source of the copy */
1480         rc = SMB2_request_res_key(xid, tlink_tcon(srcfile->tlink),
1481                                 srcfile->fid.persistent_fid,
1482                                 srcfile->fid.volatile_fid, pcchunk);
1483
1484         /* Note: request_res_key sets res_key null only if rc !=0 */
1485         if (rc)
1486                 goto cchunk_out;
1487
1488         /* For now array only one chunk long, will make more flexible later */
1489         pcchunk->ChunkCount = cpu_to_le32(1);
1490         pcchunk->Reserved = 0;
1491         pcchunk->Reserved2 = 0;
1492
1493         tcon = tlink_tcon(trgtfile->tlink);
1494
1495         while (len > 0) {
1496                 pcchunk->SourceOffset = cpu_to_le64(src_off);
1497                 pcchunk->TargetOffset = cpu_to_le64(dest_off);
1498                 pcchunk->Length =
1499                         cpu_to_le32(min_t(u32, len, tcon->max_bytes_chunk));
1500
1501                 /* Request server copy to target from src identified by key */
1502                 rc = SMB2_ioctl(xid, tcon, trgtfile->fid.persistent_fid,
1503                         trgtfile->fid.volatile_fid, FSCTL_SRV_COPYCHUNK_WRITE,
1504                         true /* is_fsctl */, (char *)pcchunk,
1505                         sizeof(struct copychunk_ioctl), (char **)&retbuf,
1506                         &ret_data_len);
1507                 if (rc == 0) {
1508                         if (ret_data_len !=
1509                                         sizeof(struct copychunk_ioctl_rsp)) {
1510                                 cifs_dbg(VFS, "invalid cchunk response size\n");
1511                                 rc = -EIO;
1512                                 goto cchunk_out;
1513                         }
1514                         if (retbuf->TotalBytesWritten == 0) {
1515                                 cifs_dbg(FYI, "no bytes copied\n");
1516                                 rc = -EIO;
1517                                 goto cchunk_out;
1518                         }
1519                         /*
1520                          * Check if server claimed to write more than we asked
1521                          */
1522                         if (le32_to_cpu(retbuf->TotalBytesWritten) >
1523                             le32_to_cpu(pcchunk->Length)) {
1524                                 cifs_dbg(VFS, "invalid copy chunk response\n");
1525                                 rc = -EIO;
1526                                 goto cchunk_out;
1527                         }
1528                         if (le32_to_cpu(retbuf->ChunksWritten) != 1) {
1529                                 cifs_dbg(VFS, "invalid num chunks written\n");
1530                                 rc = -EIO;
1531                                 goto cchunk_out;
1532                         }
1533                         chunks_copied++;
1534
1535                         bytes_written = le32_to_cpu(retbuf->TotalBytesWritten);
1536                         src_off += bytes_written;
1537                         dest_off += bytes_written;
1538                         len -= bytes_written;
1539                         total_bytes_written += bytes_written;
1540
1541                         cifs_dbg(FYI, "Chunks %d PartialChunk %d Total %zu\n",
1542                                 le32_to_cpu(retbuf->ChunksWritten),
1543                                 le32_to_cpu(retbuf->ChunkBytesWritten),
1544                                 bytes_written);
1545                 } else if (rc == -EINVAL) {
1546                         if (ret_data_len != sizeof(struct copychunk_ioctl_rsp))
1547                                 goto cchunk_out;
1548
1549                         cifs_dbg(FYI, "MaxChunks %d BytesChunk %d MaxCopy %d\n",
1550                                 le32_to_cpu(retbuf->ChunksWritten),
1551                                 le32_to_cpu(retbuf->ChunkBytesWritten),
1552                                 le32_to_cpu(retbuf->TotalBytesWritten));
1553
1554                         /*
1555                          * Check if this is the first request using these sizes,
1556                          * (ie check if copy succeed once with original sizes
1557                          * and check if the server gave us different sizes after
1558                          * we already updated max sizes on previous request).
1559                          * if not then why is the server returning an error now
1560                          */
1561                         if ((chunks_copied != 0) || chunk_sizes_updated)
1562                                 goto cchunk_out;
1563
1564                         /* Check that server is not asking us to grow size */
1565                         if (le32_to_cpu(retbuf->ChunkBytesWritten) <
1566                                         tcon->max_bytes_chunk)
1567                                 tcon->max_bytes_chunk =
1568                                         le32_to_cpu(retbuf->ChunkBytesWritten);
1569                         else
1570                                 goto cchunk_out; /* server gave us bogus size */
1571
1572                         /* No need to change MaxChunks since already set to 1 */
1573                         chunk_sizes_updated = true;
1574                 } else
1575                         goto cchunk_out;
1576         }
1577
1578 cchunk_out:
1579         kfree(pcchunk);
1580         kfree(retbuf);
1581         if (rc)
1582                 return rc;
1583         else
1584                 return total_bytes_written;
1585 }
1586
1587 static int
1588 smb2_flush_file(const unsigned int xid, struct cifs_tcon *tcon,
1589                 struct cifs_fid *fid)
1590 {
1591         return SMB2_flush(xid, tcon, fid->persistent_fid, fid->volatile_fid);
1592 }
1593
1594 static unsigned int
1595 smb2_read_data_offset(char *buf)
1596 {
1597         struct smb2_read_rsp *rsp = (struct smb2_read_rsp *)buf;
1598         return rsp->DataOffset;
1599 }
1600
1601 static unsigned int
1602 smb2_read_data_length(char *buf, bool in_remaining)
1603 {
1604         struct smb2_read_rsp *rsp = (struct smb2_read_rsp *)buf;
1605
1606         if (in_remaining)
1607                 return le32_to_cpu(rsp->DataRemaining);
1608
1609         return le32_to_cpu(rsp->DataLength);
1610 }
1611
1612
1613 static int
1614 smb2_sync_read(const unsigned int xid, struct cifs_fid *pfid,
1615                struct cifs_io_parms *parms, unsigned int *bytes_read,
1616                char **buf, int *buf_type)
1617 {
1618         parms->persistent_fid = pfid->persistent_fid;
1619         parms->volatile_fid = pfid->volatile_fid;
1620         return SMB2_read(xid, parms, bytes_read, buf, buf_type);
1621 }
1622
1623 static int
1624 smb2_sync_write(const unsigned int xid, struct cifs_fid *pfid,
1625                 struct cifs_io_parms *parms, unsigned int *written,
1626                 struct kvec *iov, unsigned long nr_segs)
1627 {
1628
1629         parms->persistent_fid = pfid->persistent_fid;
1630         parms->volatile_fid = pfid->volatile_fid;
1631         return SMB2_write(xid, parms, written, iov, nr_segs);
1632 }
1633
1634 /* Set or clear the SPARSE_FILE attribute based on value passed in setsparse */
1635 static bool smb2_set_sparse(const unsigned int xid, struct cifs_tcon *tcon,
1636                 struct cifsFileInfo *cfile, struct inode *inode, __u8 setsparse)
1637 {
1638         struct cifsInodeInfo *cifsi;
1639         int rc;
1640
1641         cifsi = CIFS_I(inode);
1642
1643         /* if file already sparse don't bother setting sparse again */
1644         if ((cifsi->cifsAttrs & FILE_ATTRIBUTE_SPARSE_FILE) && setsparse)
1645                 return true; /* already sparse */
1646
1647         if (!(cifsi->cifsAttrs & FILE_ATTRIBUTE_SPARSE_FILE) && !setsparse)
1648                 return true; /* already not sparse */
1649
1650         /*
1651          * Can't check for sparse support on share the usual way via the
1652          * FS attribute info (FILE_SUPPORTS_SPARSE_FILES) on the share
1653          * since Samba server doesn't set the flag on the share, yet
1654          * supports the set sparse FSCTL and returns sparse correctly
1655          * in the file attributes. If we fail setting sparse though we
1656          * mark that server does not support sparse files for this share
1657          * to avoid repeatedly sending the unsupported fsctl to server
1658          * if the file is repeatedly extended.
