smb3: allow more detailed protocol info on open files for debugging
[muen/linux.git] / fs / cifs / smb2ops.c
1 /*
2  *  SMB2 version specific operations
3  *
4  *  Copyright (c) 2012, Jeff Layton <jlayton@redhat.com>
5  *
6  *  This library is free software; you can redistribute it and/or modify
7  *  it under the terms of the GNU General Public License v2 as published
8  *  by the Free Software Foundation.
9  *
10  *  This library is distributed in the hope that it will be useful,
11  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
12  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See
13  *  the GNU Lesser General Public License for more details.
14  *
15  *  You should have received a copy of the GNU Lesser General Public License
16  *  along with this library; if not, write to the Free Software
17  *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
18  */
19
20 #include <linux/pagemap.h>
21 #include <linux/vfs.h>
22 #include <linux/falloc.h>
23 #include <linux/scatterlist.h>
24 #include <linux/uuid.h>
25 #include <crypto/aead.h>
26 #include "cifsglob.h"
27 #include "smb2pdu.h"
28 #include "smb2proto.h"
29 #include "cifsproto.h"
30 #include "cifs_debug.h"
31 #include "cifs_unicode.h"
32 #include "smb2status.h"
33 #include "smb2glob.h"
34 #include "cifs_ioctl.h"
35 #include "smbdirect.h"
36
37 static int
38 change_conf(struct TCP_Server_Info *server)
39 {
40         server->credits += server->echo_credits + server->oplock_credits;
41         server->oplock_credits = server->echo_credits = 0;
42         switch (server->credits) {
43         case 0:
44                 return -1;
45         case 1:
46                 server->echoes = false;
47                 server->oplocks = false;
48                 cifs_dbg(VFS, "disabling echoes and oplocks\n");
49                 break;
50         case 2:
51                 server->echoes = true;
52                 server->oplocks = false;
53                 server->echo_credits = 1;
54                 cifs_dbg(FYI, "disabling oplocks\n");
55                 break;
56         default:
57                 server->echoes = true;
58                 if (enable_oplocks) {
59                         server->oplocks = true;
60                         server->oplock_credits = 1;
61                 } else
62                         server->oplocks = false;
63
64                 server->echo_credits = 1;
65         }
66         server->credits -= server->echo_credits + server->oplock_credits;
67         return 0;
68 }
69
70 static void
71 smb2_add_credits(struct TCP_Server_Info *server, const unsigned int add,
72                  const int optype)
73 {
74         int *val, rc = 0;
75         spin_lock(&server->req_lock);
76         val = server->ops->get_credits_field(server, optype);
77
78         /* eg found case where write overlapping reconnect messed up credits */
79         if (((optype & CIFS_OP_MASK) == CIFS_NEG_OP) && (*val != 0))
80                 trace_smb3_reconnect_with_invalid_credits(server->CurrentMid,
81                         server->hostname, *val);
82
83         *val += add;
84         if (*val > 65000) {
85                 *val = 65000; /* Don't get near 64K credits, avoid srv bugs */
86                 printk_once(KERN_WARNING "server overflowed SMB3 credits\n");
87         }
88         server->in_flight--;
89         if (server->in_flight == 0 && (optype & CIFS_OP_MASK) != CIFS_NEG_OP)
90                 rc = change_conf(server);
91         /*
92          * Sometimes server returns 0 credits on oplock break ack - we need to
93          * rebalance credits in this case.
94          */
95         else if (server->in_flight > 0 && server->oplock_credits == 0 &&
96                  server->oplocks) {
97                 if (server->credits > 1) {
98                         server->credits--;
99                         server->oplock_credits++;
100                 }
101         }
102         spin_unlock(&server->req_lock);
103         wake_up(&server->request_q);
104         if (rc)
105                 cifs_reconnect(server);
106 }
107
108 static void
109 smb2_set_credits(struct TCP_Server_Info *server, const int val)
110 {
111         spin_lock(&server->req_lock);
112         server->credits = val;
113         if (val == 1)
114                 server->reconnect_instance++;
115         spin_unlock(&server->req_lock);
116         /* don't log while holding the lock */
117         if (val == 1)
118                 cifs_dbg(FYI, "set credits to 1 due to smb2 reconnect\n");
119 }
120
121 static int *
122 smb2_get_credits_field(struct TCP_Server_Info *server, const int optype)
123 {
124         switch (optype) {
125         case CIFS_ECHO_OP:
126                 return &server->echo_credits;
127         case CIFS_OBREAK_OP:
128                 return &server->oplock_credits;
129         default:
130                 return &server->credits;
131         }
132 }
133
134 static unsigned int
135 smb2_get_credits(struct mid_q_entry *mid)
136 {
137         struct smb2_sync_hdr *shdr = (struct smb2_sync_hdr *)mid->resp_buf;
138
139         return le16_to_cpu(shdr->CreditRequest);
140 }
141
142 static int
143 smb2_wait_mtu_credits(struct TCP_Server_Info *server, unsigned int size,
144                       unsigned int *num, unsigned int *credits)
145 {
146         int rc = 0;
147         unsigned int scredits;
148
149         spin_lock(&server->req_lock);
150         while (1) {
151                 if (server->credits <= 0) {
152                         spin_unlock(&server->req_lock);
153                         cifs_num_waiters_inc(server);
154                         rc = wait_event_killable(server->request_q,
155                                         has_credits(server, &server->credits));
156                         cifs_num_waiters_dec(server);
157                         if (rc)
158                                 return rc;
159                         spin_lock(&server->req_lock);
160                 } else {
161                         if (server->tcpStatus == CifsExiting) {
162                                 spin_unlock(&server->req_lock);
163                                 return -ENOENT;
164                         }
165
166                         scredits = server->credits;
167                         /* can deadlock with reopen */
168                         if (scredits == 1) {
169                                 *num = SMB2_MAX_BUFFER_SIZE;
170                                 *credits = 0;
171                                 break;
172                         }
173
174                         /* leave one credit for a possible reopen */
175                         scredits--;
176                         *num = min_t(unsigned int, size,
177                                      scredits * SMB2_MAX_BUFFER_SIZE);
178
179                         *credits = DIV_ROUND_UP(*num, SMB2_MAX_BUFFER_SIZE);
180                         server->credits -= *credits;
181                         server->in_flight++;
182                         break;
183                 }
184         }
185         spin_unlock(&server->req_lock);
186         return rc;
187 }
188
189 static __u64
190 smb2_get_next_mid(struct TCP_Server_Info *server)
191 {
192         __u64 mid;
193         /* for SMB2 we need the current value */
194         spin_lock(&GlobalMid_Lock);
195         mid = server->CurrentMid++;
196         spin_unlock(&GlobalMid_Lock);
197         return mid;
198 }
199
200 static struct mid_q_entry *
201 smb2_find_mid(struct TCP_Server_Info *server, char *buf)
202 {
203         struct mid_q_entry *mid;
204         struct smb2_sync_hdr *shdr = (struct smb2_sync_hdr *)buf;
205         __u64 wire_mid = le64_to_cpu(shdr->MessageId);
206
207         if (shdr->ProtocolId == SMB2_TRANSFORM_PROTO_NUM) {
208                 cifs_dbg(VFS, "encrypted frame parsing not supported yet");
209                 return NULL;
210         }
211
212         spin_lock(&GlobalMid_Lock);
213         list_for_each_entry(mid, &server->pending_mid_q, qhead) {
214                 if ((mid->mid == wire_mid) &&
215                     (mid->mid_state == MID_REQUEST_SUBMITTED) &&
216                     (mid->command == shdr->Command)) {
217                         kref_get(&mid->refcount);
218                         spin_unlock(&GlobalMid_Lock);
219                         return mid;
220                 }
221         }
222         spin_unlock(&GlobalMid_Lock);
223         return NULL;
224 }
225
226 static void
227 smb2_dump_detail(void *buf, struct TCP_Server_Info *server)
228 {
229 #ifdef CONFIG_CIFS_DEBUG2
230         struct smb2_sync_hdr *shdr = (struct smb2_sync_hdr *)buf;
231
232         cifs_dbg(VFS, "Cmd: %d Err: 0x%x Flags: 0x%x Mid: %llu Pid: %d\n",
233                  shdr->Command, shdr->Status, shdr->Flags, shdr->MessageId,
234                  shdr->ProcessId);
235         cifs_dbg(VFS, "smb buf %p len %u\n", buf,
236                  server->ops->calc_smb_size(buf, server));
237 #endif
238 }
239
240 static bool
241 smb2_need_neg(struct TCP_Server_Info *server)
242 {
243         return server->max_read == 0;
244 }
245
246 static int
247 smb2_negotiate(const unsigned int xid, struct cifs_ses *ses)
248 {
249         int rc;
250         ses->server->CurrentMid = 0;
251         rc = SMB2_negotiate(xid, ses);
252         /* BB we probably don't need to retry with modern servers */
253         if (rc == -EAGAIN)
254                 rc = -EHOSTDOWN;
255         return rc;
256 }
257
258 static unsigned int
259 smb2_negotiate_wsize(struct cifs_tcon *tcon, struct smb_vol *volume_info)
260 {
261         struct TCP_Server_Info *server = tcon->ses->server;
262         unsigned int wsize;
263
264         /* start with specified wsize, or default */
265         wsize = volume_info->wsize ? volume_info->wsize : CIFS_DEFAULT_IOSIZE;
266         wsize = min_t(unsigned int, wsize, server->max_write);
267 #ifdef CONFIG_CIFS_SMB_DIRECT
268         if (server->rdma) {
269                 if (server->sign)
270                         wsize = min_t(unsigned int,
271                                 wsize, server->smbd_conn->max_fragmented_send_size);
272                 else
273                         wsize = min_t(unsigned int,
274                                 wsize, server->smbd_conn->max_readwrite_size);
275         }
276 #endif
277         if (!(server->capabilities & SMB2_GLOBAL_CAP_LARGE_MTU))
278                 wsize = min_t(unsigned int, wsize, SMB2_MAX_BUFFER_SIZE);
279
280         return wsize;
281 }
282
283 static unsigned int
284 smb3_negotiate_wsize(struct cifs_tcon *tcon, struct smb_vol *volume_info)
285 {
286         struct TCP_Server_Info *server = tcon->ses->server;
287         unsigned int wsize;
288
289         /* start with specified wsize, or default */
290         wsize = volume_info->wsize ? volume_info->wsize : SMB3_DEFAULT_IOSIZE;
291         wsize = min_t(unsigned int, wsize, server->max_write);
292 #ifdef CONFIG_CIFS_SMB_DIRECT
293         if (server->rdma) {
294                 if (server->sign)
295                         wsize = min_t(unsigned int,
296                                 wsize, server->smbd_conn->max_fragmented_send_size);
297                 else
298                         wsize = min_t(unsigned int,
299                                 wsize, server->smbd_conn->max_readwrite_size);
300         }
301 #endif
302         if (!(server->capabilities & SMB2_GLOBAL_CAP_LARGE_MTU))
303                 wsize = min_t(unsigned int, wsize, SMB2_MAX_BUFFER_SIZE);
304
305         return wsize;
306 }
307
308 static unsigned int
309 smb2_negotiate_rsize(struct cifs_tcon *tcon, struct smb_vol *volume_info)
310 {
311         struct TCP_Server_Info *server = tcon->ses->server;
312         unsigned int rsize;
313
314         /* start with specified rsize, or default */
315         rsize = volume_info->rsize ? volume_info->rsize : CIFS_DEFAULT_IOSIZE;
316         rsize = min_t(unsigned int, rsize, server->max_read);
317 #ifdef CONFIG_CIFS_SMB_DIRECT
318         if (server->rdma) {
319                 if (server->sign)
320                         rsize = min_t(unsigned int,
321                                 rsize, server->smbd_conn->max_fragmented_recv_size);
322                 else
323                         rsize = min_t(unsigned int,
324                                 rsize, server->smbd_conn->max_readwrite_size);
325         }
326 #endif
327
328         if (!(server->capabilities & SMB2_GLOBAL_CAP_LARGE_MTU))
329                 rsize = min_t(unsigned int, rsize, SMB2_MAX_BUFFER_SIZE);
330
331         return rsize;
332 }
333
334 static unsigned int
335 smb3_negotiate_rsize(struct cifs_tcon *tcon, struct smb_vol *volume_info)
336 {
337         struct TCP_Server_Info *server = tcon->ses->server;
338         unsigned int rsize;
339
340         /* start with specified rsize, or default */
341         rsize = volume_info->rsize ? volume_info->rsize : SMB3_DEFAULT_IOSIZE;
342         rsize = min_t(unsigned int, rsize, server->max_read);
343 #ifdef CONFIG_CIFS_SMB_DIRECT
344         if (server->rdma) {
345                 if (server->sign)
346                         rsize = min_t(unsigned int,
347                                 rsize, server->smbd_conn->max_fragmented_recv_size);
348                 else
349                         rsize = min_t(unsigned int,
350                                 rsize, server->smbd_conn->max_readwrite_size);
351         }
352 #endif
353
354         if (!(server->capabilities & SMB2_GLOBAL_CAP_LARGE_MTU))
355                 rsize = min_t(unsigned int, rsize, SMB2_MAX_BUFFER_SIZE);
356
357         return rsize;
358 }
359
360 static int
361 parse_server_interfaces(struct network_interface_info_ioctl_rsp *buf,
362                         size_t buf_len,
363                         struct cifs_server_iface **iface_list,
364                         size_t *iface_count)
365 {
366         struct network_interface_info_ioctl_rsp *p;
367         struct sockaddr_in *addr4;
368         struct sockaddr_in6 *addr6;
369         struct iface_info_ipv4 *p4;
370         struct iface_info_ipv6 *p6;
371         struct cifs_server_iface *info;
372         ssize_t bytes_left;
373         size_t next = 0;
374         int nb_iface = 0;
375         int rc = 0;
376
377         *iface_list = NULL;
378         *iface_count = 0;
379
380         /*
381          * Fist pass: count and sanity check
382          */
383
384         bytes_left = buf_len;
385         p = buf;
386         while (bytes_left >= sizeof(*p)) {
387                 nb_iface++;
388                 next = le32_to_cpu(p->Next);
389                 if (!next) {
390                         bytes_left -= sizeof(*p);
391                         break;
392                 }
393                 p = (struct network_interface_info_ioctl_rsp *)((u8 *)p+next);
394                 bytes_left -= next;
395         }
396
397         if (!nb_iface) {
398                 cifs_dbg(VFS, "%s: malformed interface info\n", __func__);
399                 rc = -EINVAL;
400                 goto out;
401         }
402
403         if (bytes_left || p->Next)
404                 cifs_dbg(VFS, "%s: incomplete interface info\n", __func__);
405
406
407         /*
408          * Second pass: extract info to internal structure
409          */
410
411         *iface_list = kcalloc(nb_iface, sizeof(**iface_list), GFP_KERNEL);
412         if (!*iface_list) {
413                 rc = -ENOMEM;
414                 goto out;
415         }
416
417         info = *iface_list;
418         bytes_left = buf_len;
419         p = buf;
420         while (bytes_left >= sizeof(*p)) {
421                 info->speed = le64_to_cpu(p->LinkSpeed);
422                 info->rdma_capable = le32_to_cpu(p->Capability & RDMA_CAPABLE);
423                 info->rss_capable = le32_to_cpu(p->Capability & RSS_CAPABLE);
424
425                 cifs_dbg(FYI, "%s: adding iface %zu\n", __func__, *iface_count);
426                 cifs_dbg(FYI, "%s: speed %zu bps\n", __func__, info->speed);
427                 cifs_dbg(FYI, "%s: capabilities 0x%08x\n", __func__,
428                          le32_to_cpu(p->Capability));
429
430                 switch (p->Family) {
431                 /*
432                  * The kernel and wire socket structures have the same
433                  * layout and use network byte order but make the
434                  * conversion explicit in case either one changes.
