CIFS: fiemap: do not return EINVAL if get nothing
[muen/linux.git] / fs / cifs / smb2ops.c
1 // SPDX-License-Identifier: GPL-2.0
2 /*
3  *  SMB2 version specific operations
4  *
5  *  Copyright (c) 2012, Jeff Layton <jlayton@redhat.com>
6  */
7
8 #include <linux/pagemap.h>
9 #include <linux/vfs.h>
10 #include <linux/falloc.h>
11 #include <linux/scatterlist.h>
12 #include <linux/uuid.h>
13 #include <linux/sort.h>
14 #include <crypto/aead.h>
15 #include "cifsfs.h"
16 #include "cifsglob.h"
17 #include "smb2pdu.h"
18 #include "smb2proto.h"
19 #include "cifsproto.h"
20 #include "cifs_debug.h"
21 #include "cifs_unicode.h"
22 #include "smb2status.h"
23 #include "smb2glob.h"
24 #include "cifs_ioctl.h"
25 #include "smbdirect.h"
26
27 /* Change credits for different ops and return the total number of credits */
28 static int
29 change_conf(struct TCP_Server_Info *server)
30 {
31         server->credits += server->echo_credits + server->oplock_credits;
32         server->oplock_credits = server->echo_credits = 0;
33         switch (server->credits) {
34         case 0:
35                 return 0;
36         case 1:
37                 server->echoes = false;
38                 server->oplocks = false;
39                 break;
40         case 2:
41                 server->echoes = true;
42                 server->oplocks = false;
43                 server->echo_credits = 1;
44                 break;
45         default:
46                 server->echoes = true;
47                 if (enable_oplocks) {
48                         server->oplocks = true;
49                         server->oplock_credits = 1;
50                 } else
51                         server->oplocks = false;
52
53                 server->echo_credits = 1;
54         }
55         server->credits -= server->echo_credits + server->oplock_credits;
56         return server->credits + server->echo_credits + server->oplock_credits;
57 }
58
59 static void
60 smb2_add_credits(struct TCP_Server_Info *server,
61                  const struct cifs_credits *credits, const int optype)
62 {
63         int *val, rc = -1;
64         unsigned int add = credits->value;
65         unsigned int instance = credits->instance;
66         bool reconnect_detected = false;
67
68         spin_lock(&server->req_lock);
69         val = server->ops->get_credits_field(server, optype);
70
71         /* eg found case where write overlapping reconnect messed up credits */
72         if (((optype & CIFS_OP_MASK) == CIFS_NEG_OP) && (*val != 0))
73                 trace_smb3_reconnect_with_invalid_credits(server->CurrentMid,
74                         server->hostname, *val);
75         if ((instance == 0) || (instance == server->reconnect_instance))
76                 *val += add;
77         else
78                 reconnect_detected = true;
79
80         if (*val > 65000) {
81                 *val = 65000; /* Don't get near 64K credits, avoid srv bugs */
82                 printk_once(KERN_WARNING "server overflowed SMB3 credits\n");
83         }
84         server->in_flight--;
85         if (server->in_flight == 0 && (optype & CIFS_OP_MASK) != CIFS_NEG_OP)
86                 rc = change_conf(server);
87         /*
88          * Sometimes server returns 0 credits on oplock break ack - we need to
89          * rebalance credits in this case.