1659          */
1660         if (tcon->broken_sparse_sup)
1661                 return false;
1662
1663         rc = SMB2_ioctl(xid, tcon, cfile->fid.persistent_fid,
1664                         cfile->fid.volatile_fid, FSCTL_SET_SPARSE,
1665                         true /* is_fctl */,
1666                         &setsparse, 1, NULL, NULL);
1667         if (rc) {
1668                 tcon->broken_sparse_sup = true;
1669                 cifs_dbg(FYI, "set sparse rc = %d\n", rc);
1670                 return false;
1671         }
1672
1673         if (setsparse)
1674                 cifsi->cifsAttrs |= FILE_ATTRIBUTE_SPARSE_FILE;
1675         else
1676                 cifsi->cifsAttrs &= (~FILE_ATTRIBUTE_SPARSE_FILE);
1677
1678         return true;
1679 }
1680
1681 static int
1682 smb2_set_file_size(const unsigned int xid, struct cifs_tcon *tcon,
1683                    struct cifsFileInfo *cfile, __u64 size, bool set_alloc)
1684 {
1685         __le64 eof = cpu_to_le64(size);
1686         struct inode *inode;
1687
1688         /*
1689          * If extending file more than one page make sparse. Many Linux fs
1690          * make files sparse by default when extending via ftruncate
1691          */
1692         inode = d_inode(cfile->dentry);
1693
1694         if (!set_alloc && (size > inode->i_size + 8192)) {
1695                 __u8 set_sparse = 1;
1696
1697                 /* whether set sparse succeeds or not, extend the file */
1698                 smb2_set_sparse(xid, tcon, cfile, inode, set_sparse);
1699         }
1700
1701         return SMB2_set_eof(xid, tcon, cfile->fid.persistent_fid,
1702                             cfile->fid.volatile_fid, cfile->pid, &eof);
1703 }
1704
1705 static int
1706 smb2_duplicate_extents(const unsigned int xid,
1707                         struct cifsFileInfo *srcfile,
1708                         struct cifsFileInfo *trgtfile, u64 src_off,
1709                         u64 len, u64 dest_off)
1710 {
1711         int rc;
1712         unsigned int ret_data_len;
1713         struct duplicate_extents_to_file dup_ext_buf;
1714         struct cifs_tcon *tcon = tlink_tcon(trgtfile->tlink);
1715
1716         /* server fileays advertise duplicate extent support with this flag */
1717         if ((le32_to_cpu(tcon->fsAttrInfo.Attributes) &
1718              FILE_SUPPORTS_BLOCK_REFCOUNTING) == 0)
1719                 return -EOPNOTSUPP;
1720
1721         dup_ext_buf.VolatileFileHandle = srcfile->fid.volatile_fid;
1722         dup_ext_buf.PersistentFileHandle = srcfile->fid.persistent_fid;
1723         dup_ext_buf.SourceFileOffset = cpu_to_le64(src_off);
1724         dup_ext_buf.TargetFileOffset = cpu_to_le64(dest_off);
1725         dup_ext_buf.ByteCount = cpu_to_le64(len);
1726         cifs_dbg(FYI, "duplicate extents: src off %lld dst off %lld len %lld",
1727                 src_off, dest_off, len);
1728
1729         rc = smb2_set_file_size(xid, tcon, trgtfile, dest_off + len, false);
1730         if (rc)
1731                 goto duplicate_extents_out;
1732
1733         rc = SMB2_ioctl(xid, tcon, trgtfile->fid.persistent_fid,
1734                         trgtfile->fid.volatile_fid,
1735                         FSCTL_DUPLICATE_EXTENTS_TO_FILE,
1736                         true /* is_fsctl */,
1737                         (char *)&dup_ext_buf,
1738                         sizeof(struct duplicate_extents_to_file),
1739                         NULL,
1740                         &ret_data_len);
1741
1742         if (ret_data_len > 0)
1743                 cifs_dbg(FYI, "non-zero response length in duplicate extents");
1744
1745 duplicate_extents_out:
1746         return rc;
1747 }
1748
1749 static int
1750 smb2_set_compression(const unsigned int xid, struct cifs_tcon *tcon,
1751                    struct cifsFileInfo *cfile)
1752 {
1753         return SMB2_set_compression(xid, tcon, cfile->fid.persistent_fid,
1754                             cfile->fid.volatile_fid);
1755 }
1756
1757 static int
1758 smb3_set_integrity(const unsigned int xid, struct cifs_tcon *tcon,
1759                    struct cifsFileInfo *cfile)
1760 {
1761         struct fsctl_set_integrity_information_req integr_info;
1762         unsigned int ret_data_len;
1763
1764         integr_info.ChecksumAlgorithm = cpu_to_le16(CHECKSUM_TYPE_UNCHANGED);
1765         integr_info.Flags = 0;
1766         integr_info.Reserved = 0;
1767
1768         return SMB2_ioctl(xid, tcon, cfile->fid.persistent_fid,
1769                         cfile->fid.volatile_fid,
1770                         FSCTL_SET_INTEGRITY_INFORMATION,
1771                         true /* is_fsctl */,
1772                         (char *)&integr_info,
1773                         sizeof(struct fsctl_set_integrity_information_req),
1774                         NULL,
1775                         &ret_data_len);
1776
1777 }
1778
1779 /* GMT Token is @GMT-YYYY.MM.DD-HH.MM.SS Unicode which is 48 bytes + null */
1780 #define GMT_TOKEN_SIZE 50
1781
1782 /*
1783  * Input buffer contains (empty) struct smb_snapshot array with size filled in
1784  * For output see struct SRV_SNAPSHOT_ARRAY in MS-SMB2 section 2.2.32.2
1785  */
1786 static int
1787 smb3_enum_snapshots(const unsigned int xid, struct cifs_tcon *tcon,
1788                    struct cifsFileInfo *cfile, void __user *ioc_buf)
1789 {
1790         char *retbuf = NULL;
1791         unsigned int ret_data_len = 0;
1792         int rc;
1793         struct smb_snapshot_array snapshot_in;
1794
1795         rc = SMB2_ioctl(xid, tcon, cfile->fid.persistent_fid,
1796                         cfile->fid.volatile_fid,
1797                         FSCTL_SRV_ENUMERATE_SNAPSHOTS,
1798                         true /* is_fsctl */,
1799                         NULL, 0 /* no input data */,
1800                         (char **)&retbuf,
1801                         &ret_data_len);
1802         cifs_dbg(FYI, "enum snaphots ioctl returned %d and ret buflen is %d\n",
1803                         rc, ret_data_len);
1804         if (rc)
1805                 return rc;
1806
1807         if (ret_data_len && (ioc_buf != NULL) && (retbuf != NULL)) {
1808                 /* Fixup buffer */
1809                 if (copy_from_user(&snapshot_in, ioc_buf,
1810                     sizeof(struct smb_snapshot_array))) {
1811                         rc = -EFAULT;
1812                         kfree(retbuf);
1813                         return rc;
1814                 }
1815
1816                 /*
1817                  * Check for min size, ie not large enough to fit even one GMT
1818                  * token (snapshot).  On the first ioctl some users may pass in
1819                  * smaller size (or zero) to simply get the size of the array
1820                  * so the user space caller can allocate sufficient memory
1821                  * and retry the ioctl again with larger array size sufficient
1822                  * to hold all of the snapshot GMT tokens on the second try.
1823                  */
1824                 if (snapshot_in.snapshot_array_size < GMT_TOKEN_SIZE)
1825                         ret_data_len = sizeof(struct smb_snapshot_array);
1826
1827                 /*
1828                  * We return struct SRV_SNAPSHOT_ARRAY, followed by
1829                  * the snapshot array (of 50 byte GMT tokens) each
1830                  * representing an available previous version of the data
1831                  */
1832                 if (ret_data_len > (snapshot_in.snapshot_array_size +
1833                                         sizeof(struct smb_snapshot_array)))
1834                         ret_data_len = snapshot_in.snapshot_array_size +
1835                                         sizeof(struct smb_snapshot_array);
1836
1837                 if (copy_to_user(ioc_buf, retbuf, ret_data_len))
1838                         rc = -EFAULT;
1839         }
1840
1841         kfree(retbuf);
1842         return rc;
1843 }
1844
1845 static int
1846 smb2_query_dir_first(const unsigned int xid, struct cifs_tcon *tcon,
1847                      const char *path, struct cifs_sb_info *cifs_sb,
1848                      struct cifs_fid *fid, __u16 search_flags,
1849                      struct cifs_search_info *srch_inf)
1850 {
1851         __le16 *utf16_path;
1852         int rc;
1853         __u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
1854         struct cifs_open_parms oparms;
1855
1856         utf16_path = cifs_convert_path_to_utf16(path, cifs_sb);
1857         if (!utf16_path)
1858                 return -ENOMEM;
1859
1860         oparms.tcon = tcon;
1861         oparms.desired_access = FILE_READ_ATTRIBUTES | FILE_READ_DATA;
1862         oparms.disposition = FILE_OPEN;
1863         if (backup_cred(cifs_sb))
1864                 oparms.create_options = CREATE_OPEN_BACKUP_INTENT;
1865         else
1866                 oparms.create_options = 0;
1867         oparms.fid = fid;
1868         oparms.reconnect = false;
1869
1870         rc = SMB2_open(xid, &oparms, utf16_path, &oplock, NULL, NULL, NULL);
1871         kfree(utf16_path);
1872         if (rc) {
1873                 cifs_dbg(FYI, "open dir failed rc=%d\n", rc);
1874                 return rc;
1875         }
1876
1877         srch_inf->entries_in_buffer = 0;
1878         srch_inf->index_of_last_entry = 2;
1879
1880         rc = SMB2_query_directory(xid, tcon, fid->persistent_fid,
1881                                   fid->volatile_fid, 0, srch_inf);
1882         if (rc) {
1883                 cifs_dbg(FYI, "query directory failed rc=%d\n", rc);
1884                 SMB2_close(xid, tcon, fid->persistent_fid, fid->volatile_fid);
1885         }
1886         return rc;
1887 }
1888
1889 static int
1890 smb2_query_dir_next(const unsigned int xid, struct cifs_tcon *tcon,
1891                     struct cifs_fid *fid, __u16 search_flags,
1892                     struct cifs_search_info *srch_inf)
1893 {
1894         return SMB2_query_directory(xid, tcon, fid->persistent_fid,
1895                                     fid->volatile_fid, 0, srch_inf);
1896 }
1897
1898 static int
1899 smb2_close_dir(const unsigned int xid, struct cifs_tcon *tcon,
1900                struct cifs_fid *fid)
1901 {
1902         return SMB2_close(xid, tcon, fid->persistent_fid, fid->volatile_fid);
1903 }
1904
1905 /*
1906 * If we negotiate SMB2 protocol and get STATUS_PENDING - update
1907 * the number of credits and return true. Otherwise - return false.
1908 */
1909 static bool
1910 smb2_is_status_pending(char *buf, struct TCP_Server_Info *server)
1911 {
1912         struct smb2_sync_hdr *shdr = (struct smb2_sync_hdr *)buf;
1913
1914         if (shdr->Status != STATUS_PENDING)
1915                 return false;
1916
1917         if (shdr->CreditRequest) {
1918                 spin_lock(&server->req_lock);
1919                 server->credits += le16_to_cpu(shdr->CreditRequest);
1920                 spin_unlock(&server->req_lock);
1921                 wake_up(&server->request_q);
1922         }
1923
1924         return true;
1925 }
1926
1927 static bool
1928 smb2_is_session_expired(char *buf)
1929 {
1930         struct smb2_sync_hdr *shdr = (struct smb2_sync_hdr *)buf;
1931
1932         if (shdr->Status != STATUS_NETWORK_SESSION_EXPIRED &&
1933             shdr->Status != STATUS_USER_SESSION_DELETED)
1934                 return false;
1935
1936         trace_smb3_ses_expired(shdr->TreeId, shdr->SessionId,
1937                                le16_to_cpu(shdr->Command),
1938                                le64_to_cpu(shdr->MessageId));
1939         cifs_dbg(FYI, "Session expired or deleted\n");
1940
1941         return true;
1942 }
1943
1944 static int
1945 smb2_oplock_response(struct cifs_tcon *tcon, struct cifs_fid *fid,
1946                      struct cifsInodeInfo *cinode)
1947 {
1948         if (tcon->ses->server->capabilities & SMB2_GLOBAL_CAP_LEASING)
1949                 return SMB2_lease_break(0, tcon, cinode->lease_key,
1950                                         smb2_get_lease_state(cinode));
1951
1952         return SMB2_oplock_break(0, tcon, fid->persistent_fid,
1953                                  fid->volatile_fid,
1954                                  CIFS_CACHE_READ(cinode) ? 1 : 0);
1955 }
1956
1957 void
1958 smb2_set_related(struct smb_rqst *rqst)
1959 {
1960         struct smb2_sync_hdr *shdr;
1961
1962         shdr = (struct smb2_sync_hdr *)(rqst->rq_iov[0].iov_base);
1963         shdr->Flags |= SMB2_FLAGS_RELATED_OPERATIONS;
1964 }
1965
1966 char smb2_padding[7] = {0, 0, 0, 0, 0, 0, 0};
1967
1968 void
1969 smb2_set_next_command(struct cifs_tcon *tcon, struct smb_rqst *rqst)
1970 {
1971         struct smb2_sync_hdr *shdr;
1972         struct cifs_ses *ses = tcon->ses;
1973         struct TCP_Server_Info *server = ses->server;
1974         unsigned long len = smb_rqst_len(server, rqst);
1975         int i, num_padding;
1976
1977         /* SMB headers in a compound are 8 byte aligned. */
1978
1979         /* No padding needed */
1980         if (!(len & 7))
1981                 goto finished;
1982
1983         num_padding = 8 - (len & 7);
1984         if (!smb3_encryption_required(tcon)) {
1985                 /*
1986                  * If we do not have encryption then we can just add an extra
1987                  * iov for the padding.