435                  */
436                 case INTERNETWORK:
437                         addr4 = (struct sockaddr_in *)&info->sockaddr;
438                         p4 = (struct iface_info_ipv4 *)p->Buffer;
439                         addr4->sin_family = AF_INET;
440                         memcpy(&addr4->sin_addr, &p4->IPv4Address, 4);
441
442                         /* [MS-SMB2] 2.2.32.5.1.1 Clients MUST ignore these */
443                         addr4->sin_port = cpu_to_be16(CIFS_PORT);
444
445                         cifs_dbg(FYI, "%s: ipv4 %pI4\n", __func__,
446                                  &addr4->sin_addr);
447                         break;
448                 case INTERNETWORKV6:
449                         addr6 = (struct sockaddr_in6 *)&info->sockaddr;
450                         p6 = (struct iface_info_ipv6 *)p->Buffer;
451                         addr6->sin6_family = AF_INET6;
452                         memcpy(&addr6->sin6_addr, &p6->IPv6Address, 16);
453
454                         /* [MS-SMB2] 2.2.32.5.1.2 Clients MUST ignore these */
455                         addr6->sin6_flowinfo = 0;
456                         addr6->sin6_scope_id = 0;
457                         addr6->sin6_port = cpu_to_be16(CIFS_PORT);
458
459                         cifs_dbg(FYI, "%s: ipv6 %pI6\n", __func__,
460                                  &addr6->sin6_addr);
461                         break;
462                 default:
463                         cifs_dbg(VFS,
464                                  "%s: skipping unsupported socket family\n",
465                                  __func__);
466                         goto next_iface;
467                 }
468
469                 (*iface_count)++;
470                 info++;
471 next_iface:
472                 next = le32_to_cpu(p->Next);
473                 if (!next)
474                         break;
475                 p = (struct network_interface_info_ioctl_rsp *)((u8 *)p+next);
476                 bytes_left -= next;
477         }
478
479         if (!*iface_count) {
480                 rc = -EINVAL;
481                 goto out;
482         }
483
484 out:
485         if (rc) {
486                 kfree(*iface_list);
487                 *iface_count = 0;
488                 *iface_list = NULL;
489         }
490         return rc;
491 }
492
493
494 static int
495 SMB3_request_interfaces(const unsigned int xid, struct cifs_tcon *tcon)
496 {
497         int rc;
498         unsigned int ret_data_len = 0;
499         struct network_interface_info_ioctl_rsp *out_buf = NULL;
500         struct cifs_server_iface *iface_list;
501         size_t iface_count;
502         struct cifs_ses *ses = tcon->ses;
503
504         rc = SMB2_ioctl(xid, tcon, NO_FILE_ID, NO_FILE_ID,
505                         FSCTL_QUERY_NETWORK_INTERFACE_INFO, true /* is_fsctl */,
506                         NULL /* no data input */, 0 /* no data input */,
507                         (char **)&out_buf, &ret_data_len);
508         if (rc == -EOPNOTSUPP) {
509                 cifs_dbg(FYI,
510                          "server does not support query network interfaces\n");
511                 goto out;
512         } else if (rc != 0) {
513                 cifs_dbg(VFS, "error %d on ioctl to get interface list\n", rc);
514                 goto out;
515         }
516
517         rc = parse_server_interfaces(out_buf, ret_data_len,
518                                      &iface_list, &iface_count);
519         if (rc)
520                 goto out;
521
522         spin_lock(&ses->iface_lock);
523         kfree(ses->iface_list);
524         ses->iface_list = iface_list;
525         ses->iface_count = iface_count;
526         ses->iface_last_update = jiffies;
527         spin_unlock(&ses->iface_lock);
528
529 out:
530         kfree(out_buf);
531         return rc;
532 }
533
534 static void
535 smb2_close_cached_fid(struct kref *ref)
536 {
537         struct cached_fid *cfid = container_of(ref, struct cached_fid,
538                                                refcount);
539
540         if (cfid->is_valid) {
541                 cifs_dbg(FYI, "clear cached root file handle\n");
542                 SMB2_close(0, cfid->tcon, cfid->fid->persistent_fid,
543                            cfid->fid->volatile_fid);
544                 cfid->is_valid = false;
545         }
546 }
547
548 void close_shroot(struct cached_fid *cfid)
549 {
550         mutex_lock(&cfid->fid_mutex);
551         kref_put(&cfid->refcount, smb2_close_cached_fid);
552         mutex_unlock(&cfid->fid_mutex);
553 }
554
555 void
556 smb2_cached_lease_break(struct work_struct *work)
557 {
558         struct cached_fid *cfid = container_of(work,
559                                 struct cached_fid, lease_break);
560
561         close_shroot(cfid);
562 }
563
564 /*
565  * Open the directory at the root of a share
566  */
567 int open_shroot(unsigned int xid, struct cifs_tcon *tcon, struct cifs_fid *pfid)
568 {
569         struct cifs_open_parms oparams;
570         int rc;
571         __le16 srch_path = 0; /* Null - since an open of top of share */
572         u8 oplock = SMB2_OPLOCK_LEVEL_II;
573
574         mutex_lock(&tcon->crfid.fid_mutex);
575         if (tcon->crfid.is_valid) {
576                 cifs_dbg(FYI, "found a cached root file handle\n");
577                 memcpy(pfid, tcon->crfid.fid, sizeof(struct cifs_fid));
578                 kref_get(&tcon->crfid.refcount);
579                 mutex_unlock(&tcon->crfid.fid_mutex);
580                 return 0;
581         }
582
583         oparams.tcon = tcon;
584         oparams.create_options = 0;
585         oparams.desired_access = FILE_READ_ATTRIBUTES;
586         oparams.disposition = FILE_OPEN;
587         oparams.fid = pfid;
588         oparams.reconnect = false;
589
590         rc = SMB2_open(xid, &oparams, &srch_path, &oplock, NULL, NULL, NULL);
591         if (rc == 0) {
592                 memcpy(tcon->crfid.fid, pfid, sizeof(struct cifs_fid));
593                 tcon->crfid.tcon = tcon;
594                 tcon->crfid.is_valid = true;
595                 kref_init(&tcon->crfid.refcount);
596                 kref_get(&tcon->crfid.refcount);
597         }
598         mutex_unlock(&tcon->crfid.fid_mutex);
599         return rc;
600 }
601
602 static void
603 smb3_qfs_tcon(const unsigned int xid, struct cifs_tcon *tcon)
604 {
605         int rc;
606         __le16 srch_path = 0; /* Null - open root of share */
607         u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
608         struct cifs_open_parms oparms;
609         struct cifs_fid fid;
610         bool no_cached_open = tcon->nohandlecache;
611
612         oparms.tcon = tcon;
613         oparms.desired_access = FILE_READ_ATTRIBUTES;
614         oparms.disposition = FILE_OPEN;
615         oparms.create_options = 0;
616         oparms.fid = &fid;
617         oparms.reconnect = false;
618
619         if (no_cached_open)
620                 rc = SMB2_open(xid, &oparms, &srch_path, &oplock, NULL, NULL,
621                                NULL);
622         else
623                 rc = open_shroot(xid, tcon, &fid);
624
625         if (rc)
626                 return;
627
628         SMB3_request_interfaces(xid, tcon);
629
630         SMB2_QFS_attr(xid, tcon, fid.persistent_fid, fid.volatile_fid,
631                         FS_ATTRIBUTE_INFORMATION);
632         SMB2_QFS_attr(xid, tcon, fid.persistent_fid, fid.volatile_fid,
633                         FS_DEVICE_INFORMATION);
634         SMB2_QFS_attr(xid, tcon, fid.persistent_fid, fid.volatile_fid,
635                         FS_VOLUME_INFORMATION);
636         SMB2_QFS_attr(xid, tcon, fid.persistent_fid, fid.volatile_fid,
637                         FS_SECTOR_SIZE_INFORMATION); /* SMB3 specific */
638         if (no_cached_open)
639                 SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid);
640         else
641                 close_shroot(&tcon->crfid);
642
643         return;
644 }
645
646 static void
647 smb2_qfs_tcon(const unsigned int xid, struct cifs_tcon *tcon)
648 {
649         int rc;
650         __le16 srch_path = 0; /* Null - open root of share */
651         u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
652         struct cifs_open_parms oparms;
653         struct cifs_fid fid;
654
655         oparms.tcon = tcon;
656         oparms.desired_access = FILE_READ_ATTRIBUTES;
657         oparms.disposition = FILE_OPEN;
658         oparms.create_options = 0;
659         oparms.fid = &fid;
660         oparms.reconnect = false;
661
662         rc = SMB2_open(xid, &oparms, &srch_path, &oplock, NULL, NULL, NULL);
663         if (rc)
664                 return;
665
666         SMB2_QFS_attr(xid, tcon, fid.persistent_fid, fid.volatile_fid,
667                         FS_ATTRIBUTE_INFORMATION);
668         SMB2_QFS_attr(xid, tcon, fid.persistent_fid, fid.volatile_fid,
669                         FS_DEVICE_INFORMATION);
670         SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid);
671         return;
672 }
673
674 static int
675 smb2_is_path_accessible(const unsigned int xid, struct cifs_tcon *tcon,
676                         struct cifs_sb_info *cifs_sb, const char *full_path)
677 {
678         int rc;
679         __le16 *utf16_path;
680         __u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
681         struct cifs_open_parms oparms;
682         struct cifs_fid fid;
683
684         if ((*full_path == 0) && tcon->crfid.is_valid)
685                 return 0;
686
687         utf16_path = cifs_convert_path_to_utf16(full_path, cifs_sb);
688         if (!utf16_path)
689                 return -ENOMEM;
690
691         oparms.tcon = tcon;
692         oparms.desired_access = FILE_READ_ATTRIBUTES;
693         oparms.disposition = FILE_OPEN;
694         if (backup_cred(cifs_sb))
695                 oparms.create_options = CREATE_OPEN_BACKUP_INTENT;
696         else
697                 oparms.create_options = 0;
698         oparms.fid = &fid;
699         oparms.reconnect = false;
700
701         rc = SMB2_open(xid, &oparms, utf16_path, &oplock, NULL, NULL, NULL);
702         if (rc) {
703                 kfree(utf16_path);
704                 return rc;
705         }
706
707         rc = SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid);
708         kfree(utf16_path);
709         return rc;
710 }
711
712 static int
713 smb2_get_srv_inum(const unsigned int xid, struct cifs_tcon *tcon,
714                   struct cifs_sb_info *cifs_sb, const char *full_path,
715                   u64 *uniqueid, FILE_ALL_INFO *data)
716 {
717         *uniqueid = le64_to_cpu(data->IndexNumber);
718         return 0;
719 }
720
721 static int
722 smb2_query_file_info(const unsigned int xid, struct cifs_tcon *tcon,
723                      struct cifs_fid *fid, FILE_ALL_INFO *data)
724 {
725         int rc;
726         struct smb2_file_all_info *smb2_data;
727
728         smb2_data = kzalloc(sizeof(struct smb2_file_all_info) + PATH_MAX * 2,
729                             GFP_KERNEL);
730         if (smb2_data == NULL)
731                 return -ENOMEM;
732
733         rc = SMB2_query_info(xid, tcon, fid->persistent_fid, fid->volatile_fid,
734                              smb2_data);
735         if (!rc)
736                 move_smb2_info_to_cifs(data, smb2_data);
737         kfree(smb2_data);
738         return rc;
739 }
740
741 #ifdef CONFIG_CIFS_XATTR
742 static ssize_t
743 move_smb2_ea_to_cifs(char *dst, size_t dst_size,
744                      struct smb2_file_full_ea_info *src, size_t src_size,
745                      const unsigned char *ea_name)
746 {
747         int rc = 0;
748         unsigned int ea_name_len = ea_name ? strlen(ea_name) : 0;
749         char *name, *value;
750         size_t buf_size = dst_size;
751         size_t name_len, value_len, user_name_len;
752
753         while (src_size > 0) {
754                 name = &src->ea_data[0];
755                 name_len = (size_t)src->ea_name_length;
756                 value = &src->ea_data[src->ea_name_length + 1];
757                 value_len = (size_t)le16_to_cpu(src->ea_value_length);
758
759                 if (name_len == 0) {
760                         break;
761                 }
762
763                 if (src_size < 8 + name_len + 1 + value_len) {
764                         cifs_dbg(FYI, "EA entry goes beyond length of list\n");
765                         rc = -EIO;
766                         goto out;
767                 }
768
769                 if (ea_name) {
770                         if (ea_name_len == name_len &&
771                             memcmp(ea_name, name, name_len) == 0) {
772                                 rc = value_len;
773                                 if (dst_size == 0)
774                                         goto out;
775                                 if (dst_size < value_len) {
776                                         rc = -ERANGE;
777                                         goto out;
778                                 }
779                                 memcpy(dst, value, value_len);
780                                 goto out;
781                         }
782                 } else {
783                         /* 'user.' plus a terminating null */
784                         user_name_len = 5 + 1 + name_len;
785
786                         if (buf_size == 0) {
787                                 /* skip copy - calc size only */
788                                 rc += user_name_len;
789                         } else if (dst_size >= user_name_len) {
790                                 dst_size -= user_name_len;
791                                 memcpy(dst, "user.", 5);
792                                 dst += 5;
793                                 memcpy(dst, src->ea_data, name_len);
794                                 dst += name_len;
795                                 *dst = 0;
796                                 ++dst;
797                                 rc += user_name_len;
798                         } else {
799                                 /* stop before overrun buffer */
800                                 rc = -ERANGE;
801                                 break;
802                         }
803                 }
804
805                 if (!src->next_entry_offset)
806                         break;
807
808                 if (src_size < le32_to_cpu(src->next_entry_offset)) {
809                         /* stop before overrun buffer */
810                         rc = -ERANGE;
811                         break;
812                 }
813                 src_size -= le32_to_cpu(src->next_entry_offset);
814                 src = (void *)((char *)src +
815                                le32_to_cpu(src->next_entry_offset));
816         }
817
818         /* didn't find the named attribute */
819         if (ea_name)
820                 rc = -ENODATA;
821
822 out:
823         return (ssize_t)rc;
824 }
825
826 static ssize_t
827 smb2_query_eas(const unsigned int xid, struct cifs_tcon *tcon,
828                const unsigned char *path, const unsigned char *ea_name,
829                char *ea_data, size_t buf_size,
830                struct cifs_sb_info *cifs_sb)
831 {
832         int rc;
833         __le16 *utf16_path;
834         __u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
835         struct cifs_open_parms oparms;
836         struct cifs_fid fid;
837         struct smb2_file_full_ea_info *smb2_data;
838         int ea_buf_size = SMB2_MIN_EA_BUF;
839
840         utf16_path = cifs_convert_path_to_utf16(path, cifs_sb);
841         if (!utf16_path)
842                 return -ENOMEM;
843
844         oparms.tcon = tcon;
845         oparms.desired_access = FILE_READ_EA;
846         oparms.disposition = FILE_OPEN;
847         if (backup_cred(cifs_sb))
848                 oparms.create_options = CREATE_OPEN_BACKUP_INTENT;
849         else
850                 oparms.create_options = 0;
851         oparms.fid = &fid;
852         oparms.reconnect = false;
853
854         rc = SMB2_open(xid, &oparms, utf16_path, &oplock, NULL, NULL, NULL);
855         kfree(utf16_path);
856         if (rc) {
857                 cifs_dbg(FYI, "open failed rc=%d\n", rc);
858                 return rc;
859         }
860
861         while (1) {
862                 smb2_data = kzalloc(ea_buf_size, GFP_KERNEL);
863                 if (smb2_data == NULL) {
864                         SMB2_close(xid, tcon, fid.persistent_fid,
865                                    fid.volatile_fid);
866                         return -ENOMEM;
867                 }
868
869                 rc = SMB2_query_eas(xid, tcon, fid.persistent_fid,
870                                     fid.volatile_fid,
871                                     ea_buf_size, smb2_data);
872
873                 if (rc != -E2BIG)
874                         break;
875
876                 kfree(smb2_data);
877                 ea_buf_size <<= 1;
878
879                 if (ea_buf_size > SMB2_MAX_EA_BUF) {
880                         cifs_dbg(VFS, "EA size is too large\n");
881                         SMB2_close(xid, tcon, fid.persistent_fid,
882                                    fid.volatile_fid);
883                         return -ENOMEM;
884                 }
885         }
886
887         SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid);
888
889         /*
890          * If ea_name is NULL (listxattr) and there are no EAs, return 0 as it's
891          * not an error. Otherwise, the specified ea_name was not found.