90          */
91         else if (server->in_flight > 0 && server->oplock_credits == 0 &&
92                  server->oplocks) {
93                 if (server->credits > 1) {
94                         server->credits--;
95                         server->oplock_credits++;
96                 }
97         }
98         spin_unlock(&server->req_lock);
99         wake_up(&server->request_q);
100
101         if (reconnect_detected)
102                 cifs_dbg(FYI, "trying to put %d credits from the old server instance %d\n",
103                          add, instance);
104
105         if (server->tcpStatus == CifsNeedReconnect
106             || server->tcpStatus == CifsExiting)
107                 return;
108
109         switch (rc) {
110         case -1:
111                 /* change_conf hasn't been executed */
112                 break;
113         case 0:
114                 cifs_server_dbg(VFS, "Possible client or server bug - zero credits\n");
115                 break;
116         case 1:
117                 cifs_server_dbg(VFS, "disabling echoes and oplocks\n");
118                 break;
119         case 2:
120                 cifs_dbg(FYI, "disabling oplocks\n");
121                 break;
122         default:
123                 cifs_dbg(FYI, "add %u credits total=%d\n", add, rc);
124         }
125 }
126
127 static void
128 smb2_set_credits(struct TCP_Server_Info *server, const int val)
129 {
130         spin_lock(&server->req_lock);
131         server->credits = val;
132         if (val == 1)
133                 server->reconnect_instance++;
134         spin_unlock(&server->req_lock);
135         /* don't log while holding the lock */
136         if (val == 1)
137                 cifs_dbg(FYI, "set credits to 1 due to smb2 reconnect\n");
138 }
139
140 static int *
141 smb2_get_credits_field(struct TCP_Server_Info *server, const int optype)
142 {
143         switch (optype) {
144         case CIFS_ECHO_OP:
145                 return &server->echo_credits;
146         case CIFS_OBREAK_OP:
147                 return &server->oplock_credits;
148         default:
149                 return &server->credits;
150         }
151 }
152
153 static unsigned int
154 smb2_get_credits(struct mid_q_entry *mid)
155 {
156         return mid->credits_received;
157 }
158
159 static int
160 smb2_wait_mtu_credits(struct TCP_Server_Info *server, unsigned int size,
161                       unsigned int *num, struct cifs_credits *credits)
162 {
163         int rc = 0;
164         unsigned int scredits;
165
166         spin_lock(&server->req_lock);
167         while (1) {
168                 if (server->credits <= 0) {
169                         spin_unlock(&server->req_lock);
170                         cifs_num_waiters_inc(server);
171                         rc = wait_event_killable(server->request_q,
172                                 has_credits(server, &server->credits, 1));
173                         cifs_num_waiters_dec(server);
174                         if (rc)
175                                 return rc;
176                         spin_lock(&server->req_lock);
177                 } else {
178                         if (server->tcpStatus == CifsExiting) {
179                                 spin_unlock(&server->req_lock);
180                                 return -ENOENT;
181                         }
182
183                         scredits = server->credits;
184                         /* can deadlock with reopen */
185                         if (scredits <= 8) {
186                                 *num = SMB2_MAX_BUFFER_SIZE;
187                                 credits->value = 0;
188                                 credits->instance = 0;
189                                 break;
190                         }
191
192                         /* leave some credits for reopen and other ops */
193                         scredits -= 8;
194                         *num = min_t(unsigned int, size,
195                                      scredits * SMB2_MAX_BUFFER_SIZE);
196
197                         credits->value =