1988                  */
1989                 rqst->rq_iov[rqst->rq_nvec].iov_base = smb2_padding;
1990                 rqst->rq_iov[rqst->rq_nvec].iov_len = num_padding;
1991                 rqst->rq_nvec++;
1992                 len += num_padding;
1993         } else {
1994                 /*
1995                  * We can not add a small padding iov for the encryption case
1996                  * because the encryption framework can not handle the padding
1997                  * iovs.
1998                  * We have to flatten this into a single buffer and add
1999                  * the padding to it.
2000                  */
2001                 for (i = 1; i < rqst->rq_nvec; i++) {
2002                         memcpy(rqst->rq_iov[0].iov_base +
2003                                rqst->rq_iov[0].iov_len,
2004                                rqst->rq_iov[i].iov_base,
2005                                rqst->rq_iov[i].iov_len);
2006                         rqst->rq_iov[0].iov_len += rqst->rq_iov[i].iov_len;
2007                 }
2008                 memset(rqst->rq_iov[0].iov_base + rqst->rq_iov[0].iov_len,
2009                        0, num_padding);
2010                 rqst->rq_iov[0].iov_len += num_padding;
2011                 len += num_padding;
2012                 rqst->rq_nvec = 1;
2013         }
2014
2015  finished:
2016         shdr = (struct smb2_sync_hdr *)(rqst->rq_iov[0].iov_base);
2017         shdr->NextCommand = cpu_to_le32(len);
2018 }
2019
2020 /*
2021  * Passes the query info response back to the caller on success.
2022  * Caller need to free this with free_rsp_buf().
2023  */
2024 int
2025 smb2_query_info_compound(const unsigned int xid, struct cifs_tcon *tcon,
2026                          __le16 *utf16_path, u32 desired_access,
2027                          u32 class, u32 type, u32 output_len,
2028                          struct kvec *rsp, int *buftype,
2029                          struct cifs_sb_info *cifs_sb)
2030 {
2031         struct cifs_ses *ses = tcon->ses;
2032         int flags = 0;
2033         struct smb_rqst rqst[3];
2034         int resp_buftype[3];
2035         struct kvec rsp_iov[3];
2036         struct kvec open_iov[SMB2_CREATE_IOV_SIZE];
2037         struct kvec qi_iov[1];
2038         struct kvec close_iov[1];
2039         u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
2040         struct cifs_open_parms oparms;
2041         struct cifs_fid fid;
2042         int rc;
2043
2044         if (smb3_encryption_required(tcon))
2045                 flags |= CIFS_TRANSFORM_REQ;
2046
2047         memset(rqst, 0, sizeof(rqst));
2048         resp_buftype[0] = resp_buftype[1] = resp_buftype[2] = CIFS_NO_BUFFER;
2049         memset(rsp_iov, 0, sizeof(rsp_iov));
2050
2051         memset(&open_iov, 0, sizeof(open_iov));
2052         rqst[0].rq_iov = open_iov;
2053         rqst[0].rq_nvec = SMB2_CREATE_IOV_SIZE;
2054
2055         oparms.tcon = tcon;
2056         oparms.desired_access = desired_access;
2057         oparms.disposition = FILE_OPEN;
2058         if (cifs_sb && backup_cred(cifs_sb))
2059                 oparms.create_options = CREATE_OPEN_BACKUP_INTENT;
2060         else
2061                 oparms.create_options = 0;
2062         oparms.fid = &fid;
2063         oparms.reconnect = false;
2064
2065         rc = SMB2_open_init(tcon, &rqst[0], &oplock, &oparms, utf16_path);
2066         if (rc)
2067                 goto qic_exit;
2068         smb2_set_next_command(tcon, &rqst[0]);
2069
2070         memset(&qi_iov, 0, sizeof(qi_iov));
2071         rqst[1].rq_iov = qi_iov;
2072         rqst[1].rq_nvec = 1;
2073
2074         rc = SMB2_query_info_init(tcon, &rqst[1], COMPOUND_FID, COMPOUND_FID,
2075                                   class, type, 0,
2076                                   output_len, 0,
2077                                   NULL);
2078         if (rc)
2079                 goto qic_exit;
2080         smb2_set_next_command(tcon, &rqst[1]);
2081         smb2_set_related(&rqst[1]);
2082
2083         memset(&close_iov, 0, sizeof(close_iov));
2084         rqst[2].rq_iov = close_iov;
2085         rqst[2].rq_nvec = 1;
2086
2087         rc = SMB2_close_init(tcon, &rqst[2], COMPOUND_FID, COMPOUND_FID);
2088         if (rc)
2089                 goto qic_exit;
2090         smb2_set_related(&rqst[2]);
2091
2092         rc = compound_send_recv(xid, ses, flags, 3, rqst,
2093                                 resp_buftype, rsp_iov);
2094         if (rc) {
2095                 free_rsp_buf(resp_buftype[1], rsp_iov[1].iov_base);
2096                 goto qic_exit;
2097         }
2098         *rsp = rsp_iov[1];
2099         *buftype = resp_buftype[1];
2100
2101  qic_exit:
2102         SMB2_open_free(&rqst[0]);
2103         SMB2_query_info_free(&rqst[1]);
2104         SMB2_close_free(&rqst[2]);
2105         free_rsp_buf(resp_buftype[0], rsp_iov[0].iov_base);
2106         free_rsp_buf(resp_buftype[2], rsp_iov[2].iov_base);
2107         return rc;
2108 }
2109
2110 static int
2111 smb2_queryfs(const unsigned int xid, struct cifs_tcon *tcon,
2112              struct kstatfs *buf)
2113 {
2114         struct smb2_query_info_rsp *rsp;
2115         struct smb2_fs_full_size_info *info = NULL;
2116         __le16 utf16_path = 0; /* Null - open root of share */
2117         struct kvec rsp_iov = {NULL, 0};
2118         int buftype = CIFS_NO_BUFFER;
2119         int rc;
2120
2121
2122         rc = smb2_query_info_compound(xid, tcon, &utf16_path,
2123                                       FILE_READ_ATTRIBUTES,
2124                                       FS_FULL_SIZE_INFORMATION,
2125                                       SMB2_O_INFO_FILESYSTEM,
2126                                       sizeof(struct smb2_fs_full_size_info),
2127                                       &rsp_iov, &buftype, NULL);
2128         if (rc)
2129                 goto qfs_exit;
2130
2131         rsp = (struct smb2_query_info_rsp *)rsp_iov.iov_base;
2132         buf->f_type = SMB2_MAGIC_NUMBER;
2133         info = (struct smb2_fs_full_size_info *)(
2134                 le16_to_cpu(rsp->OutputBufferOffset) + (char *)rsp);
2135         rc = smb2_validate_iov(le16_to_cpu(rsp->OutputBufferOffset),
2136                                le32_to_cpu(rsp->OutputBufferLength),
2137                                &rsp_iov,
2138                                sizeof(struct smb2_fs_full_size_info));
2139         if (!rc)
2140                 smb2_copy_fs_info_to_kstatfs(info, buf);
2141
2142 qfs_exit:
2143         free_rsp_buf(buftype, rsp_iov.iov_base);
2144         return rc;
2145 }
2146
2147 static int
2148 smb311_queryfs(const unsigned int xid, struct cifs_tcon *tcon,
2149              struct kstatfs *buf)
2150 {
2151         int rc;
2152         __le16 srch_path = 0; /* Null - open root of share */
2153         u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
2154         struct cifs_open_parms oparms;
2155         struct cifs_fid fid;
2156
2157         if (!tcon->posix_extensions)
2158                 return smb2_queryfs(xid, tcon, buf);
2159
2160         oparms.tcon = tcon;
2161         oparms.desired_access = FILE_READ_ATTRIBUTES;
2162         oparms.disposition = FILE_OPEN;
2163         oparms.create_options = 0;
2164         oparms.fid = &fid;
2165         oparms.reconnect = false;
2166
2167         rc = SMB2_open(xid, &oparms, &srch_path, &oplock, NULL, NULL, NULL);
2168         if (rc)
2169                 return rc;
2170
2171         rc = SMB311_posix_qfs_info(xid, tcon, fid.persistent_fid,
2172                                    fid.volatile_fid, buf);
2173         buf->f_type = SMB2_MAGIC_NUMBER;
2174         SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid);
2175         return rc;
2176 }
2177
2178 static bool
2179 smb2_compare_fids(struct cifsFileInfo *ob1, struct cifsFileInfo *ob2)
2180 {
2181         return ob1->fid.persistent_fid == ob2->fid.persistent_fid &&
2182                ob1->fid.volatile_fid == ob2->fid.volatile_fid;
2183 }
2184
2185 static int
2186 smb2_mand_lock(const unsigned int xid, struct cifsFileInfo *cfile, __u64 offset,
2187                __u64 length, __u32 type, int lock, int unlock, bool wait)
2188 {
2189         if (unlock && !lock)
2190                 type = SMB2_LOCKFLAG_UNLOCK;
2191         return SMB2_lock(xid, tlink_tcon(cfile->tlink),
2192                          cfile->fid.persistent_fid, cfile->fid.volatile_fid,
2193                          current->tgid, length, offset, type, wait);
2194 }
2195
2196 static void
2197 smb2_get_lease_key(struct inode *inode, struct cifs_fid *fid)
2198 {
2199         memcpy(fid->lease_key, CIFS_I(inode)->lease_key, SMB2_LEASE_KEY_SIZE);
2200 }
2201
2202 static void
2203 smb2_set_lease_key(struct inode *inode, struct cifs_fid *fid)
2204 {
2205         memcpy(CIFS_I(inode)->lease_key, fid->lease_key, SMB2_LEASE_KEY_SIZE);
2206 }
2207
2208 static void
2209 smb2_new_lease_key(struct cifs_fid *fid)
2210 {
2211         generate_random_uuid(fid->lease_key);
2212 }
2213
2214 static int
2215 smb2_get_dfs_refer(const unsigned int xid, struct cifs_ses *ses,
2216                    const char *search_name,
2217                    struct dfs_info3_param **target_nodes,
2218                    unsigned int *num_of_nodes,
2219                    const struct nls_table *nls_codepage, int remap)
2220 {
2221         int rc;
2222         __le16 *utf16_path = NULL;
2223         int utf16_path_len = 0;
2224         struct cifs_tcon *tcon;
2225         struct fsctl_get_dfs_referral_req *dfs_req = NULL;
2226         struct get_dfs_referral_rsp *dfs_rsp = NULL;
2227         u32 dfs_req_size = 0, dfs_rsp_size = 0;
2228
2229         cifs_dbg(FYI, "smb2_get_dfs_refer path <%s>\n", search_name);
2230
2231         /*
2232          * Try to use the IPC tcon, otherwise just use any
2233          */
2234         tcon = ses->tcon_ipc;
2235         if (tcon == NULL) {
2236                 spin_lock(&cifs_tcp_ses_lock);
2237                 tcon = list_first_entry_or_null(&ses->tcon_list,
2238                                                 struct cifs_tcon,
2239                                                 tcon_list);
2240                 if (tcon)
2241                         tcon->tc_count++;
2242                 spin_unlock(&cifs_tcp_ses_lock);
2243         }
2244
2245         if (tcon == NULL) {
2246                 cifs_dbg(VFS, "session %p has no tcon available for a dfs referral request\n",
2247                          ses);