892          */
893         if (!rc)
894                 rc = move_smb2_ea_to_cifs(ea_data, buf_size, smb2_data,
895                                           SMB2_MAX_EA_BUF, ea_name);
896         else if (!ea_name && rc == -ENODATA)
897                 rc = 0;
898
899         kfree(smb2_data);
900         return rc;
901 }
902
903
904 static int
905 smb2_set_ea(const unsigned int xid, struct cifs_tcon *tcon,
906             const char *path, const char *ea_name, const void *ea_value,
907             const __u16 ea_value_len, const struct nls_table *nls_codepage,
908             struct cifs_sb_info *cifs_sb)
909 {
910         int rc;
911         __le16 *utf16_path;
912         __u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
913         struct cifs_open_parms oparms;
914         struct cifs_fid fid;
915         struct smb2_file_full_ea_info *ea;
916         int ea_name_len = strlen(ea_name);
917         int len;
918
919         if (ea_name_len > 255)
920                 return -EINVAL;
921
922         utf16_path = cifs_convert_path_to_utf16(path, cifs_sb);
923         if (!utf16_path)
924                 return -ENOMEM;
925
926         oparms.tcon = tcon;
927         oparms.desired_access = FILE_WRITE_EA;
928         oparms.disposition = FILE_OPEN;
929         if (backup_cred(cifs_sb))
930                 oparms.create_options = CREATE_OPEN_BACKUP_INTENT;
931         else
932                 oparms.create_options = 0;
933         oparms.fid = &fid;
934         oparms.reconnect = false;
935
936         rc = SMB2_open(xid, &oparms, utf16_path, &oplock, NULL, NULL, NULL);
937         kfree(utf16_path);
938         if (rc) {
939                 cifs_dbg(FYI, "open failed rc=%d\n", rc);
940                 return rc;
941         }
942
943         len = sizeof(ea) + ea_name_len + ea_value_len + 1;
944         ea = kzalloc(len, GFP_KERNEL);
945         if (ea == NULL) {
946                 SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid);
947                 return -ENOMEM;
948         }
949
950         ea->ea_name_length = ea_name_len;
951         ea->ea_value_length = cpu_to_le16(ea_value_len);
952         memcpy(ea->ea_data, ea_name, ea_name_len + 1);
953         memcpy(ea->ea_data + ea_name_len + 1, ea_value, ea_value_len);
954
955         rc = SMB2_set_ea(xid, tcon, fid.persistent_fid, fid.volatile_fid, ea,
956                          len);
957         kfree(ea);
958
959         SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid);
960
961         return rc;
962 }
963 #endif
964
965 static bool
966 smb2_can_echo(struct TCP_Server_Info *server)
967 {
968         return server->echoes;
969 }
970
971 static void
972 smb2_clear_stats(struct cifs_tcon *tcon)
973 {
974         int i;
975         for (i = 0; i < NUMBER_OF_SMB2_COMMANDS; i++) {
976                 atomic_set(&tcon->stats.smb2_stats.smb2_com_sent[i], 0);
977                 atomic_set(&tcon->stats.smb2_stats.smb2_com_failed[i], 0);
978         }
979 }
980
981 static void
982 smb2_dump_share_caps(struct seq_file *m, struct cifs_tcon *tcon)
983 {
984         seq_puts(m, "\n\tShare Capabilities:");
985         if (tcon->capabilities & SMB2_SHARE_CAP_DFS)
986                 seq_puts(m, " DFS,");
987         if (tcon->capabilities & SMB2_SHARE_CAP_CONTINUOUS_AVAILABILITY)
988                 seq_puts(m, " CONTINUOUS AVAILABILITY,");
989         if (tcon->capabilities & SMB2_SHARE_CAP_SCALEOUT)
990                 seq_puts(m, " SCALEOUT,");
991         if (tcon->capabilities & SMB2_SHARE_CAP_CLUSTER)
992                 seq_puts(m, " CLUSTER,");
993         if (tcon->capabilities & SMB2_SHARE_CAP_ASYMMETRIC)
994                 seq_puts(m, " ASYMMETRIC,");
995         if (tcon->capabilities == 0)
996                 seq_puts(m, " None");
997         if (tcon->ss_flags & SSINFO_FLAGS_ALIGNED_DEVICE)
998                 seq_puts(m, " Aligned,");
999         if (tcon->ss_flags & SSINFO_FLAGS_PARTITION_ALIGNED_ON_DEVICE)
1000                 seq_puts(m, " Partition Aligned,");
1001         if (tcon->ss_flags & SSINFO_FLAGS_NO_SEEK_PENALTY)
1002                 seq_puts(m, " SSD,");
1003         if (tcon->ss_flags & SSINFO_FLAGS_TRIM_ENABLED)
1004                 seq_puts(m, " TRIM-support,");
1005
1006         seq_printf(m, "\tShare Flags: 0x%x", tcon->share_flags);
1007         seq_printf(m, "\n\ttid: 0x%x", tcon->tid);
1008         if (tcon->perf_sector_size)
1009                 seq_printf(m, "\tOptimal sector size: 0x%x",
1010                            tcon->perf_sector_size);
1011         seq_printf(m, "\tMaximal Access: 0x%x", tcon->maximal_access);
1012 }
1013
1014 static void
1015 smb2_print_stats(struct seq_file *m, struct cifs_tcon *tcon)
1016 {
1017         atomic_t *sent = tcon->stats.smb2_stats.smb2_com_sent;
1018         atomic_t *failed = tcon->stats.smb2_stats.smb2_com_failed;
1019
1020         /*
1021          *  Can't display SMB2_NEGOTIATE, SESSION_SETUP, LOGOFF, CANCEL and ECHO
1022          *  totals (requests sent) since those SMBs are per-session not per tcon
1023          */
1024         seq_printf(m, "\nBytes read: %llu  Bytes written: %llu",
1025                    (long long)(tcon->bytes_read),
1026                    (long long)(tcon->bytes_written));
1027         seq_printf(m, "\nOpen files: %d total (local), %d open on server",
1028                    atomic_read(&tcon->num_local_opens),
1029                    atomic_read(&tcon->num_remote_opens));
1030         seq_printf(m, "\nTreeConnects: %d total %d failed",
1031                    atomic_read(&sent[SMB2_TREE_CONNECT_HE]),
1032                    atomic_read(&failed[SMB2_TREE_CONNECT_HE]));
1033         seq_printf(m, "\nTreeDisconnects: %d total %d failed",
1034                    atomic_read(&sent[SMB2_TREE_DISCONNECT_HE]),
1035                    atomic_read(&failed[SMB2_TREE_DISCONNECT_HE]));
1036         seq_printf(m, "\nCreates: %d total %d failed",
1037                    atomic_read(&sent[SMB2_CREATE_HE]),
1038                    atomic_read(&failed[SMB2_CREATE_HE]));
1039         seq_printf(m, "\nCloses: %d total %d failed",
1040                    atomic_read(&sent[SMB2_CLOSE_HE]),
1041                    atomic_read(&failed[SMB2_CLOSE_HE]));
1042         seq_printf(m, "\nFlushes: %d total %d failed",
1043                    atomic_read(&sent[SMB2_FLUSH_HE]),
1044                    atomic_read(&failed[SMB2_FLUSH_HE]));
1045         seq_printf(m, "\nReads: %d total %d failed",
1046                    atomic_read(&sent[SMB2_READ_HE]),
1047                    atomic_read(&failed[SMB2_READ_HE]));
1048         seq_printf(m, "\nWrites: %d total %d failed",
1049                    atomic_read(&sent[SMB2_WRITE_HE]),
1050                    atomic_read(&failed[SMB2_WRITE_HE]));
1051         seq_printf(m, "\nLocks: %d total %d failed",
1052                    atomic_read(&sent[SMB2_LOCK_HE]),
1053                    atomic_read(&failed[SMB2_LOCK_HE]));
1054         seq_printf(m, "\nIOCTLs: %d total %d failed",
1055                    atomic_read(&sent[SMB2_IOCTL_HE]),
1056                    atomic_read(&failed[SMB2_IOCTL_HE]));
1057         seq_printf(m, "\nQueryDirectories: %d total %d failed",
1058                    atomic_read(&sent[SMB2_QUERY_DIRECTORY_HE]),
1059                    atomic_read(&failed[SMB2_QUERY_DIRECTORY_HE]));
1060         seq_printf(m, "\nChangeNotifies: %d total %d failed",
1061                    atomic_read(&sent[SMB2_CHANGE_NOTIFY_HE]),
1062                    atomic_read(&failed[SMB2_CHANGE_NOTIFY_HE]));
1063         seq_printf(m, "\nQueryInfos: %d total %d failed",
1064                    atomic_read(&sent[SMB2_QUERY_INFO_HE]),
1065                    atomic_read(&failed[SMB2_QUERY_INFO_HE]));
1066         seq_printf(m, "\nSetInfos: %d total %d failed",
1067                    atomic_read(&sent[SMB2_SET_INFO_HE]),
1068                    atomic_read(&failed[SMB2_SET_INFO_HE]));
1069         seq_printf(m, "\nOplockBreaks: %d sent %d failed",
1070                    atomic_read(&sent[SMB2_OPLOCK_BREAK_HE]),
1071                    atomic_read(&failed[SMB2_OPLOCK_BREAK_HE]));
1072 }
1073
1074 static void
1075 smb2_set_fid(struct cifsFileInfo *cfile, struct cifs_fid *fid, __u32 oplock)
1076 {
1077         struct cifsInodeInfo *cinode = CIFS_I(d_inode(cfile->dentry));
1078         struct TCP_Server_Info *server = tlink_tcon(cfile->tlink)->ses->server;
1079
1080         cfile->fid.persistent_fid = fid->persistent_fid;
1081         cfile->fid.volatile_fid = fid->volatile_fid;
1082 #ifdef CONFIG_CIFS_DEBUG2
1083         cfile->fid.mid = fid->mid;
1084 #endif /* CIFS_DEBUG2 */
1085         server->ops->set_oplock_level(cinode, oplock, fid->epoch,
1086                                       &fid->purge_cache);
1087         cinode->can_cache_brlcks = CIFS_CACHE_WRITE(cinode);
1088         memcpy(cfile->fid.create_guid, fid->create_guid, 16);
1089 }
1090
1091 static void
1092 smb2_close_file(const unsigned int xid, struct cifs_tcon *tcon,
1093                 struct cifs_fid *fid)
1094 {
1095         SMB2_close(xid, tcon, fid->persistent_fid, fid->volatile_fid);
1096 }
1097
1098 static int
1099 SMB2_request_res_key(const unsigned int xid, struct cifs_tcon *tcon,
1100                      u64 persistent_fid, u64 volatile_fid,
1101                      struct copychunk_ioctl *pcchunk)
1102 {
1103         int rc;
1104         unsigned int ret_data_len;
1105         struct resume_key_req *res_key;
1106
1107         rc = SMB2_ioctl(xid, tcon, persistent_fid, volatile_fid,
1108                         FSCTL_SRV_REQUEST_RESUME_KEY, true /* is_fsctl */,
1109                         NULL, 0 /* no input */,
1110                         (char **)&res_key, &ret_data_len);
1111
1112         if (rc) {
1113                 cifs_dbg(VFS, "refcpy ioctl error %d getting resume key\n", rc);
1114                 goto req_res_key_exit;
1115         }
1116         if (ret_data_len < sizeof(struct resume_key_req)) {
1117                 cifs_dbg(VFS, "Invalid refcopy resume key length\n");
1118                 rc = -EINVAL;
1119                 goto req_res_key_exit;
1120         }
1121         memcpy(pcchunk->SourceKey, res_key->ResumeKey, COPY_CHUNK_RES_KEY_SIZE);
1122
1123 req_res_key_exit:
1124         kfree(res_key);
1125         return rc;
1126 }
1127
1128 static int
1129 smb2_ioctl_query_info(const unsigned int xid,
1130                       struct cifs_tcon *tcon,
1131                       __le16 *path, int is_dir,
1132                       unsigned long p)
1133 {
1134         struct cifs_ses *ses = tcon->ses;
1135         char __user *arg = (char __user *)p;
1136         struct smb_query_info qi;
1137         struct smb_query_info __user *pqi;
1138         int rc = 0;
1139         int flags = 0;
1140         struct smb2_query_info_rsp *rsp = NULL;
1141         void *buffer = NULL;
1142         struct smb_rqst rqst[3];
1143         int resp_buftype[3];
1144         struct kvec rsp_iov[3];
1145         struct kvec open_iov[SMB2_CREATE_IOV_SIZE];
1146         struct cifs_open_parms oparms;
1147         u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
1148         struct cifs_fid fid;
1149         struct kvec qi_iov[1];
1150         struct kvec close_iov[1];
1151
1152         memset(rqst, 0, sizeof(rqst));
1153         resp_buftype[0] = resp_buftype[1] = resp_buftype[2] = CIFS_NO_BUFFER;
1154         memset(rsp_iov, 0, sizeof(rsp_iov));
1155
1156         if (copy_from_user(&qi, arg, sizeof(struct smb_query_info)))
1157                 return -EFAULT;
1158
1159         if (qi.output_buffer_length > 1024)
1160                 return -EINVAL;
1161
1162         if (!ses || !(ses->server))
1163                 return -EIO;
1164
1165         if (smb3_encryption_required(tcon))
1166                 flags |= CIFS_TRANSFORM_REQ;
1167
1168         buffer = kmalloc(qi.output_buffer_length, GFP_KERNEL);
1169         if (buffer == NULL)
1170                 return -ENOMEM;
1171
1172         if (copy_from_user(buffer, arg + sizeof(struct smb_query_info),
1173                            qi.output_buffer_length)) {
1174                 rc = -EFAULT;
1175                 goto iqinf_exit;
1176         }
1177
1178         /* Open */
1179         memset(&open_iov, 0, sizeof(open_iov));
1180         rqst[0].rq_iov = open_iov;
1181         rqst[0].rq_nvec = SMB2_CREATE_IOV_SIZE;
1182
1183         memset(&oparms, 0, sizeof(oparms));
1184         oparms.tcon = tcon;
1185         oparms.desired_access = FILE_READ_ATTRIBUTES | READ_CONTROL;
1186         oparms.disposition = FILE_OPEN;
1187         if (is_dir)
1188                 oparms.create_options = CREATE_NOT_FILE;
1189         else
1190                 oparms.create_options = CREATE_NOT_DIR;
1191         oparms.fid = &fid;
1192         oparms.reconnect = false;
1193
1194         rc = SMB2_open_init(tcon, &rqst[0], &oplock, &oparms, path);
1195         if (rc)
1196                 goto iqinf_exit;
1197         smb2_set_next_command(ses->server, &rqst[0]);
1198
1199         /* Query */
1200         memset(&qi_iov, 0, sizeof(qi_iov));
1201         rqst[1].rq_iov = qi_iov;
1202         rqst[1].rq_nvec = 1;
1203
1204         rc = SMB2_query_info_init(tcon, &rqst[1], COMPOUND_FID, COMPOUND_FID,
1205                                   qi.file_info_class, qi.info_type,
1206                                   qi.additional_information,
1207                                   qi.input_buffer_length,
1208                                   qi.output_buffer_length, buffer);
1209         if (rc)
1210                 goto iqinf_exit;
1211         smb2_set_next_command(ses->server, &rqst[1]);
1212         smb2_set_related(&rqst[1]);
1213
1214         /* Close */
1215         memset(&close_iov, 0, sizeof(close_iov));
1216         rqst[2].rq_iov = close_iov;
1217         rqst[2].rq_nvec = 1;
1218
1219         rc = SMB2_close_init(tcon, &rqst[2], COMPOUND_FID, COMPOUND_FID);
1220         if (rc)
1221                 goto iqinf_exit;
1222         smb2_set_related(&rqst[2]);
1223
1224         rc = compound_send_recv(xid, ses, flags, 3, rqst,
1225                                 resp_buftype, rsp_iov);
1226         if (rc)
1227                 goto iqinf_exit;
1228         pqi = (struct smb_query_info __user *)arg;
1229         rsp = (struct smb2_query_info_rsp *)rsp_iov[1].iov_base;
1230         if (le32_to_cpu(rsp->OutputBufferLength) < qi.input_buffer_length)
1231                 qi.input_buffer_length = le32_to_cpu(rsp->OutputBufferLength);
1232         if (copy_to_user(&pqi->input_buffer_length, &qi.input_buffer_length,
1233                          sizeof(qi.input_buffer_length))) {
1234                 rc = -EFAULT;
1235                 goto iqinf_exit;
1236         }
1237         if (copy_to_user(pqi + 1, rsp->Buffer, qi.input_buffer_length)) {
1238                 rc = -EFAULT;
1239                 goto iqinf_exit;
1240         }
1241
1242  iqinf_exit:
1243         kfree(buffer);
1244         SMB2_open_free(&rqst[0]);
1245         SMB2_query_info_free(&rqst[1]);
1246         SMB2_close_free(&rqst[2]);
1247         free_rsp_buf(resp_buftype[0], rsp_iov[0].iov_base);
1248         free_rsp_buf(resp_buftype[1], rsp_iov[1].iov_base);
1249         free_rsp_buf(resp_buftype[2], rsp_iov[2].iov_base);
1250         return rc;
1251 }
1252
1253 static ssize_t
1254 smb2_copychunk_range(const unsigned int xid,
1255                         struct cifsFileInfo *srcfile,
1256                         struct cifsFileInfo *trgtfile, u64 src_off,
1257                         u64 len, u64 dest_off)
1258 {
1259         int rc;
1260         unsigned int ret_data_len;
1261         struct copychunk_ioctl *pcchunk;
1262         struct copychunk_ioctl_rsp *retbuf = NULL;
1263         struct cifs_tcon *tcon;
1264         int chunks_copied = 0;
1265         bool chunk_sizes_updated = false;
1266         ssize_t bytes_written, total_bytes_written = 0;
1267
1268         pcchunk = kmalloc(sizeof(struct copychunk_ioctl), GFP_KERNEL);
1269
1270         if (pcchunk == NULL)
1271                 return -ENOMEM;
1272
1273         cifs_dbg(FYI, "in smb2_copychunk_range - about to call request res key\n");
1274         /* Request a key from the server to identify the source of the copy */
1275         rc = SMB2_request_res_key(xid, tlink_tcon(srcfile->tlink),
1276                                 srcfile->fid.persistent_fid,
1277                                 srcfile->fid.volatile_fid, pcchunk);
1278
1279         /* Note: request_res_key sets res_key null only if rc !=0 */
1280         if (rc)
1281                 goto cchunk_out;
1282
1283         /* For now array only one chunk long, will make more flexible later */
1284         pcchunk->ChunkCount = cpu_to_le32(1);
1285         pcchunk->Reserved = 0;
1286         pcchunk->Reserved2 = 0;
1287
1288         tcon = tlink_tcon(trgtfile->tlink);
1289
1290         while (len > 0) {
1291                 pcchunk->SourceOffset = cpu_to_le64(src_off);
1292                 pcchunk->TargetOffset = cpu_to_le64(dest_off);
1293                 pcchunk->Length =
1294                         cpu_to_le32(min_t(u32, len, tcon->max_bytes_chunk));
1295
1296                 /* Request server copy to target from src identified by key */
1297                 rc = SMB2_ioctl(xid, tcon, trgtfile->fid.persistent_fid,
1298                         trgtfile->fid.volatile_fid, FSCTL_SRV_COPYCHUNK_WRITE,
1299                         true /* is_fsctl */, (char *)pcchunk,
1300                         sizeof(struct copychunk_ioctl), (char **)&retbuf,
1301                         &ret_data_len);
1302                 if (rc == 0) {
1303                         if (ret_data_len !=
1304                                         sizeof(struct copychunk_ioctl_rsp)) {
1305                                 cifs_dbg(VFS, "invalid cchunk response size\n");
1306                                 rc = -EIO;
1307                                 goto cchunk_out;
1308                         }
1309                         if (retbuf->TotalBytesWritten == 0) {
1310                                 cifs_dbg(FYI, "no bytes copied\n");
1311                                 rc = -EIO;
1312                                 goto cchunk_out;
1313                         }
1314                         /*
1315                          * Check if server claimed to write more than we asked
1316                          */
1317                         if (le32_to_cpu(retbuf->TotalBytesWritten) >
1318                             le32_to_cpu(pcchunk->Length)) {
1319                                 cifs_dbg(VFS, "invalid copy chunk response\n");
1320                                 rc = -EIO;
1321                                 goto cchunk_out;
1322                         }
1323                         if (le32_to_cpu(retbuf->ChunksWritten) != 1) {
1324                                 cifs_dbg(VFS, "invalid num chunks written\n");
1325                                 rc = -EIO;
1326                                 goto cchunk_out;
1327                         }
1328                         chunks_copied++;
1329
1330                         bytes_written = le32_to_cpu(retbuf->TotalBytesWritten);
1331                         src_off += bytes_written;
1332                         dest_off += bytes_written;
1333                         len -= bytes_written;
1334                         total_bytes_written += bytes_written;
1335
1336                         cifs_dbg(FYI, "Chunks %d PartialChunk %d Total %zu\n",
1337                                 le32_to_cpu(retbuf->ChunksWritten),
1338                                 le32_to_cpu(retbuf->ChunkBytesWritten),
1339                                 bytes_written);
1340                 } else if (rc == -EINVAL) {
1341                         if (ret_data_len != sizeof(struct copychunk_ioctl_rsp))
1342                                 goto cchunk_out;
1343
1344                         cifs_dbg(FYI, "MaxChunks %d BytesChunk %d MaxCopy %d\n",
1345                                 le32_to_cpu(retbuf->ChunksWritten),
1346                                 le32_to_cpu(retbuf->ChunkBytesWritten),
1347                                 le32_to_cpu(retbuf->TotalBytesWritten));
1348
1349                         /*
1350                          * Check if this is the first request using these sizes,
1351                          * (ie check if copy succeed once with original sizes
1352                          * and check if the server gave us different sizes after
1353                          * we already updated max sizes on previous request).