198                                 DIV_ROUND_UP(*num, SMB2_MAX_BUFFER_SIZE);
199                         credits->instance = server->reconnect_instance;
200                         server->credits -= credits->value;
201                         server->in_flight++;
202                         if (server->in_flight > server->max_in_flight)
203                                 server->max_in_flight = server->in_flight;
204                         break;
205                 }
206         }
207         spin_unlock(&server->req_lock);
208         return rc;
209 }
210
211 static int
212 smb2_adjust_credits(struct TCP_Server_Info *server,
213                     struct cifs_credits *credits,
214                     const unsigned int payload_size)
215 {
216         int new_val = DIV_ROUND_UP(payload_size, SMB2_MAX_BUFFER_SIZE);
217
218         if (!credits->value || credits->value == new_val)
219                 return 0;
220
221         if (credits->value < new_val) {
222                 WARN_ONCE(1, "request has less credits (%d) than required (%d)",
223                           credits->value, new_val);
224                 return -ENOTSUPP;
225         }
226
227         spin_lock(&server->req_lock);
228
229         if (server->reconnect_instance != credits->instance) {
230                 spin_unlock(&server->req_lock);
231                 cifs_server_dbg(VFS, "trying to return %d credits to old session\n",
232                          credits->value - new_val);
233                 return -EAGAIN;
234         }
235
236         server->credits += credits->value - new_val;
237         spin_unlock(&server->req_lock);
238         wake_up(&server->request_q);
239         credits->value = new_val;
240         return 0;
241 }
242
243 static __u64
244 smb2_get_next_mid(struct TCP_Server_Info *server)
245 {
246         __u64 mid;
247         /* for SMB2 we need the current value */
248         spin_lock(&GlobalMid_Lock);
249         mid = server->CurrentMid++;
250         spin_unlock(&GlobalMid_Lock);
251         return mid;
252 }
253
254 static void
255 smb2_revert_current_mid(struct TCP_Server_Info *server, const unsigned int val)
256 {
257         spin_lock(&GlobalMid_Lock);
258         if (server->CurrentMid >= val)
259                 server->CurrentMid -= val;
260         spin_unlock(&GlobalMid_Lock);
261 }
262
263 static struct mid_q_entry *
264 smb2_find_mid(struct TCP_Server_Info *server, char *buf)
265 {
266         struct mid_q_entry *mid;
267         struct smb2_sync_hdr *shdr = (struct smb2_sync_hdr *)buf;
268         __u64 wire_mid = le64_to_cpu(shdr->MessageId);
269
270         if (shdr->ProtocolId == SMB2_TRANSFORM_PROTO_NUM) {
271                 cifs_server_dbg(VFS, "Encrypted frame parsing not supported yet\n");
272                 return NULL;
273         }
274
275         spin_lock(&GlobalMid_Lock);
276         list_for_each_entry(mid, &server->pending_mid_q, qhead) {
277                 if ((mid->mid == wire_mid) &&
278                     (mid->mid_state == MID_REQUEST_SUBMITTED) &&
279                     (mid->command == shdr->Command)) {
280                         kref_get(&mid->refcount);
281                         spin_unlock(&GlobalMid_Lock);
282                         return mid;
283                 }
284         }
285         spin_unlock(&GlobalMid_Lock);
286         return NULL;
287 }
288
289 static void
290 smb2_dump_detail(void *buf, struct TCP_Server_Info *server)
291 {
292 #ifdef CONFIG_CIFS_DEBUG2
293         struct smb2_sync_hdr *shdr = (struct smb2_sync_hdr *)buf;
294
295         cifs_server_dbg(VFS, "Cmd: %d Err: 0x%x Flags: 0x%x Mid: %llu Pid: %d\n",
296                  shdr->Command, shdr->Status, shdr->Flags, shdr->MessageId,
297                  shdr->ProcessId);
298         cifs_server_dbg(VFS, "smb buf %p len %u\n", buf,
299                  server->ops->calc_smb_size(buf, server));
300 #endif
301 }
302
303 static bool
304 smb2_need_neg(struct TCP_Server_Info *server)
305 {
306         return server->max_read == 0;
307 }
308
309 static int