2248                 rc = -ENOTCONN;
2249                 goto out;
2250         }
2251
2252         utf16_path = cifs_strndup_to_utf16(search_name, PATH_MAX,
2253                                            &utf16_path_len,
2254                                            nls_codepage, remap);
2255         if (!utf16_path) {
2256                 rc = -ENOMEM;
2257                 goto out;
2258         }
2259
2260         dfs_req_size = sizeof(*dfs_req) + utf16_path_len;
2261         dfs_req = kzalloc(dfs_req_size, GFP_KERNEL);
2262         if (!dfs_req) {
2263                 rc = -ENOMEM;
2264                 goto out;
2265         }
2266
2267         /* Highest DFS referral version understood */
2268         dfs_req->MaxReferralLevel = DFS_VERSION;
2269
2270         /* Path to resolve in an UTF-16 null-terminated string */
2271         memcpy(dfs_req->RequestFileName, utf16_path, utf16_path_len);
2272
2273         do {
2274                 rc = SMB2_ioctl(xid, tcon, NO_FILE_ID, NO_FILE_ID,
2275                                 FSCTL_DFS_GET_REFERRALS,
2276                                 true /* is_fsctl */,
2277                                 (char *)dfs_req, dfs_req_size,
2278                                 (char **)&dfs_rsp, &dfs_rsp_size);
2279         } while (rc == -EAGAIN);
2280
2281         if (rc) {
2282                 if ((rc != -ENOENT) && (rc != -EOPNOTSUPP))
2283                         cifs_dbg(VFS, "ioctl error in smb2_get_dfs_refer rc=%d\n", rc);
2284                 goto out;
2285         }
2286
2287         rc = parse_dfs_referrals(dfs_rsp, dfs_rsp_size,
2288                                  num_of_nodes, target_nodes,
2289                                  nls_codepage, remap, search_name,
2290                                  true /* is_unicode */);
2291         if (rc) {
2292                 cifs_dbg(VFS, "parse error in smb2_get_dfs_refer rc=%d\n", rc);
2293                 goto out;
2294         }
2295
2296  out:
2297         if (tcon && !tcon->ipc) {
2298                 /* ipc tcons are not refcounted */
2299                 spin_lock(&cifs_tcp_ses_lock);
2300                 tcon->tc_count--;
2301                 spin_unlock(&cifs_tcp_ses_lock);
2302         }
2303         kfree(utf16_path);
2304         kfree(dfs_req);
2305         kfree(dfs_rsp);
2306         return rc;
2307 }
2308 #define SMB2_SYMLINK_STRUCT_SIZE \
2309         (sizeof(struct smb2_err_rsp) - 1 + sizeof(struct smb2_symlink_err_rsp))
2310
2311 static int
2312 smb2_query_symlink(const unsigned int xid, struct cifs_tcon *tcon,
2313                    const char *full_path, char **target_path,
2314                    struct cifs_sb_info *cifs_sb)
2315 {
2316         int rc;
2317         __le16 *utf16_path;
2318         __u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
2319         struct cifs_open_parms oparms;
2320         struct cifs_fid fid;
2321         struct kvec err_iov = {NULL, 0};
2322         struct smb2_err_rsp *err_buf = NULL;
2323         int resp_buftype;
2324         struct smb2_symlink_err_rsp *symlink;
2325         unsigned int sub_len;
2326         unsigned int sub_offset;
2327         unsigned int print_len;
2328         unsigned int print_offset;
2329
2330         cifs_dbg(FYI, "%s: path: %s\n", __func__, full_path);
2331
2332         utf16_path = cifs_convert_path_to_utf16(full_path, cifs_sb);
2333         if (!utf16_path)
2334                 return -ENOMEM;
2335
2336         oparms.tcon = tcon;
2337         oparms.desired_access = FILE_READ_ATTRIBUTES;
2338         oparms.disposition = FILE_OPEN;
2339         if (backup_cred(cifs_sb))
2340                 oparms.create_options = CREATE_OPEN_BACKUP_INTENT;
2341         else
2342                 oparms.create_options = 0;
2343         oparms.fid = &fid;
2344         oparms.reconnect = false;
2345
2346         rc = SMB2_open(xid, &oparms, utf16_path, &oplock, NULL, &err_iov,
2347                        &resp_buftype);
2348         if (!rc || !err_iov.iov_base) {
2349                 rc = -ENOENT;
2350                 goto free_path;
2351         }
2352
2353         err_buf = err_iov.iov_base;
2354         if (le32_to_cpu(err_buf->ByteCount) < sizeof(struct smb2_symlink_err_rsp) ||
2355             err_iov.iov_len < SMB2_SYMLINK_STRUCT_SIZE) {
2356                 rc = -ENOENT;
2357                 goto querty_exit;
2358         }
2359
2360         /* open must fail on symlink - reset rc */
2361         rc = 0;
2362         symlink = (struct smb2_symlink_err_rsp *)err_buf->ErrorData;
2363         sub_len = le16_to_cpu(symlink->SubstituteNameLength);
2364         sub_offset = le16_to_cpu(symlink->SubstituteNameOffset);
2365         print_len = le16_to_cpu(symlink->PrintNameLength);
2366         print_offset = le16_to_cpu(symlink->PrintNameOffset);
2367
2368         if (err_iov.iov_len < SMB2_SYMLINK_STRUCT_SIZE + sub_offset + sub_len) {
2369                 rc = -ENOENT;
2370                 goto querty_exit;
2371         }
2372
2373         if (err_iov.iov_len <
2374             SMB2_SYMLINK_STRUCT_SIZE + print_offset + print_len) {
2375                 rc = -ENOENT;
2376                 goto querty_exit;
2377         }
2378
2379         *target_path = cifs_strndup_from_utf16(
2380                                 (char *)symlink->PathBuffer + sub_offset,
2381                                 sub_len, true, cifs_sb->local_nls);
2382         if (!(*target_path)) {
2383                 rc = -ENOMEM;
2384                 goto querty_exit;
2385         }
2386         convert_delimiter(*target_path, '/');
2387         cifs_dbg(FYI, "%s: target path: %s\n", __func__, *target_path);
2388
2389  querty_exit:
2390         free_rsp_buf(resp_buftype, err_buf);
2391  free_path:
2392         kfree(utf16_path);
2393         return rc;
2394 }
2395
2396 #ifdef CONFIG_CIFS_ACL
2397 static struct cifs_ntsd *
2398 get_smb2_acl_by_fid(struct cifs_sb_info *cifs_sb,
2399                 const struct cifs_fid *cifsfid, u32 *pacllen)
2400 {
2401         struct cifs_ntsd *pntsd = NULL;
2402         unsigned int xid;
2403         int rc = -EOPNOTSUPP;
2404         struct tcon_link *tlink = cifs_sb_tlink(cifs_sb);
2405
2406         if (IS_ERR(tlink))
2407                 return ERR_CAST(tlink);
2408
2409         xid = get_xid();
2410         cifs_dbg(FYI, "trying to get acl\n");
2411
2412         rc = SMB2_query_acl(xid, tlink_tcon(tlink), cifsfid->persistent_fid,
2413                             cifsfid->volatile_fid, (void **)&pntsd, pacllen);
2414         free_xid(xid);
2415
2416         cifs_put_tlink(tlink);
2417
2418         cifs_dbg(FYI, "%s: rc = %d ACL len %d\n", __func__, rc, *pacllen);
2419         if (rc)
2420                 return ERR_PTR(rc);
2421         return pntsd;
2422
2423 }
2424
2425 static struct cifs_ntsd *
2426 get_smb2_acl_by_path(struct cifs_sb_info *cifs_sb,
2427                 const char *path, u32 *pacllen)
2428 {
2429         struct cifs_ntsd *pntsd = NULL;
2430         u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
2431         unsigned int xid;
2432         int rc;
2433         struct cifs_tcon *tcon;
2434         struct tcon_link *tlink = cifs_sb_tlink(cifs_sb);
2435         struct cifs_fid fid;
2436         struct cifs_open_parms oparms;
2437         __le16 *utf16_path;
2438
2439         cifs_dbg(FYI, "get smb3 acl for path %s\n", path);
2440         if (IS_ERR(tlink))
2441                 return ERR_CAST(tlink);
2442
2443         tcon = tlink_tcon(tlink);
2444         xid = get_xid();
2445
2446         if (backup_cred(cifs_sb))
2447                 oparms.create_options = CREATE_OPEN_BACKUP_INTENT;
2448         else
2449                 oparms.create_options = 0;
2450
2451         utf16_path = cifs_convert_path_to_utf16(path, cifs_sb);
2452         if (!utf16_path) {
2453                 rc = -ENOMEM;
2454                 free_xid(xid);
2455                 return ERR_PTR(rc);
2456         }
2457
2458         oparms.tcon = tcon;
2459         oparms.desired_access = READ_CONTROL;
2460         oparms.disposition = FILE_OPEN;
2461         oparms.fid = &fid;
2462         oparms.reconnect = false;
2463
2464         rc = SMB2_open(xid, &oparms, utf16_path, &oplock, NULL, NULL, NULL);
2465         kfree(utf16_path);
2466         if (!rc) {
2467                 rc = SMB2_query_acl(xid, tlink_tcon(tlink), fid.persistent_fid,
2468                             fid.volatile_fid, (void **)&pntsd, pacllen);
2469                 SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid);
2470         }
2471
2472         cifs_put_tlink(tlink);
2473         free_xid(xid);
2474
2475         cifs_dbg(FYI, "%s: rc = %d ACL len %d\n", __func__, rc, *pacllen);
2476         if (rc)
2477                 return ERR_PTR(rc);
2478         return pntsd;
2479 }
2480
2481 #ifdef CONFIG_CIFS_ACL
2482 static int
2483 set_smb2_acl(struct cifs_ntsd *pnntsd, __u32 acllen,
2484                 struct inode *inode, const char *path, int aclflag)
2485 {
2486         u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
2487         unsigned int xid;
2488         int rc, access_flags = 0;
2489         struct cifs_tcon *tcon;
2490         struct cifs_sb_info *cifs_sb = CIFS_SB(inode->i_sb);
2491         struct tcon_link *tlink = cifs_sb_tlink(cifs_sb);
2492         struct cifs_fid fid;
2493         struct cifs_open_parms oparms;
2494         __le16 *utf16_path;
2495
2496         cifs_dbg(FYI, "set smb3 acl for path %s\n", path);
2497         if (IS_ERR(tlink))
2498                 return PTR_ERR(tlink);
2499
2500         tcon = tlink_tcon(tlink);
2501         xid = get_xid();
2502
2503         if (backup_cred(cifs_sb))
2504                 oparms.create_options = CREATE_OPEN_BACKUP_INTENT;
2505         else
2506                 oparms.create_options = 0;
2507
2508         if (aclflag == CIFS_ACL_OWNER || aclflag == CIFS_ACL_GROUP)
2509                 access_flags = WRITE_OWNER;
2510         else
2511                 access_flags = WRITE_DAC;
2512
2513         utf16_path = cifs_convert_path_to_utf16(path, cifs_sb);
2514         if (!utf16_path) {
2515                 rc = -ENOMEM;
2516                 free_xid(xid);
2517                 return rc;
2518         }
2519
2520         oparms.tcon = tcon;
2521         oparms.desired_access = access_flags;
2522         oparms.disposition = FILE_OPEN;
2523         oparms.path = path;
2524         oparms.fid = &fid;
2525         oparms.reconnect = false;
2526