1354                          * if not then why is the server returning an error now
1355                          */
1356                         if ((chunks_copied != 0) || chunk_sizes_updated)
1357                                 goto cchunk_out;
1358
1359                         /* Check that server is not asking us to grow size */
1360                         if (le32_to_cpu(retbuf->ChunkBytesWritten) <
1361                                         tcon->max_bytes_chunk)
1362                                 tcon->max_bytes_chunk =
1363                                         le32_to_cpu(retbuf->ChunkBytesWritten);
1364                         else
1365                                 goto cchunk_out; /* server gave us bogus size */
1366
1367                         /* No need to change MaxChunks since already set to 1 */
1368                         chunk_sizes_updated = true;
1369                 } else
1370                         goto cchunk_out;
1371         }
1372
1373 cchunk_out:
1374         kfree(pcchunk);
1375         kfree(retbuf);
1376         if (rc)
1377                 return rc;
1378         else
1379                 return total_bytes_written;
1380 }
1381
1382 static int
1383 smb2_flush_file(const unsigned int xid, struct cifs_tcon *tcon,
1384                 struct cifs_fid *fid)
1385 {
1386         return SMB2_flush(xid, tcon, fid->persistent_fid, fid->volatile_fid);
1387 }
1388
1389 static unsigned int
1390 smb2_read_data_offset(char *buf)
1391 {
1392         struct smb2_read_rsp *rsp = (struct smb2_read_rsp *)buf;
1393         return rsp->DataOffset;
1394 }
1395
1396 static unsigned int
1397 smb2_read_data_length(char *buf, bool in_remaining)
1398 {
1399         struct smb2_read_rsp *rsp = (struct smb2_read_rsp *)buf;
1400
1401         if (in_remaining)
1402                 return le32_to_cpu(rsp->DataRemaining);
1403
1404         return le32_to_cpu(rsp->DataLength);
1405 }
1406
1407
1408 static int
1409 smb2_sync_read(const unsigned int xid, struct cifs_fid *pfid,
1410                struct cifs_io_parms *parms, unsigned int *bytes_read,
1411                char **buf, int *buf_type)
1412 {
1413         parms->persistent_fid = pfid->persistent_fid;
1414         parms->volatile_fid = pfid->volatile_fid;
1415         return SMB2_read(xid, parms, bytes_read, buf, buf_type);
1416 }
1417
1418 static int
1419 smb2_sync_write(const unsigned int xid, struct cifs_fid *pfid,
1420                 struct cifs_io_parms *parms, unsigned int *written,
1421                 struct kvec *iov, unsigned long nr_segs)
1422 {
1423
1424         parms->persistent_fid = pfid->persistent_fid;
1425         parms->volatile_fid = pfid->volatile_fid;
1426         return SMB2_write(xid, parms, written, iov, nr_segs);
1427 }
1428
1429 /* Set or clear the SPARSE_FILE attribute based on value passed in setsparse */
1430 static bool smb2_set_sparse(const unsigned int xid, struct cifs_tcon *tcon,
1431                 struct cifsFileInfo *cfile, struct inode *inode, __u8 setsparse)
1432 {
1433         struct cifsInodeInfo *cifsi;
1434         int rc;
1435
1436         cifsi = CIFS_I(inode);
1437
1438         /* if file already sparse don't bother setting sparse again */
1439         if ((cifsi->cifsAttrs & FILE_ATTRIBUTE_SPARSE_FILE) && setsparse)
1440                 return true; /* already sparse */
1441
1442         if (!(cifsi->cifsAttrs & FILE_ATTRIBUTE_SPARSE_FILE) && !setsparse)
1443                 return true; /* already not sparse */
1444
1445         /*
1446          * Can't check for sparse support on share the usual way via the
1447          * FS attribute info (FILE_SUPPORTS_SPARSE_FILES) on the share
1448          * since Samba server doesn't set the flag on the share, yet
1449          * supports the set sparse FSCTL and returns sparse correctly
1450          * in the file attributes. If we fail setting sparse though we
1451          * mark that server does not support sparse files for this share
1452          * to avoid repeatedly sending the unsupported fsctl to server
1453          * if the file is repeatedly extended.
1454          */
1455         if (tcon->broken_sparse_sup)
1456                 return false;
1457
1458         rc = SMB2_ioctl(xid, tcon, cfile->fid.persistent_fid,
1459                         cfile->fid.volatile_fid, FSCTL_SET_SPARSE,
1460                         true /* is_fctl */,
1461                         &setsparse, 1, NULL, NULL);
1462         if (rc) {
1463                 tcon->broken_sparse_sup = true;
1464                 cifs_dbg(FYI, "set sparse rc = %d\n", rc);
1465                 return false;
1466         }
1467
1468         if (setsparse)
1469                 cifsi->cifsAttrs |= FILE_ATTRIBUTE_SPARSE_FILE;
1470         else
1471                 cifsi->cifsAttrs &= (~FILE_ATTRIBUTE_SPARSE_FILE);
1472
1473         return true;
1474 }
1475
1476 static int
1477 smb2_set_file_size(const unsigned int xid, struct cifs_tcon *tcon,
1478                    struct cifsFileInfo *cfile, __u64 size, bool set_alloc)
1479 {
1480         __le64 eof = cpu_to_le64(size);
1481         struct inode *inode;
1482
1483         /*
1484          * If extending file more than one page make sparse. Many Linux fs
1485          * make files sparse by default when extending via ftruncate
1486          */
1487         inode = d_inode(cfile->dentry);
1488
1489         if (!set_alloc && (size > inode->i_size + 8192)) {
1490                 __u8 set_sparse = 1;
1491
1492                 /* whether set sparse succeeds or not, extend the file */
1493                 smb2_set_sparse(xid, tcon, cfile, inode, set_sparse);
1494         }
1495
1496         return SMB2_set_eof(xid, tcon, cfile->fid.persistent_fid,
1497                             cfile->fid.volatile_fid, cfile->pid, &eof);
1498 }
1499
1500 static int
1501 smb2_duplicate_extents(const unsigned int xid,
1502                         struct cifsFileInfo *srcfile,
1503                         struct cifsFileInfo *trgtfile, u64 src_off,
1504                         u64 len, u64 dest_off)
1505 {
1506         int rc;
1507         unsigned int ret_data_len;
1508         struct duplicate_extents_to_file dup_ext_buf;
1509         struct cifs_tcon *tcon = tlink_tcon(trgtfile->tlink);
1510
1511         /* server fileays advertise duplicate extent support with this flag */
1512         if ((le32_to_cpu(tcon->fsAttrInfo.Attributes) &
1513              FILE_SUPPORTS_BLOCK_REFCOUNTING) == 0)
1514                 return -EOPNOTSUPP;
1515
1516         dup_ext_buf.VolatileFileHandle = srcfile->fid.volatile_fid;
1517         dup_ext_buf.PersistentFileHandle = srcfile->fid.persistent_fid;
1518         dup_ext_buf.SourceFileOffset = cpu_to_le64(src_off);
1519         dup_ext_buf.TargetFileOffset = cpu_to_le64(dest_off);
1520         dup_ext_buf.ByteCount = cpu_to_le64(len);
1521         cifs_dbg(FYI, "duplicate extents: src off %lld dst off %lld len %lld",
1522                 src_off, dest_off, len);
1523
1524         rc = smb2_set_file_size(xid, tcon, trgtfile, dest_off + len, false);
1525         if (rc)
1526                 goto duplicate_extents_out;
1527
1528         rc = SMB2_ioctl(xid, tcon, trgtfile->fid.persistent_fid,
1529                         trgtfile->fid.volatile_fid,
1530                         FSCTL_DUPLICATE_EXTENTS_TO_FILE,
1531                         true /* is_fsctl */,
1532                         (char *)&dup_ext_buf,
1533                         sizeof(struct duplicate_extents_to_file),
1534                         NULL,
1535                         &ret_data_len);
1536
1537         if (ret_data_len > 0)
1538                 cifs_dbg(FYI, "non-zero response length in duplicate extents");
1539
1540 duplicate_extents_out:
1541         return rc;
1542 }
1543
1544 static int
1545 smb2_set_compression(const unsigned int xid, struct cifs_tcon *tcon,
1546                    struct cifsFileInfo *cfile)
1547 {
1548         return SMB2_set_compression(xid, tcon, cfile->fid.persistent_fid,
1549                             cfile->fid.volatile_fid);
1550 }
1551
1552 static int
1553 smb3_set_integrity(const unsigned int xid, struct cifs_tcon *tcon,
1554                    struct cifsFileInfo *cfile)
1555 {
1556         struct fsctl_set_integrity_information_req integr_info;
1557         unsigned int ret_data_len;
1558
1559         integr_info.ChecksumAlgorithm = cpu_to_le16(CHECKSUM_TYPE_UNCHANGED);
1560         integr_info.Flags = 0;
1561         integr_info.Reserved = 0;
1562
1563         return SMB2_ioctl(xid, tcon, cfile->fid.persistent_fid,
1564                         cfile->fid.volatile_fid,
1565                         FSCTL_SET_INTEGRITY_INFORMATION,
1566                         true /* is_fsctl */,
1567                         (char *)&integr_info,
1568                         sizeof(struct fsctl_set_integrity_information_req),
1569                         NULL,
1570                         &ret_data_len);
1571
1572 }
1573
1574 /* GMT Token is @GMT-YYYY.MM.DD-HH.MM.SS Unicode which is 48 bytes + null */
1575 #define GMT_TOKEN_SIZE 50
1576
1577 /*
1578  * Input buffer contains (empty) struct smb_snapshot array with size filled in
1579  * For output see struct SRV_SNAPSHOT_ARRAY in MS-SMB2 section 2.2.32.2
1580  */
1581 static int
1582 smb3_enum_snapshots(const unsigned int xid, struct cifs_tcon *tcon,
1583                    struct cifsFileInfo *cfile, void __user *ioc_buf)
1584 {
1585         char *retbuf = NULL;
1586         unsigned int ret_data_len = 0;
1587         int rc;
1588         struct smb_snapshot_array snapshot_in;
1589
1590         rc = SMB2_ioctl(xid, tcon, cfile->fid.persistent_fid,
1591                         cfile->fid.volatile_fid,
1592                         FSCTL_SRV_ENUMERATE_SNAPSHOTS,
1593                         true /* is_fsctl */,
1594                         NULL, 0 /* no input data */,
1595                         (char **)&retbuf,
1596                         &ret_data_len);
1597         cifs_dbg(FYI, "enum snaphots ioctl returned %d and ret buflen is %d\n",
1598                         rc, ret_data_len);
1599         if (rc)
1600                 return rc;
1601
1602         if (ret_data_len && (ioc_buf != NULL) && (retbuf != NULL)) {
1603                 /* Fixup buffer */
1604                 if (copy_from_user(&snapshot_in, ioc_buf,
1605                     sizeof(struct smb_snapshot_array))) {
1606                         rc = -EFAULT;
1607                         kfree(retbuf);
1608                         return rc;
1609                 }
1610
1611                 /*
1612                  * Check for min size, ie not large enough to fit even one GMT
1613                  * token (snapshot).  On the first ioctl some users may pass in
1614                  * smaller size (or zero) to simply get the size of the array
1615                  * so the user space caller can allocate sufficient memory
1616                  * and retry the ioctl again with larger array size sufficient
1617                  * to hold all of the snapshot GMT tokens on the second try.
1618                  */
1619                 if (snapshot_in.snapshot_array_size < GMT_TOKEN_SIZE)
1620                         ret_data_len = sizeof(struct smb_snapshot_array);
1621
1622                 /*
1623                  * We return struct SRV_SNAPSHOT_ARRAY, followed by
1624                  * the snapshot array (of 50 byte GMT tokens) each
1625                  * representing an available previous version of the data
1626                  */
1627                 if (ret_data_len > (snapshot_in.snapshot_array_size +
1628                                         sizeof(struct smb_snapshot_array)))
1629                         ret_data_len = snapshot_in.snapshot_array_size +
1630                                         sizeof(struct smb_snapshot_array);
1631
1632                 if (copy_to_user(ioc_buf, retbuf, ret_data_len))
1633                         rc = -EFAULT;
1634         }
1635
1636         kfree(retbuf);
1637         return rc;
1638 }
1639
1640 static int
1641 smb2_query_dir_first(const unsigned int xid, struct cifs_tcon *tcon,
1642                      const char *path, struct cifs_sb_info *cifs_sb,
1643                      struct cifs_fid *fid, __u16 search_flags,
1644                      struct cifs_search_info *srch_inf)
1645 {
1646         __le16 *utf16_path;
1647         int rc;
1648         __u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
1649         struct cifs_open_parms oparms;
1650
1651         utf16_path = cifs_convert_path_to_utf16(path, cifs_sb);
1652         if (!utf16_path)
1653                 return -ENOMEM;
1654
1655         oparms.tcon = tcon;
1656         oparms.desired_access = FILE_READ_ATTRIBUTES | FILE_READ_DATA;
1657         oparms.disposition = FILE_OPEN;
1658         if (backup_cred(cifs_sb))
1659                 oparms.create_options = CREATE_OPEN_BACKUP_INTENT;
1660         else
1661                 oparms.create_options = 0;
1662         oparms.fid = fid;
1663         oparms.reconnect = false;
1664
1665         rc = SMB2_open(xid, &oparms, utf16_path, &oplock, NULL, NULL, NULL);
1666         kfree(utf16_path);
1667         if (rc) {
1668                 cifs_dbg(FYI, "open dir failed rc=%d\n", rc);
1669                 return rc;
1670         }
1671
1672         srch_inf->entries_in_buffer = 0;
1673         srch_inf->index_of_last_entry = 2;
1674
1675         rc = SMB2_query_directory(xid, tcon, fid->persistent_fid,
1676                                   fid->volatile_fid, 0, srch_inf);
1677         if (rc) {
1678                 cifs_dbg(FYI, "query directory failed rc=%d\n", rc);
1679                 SMB2_close(xid, tcon, fid->persistent_fid, fid->volatile_fid);
1680         }
1681         return rc;
1682 }
1683
1684 static int
1685 smb2_query_dir_next(const unsigned int xid, struct cifs_tcon *tcon,
1686                     struct cifs_fid *fid, __u16 search_flags,
1687                     struct cifs_search_info *srch_inf)
1688 {
1689         return SMB2_query_directory(xid, tcon, fid->persistent_fid,
1690                                     fid->volatile_fid, 0, srch_inf);
1691 }
1692
1693 static int
1694 smb2_close_dir(const unsigned int xid, struct cifs_tcon *tcon,
1695                struct cifs_fid *fid)
1696 {
1697         return SMB2_close(xid, tcon, fid->persistent_fid, fid->volatile_fid);
1698 }
1699
1700 /*
1701 * If we negotiate SMB2 protocol and get STATUS_PENDING - update
1702 * the number of credits and return true. Otherwise - return false.