310 smb2_negotiate(const unsigned int xid, struct cifs_ses *ses)
311 {
312         int rc;
313
314         cifs_ses_server(ses)->CurrentMid = 0;
315         rc = SMB2_negotiate(xid, ses);
316         /* BB we probably don't need to retry with modern servers */
317         if (rc == -EAGAIN)
318                 rc = -EHOSTDOWN;
319         return rc;
320 }
321
322 static unsigned int
323 smb2_negotiate_wsize(struct cifs_tcon *tcon, struct smb_vol *volume_info)
324 {
325         struct TCP_Server_Info *server = tcon->ses->server;
326         unsigned int wsize;
327
328         /* start with specified wsize, or default */
329         wsize = volume_info->wsize ? volume_info->wsize : CIFS_DEFAULT_IOSIZE;
330         wsize = min_t(unsigned int, wsize, server->max_write);
331 #ifdef CONFIG_CIFS_SMB_DIRECT
332         if (server->rdma) {
333                 if (server->sign)
334                         wsize = min_t(unsigned int,
335                                 wsize, server->smbd_conn->max_fragmented_send_size);
336                 else
337                         wsize = min_t(unsigned int,
338                                 wsize, server->smbd_conn->max_readwrite_size);
339         }
340 #endif
341         if (!(server->capabilities & SMB2_GLOBAL_CAP_LARGE_MTU))
342                 wsize = min_t(unsigned int, wsize, SMB2_MAX_BUFFER_SIZE);
343
344         return wsize;
345 }
346
347 static unsigned int
348 smb3_negotiate_wsize(struct cifs_tcon *tcon, struct smb_vol *volume_info)
349 {
350         struct TCP_Server_Info *server = tcon->ses->server;
351         unsigned int wsize;
352
353         /* start with specified wsize, or default */
354         wsize = volume_info->wsize ? volume_info->wsize : SMB3_DEFAULT_IOSIZE;
355         wsize = min_t(unsigned int, wsize, server->max_write);
356 #ifdef CONFIG_CIFS_SMB_DIRECT
357         if (server->rdma) {
358                 if (server->sign)
359                         wsize = min_t(unsigned int,
360                                 wsize, server->smbd_conn->max_fragmented_send_size);
361                 else
362                         wsize = min_t(unsigned int,
363                                 wsize, server->smbd_conn->max_readwrite_size);
364         }
365 #endif
366         if (!(server->capabilities & SMB2_GLOBAL_CAP_LARGE_MTU))
367                 wsize = min_t(unsigned int, wsize, SMB2_MAX_BUFFER_SIZE);
368
369         return wsize;
370 }
371
372 static unsigned int
373 smb2_negotiate_rsize(struct cifs_tcon *tcon, struct smb_vol *volume_info)
374 {
375         struct TCP_Server_Info *server = tcon->ses->server;
376         unsigned int rsize;
377
378         /* start with specified rsize, or default */
379         rsize = volume_info->rsize ? volume_info->rsize : CIFS_DEFAULT_IOSIZE;
380         rsize = min_t(unsigned int, rsize, server->max_read);
381 #ifdef CONFIG_CIFS_SMB_DIRECT
382         if (server->rdma) {
383                 if (server->sign)
384                         rsize = min_t(unsigned int,
385                                 rsize, server->smbd_conn->max_fragmented_recv_size);
386                 else
387                         rsize = min_t(unsigned int,
388                                 rsize, server->smbd_conn->max_readwrite_size);
389         }
390 #endif
391
392         if (!(server->capabilities & SMB2_GLOBAL_CAP_LARGE_MTU))
393                 rsize = min_t(unsigned int, rsize, SMB2_MAX_BUFFER_SIZE);
394
395         return rsize;
396 }
397
398 static unsigned int
399 smb3_negotiate_rsize(struct cifs_tcon *tcon, struct smb_vol *volume_info)
400 {
401         struct TCP_Server_Info *server = tcon->ses->server;
402         unsigned int rsize;
403
404         /* start with specified rsize, or default */
405         rsize = volume_info->rsize ? volume_info->rsize : SMB3_DEFAULT_IOSIZE;
406         rsize = min_t(unsigned int, rsize, server->max_read);
407 #ifdef CONFIG_CIFS_SMB_DIRECT
408         if (server->rdma) {
409                 if (server->sign)
410                         rsize = min_t(unsigned int,