2527         rc = SMB2_open(xid, &oparms, utf16_path, &oplock, NULL, NULL, NULL);
2528         kfree(utf16_path);
2529         if (!rc) {
2530                 rc = SMB2_set_acl(xid, tlink_tcon(tlink), fid.persistent_fid,
2531                             fid.volatile_fid, pnntsd, acllen, aclflag);
2532                 SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid);
2533         }
2534
2535         cifs_put_tlink(tlink);
2536         free_xid(xid);
2537         return rc;
2538 }
2539 #endif /* CIFS_ACL */
2540
2541 /* Retrieve an ACL from the server */
2542 static struct cifs_ntsd *
2543 get_smb2_acl(struct cifs_sb_info *cifs_sb,
2544                                       struct inode *inode, const char *path,
2545                                       u32 *pacllen)
2546 {
2547         struct cifs_ntsd *pntsd = NULL;
2548         struct cifsFileInfo *open_file = NULL;
2549
2550         if (inode)
2551                 open_file = find_readable_file(CIFS_I(inode), true);
2552         if (!open_file)
2553                 return get_smb2_acl_by_path(cifs_sb, path, pacllen);
2554
2555         pntsd = get_smb2_acl_by_fid(cifs_sb, &open_file->fid, pacllen);
2556         cifsFileInfo_put(open_file);
2557         return pntsd;
2558 }
2559 #endif
2560
2561 static long smb3_zero_range(struct file *file, struct cifs_tcon *tcon,
2562                             loff_t offset, loff_t len, bool keep_size)
2563 {
2564         struct cifs_ses *ses = tcon->ses;
2565         struct inode *inode;
2566         struct cifsInodeInfo *cifsi;
2567         struct cifsFileInfo *cfile = file->private_data;
2568         struct file_zero_data_information fsctl_buf;
2569         struct smb_rqst rqst[2];
2570         int resp_buftype[2];
2571         struct kvec rsp_iov[2];
2572         struct kvec io_iov[SMB2_IOCTL_IOV_SIZE];
2573         struct kvec si_iov[1];
2574         unsigned int size[1];
2575         void *data[1];
2576         long rc;
2577         unsigned int xid;
2578         int num = 0, flags = 0;
2579         __le64 eof;
2580
2581         xid = get_xid();
2582
2583         inode = d_inode(cfile->dentry);
2584         cifsi = CIFS_I(inode);
2585
2586         trace_smb3_zero_enter(xid, cfile->fid.persistent_fid, tcon->tid,
2587                               ses->Suid, offset, len);
2588
2589
2590         /* if file not oplocked can't be sure whether asking to extend size */
2591         if (!CIFS_CACHE_READ(cifsi))
2592                 if (keep_size == false) {
2593                         rc = -EOPNOTSUPP;
2594                         trace_smb3_zero_err(xid, cfile->fid.persistent_fid,
2595                                 tcon->tid, ses->Suid, offset, len, rc);
2596                         free_xid(xid);
2597                         return rc;
2598                 }
2599
2600         /*
2601          * Must check if file sparse since fallocate -z (zero range) assumes
2602          * non-sparse allocation
2603          */
2604         if (!(cifsi->cifsAttrs & FILE_ATTRIBUTE_SPARSE_FILE)) {
2605                 rc = -EOPNOTSUPP;
2606                 trace_smb3_zero_err(xid, cfile->fid.persistent_fid, tcon->tid,
2607                               ses->Suid, offset, len, rc);
2608                 free_xid(xid);
2609                 return rc;
2610         }
2611
2612         cifs_dbg(FYI, "offset %lld len %lld", offset, len);
2613
2614         fsctl_buf.FileOffset = cpu_to_le64(offset);
2615         fsctl_buf.BeyondFinalZero = cpu_to_le64(offset + len);
2616
2617         if (smb3_encryption_required(tcon))
2618                 flags |= CIFS_TRANSFORM_REQ;
2619
2620         memset(rqst, 0, sizeof(rqst));
2621         resp_buftype[0] = resp_buftype[1] = CIFS_NO_BUFFER;
2622         memset(rsp_iov, 0, sizeof(rsp_iov));
2623
2624
2625         memset(&io_iov, 0, sizeof(io_iov));
2626         rqst[num].rq_iov = io_iov;
2627         rqst[num].rq_nvec = SMB2_IOCTL_IOV_SIZE;
2628         rc = SMB2_ioctl_init(tcon, &rqst[num++], cfile->fid.persistent_fid,
2629                              cfile->fid.volatile_fid, FSCTL_SET_ZERO_DATA,
2630                              true /* is_fctl */, (char *)&fsctl_buf,
2631                              sizeof(struct file_zero_data_information));
2632         if (rc)
2633                 goto zero_range_exit;
2634
2635         /*
2636          * do we also need to change the size of the file?
2637          */
2638         if (keep_size == false && i_size_read(inode) < offset + len) {
2639                 smb2_set_next_command(tcon, &rqst[0]);
2640
2641                 memset(&si_iov, 0, sizeof(si_iov));
2642                 rqst[num].rq_iov = si_iov;
2643                 rqst[num].rq_nvec = 1;
2644
2645                 eof = cpu_to_le64(offset + len);
2646                 size[0] = 8; /* sizeof __le64 */
2647                 data[0] = &eof;
2648
2649                 rc = SMB2_set_info_init(tcon, &rqst[num++],
2650                                         cfile->fid.persistent_fid,
2651                                         cfile->fid.persistent_fid,
2652                                         current->tgid,
2653                                         FILE_END_OF_FILE_INFORMATION,
2654                                         SMB2_O_INFO_FILE, 0, data, size);
2655                 smb2_set_related(&rqst[1]);
2656         }
2657
2658         rc = compound_send_recv(xid, ses, flags, num, rqst,
2659                                 resp_buftype, rsp_iov);
2660
2661  zero_range_exit:
2662         SMB2_ioctl_free(&rqst[0]);
2663         SMB2_set_info_free(&rqst[1]);
2664         free_rsp_buf(resp_buftype[0], rsp_iov[0].iov_base);
2665         free_rsp_buf(resp_buftype[1], rsp_iov[1].iov_base);
2666         free_xid(xid);
2667         if (rc)
2668                 trace_smb3_zero_err(xid, cfile->fid.persistent_fid, tcon->tid,
2669                               ses->Suid, offset, len, rc);
2670         else
2671                 trace_smb3_zero_done(xid, cfile->fid.persistent_fid, tcon->tid,
2672                               ses->Suid, offset, len);
2673         return rc;
2674 }
2675
2676 static long smb3_punch_hole(struct file *file, struct cifs_tcon *tcon,
2677                             loff_t offset, loff_t len)
2678 {
2679         struct inode *inode;
2680         struct cifsInodeInfo *cifsi;
2681         struct cifsFileInfo *cfile = file->private_data;
2682         struct file_zero_data_information fsctl_buf;
2683         long rc;
2684         unsigned int xid;
2685         __u8 set_sparse = 1;
2686
2687         xid = get_xid();
2688
2689         inode = d_inode(cfile->dentry);
2690         cifsi = CIFS_I(inode);
2691
2692         /* Need to make file sparse, if not already, before freeing range. */
2693         /* Consider adding equivalent for compressed since it could also work */
2694         if (!smb2_set_sparse(xid, tcon, cfile, inode, set_sparse)) {
2695                 rc = -EOPNOTSUPP;
2696                 free_xid(xid);
2697                 return rc;
2698         }
2699
2700         cifs_dbg(FYI, "offset %lld len %lld", offset, len);
2701
2702         fsctl_buf.FileOffset = cpu_to_le64(offset);
2703         fsctl_buf.BeyondFinalZero = cpu_to_le64(offset + len);
2704
2705         rc = SMB2_ioctl(xid, tcon, cfile->fid.persistent_fid,
2706                         cfile->fid.volatile_fid, FSCTL_SET_ZERO_DATA,
2707                         true /* is_fctl */, (char *)&fsctl_buf,
2708                         sizeof(struct file_zero_data_information), NULL, NULL);
2709         free_xid(xid);
2710         return rc;
2711 }
2712
2713 static long smb3_simple_falloc(struct file *file, struct cifs_tcon *tcon,
2714                             loff_t off, loff_t len, bool keep_size)
2715 {
2716         struct inode *inode;
2717         struct cifsInodeInfo *cifsi;
2718         struct cifsFileInfo *cfile = file->private_data;
2719         long rc = -EOPNOTSUPP;
2720         unsigned int xid;
2721         __le64 eof;
2722
2723         xid = get_xid();
2724
2725         inode = d_inode(cfile->dentry);
2726         cifsi = CIFS_I(inode);
2727
2728         trace_smb3_falloc_enter(xid, cfile->fid.persistent_fid, tcon->tid,
2729                                 tcon->ses->Suid, off, len);
2730         /* if file not oplocked can't be sure whether asking to extend size */
2731         if (!CIFS_CACHE_READ(cifsi))
2732                 if (keep_size == false) {
2733                         trace_smb3_falloc_err(xid, cfile->fid.persistent_fid,
2734                                 tcon->tid, tcon->ses->Suid, off, len, rc);
2735                         free_xid(xid);
2736                         return rc;
2737                 }
2738
2739         /*
2740          * Files are non-sparse by default so falloc may be a no-op
2741          * Must check if file sparse. If not sparse, and not extending
2742          * then no need to do anything since file already allocated
2743          */
2744         if ((cifsi->cifsAttrs & FILE_ATTRIBUTE_SPARSE_FILE) == 0) {
2745                 if (keep_size == true)
2746                         rc = 0;
2747                 /* check if extending file */
2748                 else if (i_size_read(inode) >= off + len)
2749                         /* not extending file and already not sparse */
2750                         rc = 0;
2751                 /* BB: in future add else clause to extend file */
2752                 else
2753                         rc = -EOPNOTSUPP;
2754                 if (rc)
2755                         trace_smb3_falloc_err(xid, cfile->fid.persistent_fid,
2756                                 tcon->tid, tcon->ses->Suid, off, len, rc);
2757                 else
2758                         trace_smb3_falloc_done(xid, cfile->fid.persistent_fid,
2759                                 tcon->tid, tcon->ses->Suid, off, len);
2760                 free_xid(xid);
2761                 return rc;
2762         }
2763
2764         if ((keep_size == true) || (i_size_read(inode) >= off + len)) {
2765                 /*
2766                  * Check if falloc starts within first few pages of file
2767                  * and ends within a few pages of the end of file to
2768                  * ensure that most of file is being forced to be
2769                  * fallocated now. If so then setting whole file sparse
2770                  * ie potentially making a few extra pages at the beginning
2771                  * or end of the file non-sparse via set_sparse is harmless.