1703 */
1704 static bool
1705 smb2_is_status_pending(char *buf, struct TCP_Server_Info *server, int length)
1706 {
1707         struct smb2_sync_hdr *shdr = (struct smb2_sync_hdr *)buf;
1708
1709         if (shdr->Status != STATUS_PENDING)
1710                 return false;
1711
1712         if (!length) {
1713                 spin_lock(&server->req_lock);
1714                 server->credits += le16_to_cpu(shdr->CreditRequest);
1715                 spin_unlock(&server->req_lock);
1716                 wake_up(&server->request_q);
1717         }
1718
1719         return true;
1720 }
1721
1722 static bool
1723 smb2_is_session_expired(char *buf)
1724 {
1725         struct smb2_sync_hdr *shdr = (struct smb2_sync_hdr *)buf;
1726
1727         if (shdr->Status != STATUS_NETWORK_SESSION_EXPIRED &&
1728             shdr->Status != STATUS_USER_SESSION_DELETED)
1729                 return false;
1730
1731         trace_smb3_ses_expired(shdr->TreeId, shdr->SessionId,
1732                                le16_to_cpu(shdr->Command),
1733                                le64_to_cpu(shdr->MessageId));
1734         cifs_dbg(FYI, "Session expired or deleted\n");
1735
1736         return true;
1737 }
1738
1739 static int
1740 smb2_oplock_response(struct cifs_tcon *tcon, struct cifs_fid *fid,
1741                      struct cifsInodeInfo *cinode)
1742 {
1743         if (tcon->ses->server->capabilities & SMB2_GLOBAL_CAP_LEASING)
1744                 return SMB2_lease_break(0, tcon, cinode->lease_key,
1745                                         smb2_get_lease_state(cinode));
1746
1747         return SMB2_oplock_break(0, tcon, fid->persistent_fid,
1748                                  fid->volatile_fid,
1749                                  CIFS_CACHE_READ(cinode) ? 1 : 0);
1750 }
1751
1752 void
1753 smb2_set_related(struct smb_rqst *rqst)
1754 {
1755         struct smb2_sync_hdr *shdr;
1756
1757         shdr = (struct smb2_sync_hdr *)(rqst->rq_iov[0].iov_base);
1758         shdr->Flags |= SMB2_FLAGS_RELATED_OPERATIONS;
1759 }
1760
1761 char smb2_padding[7] = {0, 0, 0, 0, 0, 0, 0};
1762
1763 void
1764 smb2_set_next_command(struct TCP_Server_Info *server, struct smb_rqst *rqst)
1765 {
1766         struct smb2_sync_hdr *shdr;
1767         unsigned long len = smb_rqst_len(server, rqst);
1768
1769         /* SMB headers in a compound are 8 byte aligned. */
1770         if (len & 7) {
1771                 rqst->rq_iov[rqst->rq_nvec].iov_base = smb2_padding;
1772                 rqst->rq_iov[rqst->rq_nvec].iov_len = 8 - (len & 7);
1773                 rqst->rq_nvec++;
1774                 len = smb_rqst_len(server, rqst);
1775         }
1776
1777         shdr = (struct smb2_sync_hdr *)(rqst->rq_iov[0].iov_base);
1778         shdr->NextCommand = cpu_to_le32(len);
1779 }
1780
1781 static int
1782 smb2_queryfs(const unsigned int xid, struct cifs_tcon *tcon,
1783              struct kstatfs *buf)
1784 {
1785         struct smb2_query_info_rsp *rsp;
1786         struct smb2_fs_full_size_info *info = NULL;
1787         struct smb_rqst rqst[3];
1788         int resp_buftype[3];
1789         struct kvec rsp_iov[3];
1790         struct kvec open_iov[SMB2_CREATE_IOV_SIZE];
1791         struct kvec qi_iov[1];
1792         struct kvec close_iov[1];
1793         struct cifs_ses *ses = tcon->ses;
1794         struct TCP_Server_Info *server = ses->server;
1795         __le16 srch_path = 0; /* Null - open root of share */
1796         u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
1797         struct cifs_open_parms oparms;
1798         struct cifs_fid fid;
1799         int flags = 0;
1800         int rc;
1801
1802         if (smb3_encryption_required(tcon))
1803                 flags |= CIFS_TRANSFORM_REQ;
1804
1805         memset(rqst, 0, sizeof(rqst));
1806         resp_buftype[0] = resp_buftype[1] = resp_buftype[2] = CIFS_NO_BUFFER;
1807         memset(rsp_iov, 0, sizeof(rsp_iov));
1808
1809         memset(&open_iov, 0, sizeof(open_iov));
1810         rqst[0].rq_iov = open_iov;
1811         rqst[0].rq_nvec = SMB2_CREATE_IOV_SIZE;
1812
1813         oparms.tcon = tcon;
1814         oparms.desired_access = FILE_READ_ATTRIBUTES;
1815         oparms.disposition = FILE_OPEN;
1816         oparms.create_options = 0;
1817         oparms.fid = &fid;
1818         oparms.reconnect = false;
1819
1820         rc = SMB2_open_init(tcon, &rqst[0], &oplock, &oparms, &srch_path);
1821         if (rc)
1822                 goto qfs_exit;
1823         smb2_set_next_command(server, &rqst[0]);
1824
1825         memset(&qi_iov, 0, sizeof(qi_iov));
1826         rqst[1].rq_iov = qi_iov;
1827         rqst[1].rq_nvec = 1;
1828
1829         rc = SMB2_query_info_init(tcon, &rqst[1], COMPOUND_FID, COMPOUND_FID,
1830                                   FS_FULL_SIZE_INFORMATION,
1831                                   SMB2_O_INFO_FILESYSTEM, 0,
1832                                   sizeof(struct smb2_fs_full_size_info), 0,
1833                                   NULL);
1834         if (rc)
1835                 goto qfs_exit;
1836         smb2_set_next_command(server, &rqst[1]);
1837         smb2_set_related(&rqst[1]);
1838
1839         memset(&close_iov, 0, sizeof(close_iov));
1840         rqst[2].rq_iov = close_iov;
1841         rqst[2].rq_nvec = 1;
1842
1843         rc = SMB2_close_init(tcon, &rqst[2], COMPOUND_FID, COMPOUND_FID);
1844         if (rc)
1845                 goto qfs_exit;
1846         smb2_set_related(&rqst[2]);
1847
1848         rc = compound_send_recv(xid, ses, flags, 3, rqst,
1849                                 resp_buftype, rsp_iov);
1850         if (rc)
1851                 goto qfs_exit;
1852
1853         rsp = (struct smb2_query_info_rsp *)rsp_iov[1].iov_base;
1854         buf->f_type = SMB2_MAGIC_NUMBER;
1855         info = (struct smb2_fs_full_size_info *)(
1856                 le16_to_cpu(rsp->OutputBufferOffset) + (char *)rsp);
1857         rc = smb2_validate_iov(le16_to_cpu(rsp->OutputBufferOffset),
1858                                le32_to_cpu(rsp->OutputBufferLength),
1859                                &rsp_iov[1],
1860                                sizeof(struct smb2_fs_full_size_info));
1861         if (!rc)
1862                 smb2_copy_fs_info_to_kstatfs(info, buf);
1863
1864 qfs_exit:
1865         SMB2_open_free(&rqst[0]);
1866         SMB2_query_info_free(&rqst[1]);
1867         SMB2_close_free(&rqst[2]);
1868         free_rsp_buf(resp_buftype[0], rsp_iov[0].iov_base);
1869         free_rsp_buf(resp_buftype[1], rsp_iov[1].iov_base);
1870         free_rsp_buf(resp_buftype[2], rsp_iov[2].iov_base);
1871         return rc;
1872 }
1873
1874 static int
1875 smb311_queryfs(const unsigned int xid, struct cifs_tcon *tcon,
1876              struct kstatfs *buf)
1877 {
1878         int rc;
1879         __le16 srch_path = 0; /* Null - open root of share */
1880         u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
1881         struct cifs_open_parms oparms;
1882         struct cifs_fid fid;
1883
1884         if (!tcon->posix_extensions)
1885                 return smb2_queryfs(xid, tcon, buf);
1886
1887         oparms.tcon = tcon;
1888         oparms.desired_access = FILE_READ_ATTRIBUTES;
1889         oparms.disposition = FILE_OPEN;
1890         oparms.create_options = 0;
1891         oparms.fid = &fid;
1892         oparms.reconnect = false;
1893
1894         rc = SMB2_open(xid, &oparms, &srch_path, &oplock, NULL, NULL, NULL);
1895         if (rc)
1896                 return rc;
1897
1898         rc = SMB311_posix_qfs_info(xid, tcon, fid.persistent_fid,
1899                                    fid.volatile_fid, buf);
1900         buf->f_type = SMB2_MAGIC_NUMBER;
1901         SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid);
1902         return rc;
1903 }
1904
1905 static bool
1906 smb2_compare_fids(struct cifsFileInfo *ob1, struct cifsFileInfo *ob2)
1907 {
1908         return ob1->fid.persistent_fid == ob2->fid.persistent_fid &&
1909                ob1->fid.volatile_fid == ob2->fid.volatile_fid;
1910 }
1911
1912 static int
1913 smb2_mand_lock(const unsigned int xid, struct cifsFileInfo *cfile, __u64 offset,
1914                __u64 length, __u32 type, int lock, int unlock, bool wait)
1915 {
1916         if (unlock && !lock)
1917                 type = SMB2_LOCKFLAG_UNLOCK;
1918         return SMB2_lock(xid, tlink_tcon(cfile->tlink),
1919                          cfile->fid.persistent_fid, cfile->fid.volatile_fid,
1920                          current->tgid, length, offset, type, wait);
1921 }
1922
1923 static void
1924 smb2_get_lease_key(struct inode *inode, struct cifs_fid *fid)
1925 {
1926         memcpy(fid->lease_key, CIFS_I(inode)->lease_key, SMB2_LEASE_KEY_SIZE);
1927 }
1928
1929 static void
1930 smb2_set_lease_key(struct inode *inode, struct cifs_fid *fid)
1931 {
1932         memcpy(CIFS_I(inode)->lease_key, fid->lease_key, SMB2_LEASE_KEY_SIZE);
1933 }
1934
1935 static void
1936 smb2_new_lease_key(struct cifs_fid *fid)
1937 {
1938         generate_random_uuid(fid->lease_key);
1939 }
1940
1941 static int
1942 smb2_get_dfs_refer(const unsigned int xid, struct cifs_ses *ses,
1943                    const char *search_name,
1944                    struct dfs_info3_param **target_nodes,
1945                    unsigned int *num_of_nodes,
1946                    const struct nls_table *nls_codepage, int remap)
1947 {
1948         int rc;
1949         __le16 *utf16_path = NULL;
1950         int utf16_path_len = 0;
1951         struct cifs_tcon *tcon;
1952         struct fsctl_get_dfs_referral_req *dfs_req = NULL;
1953         struct get_dfs_referral_rsp *dfs_rsp = NULL;
1954         u32 dfs_req_size = 0, dfs_rsp_size = 0;
1955
1956         cifs_dbg(FYI, "smb2_get_dfs_refer path <%s>\n", search_name);
1957
1958         /*
1959          * Try to use the IPC tcon, otherwise just use any
1960          */
1961         tcon = ses->tcon_ipc;
1962         if (tcon == NULL) {
1963                 spin_lock(&cifs_tcp_ses_lock);
1964                 tcon = list_first_entry_or_null(&ses->tcon_list,
1965                                                 struct cifs_tcon,
1966                                                 tcon_list);
1967                 if (tcon)
1968                         tcon->tc_count++;
1969                 spin_unlock(&cifs_tcp_ses_lock);
1970         }
1971
1972         if (tcon == NULL) {
1973                 cifs_dbg(VFS, "session %p has no tcon available for a dfs referral request\n",
1974                          ses);
1975                 rc = -ENOTCONN;
1976                 goto out;
1977         }
1978
1979         utf16_path = cifs_strndup_to_utf16(search_name, PATH_MAX,
1980                                            &utf16_path_len,
1981                                            nls_codepage, remap);
1982         if (!utf16_path) {
1983                 rc = -ENOMEM;
1984                 goto out;
1985         }
1986
1987         dfs_req_size = sizeof(*dfs_req) + utf16_path_len;
1988         dfs_req = kzalloc(dfs_req_size, GFP_KERNEL);
1989         if (!dfs_req) {
1990                 rc = -ENOMEM;
1991                 goto out;
1992         }
1993
1994         /* Highest DFS referral version understood */
1995         dfs_req->MaxReferralLevel = DFS_VERSION;
1996
1997         /* Path to resolve in an UTF-16 null-terminated string */
1998         memcpy(dfs_req->RequestFileName, utf16_path, utf16_path_len);
1999
2000         do {
2001                 rc = SMB2_ioctl(xid, tcon, NO_FILE_ID, NO_FILE_ID,
2002                                 FSCTL_DFS_GET_REFERRALS,
2003                                 true /* is_fsctl */,
2004                                 (char *)dfs_req, dfs_req_size,
2005                                 (char **)&dfs_rsp, &dfs_rsp_size);
2006         } while (rc == -EAGAIN);
2007
2008         if (rc) {
2009                 if ((rc != -ENOENT) && (rc != -EOPNOTSUPP))
2010                         cifs_dbg(VFS, "ioctl error in smb2_get_dfs_refer rc=%d\n", rc);
2011                 goto out;
2012         }
2013
2014         rc = parse_dfs_referrals(dfs_rsp, dfs_rsp_size,
2015                                  num_of_nodes, target_nodes,
2016                                  nls_codepage, remap, search_name,
2017                                  true /* is_unicode */);
2018         if (rc) {
2019                 cifs_dbg(VFS, "parse error in smb2_get_dfs_refer rc=%d\n", rc);
2020                 goto out;
2021         }
2022
2023  out:
2024         if (tcon && !tcon->ipc) {
2025                 /* ipc tcons are not refcounted */
2026                 spin_lock(&cifs_tcp_ses_lock);
2027                 tcon->tc_count--;
2028                 spin_unlock(&cifs_tcp_ses_lock);
2029         }
2030         kfree(utf16_path);
2031         kfree(dfs_req);
2032         kfree(dfs_rsp);
2033         return rc;
2034 }
2035 #define SMB2_SYMLINK_STRUCT_SIZE \
2036         (sizeof(struct smb2_err_rsp) - 1 + sizeof(struct smb2_symlink_err_rsp))
2037
2038 static int
2039 smb2_query_symlink(const unsigned int xid, struct cifs_tcon *tcon,
2040                    const char *full_path, char **target_path,
2041                    struct cifs_sb_info *cifs_sb)
2042 {
2043         int rc;
2044         __le16 *utf16_path;
2045         __u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
2046         struct cifs_open_parms oparms;
2047         struct cifs_fid fid;
2048         struct kvec err_iov = {NULL, 0};
2049         struct smb2_err_rsp *err_buf = NULL;
2050         int resp_buftype;
2051         struct smb2_symlink_err_rsp *symlink;
2052         unsigned int sub_len;
2053         unsigned int sub_offset;
2054         unsigned int print_len;
2055         unsigned int print_offset;
2056
2057         cifs_dbg(FYI, "%s: path: %s\n", __func__, full_path);
2058
2059         utf16_path = cifs_convert_path_to_utf16(full_path, cifs_sb);
2060         if (!utf16_path)
2061                 return -ENOMEM;
2062
2063         oparms.tcon = tcon;
2064         oparms.desired_access = FILE_READ_ATTRIBUTES;
2065         oparms.disposition = FILE_OPEN;
2066         if (backup_cred(cifs_sb))
2067                 oparms.create_options = CREATE_OPEN_BACKUP_INTENT;
2068         else
2069                 oparms.create_options = 0;
2070         oparms.fid = &fid;
2071         oparms.reconnect = false;
2072
2073         rc = SMB2_open(xid, &oparms, utf16_path, &oplock, NULL, &err_iov,
2074                        &resp_buftype);
2075         if (!rc || !err_iov.iov_base) {
2076                 rc = -ENOENT;
2077                 goto free_path;
2078         }
2079
2080         err_buf = err_iov.iov_base;
2081         if (le32_to_cpu(err_buf->ByteCount) < sizeof(struct smb2_symlink_err_rsp) ||
2082             err_iov.iov_len < SMB2_SYMLINK_STRUCT_SIZE) {
2083                 rc = -ENOENT;
2084                 goto querty_exit;
2085         }
2086
2087         /* open must fail on symlink - reset rc */
2088         rc = 0;
2089         symlink = (struct smb2_symlink_err_rsp *)err_buf->ErrorData;
2090         sub_len = le16_to_cpu(symlink->SubstituteNameLength);
2091         sub_offset = le16_to_cpu(symlink->SubstituteNameOffset);
2092         print_len = le16_to_cpu(symlink->PrintNameLength);
2093         print_offset = le16_to_cpu(symlink->PrintNameOffset);
2094
2095         if (err_iov.iov_len < SMB2_SYMLINK_STRUCT_SIZE + sub_offset + sub_len) {
2096                 rc = -ENOENT;
2097                 goto querty_exit;
2098         }
2099
2100         if (err_iov.iov_len <
2101             SMB2_SYMLINK_STRUCT_SIZE + print_offset + print_len) {
2102                 rc = -ENOENT;
2103                 goto querty_exit;
2104         }
2105
2106         *target_path = cifs_strndup_from_utf16(
2107                                 (char *)symlink->PathBuffer + sub_offset,
2108                                 sub_len, true, cifs_sb->local_nls);
2109         if (!(*target_path)) {
2110                 rc = -ENOMEM;
2111                 goto querty_exit;
2112         }
2113         convert_delimiter(*target_path, '/');
2114         cifs_dbg(FYI, "%s: target path: %s\n", __func__, *target_path);
2115
2116  querty_exit:
2117         free_rsp_buf(resp_buftype, err_buf);
2118  free_path:
2119         kfree(utf16_path);
2120         return rc;
2121 }
2122
2123 #ifdef CONFIG_CIFS_ACL
2124 static struct cifs_ntsd *
2125 get_smb2_acl_by_fid(struct cifs_sb_info *cifs_sb,
2126                 const struct cifs_fid *cifsfid, u32 *pacllen)
2127 {
2128         struct cifs_ntsd *pntsd = NULL;
2129         unsigned int xid;
2130         int rc = -EOPNOTSUPP;
2131         struct tcon_link *tlink = cifs_sb_tlink(cifs_sb);
2132
2133         if (IS_ERR(tlink))
2134                 return ERR_CAST(tlink);
2135
2136         xid = get_xid();
2137         cifs_dbg(FYI, "trying to get acl\n");
2138
2139         rc = SMB2_query_acl(xid, tlink_tcon(tlink), cifsfid->persistent_fid,
2140                             cifsfid->volatile_fid, (void **)&pntsd, pacllen);
2141         free_xid(xid);
2142
2143         cifs_put_tlink(tlink);
2144
2145         cifs_dbg(FYI, "%s: rc = %d ACL len %d\n", __func__, rc, *pacllen);
2146         if (rc)
2147                 return ERR_PTR(rc);
2148         return pntsd;
2149
2150 }
2151
2152 static struct cifs_ntsd *
2153 get_smb2_acl_by_path(struct cifs_sb_info *cifs_sb,
2154                 const char *path, u32 *pacllen)
2155 {
2156         struct cifs_ntsd *pntsd = NULL;
2157         u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
2158         unsigned int xid;
2159         int rc;
2160         struct cifs_tcon *tcon;
2161         struct tcon_link *tlink = cifs_sb_tlink(cifs_sb);
2162         struct cifs_fid fid;
2163         struct cifs_open_parms oparms;
2164         __le16 *utf16_path;
2165
2166         cifs_dbg(FYI, "get smb3 acl for path %s\n", path);
2167         if (IS_ERR(tlink))
2168                 return ERR_CAST(tlink);
2169
2170         tcon = tlink_tcon(tlink);
2171         xid = get_xid();
2172
2173         if (backup_cred(cifs_sb))
2174                 oparms.create_options = CREATE_OPEN_BACKUP_INTENT;
2175         else
2176                 oparms.create_options = 0;
2177
2178         utf16_path = cifs_convert_path_to_utf16(path, cifs_sb);
2179         if (!utf16_path) {
2180                 rc = -ENOMEM;
2181                 free_xid(xid);
2182                 return ERR_PTR(rc);
2183         }
2184
2185         oparms.tcon = tcon;
2186         oparms.desired_access = READ_CONTROL;
2187         oparms.disposition = FILE_OPEN;
2188         oparms.fid = &fid;
2189         oparms.reconnect = false;
2190
2191         rc = SMB2_open(xid, &oparms, utf16_path, &oplock, NULL, NULL, NULL);
2192         kfree(utf16_path);
2193         if (!rc) {
2194                 rc = SMB2_query_acl(xid, tlink_tcon(tlink), fid.persistent_fid,
2195                             fid.volatile_fid, (void **)&pntsd, pacllen);
2196                 SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid);
2197         }
2198
2199         cifs_put_tlink(tlink);
2200         free_xid(xid);
2201
2202         cifs_dbg(FYI, "%s: rc = %d ACL len %d\n", __func__, rc, *pacllen);
2203         if (rc)
2204                 return ERR_PTR(rc);
2205         return pntsd;
2206 }
2207
2208 #ifdef CONFIG_CIFS_ACL
2209 static int
2210 set_smb2_acl(struct cifs_ntsd *pnntsd, __u32 acllen,
2211                 struct inode *inode, const char *path, int aclflag)
2212 {
2213         u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