2772                  */
2773                 if ((off > 8192) || (off + len + 8192 < i_size_read(inode))) {
2774                         rc = -EOPNOTSUPP;
2775                         trace_smb3_falloc_err(xid, cfile->fid.persistent_fid,
2776                                 tcon->tid, tcon->ses->Suid, off, len, rc);
2777                         free_xid(xid);
2778                         return rc;
2779                 }
2780
2781                 smb2_set_sparse(xid, tcon, cfile, inode, false);
2782                 rc = 0;
2783         } else {
2784                 smb2_set_sparse(xid, tcon, cfile, inode, false);
2785                 rc = 0;
2786                 if (i_size_read(inode) < off + len) {
2787                         eof = cpu_to_le64(off + len);
2788                         rc = SMB2_set_eof(xid, tcon, cfile->fid.persistent_fid,
2789                                           cfile->fid.volatile_fid, cfile->pid,
2790                                           &eof);
2791                 }
2792         }
2793
2794         if (rc)
2795                 trace_smb3_falloc_err(xid, cfile->fid.persistent_fid, tcon->tid,
2796                                 tcon->ses->Suid, off, len, rc);
2797         else
2798                 trace_smb3_falloc_done(xid, cfile->fid.persistent_fid, tcon->tid,
2799                                 tcon->ses->Suid, off, len);
2800
2801         free_xid(xid);
2802         return rc;
2803 }
2804
2805
2806 static long smb3_fallocate(struct file *file, struct cifs_tcon *tcon, int mode,
2807                            loff_t off, loff_t len)
2808 {
2809         /* KEEP_SIZE already checked for by do_fallocate */
2810         if (mode & FALLOC_FL_PUNCH_HOLE)
2811                 return smb3_punch_hole(file, tcon, off, len);
2812         else if (mode & FALLOC_FL_ZERO_RANGE) {
2813                 if (mode & FALLOC_FL_KEEP_SIZE)
2814                         return smb3_zero_range(file, tcon, off, len, true);
2815                 return smb3_zero_range(file, tcon, off, len, false);
2816         } else if (mode == FALLOC_FL_KEEP_SIZE)
2817                 return smb3_simple_falloc(file, tcon, off, len, true);
2818         else if (mode == 0)
2819                 return smb3_simple_falloc(file, tcon, off, len, false);
2820
2821         return -EOPNOTSUPP;
2822 }
2823
2824 static void
2825 smb2_downgrade_oplock(struct TCP_Server_Info *server,
2826                         struct cifsInodeInfo *cinode, bool set_level2)
2827 {
2828         if (set_level2)
2829                 server->ops->set_oplock_level(cinode, SMB2_OPLOCK_LEVEL_II,
2830                                                 0, NULL);
2831         else
2832                 server->ops->set_oplock_level(cinode, 0, 0, NULL);
2833 }
2834
2835 static void
2836 smb21_downgrade_oplock(struct TCP_Server_Info *server,
2837                        struct cifsInodeInfo *cinode, bool set_level2)
2838 {
2839         server->ops->set_oplock_level(cinode,
2840                                       set_level2 ? SMB2_LEASE_READ_CACHING_HE :
2841                                       0, 0, NULL);
2842 }
2843
2844 static void
2845 smb2_set_oplock_level(struct cifsInodeInfo *cinode, __u32 oplock,
2846                       unsigned int epoch, bool *purge_cache)
2847 {
2848         oplock &= 0xFF;
2849         if (oplock == SMB2_OPLOCK_LEVEL_NOCHANGE)
2850                 return;
2851         if (oplock == SMB2_OPLOCK_LEVEL_BATCH) {
2852                 cinode->oplock = CIFS_CACHE_RHW_FLG;
2853                 cifs_dbg(FYI, "Batch Oplock granted on inode %p\n",
2854                          &cinode->vfs_inode);
2855         } else if (oplock == SMB2_OPLOCK_LEVEL_EXCLUSIVE) {
2856                 cinode->oplock = CIFS_CACHE_RW_FLG;
2857                 cifs_dbg(FYI, "Exclusive Oplock granted on inode %p\n",
2858                          &cinode->vfs_inode);
2859         } else if (oplock == SMB2_OPLOCK_LEVEL_II) {
2860                 cinode->oplock = CIFS_CACHE_READ_FLG;
2861                 cifs_dbg(FYI, "Level II Oplock granted on inode %p\n",
2862                          &cinode->vfs_inode);
2863         } else
2864                 cinode->oplock = 0;
2865 }
2866
2867 static void
2868 smb21_set_oplock_level(struct cifsInodeInfo *cinode, __u32 oplock,
2869                        unsigned int epoch, bool *purge_cache)
2870 {
2871         char message[5] = {0};
2872
2873         oplock &= 0xFF;
2874         if (oplock == SMB2_OPLOCK_LEVEL_NOCHANGE)
2875                 return;
2876
2877         cinode->oplock = 0;
2878         if (oplock & SMB2_LEASE_READ_CACHING_HE) {
2879                 cinode->oplock |= CIFS_CACHE_READ_FLG;
2880                 strcat(message, "R");
2881         }
2882         if (oplock & SMB2_LEASE_HANDLE_CACHING_HE) {
2883                 cinode->oplock |= CIFS_CACHE_HANDLE_FLG;
2884                 strcat(message, "H");
2885         }
2886         if (oplock & SMB2_LEASE_WRITE_CACHING_HE) {
2887                 cinode->oplock |= CIFS_CACHE_WRITE_FLG;
2888                 strcat(message, "W");
2889         }
2890         if (!cinode->oplock)
2891                 strcat(message, "None");
2892         cifs_dbg(FYI, "%s Lease granted on inode %p\n", message,
2893                  &cinode->vfs_inode);
2894 }
2895
2896 static void
2897 smb3_set_oplock_level(struct cifsInodeInfo *cinode, __u32 oplock,
2898                       unsigned int epoch, bool *purge_cache)
2899 {
2900         unsigned int old_oplock = cinode->oplock;
2901
2902         smb21_set_oplock_level(cinode, oplock, epoch, purge_cache);
2903
2904         if (purge_cache) {
2905                 *purge_cache = false;
2906                 if (old_oplock == CIFS_CACHE_READ_FLG) {
2907                         if (cinode->oplock == CIFS_CACHE_READ_FLG &&
2908                             (epoch - cinode->epoch > 0))
2909                                 *purge_cache = true;
2910                         else if (cinode->oplock == CIFS_CACHE_RH_FLG &&
2911                                  (epoch - cinode->epoch > 1))
2912                                 *purge_cache = true;
2913                         else if (cinode->oplock == CIFS_CACHE_RHW_FLG &&
2914                                  (epoch - cinode->epoch > 1))
2915                                 *purge_cache = true;
2916                         else if (cinode->oplock == 0 &&
2917                                  (epoch - cinode->epoch > 0))
2918                                 *purge_cache = true;
2919                 } else if (old_oplock == CIFS_CACHE_RH_FLG) {
2920                         if (cinode->oplock == CIFS_CACHE_RH_FLG &&
2921                             (epoch - cinode->epoch > 0))
2922                                 *purge_cache = true;
2923                         else if (cinode->oplock == CIFS_CACHE_RHW_FLG &&
2924                                  (epoch - cinode->epoch > 1))
2925                                 *purge_cache = true;
2926                 }
2927                 cinode->epoch = epoch;
2928         }
2929 }
2930
2931 static bool
2932 smb2_is_read_op(__u32 oplock)
2933 {
2934         return oplock == SMB2_OPLOCK_LEVEL_II;
2935 }
2936
2937 static bool
2938 smb21_is_read_op(__u32 oplock)
2939 {
2940         return (oplock & SMB2_LEASE_READ_CACHING_HE) &&
2941                !(oplock & SMB2_LEASE_WRITE_CACHING_HE);
2942 }
2943
2944 static __le32
2945 map_oplock_to_lease(u8 oplock)
2946 {
2947         if (oplock == SMB2_OPLOCK_LEVEL_EXCLUSIVE)
2948                 return SMB2_LEASE_WRITE_CACHING | SMB2_LEASE_READ_CACHING;
2949         else if (oplock == SMB2_OPLOCK_LEVEL_II)
2950                 return SMB2_LEASE_READ_CACHING;
2951         else if (oplock == SMB2_OPLOCK_LEVEL_BATCH)
2952                 return SMB2_LEASE_HANDLE_CACHING | SMB2_LEASE_READ_CACHING |
2953                        SMB2_LEASE_WRITE_CACHING;
2954         return 0;
2955 }
2956
2957 static char *
2958 smb2_create_lease_buf(u8 *lease_key, u8 oplock)
2959 {
2960         struct create_lease *buf;
2961
2962         buf = kzalloc(sizeof(struct create_lease), GFP_KERNEL);
2963         if (!buf)
2964                 return NULL;
2965
2966         memcpy(&buf->lcontext.LeaseKey, lease_key, SMB2_LEASE_KEY_SIZE);
2967         buf->lcontext.LeaseState = map_oplock_to_lease(oplock);
2968
2969         buf->ccontext.DataOffset = cpu_to_le16(offsetof
2970                                         (struct create_lease, lcontext));
2971         buf->ccontext.DataLength = cpu_to_le32(sizeof(struct lease_context));
2972         buf->ccontext.NameOffset = cpu_to_le16(offsetof
2973                                 (struct create_lease, Name));
2974         buf->ccontext.NameLength = cpu_to_le16(4);
2975         /* SMB2_CREATE_REQUEST_LEASE is "RqLs" */
2976         buf->Name[0] = 'R';
2977         buf->Name[1] = 'q';
2978         buf->Name[2] = 'L';
2979         buf->Name[3] = 's';
2980         return (char *)buf;
2981 }
2982
2983 static char *
2984 smb3_create_lease_buf(u8 *lease_key, u8 oplock)
2985 {
2986         struct create_lease_v2 *buf;
2987
2988         buf = kzalloc(sizeof(struct create_lease_v2), GFP_KERNEL);
2989         if (!buf)
2990                 return NULL;
2991
2992         memcpy(&buf->lcontext.LeaseKey, lease_key, SMB2_LEASE_KEY_SIZE);
2993         buf->lcontext.LeaseState = map_oplock_to_lease(oplock);
2994
2995         buf->ccontext.DataOffset = cpu_to_le16(offsetof
2996                                         (struct create_lease_v2, lcontext));
2997         buf->ccontext.DataLength = cpu_to_le32(sizeof(struct lease_context_v2));
2998         buf->ccontext.NameOffset = cpu_to_le16(offsetof
2999                                 (struct create_lease_v2, Name));
3000         buf->ccontext.NameLength = cpu_to_le16(4);
3001         /* SMB2_CREATE_REQUEST_LEASE is "RqLs" */
3002         buf->Name[0] = 'R';
3003         buf->Name[1] = 'q';
3004         buf->Name[2] = 'L';
3005         buf->Name[3] = 's';
3006         return (char *)buf;
3007 }
3008
3009 static __u8
3010 smb2_parse_lease_buf(void *buf, unsigned int *epoch, char *lease_key)
3011 {
3012         struct create_lease *lc = (struct create_lease *)buf;
3013
3014         *epoch = 0; /* not used */
3015         if (lc->lcontext.LeaseFlags & SMB2_LEASE_FLAG_BREAK_IN_PROGRESS)
3016                 return SMB2_OPLOCK_LEVEL_NOCHANGE;
3017         return le32_to_cpu(lc->lcontext.LeaseState);
3018 }
3019
3020 static __u8
3021 smb3_parse_lease_buf(void *buf, unsigned int *epoch, char *lease_key)
3022 {
3023         struct create_lease_v2 *lc = (struct create_lease_v2 *)buf;
3024
3025         *epoch = le16_to_cpu(lc->lcontext.Epoch);
3026         if (lc->lcontext.LeaseFlags & SMB2_LEASE_FLAG_BREAK_IN_PROGRESS)
3027                 return SMB2_OPLOCK_LEVEL_NOCHANGE;
3028         if (lease_key)
3029                 memcpy(lease_key, &lc->lcontext.LeaseKey, SMB2_LEASE_KEY_SIZE);
3030         return le32_to_cpu(lc->lcontext.LeaseState);
3031 }
3032
3033 static unsigned int
3034 smb2_wp_retry_size(struct inode *inode)
3035 {
3036         return min_t(unsigned int, CIFS_SB(inode->i_sb)->wsize,
3037                      SMB2_MAX_BUFFER_SIZE);
3038 }
3039
3040 static bool
3041 smb2_dir_needs_close(struct cifsFileInfo *cfile)
3042 {
3043         return !cfile->invalidHandle;
3044 }
3045
3046 static void
3047 fill_transform_hdr(struct smb2_transform_hdr *tr_hdr, unsigned int orig_len,
3048                    struct smb_rqst *old_rq)
3049 {
3050         struct smb2_sync_hdr *shdr =
3051                         (struct smb2_sync_hdr *)old_rq->rq_iov[0].iov_base;
3052
3053         memset(tr_hdr, 0, sizeof(struct smb2_transform_hdr));
3054         tr_hdr->ProtocolId = SMB2_TRANSFORM_PROTO_NUM;
3055         tr_hdr->OriginalMessageSize = cpu_to_le32(orig_len);
3056         tr_hdr->Flags = cpu_to_le16(0x01);
3057         get_random_bytes(&tr_hdr->Nonce, SMB3_AES128CMM_NONCE);
3058         memcpy(&tr_hdr->SessionId, &shdr->SessionId, 8);
3059 }
3060
3061 /* We can not use the normal sg_set_buf() as we will sometimes pass a
3062  * stack object as buf.
3063  */
3064 static inline void smb2_sg_set_buf(struct scatterlist *sg, const void *buf,
3065                                    unsigned int buflen)
3066 {
3067         sg_set_page(sg, virt_to_page(buf), buflen, offset_in_page(buf));
3068 }
3069
3070 /* Assumes the first rqst has a transform header as the first iov.
3071  * I.e.
3072  * rqst[0].rq_iov[0]  is transform header
3073  * rqst[0].rq_iov[1+] data to be encrypted/decrypted
3074  * rqst[1+].rq_iov[0+] data to be encrypted/decrypted
3075  */
3076 static struct scatterlist *
3077 init_sg(int num_rqst, struct smb_rqst *rqst, u8 *sign)
3078 {
3079         unsigned int sg_len;
3080         struct scatterlist *sg;
3081         unsigned int i;
3082         unsigned int j;
3083         unsigned int idx = 0;
3084         int skip;
3085
3086         sg_len = 1;
3087         for (i = 0; i < num_rqst; i++)
3088                 sg_len += rqst[i].rq_nvec + rqst[i].rq_npages;
3089
3090         sg = kmalloc_array(sg_len, sizeof(struct scatterlist), GFP_KERNEL);
3091         if (!sg)
3092                 return NULL;
3093
3094         sg_init_table(sg, sg_len);
3095         for (i = 0; i < num_rqst; i++) {
3096                 for (j = 0; j < rqst[i].rq_nvec; j++) {
3097                         /*
3098                          * The first rqst has a transform header where the
3099                          * first 20 bytes are not part of the encrypted blob
3100                          */
3101                         skip = (i == 0) && (j == 0) ? 20 : 0;
3102                         smb2_sg_set_buf(&sg[idx++],
3103                                         rqst[i].rq_iov[j].iov_base + skip,
3104                                         rqst[i].rq_iov[j].iov_len - skip);
3105                         }
3106
3107                 for (j = 0; j < rqst[i].rq_npages; j++) {
3108                         unsigned int len, offset;
3109
3110                         rqst_page_get_length(&rqst[i], j, &len, &offset);
3111                         sg_set_page(&sg[idx++], rqst[i].rq_pages[j], len, offset);
3112                 }
3113         }
3114         smb2_sg_set_buf(&sg[idx], sign, SMB2_SIGNATURE_SIZE);
3115         return sg;
3116 }
3117
3118 static int
3119 smb2_get_enc_key(struct TCP_Server_Info *server, __u64 ses_id, int enc, u8 *key)
3120 {
3121         struct cifs_ses *ses;
3122         u8 *ses_enc_key;
3123
3124         spin_lock(&cifs_tcp_ses_lock);
3125         list_for_each_entry(ses, &server->smb_ses_list, smb_ses_list) {
3126                 if (ses->Suid != ses_id)
3127                         continue;
3128                 ses_enc_key = enc ? ses->smb3encryptionkey :
3129                                                         ses->smb3decryptionkey;
3130                 memcpy(key, ses_enc_key, SMB3_SIGN_KEY_SIZE);
3131                 spin_unlock(&cifs_tcp_ses_lock);
3132                 return 0;
3133         }
3134         spin_unlock(&cifs_tcp_ses_lock);
3135
3136         return 1;
3137 }
3138 /*
3139  * Encrypt or decrypt @rqst message. @rqst[0] has the following format:
3140  * iov[0]   - transform header (associate data),
3141  * iov[1-N] - SMB2 header and pages - data to encrypt.
3142  * On success return encrypted data in iov[1-N] and pages, leave iov[0]
3143  * untouched.