2214         unsigned int xid;
2215         int rc, access_flags = 0;
2216         struct cifs_tcon *tcon;
2217         struct cifs_sb_info *cifs_sb = CIFS_SB(inode->i_sb);
2218         struct tcon_link *tlink = cifs_sb_tlink(cifs_sb);
2219         struct cifs_fid fid;
2220         struct cifs_open_parms oparms;
2221         __le16 *utf16_path;
2222
2223         cifs_dbg(FYI, "set smb3 acl for path %s\n", path);
2224         if (IS_ERR(tlink))
2225                 return PTR_ERR(tlink);
2226
2227         tcon = tlink_tcon(tlink);
2228         xid = get_xid();
2229
2230         if (backup_cred(cifs_sb))
2231                 oparms.create_options = CREATE_OPEN_BACKUP_INTENT;
2232         else
2233                 oparms.create_options = 0;
2234
2235         if (aclflag == CIFS_ACL_OWNER || aclflag == CIFS_ACL_GROUP)
2236                 access_flags = WRITE_OWNER;
2237         else
2238                 access_flags = WRITE_DAC;
2239
2240         utf16_path = cifs_convert_path_to_utf16(path, cifs_sb);
2241         if (!utf16_path) {
2242                 rc = -ENOMEM;
2243                 free_xid(xid);
2244                 return rc;
2245         }
2246
2247         oparms.tcon = tcon;
2248         oparms.desired_access = access_flags;
2249         oparms.disposition = FILE_OPEN;
2250         oparms.path = path;
2251         oparms.fid = &fid;
2252         oparms.reconnect = false;
2253
2254         rc = SMB2_open(xid, &oparms, utf16_path, &oplock, NULL, NULL, NULL);
2255         kfree(utf16_path);
2256         if (!rc) {
2257                 rc = SMB2_set_acl(xid, tlink_tcon(tlink), fid.persistent_fid,
2258                             fid.volatile_fid, pnntsd, acllen, aclflag);
2259                 SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid);
2260         }
2261
2262         cifs_put_tlink(tlink);
2263         free_xid(xid);
2264         return rc;
2265 }
2266 #endif /* CIFS_ACL */
2267
2268 /* Retrieve an ACL from the server */
2269 static struct cifs_ntsd *
2270 get_smb2_acl(struct cifs_sb_info *cifs_sb,
2271                                       struct inode *inode, const char *path,
2272                                       u32 *pacllen)
2273 {
2274         struct cifs_ntsd *pntsd = NULL;
2275         struct cifsFileInfo *open_file = NULL;
2276
2277         if (inode)
2278                 open_file = find_readable_file(CIFS_I(inode), true);
2279         if (!open_file)
2280                 return get_smb2_acl_by_path(cifs_sb, path, pacllen);
2281
2282         pntsd = get_smb2_acl_by_fid(cifs_sb, &open_file->fid, pacllen);
2283         cifsFileInfo_put(open_file);
2284         return pntsd;
2285 }
2286 #endif
2287
2288 static long smb3_zero_range(struct file *file, struct cifs_tcon *tcon,
2289                             loff_t offset, loff_t len, bool keep_size)
2290 {
2291         struct inode *inode;
2292         struct cifsInodeInfo *cifsi;
2293         struct cifsFileInfo *cfile = file->private_data;
2294         struct file_zero_data_information fsctl_buf;
2295         long rc;
2296         unsigned int xid;
2297
2298         xid = get_xid();
2299
2300         inode = d_inode(cfile->dentry);
2301         cifsi = CIFS_I(inode);
2302
2303         /* if file not oplocked can't be sure whether asking to extend size */
2304         if (!CIFS_CACHE_READ(cifsi))
2305                 if (keep_size == false) {
2306                         rc = -EOPNOTSUPP;
2307                         free_xid(xid);
2308                         return rc;
2309                 }
2310
2311         /*
2312          * Must check if file sparse since fallocate -z (zero range) assumes
2313          * non-sparse allocation
2314          */
2315         if (!(cifsi->cifsAttrs & FILE_ATTRIBUTE_SPARSE_FILE)) {
2316                 rc = -EOPNOTSUPP;
2317                 free_xid(xid);
2318                 return rc;
2319         }
2320
2321         /*
2322          * need to make sure we are not asked to extend the file since the SMB3
2323          * fsctl does not change the file size. In the future we could change
2324          * this to zero the first part of the range then set the file size
2325          * which for a non sparse file would zero the newly extended range
2326          */
2327         if (keep_size == false)
2328                 if (i_size_read(inode) < offset + len) {
2329                         rc = -EOPNOTSUPP;
2330                         free_xid(xid);
2331                         return rc;
2332                 }
2333
2334         cifs_dbg(FYI, "offset %lld len %lld", offset, len);
2335
2336         fsctl_buf.FileOffset = cpu_to_le64(offset);
2337         fsctl_buf.BeyondFinalZero = cpu_to_le64(offset + len);
2338
2339         rc = SMB2_ioctl(xid, tcon, cfile->fid.persistent_fid,
2340                         cfile->fid.volatile_fid, FSCTL_SET_ZERO_DATA,
2341                         true /* is_fctl */, (char *)&fsctl_buf,
2342                         sizeof(struct file_zero_data_information), NULL, NULL);
2343         free_xid(xid);
2344         return rc;
2345 }
2346
2347 static long smb3_punch_hole(struct file *file, struct cifs_tcon *tcon,
2348                             loff_t offset, loff_t len)
2349 {
2350         struct inode *inode;
2351         struct cifsInodeInfo *cifsi;
2352         struct cifsFileInfo *cfile = file->private_data;
2353         struct file_zero_data_information fsctl_buf;
2354         long rc;
2355         unsigned int xid;
2356         __u8 set_sparse = 1;
2357
2358         xid = get_xid();
2359
2360         inode = d_inode(cfile->dentry);
2361         cifsi = CIFS_I(inode);
2362
2363         /* Need to make file sparse, if not already, before freeing range. */
2364         /* Consider adding equivalent for compressed since it could also work */
2365         if (!smb2_set_sparse(xid, tcon, cfile, inode, set_sparse)) {
2366                 rc = -EOPNOTSUPP;
2367                 free_xid(xid);
2368                 return rc;
2369         }
2370
2371         cifs_dbg(FYI, "offset %lld len %lld", offset, len);
2372
2373         fsctl_buf.FileOffset = cpu_to_le64(offset);
2374         fsctl_buf.BeyondFinalZero = cpu_to_le64(offset + len);
2375
2376         rc = SMB2_ioctl(xid, tcon, cfile->fid.persistent_fid,
2377                         cfile->fid.volatile_fid, FSCTL_SET_ZERO_DATA,
2378                         true /* is_fctl */, (char *)&fsctl_buf,
2379                         sizeof(struct file_zero_data_information), NULL, NULL);
2380         free_xid(xid);
2381         return rc;
2382 }
2383
2384 static long smb3_simple_falloc(struct file *file, struct cifs_tcon *tcon,
2385                             loff_t off, loff_t len, bool keep_size)
2386 {
2387         struct inode *inode;
2388         struct cifsInodeInfo *cifsi;
2389         struct cifsFileInfo *cfile = file->private_data;
2390         long rc = -EOPNOTSUPP;
2391         unsigned int xid;
2392
2393         xid = get_xid();
2394
2395         inode = d_inode(cfile->dentry);
2396         cifsi = CIFS_I(inode);
2397
2398         /* if file not oplocked can't be sure whether asking to extend size */
2399         if (!CIFS_CACHE_READ(cifsi))
2400                 if (keep_size == false) {
2401                         free_xid(xid);
2402                         return rc;
2403                 }
2404
2405         /*
2406          * Files are non-sparse by default so falloc may be a no-op
2407          * Must check if file sparse. If not sparse, and not extending
2408          * then no need to do anything since file already allocated
2409          */
2410         if ((cifsi->cifsAttrs & FILE_ATTRIBUTE_SPARSE_FILE) == 0) {
2411                 if (keep_size == true)
2412                         rc = 0;
2413                 /* check if extending file */
2414                 else if (i_size_read(inode) >= off + len)
2415                         /* not extending file and already not sparse */
2416                         rc = 0;
2417                 /* BB: in future add else clause to extend file */
2418                 else
2419                         rc = -EOPNOTSUPP;
2420                 free_xid(xid);
2421                 return rc;
2422         }
2423
2424         if ((keep_size == true) || (i_size_read(inode) >= off + len)) {
2425                 /*
2426                  * Check if falloc starts within first few pages of file
2427                  * and ends within a few pages of the end of file to
2428                  * ensure that most of file is being forced to be
2429                  * fallocated now. If so then setting whole file sparse
2430                  * ie potentially making a few extra pages at the beginning
2431                  * or end of the file non-sparse via set_sparse is harmless.
2432                  */
2433                 if ((off > 8192) || (off + len + 8192 < i_size_read(inode))) {
2434                         rc = -EOPNOTSUPP;
2435                         free_xid(xid);
2436                         return rc;
2437                 }
2438
2439                 rc = smb2_set_sparse(xid, tcon, cfile, inode, false);
2440         }
2441         /* BB: else ... in future add code to extend file and set sparse */
2442
2443
2444         free_xid(xid);
2445         return rc;
2446 }
2447
2448
2449 static long smb3_fallocate(struct file *file, struct cifs_tcon *tcon, int mode,
2450                            loff_t off, loff_t len)
2451 {
2452         /* KEEP_SIZE already checked for by do_fallocate */
2453         if (mode & FALLOC_FL_PUNCH_HOLE)
2454                 return smb3_punch_hole(file, tcon, off, len);
2455         else if (mode & FALLOC_FL_ZERO_RANGE) {
2456                 if (mode & FALLOC_FL_KEEP_SIZE)
2457                         return smb3_zero_range(file, tcon, off, len, true);
2458                 return smb3_zero_range(file, tcon, off, len, false);
2459         } else if (mode == FALLOC_FL_KEEP_SIZE)
2460                 return smb3_simple_falloc(file, tcon, off, len, true);
2461         else if (mode == 0)
2462                 return smb3_simple_falloc(file, tcon, off, len, false);
2463
2464         return -EOPNOTSUPP;
2465 }
2466
2467 static void
2468 smb2_downgrade_oplock(struct TCP_Server_Info *server,
2469                         struct cifsInodeInfo *cinode, bool set_level2)
2470 {
2471         if (set_level2)
2472                 server->ops->set_oplock_level(cinode, SMB2_OPLOCK_LEVEL_II,
2473                                                 0, NULL);
2474         else
2475                 server->ops->set_oplock_level(cinode, 0, 0, NULL);
2476 }
2477
2478 static void
2479 smb2_set_oplock_level(struct cifsInodeInfo *cinode, __u32 oplock,
2480                       unsigned int epoch, bool *purge_cache)
2481 {
2482         oplock &= 0xFF;
2483         if (oplock == SMB2_OPLOCK_LEVEL_NOCHANGE)
2484                 return;
2485         if (oplock == SMB2_OPLOCK_LEVEL_BATCH) {
2486                 cinode->oplock = CIFS_CACHE_RHW_FLG;
2487                 cifs_dbg(FYI, "Batch Oplock granted on inode %p\n",
2488                          &cinode->vfs_inode);
2489         } else if (oplock == SMB2_OPLOCK_LEVEL_EXCLUSIVE) {
2490                 cinode->oplock = CIFS_CACHE_RW_FLG;
2491                 cifs_dbg(FYI, "Exclusive Oplock granted on inode %p\n",
2492                          &cinode->vfs_inode);
2493         } else if (oplock == SMB2_OPLOCK_LEVEL_II) {
2494                 cinode->oplock = CIFS_CACHE_READ_FLG;
2495                 cifs_dbg(FYI, "Level II Oplock granted on inode %p\n",
2496                          &cinode->vfs_inode);
2497         } else
2498                 cinode->oplock = 0;
2499 }
2500
2501 static void
2502 smb21_set_oplock_level(struct cifsInodeInfo *cinode, __u32 oplock,
2503                        unsigned int epoch, bool *purge_cache)
2504 {
2505         char message[5] = {0};
2506
2507         oplock &= 0xFF;
2508         if (oplock == SMB2_OPLOCK_LEVEL_NOCHANGE)
2509                 return;
2510
2511         cinode->oplock = 0;
2512         if (oplock & SMB2_LEASE_READ_CACHING_HE) {
2513                 cinode->oplock |= CIFS_CACHE_READ_FLG;
2514                 strcat(message, "R");
2515         }
2516         if (oplock & SMB2_LEASE_HANDLE_CACHING_HE) {
2517                 cinode->oplock |= CIFS_CACHE_HANDLE_FLG;
2518                 strcat(message, "H");
2519         }
2520         if (oplock & SMB2_LEASE_WRITE_CACHING_HE) {
2521                 cinode->oplock |= CIFS_CACHE_WRITE_FLG;
2522                 strcat(message, "W");
2523         }
2524         if (!cinode->oplock)
2525                 strcat(message, "None");
2526         cifs_dbg(FYI, "%s Lease granted on inode %p\n", message,
2527                  &cinode->vfs_inode);
2528 }
2529
2530 static void
2531 smb3_set_oplock_level(struct cifsInodeInfo *cinode, __u32 oplock,
2532                       unsigned int epoch, bool *purge_cache)
2533 {
2534         unsigned int old_oplock = cinode->oplock;
2535
2536         smb21_set_oplock_level(cinode, oplock, epoch, purge_cache);
2537
2538         if (purge_cache) {
2539                 *purge_cache = false;
2540                 if (old_oplock == CIFS_CACHE_READ_FLG) {
2541                         if (cinode->oplock == CIFS_CACHE_READ_FLG &&
2542                             (epoch - cinode->epoch > 0))
2543                                 *purge_cache = true;
2544                         else if (cinode->oplock == CIFS_CACHE_RH_FLG &&
2545                                  (epoch - cinode->epoch > 1))
2546                                 *purge_cache = true;
2547                         else if (cinode->oplock == CIFS_CACHE_RHW_FLG &&
2548                                  (epoch - cinode->epoch > 1))
2549                                 *purge_cache = true;
2550                         else if (cinode->oplock == 0 &&
2551                                  (epoch - cinode->epoch > 0))
2552                                 *purge_cache = true;
2553                 } else if (old_oplock == CIFS_CACHE_RH_FLG) {
2554                         if (cinode->oplock == CIFS_CACHE_RH_FLG &&
2555                             (epoch - cinode->epoch > 0))
2556                                 *purge_cache = true;
2557                         else if (cinode->oplock == CIFS_CACHE_RHW_FLG &&
2558                                  (epoch - cinode->epoch > 1))
2559                                 *purge_cache = true;
2560                 }
2561                 cinode->epoch = epoch;
2562         }
2563 }
2564
2565 static bool
2566 smb2_is_read_op(__u32 oplock)
2567 {
2568         return oplock == SMB2_OPLOCK_LEVEL_II;
2569 }
2570
2571 static bool
2572 smb21_is_read_op(__u32 oplock)
2573 {
2574         return (oplock & SMB2_LEASE_READ_CACHING_HE) &&
2575                !(oplock & SMB2_LEASE_WRITE_CACHING_HE);
2576 }
2577
2578 static __le32
2579 map_oplock_to_lease(u8 oplock)
2580 {
2581         if (oplock == SMB2_OPLOCK_LEVEL_EXCLUSIVE)
2582                 return SMB2_LEASE_WRITE_CACHING | SMB2_LEASE_READ_CACHING;
2583         else if (oplock == SMB2_OPLOCK_LEVEL_II)
2584                 return SMB2_LEASE_READ_CACHING;
2585         else if (oplock == SMB2_OPLOCK_LEVEL_BATCH)
2586                 return SMB2_LEASE_HANDLE_CACHING | SMB2_LEASE_READ_CACHING |
2587                        SMB2_LEASE_WRITE_CACHING;
2588         return 0;
2589 }
2590
2591 static char *
2592 smb2_create_lease_buf(u8 *lease_key, u8 oplock)
2593 {
2594         struct create_lease *buf;
2595
2596         buf = kzalloc(sizeof(struct create_lease), GFP_KERNEL);
2597         if (!buf)
2598                 return NULL;
2599
2600         memcpy(&buf->lcontext.LeaseKey, lease_key, SMB2_LEASE_KEY_SIZE);
2601         buf->lcontext.LeaseState = map_oplock_to_lease(oplock);
2602
2603         buf->ccontext.DataOffset = cpu_to_le16(offsetof
2604                                         (struct create_lease, lcontext));
2605         buf->ccontext.DataLength = cpu_to_le32(sizeof(struct lease_context));
2606         buf->ccontext.NameOffset = cpu_to_le16(offsetof
2607                                 (struct create_lease, Name));
2608         buf->ccontext.NameLength = cpu_to_le16(4);
2609         /* SMB2_CREATE_REQUEST_LEASE is "RqLs" */
2610         buf->Name[0] = 'R';
2611         buf->Name[1] = 'q';
2612         buf->Name[2] = 'L';
2613         buf->Name[3] = 's';
2614         return (char *)buf;
2615 }
2616
2617 static char *
2618 smb3_create_lease_buf(u8 *lease_key, u8 oplock)
2619 {
2620         struct create_lease_v2 *buf;
2621
2622         buf = kzalloc(sizeof(struct create_lease_v2), GFP_KERNEL);
2623         if (!buf)
2624                 return NULL;
2625
2626         memcpy(&buf->lcontext.LeaseKey, lease_key, SMB2_LEASE_KEY_SIZE);
2627         buf->lcontext.LeaseState = map_oplock_to_lease(oplock);
2628
2629         buf->ccontext.DataOffset = cpu_to_le16(offsetof
2630                                         (struct create_lease_v2, lcontext));
2631         buf->ccontext.DataLength = cpu_to_le32(sizeof(struct lease_context_v2));
2632         buf->ccontext.NameOffset = cpu_to_le16(offsetof
2633                                 (struct create_lease_v2, Name));
2634         buf->ccontext.NameLength = cpu_to_le16(4);
2635         /* SMB2_CREATE_REQUEST_LEASE is "RqLs" */
2636         buf->Name[0] = 'R';
2637         buf->Name[1] = 'q';
2638         buf->Name[2] = 'L';
2639         buf->Name[3] = 's';
2640         return (char *)buf;
2641 }
2642
2643 static __u8
2644 smb2_parse_lease_buf(void *buf, unsigned int *epoch, char *lease_key)
2645 {
2646         struct create_lease *lc = (struct create_lease *)buf;
2647
2648         *epoch = 0; /* not used */
2649         if (lc->lcontext.LeaseFlags & SMB2_LEASE_FLAG_BREAK_IN_PROGRESS)
2650                 return SMB2_OPLOCK_LEVEL_NOCHANGE;
2651         return le32_to_cpu(lc->lcontext.LeaseState);
2652 }
2653
2654 static __u8
2655 smb3_parse_lease_buf(void *buf, unsigned int *epoch, char *lease_key)
2656 {
2657         struct create_lease_v2 *lc = (struct create_lease_v2 *)buf;
2658
2659         *epoch = le16_to_cpu(lc->lcontext.Epoch);
2660         if (lc->lcontext.LeaseFlags & SMB2_LEASE_FLAG_BREAK_IN_PROGRESS)
2661                 return SMB2_OPLOCK_LEVEL_NOCHANGE;
2662         if (lease_key)
2663                 memcpy(lease_key, &lc->lcontext.LeaseKey, SMB2_LEASE_KEY_SIZE);
2664         return le32_to_cpu(lc->lcontext.LeaseState);
2665 }
2666
2667 static unsigned int
2668 smb2_wp_retry_size(struct inode *inode)
2669 {
2670         return min_t(unsigned int, CIFS_SB(inode->i_sb)->wsize,
2671                      SMB2_MAX_BUFFER_SIZE);
2672 }
2673
2674 static bool
2675 smb2_dir_needs_close(struct cifsFileInfo *cfile)
2676 {
2677         return !cfile->invalidHandle;
2678 }
2679
2680 static void
2681 fill_transform_hdr(struct smb2_transform_hdr *tr_hdr, unsigned int orig_len,
2682                    struct smb_rqst *old_rq)
2683 {
2684         struct smb2_sync_hdr *shdr =
2685                         (struct smb2_sync_hdr *)old_rq->rq_iov[0].iov_base;
2686
2687         memset(tr_hdr, 0, sizeof(struct smb2_transform_hdr));
2688         tr_hdr->ProtocolId = SMB2_TRANSFORM_PROTO_NUM;
2689         tr_hdr->OriginalMessageSize = cpu_to_le32(orig_len);
2690         tr_hdr->Flags = cpu_to_le16(0x01);
2691         get_random_bytes(&tr_hdr->Nonce, SMB3_AES128CMM_NONCE);
2692         memcpy(&tr_hdr->SessionId, &shdr->SessionId, 8);
2693 }
2694
2695 /* We can not use the normal sg_set_buf() as we will sometimes pass a
2696  * stack object as buf.