3144  */
3145 static int
3146 crypt_message(struct TCP_Server_Info *server, int num_rqst,
3147               struct smb_rqst *rqst, int enc)
3148 {
3149         struct smb2_transform_hdr *tr_hdr =
3150                 (struct smb2_transform_hdr *)rqst[0].rq_iov[0].iov_base;
3151         unsigned int assoc_data_len = sizeof(struct smb2_transform_hdr) - 20;
3152         int rc = 0;
3153         struct scatterlist *sg;
3154         u8 sign[SMB2_SIGNATURE_SIZE] = {};
3155         u8 key[SMB3_SIGN_KEY_SIZE];
3156         struct aead_request *req;
3157         char *iv;
3158         unsigned int iv_len;
3159         DECLARE_CRYPTO_WAIT(wait);
3160         struct crypto_aead *tfm;
3161         unsigned int crypt_len = le32_to_cpu(tr_hdr->OriginalMessageSize);
3162
3163         rc = smb2_get_enc_key(server, tr_hdr->SessionId, enc, key);
3164         if (rc) {
3165                 cifs_dbg(VFS, "%s: Could not get %scryption key\n", __func__,
3166                          enc ? "en" : "de");
3167                 return 0;
3168         }
3169
3170         rc = smb3_crypto_aead_allocate(server);
3171         if (rc) {
3172                 cifs_dbg(VFS, "%s: crypto alloc failed\n", __func__);
3173                 return rc;
3174         }
3175
3176         tfm = enc ? server->secmech.ccmaesencrypt :
3177                                                 server->secmech.ccmaesdecrypt;
3178         rc = crypto_aead_setkey(tfm, key, SMB3_SIGN_KEY_SIZE);
3179         if (rc) {
3180                 cifs_dbg(VFS, "%s: Failed to set aead key %d\n", __func__, rc);
3181                 return rc;
3182         }
3183
3184         rc = crypto_aead_setauthsize(tfm, SMB2_SIGNATURE_SIZE);
3185         if (rc) {
3186                 cifs_dbg(VFS, "%s: Failed to set authsize %d\n", __func__, rc);
3187                 return rc;
3188         }
3189
3190         req = aead_request_alloc(tfm, GFP_KERNEL);
3191         if (!req) {
3192                 cifs_dbg(VFS, "%s: Failed to alloc aead request", __func__);
3193                 return -ENOMEM;
3194         }
3195
3196         if (!enc) {
3197                 memcpy(sign, &tr_hdr->Signature, SMB2_SIGNATURE_SIZE);
3198                 crypt_len += SMB2_SIGNATURE_SIZE;
3199         }
3200
3201         sg = init_sg(num_rqst, rqst, sign);
3202         if (!sg) {
3203                 cifs_dbg(VFS, "%s: Failed to init sg", __func__);
3204                 rc = -ENOMEM;
3205                 goto free_req;
3206         }
3207
3208         iv_len = crypto_aead_ivsize(tfm);
3209         iv = kzalloc(iv_len, GFP_KERNEL);
3210         if (!iv) {
3211                 cifs_dbg(VFS, "%s: Failed to alloc IV", __func__);
3212                 rc = -ENOMEM;
3213                 goto free_sg;
3214         }
3215         iv[0] = 3;
3216         memcpy(iv + 1, (char *)tr_hdr->Nonce, SMB3_AES128CMM_NONCE);
3217
3218         aead_request_set_crypt(req, sg, sg, crypt_len, iv);
3219         aead_request_set_ad(req, assoc_data_len);
3220
3221         aead_request_set_callback(req, CRYPTO_TFM_REQ_MAY_BACKLOG,
3222                                   crypto_req_done, &wait);
3223
3224         rc = crypto_wait_req(enc ? crypto_aead_encrypt(req)
3225                                 : crypto_aead_decrypt(req), &wait);
3226
3227         if (!rc && enc)
3228                 memcpy(&tr_hdr->Signature, sign, SMB2_SIGNATURE_SIZE);
3229
3230         kfree(iv);
3231 free_sg:
3232         kfree(sg);
3233 free_req:
3234         kfree(req);
3235         return rc;
3236 }
3237
3238 void
3239 smb3_free_compound_rqst(int num_rqst, struct smb_rqst *rqst)
3240 {
3241         int i, j;
3242
3243         for (i = 0; i < num_rqst; i++) {
3244                 if (rqst[i].rq_pages) {
3245                         for (j = rqst[i].rq_npages - 1; j >= 0; j--)
3246                                 put_page(rqst[i].rq_pages[j]);
3247                         kfree(rqst[i].rq_pages);
3248                 }
3249         }
3250 }
3251
3252 /*
3253  * This function will initialize new_rq and encrypt the content.
3254  * The first entry, new_rq[0], only contains a single iov which contains
3255  * a smb2_transform_hdr and is pre-allocated by the caller.
3256  * This function then populates new_rq[1+] with the content from olq_rq[0+].
3257  *
3258  * The end result is an array of smb_rqst structures where the first structure
3259  * only contains a single iov for the transform header which we then can pass
3260  * to crypt_message().
3261  *
3262  * new_rq[0].rq_iov[0] :  smb2_transform_hdr pre-allocated by the caller
3263  * new_rq[1+].rq_iov[*] == old_rq[0+].rq_iov[*] : SMB2/3 requests
3264  */
3265 static int
3266 smb3_init_transform_rq(struct TCP_Server_Info *server, int num_rqst,
3267                        struct smb_rqst *new_rq, struct smb_rqst *old_rq)
3268 {
3269         struct page **pages;
3270         struct smb2_transform_hdr *tr_hdr = new_rq[0].rq_iov[0].iov_base;
3271         unsigned int npages;
3272         unsigned int orig_len = 0;
3273         int i, j;
3274         int rc = -ENOMEM;
3275
3276         for (i = 1; i < num_rqst; i++) {
3277                 npages = old_rq[i - 1].rq_npages;
3278                 pages = kmalloc_array(npages, sizeof(struct page *),
3279                                       GFP_KERNEL);
3280                 if (!pages)
3281                         goto err_free;
3282
3283                 new_rq[i].rq_pages = pages;
3284                 new_rq[i].rq_npages = npages;
3285                 new_rq[i].rq_offset = old_rq[i - 1].rq_offset;
3286                 new_rq[i].rq_pagesz = old_rq[i - 1].rq_pagesz;
3287                 new_rq[i].rq_tailsz = old_rq[i - 1].rq_tailsz;
3288                 new_rq[i].rq_iov = old_rq[i - 1].rq_iov;
3289                 new_rq[i].rq_nvec = old_rq[i - 1].rq_nvec;
3290
3291                 orig_len += smb_rqst_len(server, &old_rq[i - 1]);
3292
3293                 for (j = 0; j < npages; j++) {
3294                         pages[j] = alloc_page(GFP_KERNEL|__GFP_HIGHMEM);
3295                         if (!pages[j])
3296                                 goto err_free;
3297                 }
3298
3299                 /* copy pages form the old */
3300                 for (j = 0; j < npages; j++) {
3301                         char *dst, *src;
3302                         unsigned int offset, len;
3303
3304                         rqst_page_get_length(&new_rq[i], j, &len, &offset);
3305
3306                         dst = (char *) kmap(new_rq[i].rq_pages[j]) + offset;
3307                         src = (char *) kmap(old_rq[i - 1].rq_pages[j]) + offset;
3308
3309                         memcpy(dst, src, len);
3310                         kunmap(new_rq[i].rq_pages[j]);
3311                         kunmap(old_rq[i - 1].rq_pages[j]);
3312                 }
3313         }
3314
3315         /* fill the 1st iov with a transform header */
3316         fill_transform_hdr(tr_hdr, orig_len, old_rq);
3317
3318         rc = crypt_message(server, num_rqst, new_rq, 1);
3319         cifs_dbg(FYI, "encrypt message returned %d", rc);
3320         if (rc)
3321                 goto err_free;
3322
3323         return rc;
3324
3325 err_free:
3326         smb3_free_compound_rqst(num_rqst - 1, &new_rq[1]);
3327         return rc;
3328 }
3329
3330 static int
3331 smb3_is_transform_hdr(void *buf)
3332 {
3333         struct smb2_transform_hdr *trhdr = buf;
3334
3335         return trhdr->ProtocolId == SMB2_TRANSFORM_PROTO_NUM;
3336 }
3337
3338 static int
3339 decrypt_raw_data(struct TCP_Server_Info *server, char *buf,
3340                  unsigned int buf_data_size, struct page **pages,
3341                  unsigned int npages, unsigned int page_data_size)
3342 {
3343         struct kvec iov[2];
3344         struct smb_rqst rqst = {NULL};
3345         int rc;
3346
3347         iov[0].iov_base = buf;
3348         iov[0].iov_len = sizeof(struct smb2_transform_hdr);
3349         iov[1].iov_base = buf + sizeof(struct smb2_transform_hdr);
3350         iov[1].iov_len = buf_data_size;
3351
3352         rqst.rq_iov = iov;
3353         rqst.rq_nvec = 2;
3354         rqst.rq_pages = pages;
3355         rqst.rq_npages = npages;
3356         rqst.rq_pagesz = PAGE_SIZE;
3357         rqst.rq_tailsz = (page_data_size % PAGE_SIZE) ? : PAGE_SIZE;
3358
3359         rc = crypt_message(server, 1, &rqst, 0);
3360         cifs_dbg(FYI, "decrypt message returned %d\n", rc);
3361
3362         if (rc)
3363                 return rc;
3364
3365         memmove(buf, iov[1].iov_base, buf_data_size);
3366
3367         server->total_read = buf_data_size + page_data_size;
3368
3369         return rc;
3370 }
3371
3372 static int
3373 read_data_into_pages(struct TCP_Server_Info *server, struct page **pages,
3374                      unsigned int npages, unsigned int len)
3375 {
3376         int i;
3377         int length;
3378
3379         for (i = 0; i < npages; i++) {
3380                 struct page *page = pages[i];
3381                 size_t n;
3382
3383                 n = len;
3384                 if (len >= PAGE_SIZE) {
3385                         /* enough data to fill the page */
3386                         n = PAGE_SIZE;
3387                         len -= n;
3388                 } else {
3389                         zero_user(page, len, PAGE_SIZE - len);
3390                         len = 0;
3391                 }
3392                 length = cifs_read_page_from_socket(server, page, 0, n);
3393                 if (length < 0)
3394                         return length;
3395                 server->total_read += length;
3396         }
3397
3398         return 0;
3399 }
3400
3401 static int
3402 init_read_bvec(struct page **pages, unsigned int npages, unsigned int data_size,
3403                unsigned int cur_off, struct bio_vec **page_vec)
3404 {
3405         struct bio_vec *bvec;
3406         int i;
3407
3408         bvec = kcalloc(npages, sizeof(struct bio_vec), GFP_KERNEL);
3409         if (!bvec)
3410                 return -ENOMEM;
3411
3412         for (i = 0; i < npages; i++) {
3413                 bvec[i].bv_page = pages[i];
3414                 bvec[i].bv_offset = (i == 0) ? cur_off : 0;
3415                 bvec[i].bv_len = min_t(unsigned int, PAGE_SIZE, data_size);
3416                 data_size -= bvec[i].bv_len;
3417         }
3418
3419         if (data_size != 0) {
3420                 cifs_dbg(VFS, "%s: something went wrong\n", __func__);
3421                 kfree(bvec);
3422                 return -EIO;
3423         }
3424
3425         *page_vec = bvec;
3426         return 0;
3427 }
3428
3429 static int