2697  */
2698 static inline void smb2_sg_set_buf(struct scatterlist *sg, const void *buf,
2699                                    unsigned int buflen)
2700 {
2701         sg_set_page(sg, virt_to_page(buf), buflen, offset_in_page(buf));
2702 }
2703
2704 /* Assumes the first rqst has a transform header as the first iov.
2705  * I.e.
2706  * rqst[0].rq_iov[0]  is transform header
2707  * rqst[0].rq_iov[1+] data to be encrypted/decrypted
2708  * rqst[1+].rq_iov[0+] data to be encrypted/decrypted
2709  */
2710 static struct scatterlist *
2711 init_sg(int num_rqst, struct smb_rqst *rqst, u8 *sign)
2712 {
2713         unsigned int sg_len;
2714         struct scatterlist *sg;
2715         unsigned int i;
2716         unsigned int j;
2717         unsigned int idx = 0;
2718         int skip;
2719
2720         sg_len = 1;
2721         for (i = 0; i < num_rqst; i++)
2722                 sg_len += rqst[i].rq_nvec + rqst[i].rq_npages;
2723
2724         sg = kmalloc_array(sg_len, sizeof(struct scatterlist), GFP_KERNEL);
2725         if (!sg)
2726                 return NULL;
2727
2728         sg_init_table(sg, sg_len);
2729         for (i = 0; i < num_rqst; i++) {
2730                 for (j = 0; j < rqst[i].rq_nvec; j++) {
2731                         /*
2732                          * The first rqst has a transform header where the
2733                          * first 20 bytes are not part of the encrypted blob
2734                          */
2735                         skip = (i == 0) && (j == 0) ? 20 : 0;
2736                         smb2_sg_set_buf(&sg[idx++],
2737                                         rqst[i].rq_iov[j].iov_base + skip,
2738                                         rqst[i].rq_iov[j].iov_len - skip);
2739                 }
2740
2741                 for (j = 0; j < rqst[i].rq_npages; j++) {
2742                         unsigned int len, offset;
2743
2744                         rqst_page_get_length(&rqst[i], j, &len, &offset);
2745                         sg_set_page(&sg[idx++], rqst[i].rq_pages[j], len, offset);
2746                 }
2747         }
2748         smb2_sg_set_buf(&sg[idx], sign, SMB2_SIGNATURE_SIZE);
2749         return sg;
2750 }
2751
2752 static int
2753 smb2_get_enc_key(struct TCP_Server_Info *server, __u64 ses_id, int enc, u8 *key)
2754 {
2755         struct cifs_ses *ses;
2756         u8 *ses_enc_key;
2757
2758         spin_lock(&cifs_tcp_ses_lock);
2759         list_for_each_entry(ses, &server->smb_ses_list, smb_ses_list) {
2760                 if (ses->Suid != ses_id)
2761                         continue;
2762                 ses_enc_key = enc ? ses->smb3encryptionkey :
2763                                                         ses->smb3decryptionkey;
2764                 memcpy(key, ses_enc_key, SMB3_SIGN_KEY_SIZE);
2765                 spin_unlock(&cifs_tcp_ses_lock);
2766                 return 0;
2767         }
2768         spin_unlock(&cifs_tcp_ses_lock);
2769
2770         return 1;
2771 }
2772 /*
2773  * Encrypt or decrypt @rqst message. @rqst[0] has the following format:
2774  * iov[0]   - transform header (associate data),
2775  * iov[1-N] - SMB2 header and pages - data to encrypt.
2776  * On success return encrypted data in iov[1-N] and pages, leave iov[0]
2777  * untouched.
2778  */
2779 static int
2780 crypt_message(struct TCP_Server_Info *server, int num_rqst,
2781               struct smb_rqst *rqst, int enc)
2782 {
2783         struct smb2_transform_hdr *tr_hdr =
2784                 (struct smb2_transform_hdr *)rqst[0].rq_iov[0].iov_base;
2785         unsigned int assoc_data_len = sizeof(struct smb2_transform_hdr) - 20;
2786         int rc = 0;
2787         struct scatterlist *sg;
2788         u8 sign[SMB2_SIGNATURE_SIZE] = {};
2789         u8 key[SMB3_SIGN_KEY_SIZE];
2790         struct aead_request *req;
2791         char *iv;
2792         unsigned int iv_len;
2793         DECLARE_CRYPTO_WAIT(wait);
2794         struct crypto_aead *tfm;
2795         unsigned int crypt_len = le32_to_cpu(tr_hdr->OriginalMessageSize);
2796
2797         rc = smb2_get_enc_key(server, tr_hdr->SessionId, enc, key);
2798         if (rc) {
2799                 cifs_dbg(VFS, "%s: Could not get %scryption key\n", __func__,
2800                          enc ? "en" : "de");
2801                 return 0;
2802         }
2803
2804         rc = smb3_crypto_aead_allocate(server);
2805         if (rc) {
2806                 cifs_dbg(VFS, "%s: crypto alloc failed\n", __func__);
2807                 return rc;
2808         }
2809
2810         tfm = enc ? server->secmech.ccmaesencrypt :
2811                                                 server->secmech.ccmaesdecrypt;
2812         rc = crypto_aead_setkey(tfm, key, SMB3_SIGN_KEY_SIZE);
2813         if (rc) {
2814                 cifs_dbg(VFS, "%s: Failed to set aead key %d\n", __func__, rc);
2815                 return rc;
2816         }
2817
2818         rc = crypto_aead_setauthsize(tfm, SMB2_SIGNATURE_SIZE);
2819         if (rc) {
2820                 cifs_dbg(VFS, "%s: Failed to set authsize %d\n", __func__, rc);
2821                 return rc;
2822         }
2823
2824         req = aead_request_alloc(tfm, GFP_KERNEL);
2825         if (!req) {
2826                 cifs_dbg(VFS, "%s: Failed to alloc aead request", __func__);
2827                 return -ENOMEM;
2828         }
2829
2830         if (!enc) {
2831                 memcpy(sign, &tr_hdr->Signature, SMB2_SIGNATURE_SIZE);
2832                 crypt_len += SMB2_SIGNATURE_SIZE;
2833         }
2834
2835         sg = init_sg(num_rqst, rqst, sign);
2836         if (!sg) {
2837                 cifs_dbg(VFS, "%s: Failed to init sg", __func__);
2838                 rc = -ENOMEM;
2839                 goto free_req;
2840         }
2841
2842         iv_len = crypto_aead_ivsize(tfm);
2843         iv = kzalloc(iv_len, GFP_KERNEL);
2844         if (!iv) {
2845                 cifs_dbg(VFS, "%s: Failed to alloc IV", __func__);
2846                 rc = -ENOMEM;
2847                 goto free_sg;
2848         }
2849         iv[0] = 3;
2850         memcpy(iv + 1, (char *)tr_hdr->Nonce, SMB3_AES128CMM_NONCE);
2851
2852         aead_request_set_crypt(req, sg, sg, crypt_len, iv);
2853         aead_request_set_ad(req, assoc_data_len);
2854
2855         aead_request_set_callback(req, CRYPTO_TFM_REQ_MAY_BACKLOG,
2856                                   crypto_req_done, &wait);
2857
2858         rc = crypto_wait_req(enc ? crypto_aead_encrypt(req)
2859                                 : crypto_aead_decrypt(req), &wait);
2860
2861         if (!rc && enc)
2862                 memcpy(&tr_hdr->Signature, sign, SMB2_SIGNATURE_SIZE);
2863
2864         kfree(iv);
2865 free_sg:
2866         kfree(sg);
2867 free_req:
2868         kfree(req);
2869         return rc;
2870 }
2871
2872 void
2873 smb3_free_compound_rqst(int num_rqst, struct smb_rqst *rqst)
2874 {
2875         int i, j;
2876
2877         for (i = 0; i < num_rqst; i++) {
2878                 if (rqst[i].rq_pages) {
2879                         for (j = rqst[i].rq_npages - 1; j >= 0; j--)
2880                                 put_page(rqst[i].rq_pages[j]);
2881                         kfree(rqst[i].rq_pages);
2882                 }
2883         }
2884 }
2885
2886 /*
2887  * This function will initialize new_rq and encrypt the content.
2888  * The first entry, new_rq[0], only contains a single iov which contains
2889  * a smb2_transform_hdr and is pre-allocated by the caller.
2890  * This function then populates new_rq[1+] with the content from olq_rq[0+].
2891  *
2892  * The end result is an array of smb_rqst structures where the first structure
2893  * only contains a single iov for the transform header which we then can pass
2894  * to crypt_message().
2895  *
2896  * new_rq[0].rq_iov[0] :  smb2_transform_hdr pre-allocated by the caller
2897  * new_rq[1+].rq_iov[*] == old_rq[0+].rq_iov[*] : SMB2/3 requests
2898  */
2899 static int
2900 smb3_init_transform_rq(struct TCP_Server_Info *server, int num_rqst,
2901                        struct smb_rqst *new_rq, struct smb_rqst *old_rq)
2902 {
2903         struct page **pages;
2904         struct smb2_transform_hdr *tr_hdr = new_rq[0].rq_iov[0].iov_base;
2905         unsigned int npages;
2906         unsigned int orig_len = 0;
2907         int i, j;
2908         int rc = -ENOMEM;
2909
2910         for (i = 1; i < num_rqst; i++) {
2911                 npages = old_rq[i - 1].rq_npages;
2912                 pages = kmalloc_array(npages, sizeof(struct page *),
2913                                       GFP_KERNEL);
2914                 if (!pages)
2915                         goto err_free;
2916
2917                 new_rq[i].rq_pages = pages;
2918                 new_rq[i].rq_npages = npages;
2919                 new_rq[i].rq_offset = old_rq[i - 1].rq_offset;
2920                 new_rq[i].rq_pagesz = old_rq[i - 1].rq_pagesz;
2921                 new_rq[i].rq_tailsz = old_rq[i - 1].rq_tailsz;
2922                 new_rq[i].rq_iov = old_rq[i - 1].rq_iov;
2923                 new_rq[i].rq_nvec = old_rq[i - 1].rq_nvec;
2924
2925                 orig_len += smb_rqst_len(server, &old_rq[i - 1]);
2926
2927                 for (j = 0; j < npages; j++) {
2928                         pages[j] = alloc_page(GFP_KERNEL|__GFP_HIGHMEM);
2929                         if (!pages[j])
2930                                 goto err_free;
2931                 }
2932
2933                 /* copy pages form the old */
2934                 for (j = 0; j < npages; j++) {
2935                         char *dst, *src;
2936                         unsigned int offset, len;
2937
2938                         rqst_page_get_length(&new_rq[i], j, &len, &offset);
2939
2940                         dst = (char *) kmap(new_rq[i].rq_pages[j]) + offset;
2941                         src = (char *) kmap(old_rq[i - 1].rq_pages[j]) + offset;
2942
2943                         memcpy(dst, src, len);
2944                         kunmap(new_rq[i].rq_pages[j]);
2945                         kunmap(old_rq[i - 1].rq_pages[j]);
2946                 }
2947         }
2948
2949         /* fill the 1st iov with a transform header */
2950         fill_transform_hdr(tr_hdr, orig_len, old_rq);
2951
2952         rc = crypt_message(server, num_rqst, new_rq, 1);
2953         cifs_dbg(FYI, "encrypt message returned %d", rc);
2954         if (rc)
2955                 goto err_free;
2956
2957         return rc;
2958
2959 err_free:
2960         smb3_free_compound_rqst(num_rqst - 1, &new_rq[1]);
2961         return rc;
2962 }
2963
2964 static int
2965 smb3_is_transform_hdr(void *buf)
2966 {
2967         struct smb2_transform_hdr *trhdr = buf;
2968
2969         return trhdr->ProtocolId == SMB2_TRANSFORM_PROTO_NUM;
2970 }
2971
2972 static int
2973 decrypt_raw_data(struct TCP_Server_Info *server, char *buf,
2974                  unsigned int buf_data_size, struct page **pages,
2975                  unsigned int npages, unsigned int page_data_size)
2976 {
2977         struct kvec iov[2];
2978         struct smb_rqst rqst = {NULL};
2979         int rc;
2980
2981         iov[0].iov_base = buf;
2982         iov[0].iov_len = sizeof(struct smb2_transform_hdr);
2983         iov[1].iov_base = buf + sizeof(struct smb2_transform_hdr);
2984         iov[1].iov_len = buf_data_size;
2985
2986         rqst.rq_iov = iov;
2987         rqst.rq_nvec = 2;
2988         rqst.rq_pages = pages;
2989         rqst.rq_npages = npages;
2990         rqst.rq_pagesz = PAGE_SIZE;
2991         rqst.rq_tailsz = (page_data_size % PAGE_SIZE) ? : PAGE_SIZE;
2992
2993         rc = crypt_message(server, 1, &rqst, 0);
2994         cifs_dbg(FYI, "decrypt message returned %d\n", rc);
2995
2996         if (rc)
2997                 return rc;
2998
2999         memmove(buf, iov[1].iov_base, buf_data_size);
3000
3001         server->total_read = buf_data_size + page_data_size;
3002
3003         return rc;
3004 }
3005
3006 static int
3007 read_data_into_pages(struct TCP_Server_Info *server, struct page **pages,
3008                      unsigned int npages, unsigned int len)
3009 {
3010         int i;
3011         int length;
3012
3013         for (i = 0; i < npages; i++) {
3014                 struct page *page = pages[i];
3015                 size_t n;
3016
3017                 n = len;
3018                 if (len >= PAGE_SIZE) {
3019                         /* enough data to fill the page */
3020                         n = PAGE_SIZE;
3021                         len -= n;
3022                 } else {
3023                         zero_user(page, len, PAGE_SIZE - len);
3024                         len = 0;
3025                 }
3026                 length = cifs_read_page_from_socket(server, page, 0, n);
3027                 if (length < 0)
3028                         return length;
3029                 server->total_read += length;
3030         }
3031
3032         return 0;
3033 }
3034
3035 static int
3036 init_read_bvec(struct page **pages, unsigned int npages, unsigned int data_size,
3037                unsigned int cur_off, struct bio_vec **page_vec)
3038 {
3039         struct bio_vec *bvec;
3040         int i;
3041
3042         bvec = kcalloc(npages, sizeof(struct bio_vec), GFP_KERNEL);
3043         if (!bvec)
3044                 return -ENOMEM;
3045
3046         for (i = 0; i < npages; i++) {
3047                 bvec[i].bv_page = pages[i];
3048                 bvec[i].bv_offset = (i == 0) ? cur_off : 0;
3049                 bvec[i].bv_len = min_t(unsigned int, PAGE_SIZE, data_size);
3050                 data_size -= bvec[i].bv_len;
3051         }
3052
3053         if (data_size != 0) {
3054                 cifs_dbg(VFS, "%s: something went wrong\n", __func__);
3055                 kfree(bvec);
3056                 return -EIO;
3057         }
3058
3059         *page_vec = bvec;
3060         return 0;
3061 }
3062
3063 static int
3064 handle_read_data(struct TCP_Server_Info *server, struct mid_q_entry *mid,
3065                  char *buf, unsigned int buf_len, struct page **pages,
3066                  unsigned int npages, unsigned int page_data_size)
3067 {
3068         unsigned int data_offset;
3069         unsigned int data_len;
3070         unsigned int cur_off;
3071         unsigned int cur_page_idx;
3072         unsigned int pad_len;
3073         struct cifs_readdata *rdata = mid->callback_data;
3074         struct smb2_sync_hdr *shdr = (struct smb2_sync_hdr *)buf;
3075         struct bio_vec *bvec = NULL;
3076         struct iov_iter iter;
3077         struct kvec iov;
3078         int length;
3079         bool use_rdma_mr = false;
3080
3081         if (shdr->Command != SMB2_READ) {
3082                 cifs_dbg(VFS, "only big read responses are supported\n");
3083                 return -ENOTSUPP;
3084         }
3085
3086         if (server->ops->is_session_expired &&
3087             server->ops->is_session_expired(buf)) {
3088                 cifs_reconnect(server);
3089                 wake_up(&server->response_q);
3090                 return -1;
3091         }
3092
3093         if (server->ops->is_status_pending &&
3094                         server->ops->is_status_pending(buf, server, 0))
3095                 return -1;
3096
3097         rdata->result = server->ops->map_error(buf, false);
3098         if (rdata->result != 0) {
3099                 cifs_dbg(FYI, "%s: server returned error %d\n",
3100                          __func__, rdata->result);
3101                 dequeue_mid(mid, rdata->result);
3102                 return 0;
3103         }
3104
3105         data_offset = server->ops->read_data_offset(buf);
3106 #ifdef CONFIG_CIFS_SMB_DIRECT
3107         use_rdma_mr = rdata->mr;
3108 #endif
3109         data_len = server->ops->read_data_length(buf, use_rdma_mr);
3110
3111         if (data_offset < server->vals->read_rsp_size) {
3112                 /*
3113                  * win2k8 sometimes sends an offset of 0 when the read
3114                  * is beyond the EOF. Treat it as if the data starts just after
3115                  * the header.
3116                  */
3117                 cifs_dbg(FYI, "%s: data offset (%u) inside read response header\n",
3118                          __func__, data_offset);
3119                 data_offset = server->vals->read_rsp_size;
3120         } else if (data_offset > MAX_CIFS_SMALL_BUFFER_SIZE) {
3121                 /* data_offset is beyond the end of smallbuf */
3122                 cifs_dbg(FYI, "%s: data offset (%u) beyond end of smallbuf\n",
3123                          __func__, data_offset);
3124                 rdata->result = -EIO;
3125                 dequeue_mid(mid, rdata->result);
3126                 return 0;
3127         }
3128
3129         pad_len = data_offset - server->vals->read_rsp_size;
3130
3131         if (buf_len <= data_offset) {
3132                 /* read response payload is in pages */
3133                 cur_page_idx = pad_len / PAGE_SIZE;
3134                 cur_off = pad_len % PAGE_SIZE;
3135
3136                 if (cur_page_idx != 0) {
3137                         /* data offset is beyond the 1st page of response */
3138                         cifs_dbg(FYI, "%s: data offset (%u) beyond 1st page of response\n",
3139                                  __func__, data_offset);
3140                         rdata->result = -EIO;
3141                         dequeue_mid(mid, rdata->result);
3142                         return 0;
3143                 }
3144
3145                 if (data_len > page_data_size - pad_len) {
3146                         /* data_len is corrupt -- discard frame */
3147                         rdata->result = -EIO;
3148                         dequeue_mid(mid, rdata->result);
3149                         return 0;
3150                 }
3151
3152                 rdata->result = init_read_bvec(pages, npages, page_data_size,
3153                                                cur_off, &bvec);
3154                 if (rdata->result != 0) {
3155                         dequeue_mid(mid, rdata->result);
3156                         return 0;
3157                 }
3158
3159                 iov_iter_bvec(&iter, WRITE, bvec, npages, data_len);
3160         } else if (buf_len >= data_offset + data_len) {
3161                 /* read response payload is in buf */
3162                 WARN_ONCE(npages > 0, "read data can be either in buf or in pages");
3163                 iov.iov_base = buf + data_offset;
3164                 iov.iov_len = data_len;
3165                 iov_iter_kvec(&iter, WRITE, &iov, 1, data_len);
3166         } else {
3167                 /* read response payload cannot be in both buf and pages */
3168                 WARN_ONCE(1, "buf can not contain only a part of read data");
3169                 rdata->result = -EIO;
3170                 dequeue_mid(mid, rdata->result);
3171                 return 0;
3172         }
3173
3174         /* set up first iov for signature check */
3175         rdata->iov[0].iov_base = buf;
3176         rdata->iov[0].iov_len = 4;
3177         rdata->iov[1].iov_base = buf + 4;
3178         rdata->iov[1].iov_len = server->vals->read_rsp_size - 4;
3179         cifs_dbg(FYI, "0: iov_base=%p iov_len=%zu\n",
3180                  rdata->iov[0].iov_base, server->vals->read_rsp_size);
3181
3182         length = rdata->copy_into_pages(server, rdata, &iter);
3183
3184         kfree(bvec);
3185
3186         if (length < 0)
3187                 return length;
3188
3189         dequeue_mid(mid, false);
3190         return length;
3191 }
3192
3193 static int
3194 receive_encrypted_read(struct TCP_Server_Info *server, struct mid_q_entry **mid)
3195 {
3196         char *buf = server->smallbuf;
3197         struct smb2_transform_hdr *tr_hdr = (struct smb2_transform_hdr *)buf;
3198         unsigned int npages;
3199         struct page **pages;
3200         unsigned int len;
3201         unsigned int buflen = server->pdu_size;
3202         int rc;
3203         int i = 0;
3204
3205         len = min_t(unsigned int, buflen, server->vals->read_rsp_size +
3206                 sizeof(struct smb2_transform_hdr)) - HEADER_SIZE(server) + 1;
3207
3208         rc = cifs_read_from_socket(server, buf + HEADER_SIZE(server) - 1, len);
3209         if (rc < 0)
3210                 return rc;
3211         server->total_read += rc;
3212
3213         len = le32_to_cpu(tr_hdr->OriginalMessageSize) -
3214                 server->vals->read_rsp_size;
3215         npages = DIV_ROUND_UP(len, PAGE_SIZE);
3216
3217         pages = kmalloc_array(npages, sizeof(struct page *), GFP_KERNEL);
3218         if (!pages) {
3219                 rc = -ENOMEM;
3220                 goto discard_data;
3221         }
3222
3223         for (; i < npages; i++) {
3224                 pages[i] = alloc_page(GFP_KERNEL|__GFP_HIGHMEM);
3225                 if (!pages[i]) {
3226                         rc = -ENOMEM;
3227                         goto discard_data;
3228                 }
3229         }
3230
3231         /* read read data into pages */
3232         rc = read_data_into_pages(server, pages, npages, len);
3233         if (rc)
3234                 goto free_pages;
3235
3236         rc = cifs_discard_remaining_data(server);
3237         if (rc)
3238                 goto free_pages;
3239
3240         rc = decrypt_raw_data(server, buf, server->vals->read_rsp_size,
3241                               pages, npages, len);
3242         if (rc)
3243                 goto free_pages;
3244
3245         *mid = smb2_find_mid(server, buf);
3246         if (*mid == NULL)
3247                 cifs_dbg(FYI, "mid not found\n");
3248         else {
3249                 cifs_dbg(FYI, "mid found\n");
3250                 (*mid)->decrypted = true;
3251                 rc = handle_read_data(server, *mid, buf,
3252                                       server->vals->read_rsp_size,
3253                                       pages, npages, len);
3254         }
3255
3256 free_pages:
3257         for (i = i - 1; i >= 0; i--)
3258                 put_page(pages[i]);
3259         kfree(pages);
3260         return rc;
3261 discard_data:
3262         cifs_discard_remaining_data(server);
3263         goto free_pages;
3264 }
3265
3266 static int
3267 receive_encrypted_standard(struct TCP_Server_Info *server,
3268                            struct mid_q_entry **mids, char **bufs,
3269                            int *num_mids)
3270 {
3271         int ret, length;
3272         char *buf = server->smallbuf;
3273         char *tmpbuf;
3274         struct smb2_sync_hdr *shdr;
3275         unsigned int pdu_length = server->pdu_size;
3276         unsigned int buf_size;
3277         struct mid_q_entry *mid_entry;
3278         int next_is_large;
3279         char *next_buffer = NULL;
3280
3281         *num_mids = 0;
3282
3283         /* switch to large buffer if too big for a small one */
3284         if (pdu_length > MAX_CIFS_SMALL_BUFFER_SIZE) {
3285                 server->large_buf = true;
3286                 memcpy(server->bigbuf, buf, server->total_read);
3287                 buf = server->bigbuf;
3288         }
3289
3290         /* now read the rest */
3291         length = cifs_read_from_socket(server, buf + HEADER_SIZE(server) - 1,
3292                                 pdu_length - HEADER_SIZE(server) + 1);
3293         if (length < 0)
3294                 return length;
3295         server->total_read += length;
3296
3297         buf_size = pdu_length - sizeof(struct smb2_transform_hdr);
3298         length = decrypt_raw_data(server, buf, buf_size, NULL, 0, 0);
3299         if (length)
3300                 return length;
3301
3302         next_is_large = server->large_buf;
3303  one_more:
3304         shdr = (struct smb2_sync_hdr *)buf;
3305         if (shdr->NextCommand) {
3306                 if (next_is_large) {
3307                         tmpbuf = server->bigbuf;
3308                         next_buffer = (char *)cifs_buf_get();
3309                 } else {
3310                         tmpbuf = server->smallbuf;
3311                         next_buffer = (char *)cifs_small_buf_get();
3312                 }
3313                 memcpy(next_buffer,
3314                        tmpbuf + le32_to_cpu(shdr->NextCommand),
3315                        pdu_length - le32_to_cpu(shdr->NextCommand));
3316         }
3317
3318         mid_entry = smb2_find_mid(server, buf);
3319         if (mid_entry == NULL)
3320                 cifs_dbg(FYI, "mid not found\n");
3321         else {
3322                 cifs_dbg(FYI, "mid found\n");
3323                 mid_entry->decrypted = true;
3324                 mid_entry->resp_buf_size = server->pdu_size;
3325         }
3326
3327         if (*num_mids >= MAX_COMPOUND) {
3328                 cifs_dbg(VFS, "too many PDUs in compound\n");
3329                 return -1;
3330         }
3331         bufs[*num_mids] = buf;
3332         mids[(*num_mids)++] = mid_entry;
3333
3334         if (mid_entry && mid_entry->handle)
3335                 ret = mid_entry->handle(server, mid_entry);
3336         else
3337                 ret = cifs_handle_standard(server, mid_entry);
3338
3339         if (ret == 0 && shdr->NextCommand) {
3340                 pdu_length -= le32_to_cpu(shdr->NextCommand);
3341                 server->large_buf = next_is_large;
3342                 if (next_is_large)
3343                         server->bigbuf = next_buffer;
3344                 else
3345                         server->smallbuf = next_buffer;
3346
3347                 buf += le32_to_cpu(shdr->NextCommand);
3348                 goto one_more;
3349         }
3350
3351         return ret;
3352 }
3353
3354 static int
3355 smb3_receive_transform(struct TCP_Server_Info *server,
3356                        struct mid_q_entry **mids, char **bufs, int *num_mids)
3357 {
3358         char *buf = server->smallbuf;
3359         unsigned int pdu_length = server->pdu_size;
3360         struct smb2_transform_hdr *tr_hdr = (struct smb2_transform_hdr *)buf;
3361         unsigned int orig_len = le32_to_cpu(tr_hdr->OriginalMessageSize);
3362
3363         if (pdu_length < sizeof(struct smb2_transform_hdr) +
3364                                                 sizeof(struct smb2_sync_hdr)) {
3365                 cifs_dbg(VFS, "Transform message is too small (%u)\n",
3366                          pdu_length);
3367                 cifs_reconnect(server);
3368                 wake_up(&server->response_q);
3369                 return -ECONNABORTED;
3370         }
3371
3372         if (pdu_length < orig_len + sizeof(struct smb2_transform_hdr)) {
3373                 cifs_dbg(VFS, "Transform message is broken\n");
3374                 cifs_reconnect(server);
3375                 wake_up(&server->response_q);
3376                 return -ECONNABORTED;
3377         }
3378
3379         /* TODO: add support for compounds containing READ. */
3380         if (pdu_length > CIFSMaxBufSize + MAX_HEADER_SIZE(server))
3381                 return receive_encrypted_read(server, &mids[0]);
3382
3383         return receive_encrypted_standard(server, mids, bufs, num_mids);
3384 }
3385
3386 int
3387 smb3_handle_read_data(struct TCP_Server_Info *server, struct mid_q_entry *mid)
3388 {
3389         char *buf = server->large_buf ? server->bigbuf : server->smallbuf;
3390
3391         return handle_read_data(server, mid, buf, server->pdu_size,
3392                                 NULL, 0, 0);
3393 }
3394
3395 static int
3396 smb2_next_header(char *buf)
3397 {
3398         struct smb2_sync_hdr *hdr = (struct smb2_sync_hdr *)buf;
3399         struct smb2_transform_hdr *t_hdr = (struct smb2_transform_hdr *)buf;
3400
3401         if (hdr->ProtocolId == SMB2_TRANSFORM_PROTO_NUM)
3402                 return sizeof(struct smb2_transform_hdr) +
3403                   le32_to_cpu(t_hdr->OriginalMessageSize);
3404
3405         return le32_to_cpu(hdr->NextCommand);
3406 }
3407
3408 struct smb_version_operations smb20_operations = {
3409         .compare_fids = smb2_compare_fids,
3410         .setup_request = smb2_setup_request,
3411         .setup_async_request = smb2_setup_async_request,
3412         .check_receive = smb2_check_receive,
3413         .add_credits = smb2_add_credits,
3414         .set_credits = smb2_set_credits,
3415         .get_credits_field = smb2_get_credits_field,
3416         .get_credits = smb2_get_credits,
3417         .wait_mtu_credits = cifs_wait_mtu_credits,
3418         .get_next_mid = smb2_get_next_mid,
3419         .read_data_offset = smb2_read_data_offset,
3420         .read_data_length = smb2_read_data_length,
3421         .map_error = map_smb2_to_linux_error,
3422         .find_mid = smb2_find_mid,
3423         .check_message = smb2_check_message,
3424         .dump_detail = smb2_dump_detail,
3425         .clear_stats = smb2_clear_stats,
3426         .print_stats = smb2_print_stats,
3427         .is_oplock_break = smb2_is_valid_oplock_break,
3428         .handle_cancelled_mid = smb2_handle_cancelled_mid,
3429         .downgrade_oplock = smb2_downgrade_oplock,
3430         .need_neg = smb2_need_neg,
3431         .negotiate = smb2_negotiate,
3432         .negotiate_wsize = smb2_negotiate_wsize,
3433         .negotiate_rsize = smb2_negotiate_rsize,
3434         .sess_setup = SMB2_sess_setup,
3435         .logoff = SMB2_logoff,
3436         .tree_connect = SMB2_tcon,
3437         .tree_disconnect = SMB2_tdis,
3438         .qfs_tcon = smb2_qfs_tcon,
3439         .is_path_accessible = smb2_is_path_accessible,
3440         .can_echo = smb2_can_echo,
3441         .echo = SMB2_echo,
3442         .query_path_info = smb2_query_path_info,
3443         .get_srv_inum = smb2_get_srv_inum,
3444         .query_file_info = smb2_query_file_info,
3445         .set_path_size = smb2_set_path_size,
3