411                                 rsize, server->smbd_conn->max_fragmented_recv_size);
412                 else
413                         rsize = min_t(unsigned int,
414                                 rsize, server->smbd_conn->max_readwrite_size);
415         }
416 #endif
417
418         if (!(server->capabilities & SMB2_GLOBAL_CAP_LARGE_MTU))
419                 rsize = min_t(unsigned int, rsize, SMB2_MAX_BUFFER_SIZE);
420
421         return rsize;
422 }
423
424 static int
425 parse_server_interfaces(struct network_interface_info_ioctl_rsp *buf,
426                         size_t buf_len,
427                         struct cifs_server_iface **iface_list,
428                         size_t *iface_count)
429 {
430         struct network_interface_info_ioctl_rsp *p;
431         struct sockaddr_in *addr4;
432         struct sockaddr_in6 *addr6;
433         struct iface_info_ipv4 *p4;
434         struct iface_info_ipv6 *p6;
435         struct cifs_server_iface *info;
436         ssize_t bytes_left;
437         size_t next = 0;
438         int nb_iface = 0;
439         int rc = 0;
440
441         *iface_list = NULL;
442         *iface_count = 0;
443
444         /*
445          * Fist pass: count and sanity check
446          */
447
448         bytes_left = buf_len;
449         p = buf;
450         while (bytes_left >= sizeof(*p)) {
451                 nb_iface++;
452                 next = le32_to_cpu(p->Next);
453                 if (!next) {
454                         bytes_left -= sizeof(*p);
455                         break;
456                 }
457                 p = (struct network_interface_info_ioctl_rsp *)((u8 *)p+next);
458                 bytes_left -= next;
459         }
460
461         if (!nb_iface) {
462                 cifs_dbg(VFS, "%s: malformed interface info\n", __func__);
463                 rc = -EINVAL;
464                 goto out;
465         }
466
467         if (bytes_left || p->Next)
468                 cifs_dbg(VFS, "%s: incomplete interface info\n", __func__);
469
470
471         /*
472          * Second pass: extract info to internal structure
473          */
474
475         *iface_list = kcalloc(nb_iface, sizeof(**iface_list), GFP_KERNEL);
476         if (!*iface_list) {
477                 rc = -ENOMEM;
478                 goto out;
479         }
480
481         info = *iface_list;
482         bytes_left = buf_len;
483         p = buf;
484         while (bytes_left >= sizeof(*p)) {
485                 info->speed = le64_to_cpu(p->LinkSpeed);
486                 info->rdma_capable = le32_to_cpu(p->Capability & RDMA_CAPABLE);
487                 info->rss_capable = le32_to_cpu(p->Capability & RSS_CAPABLE);
488
489                 cifs_dbg(FYI, "%s: adding iface %zu\n", __func__, *iface_count);
490                 cifs_dbg(FYI, "%s: speed %zu bps\n", __func__, info->speed);
491                 cifs_dbg(FYI, "%s: capabilities 0x%08x\n", __func__,
492                          le32_to_cpu(p->Capability));
493
494                 switch (p->Family) {
495                 /*
496                  * The kernel and wire socket structures have the same
497                  * layout and use network byte order but make the
498                  * conversion explicit in case either one changes.
499                  */
500                 case INTERNETWORK:
501                         addr4 = (struct sockaddr_in *)&info->sockaddr;
502                         p4 = (struct iface_info_ipv4 *)p->Buffer;
503                         addr4->sin_family = AF_INET;
504                         memcpy(&addr4->sin_addr, &p4->IPv4Address, 4);
505
506                         /* [MS-SMB2] 2.2.32.5.1.1 Clients MUST ignore these */
507                         addr4->sin_port = cpu_to_be16(CIFS_PORT);
508
509                         cifs_dbg(FYI, "%s: ipv4 %pI4\n", __func__,
510                                  &addr4->sin_addr);
511                         break;
512                 case INTERNETWORKV6:
513                         addr6 = (struct sockaddr_in6 *)&info->sockaddr;
514                         p6 = (struct iface_info_ipv6 *)p->Buffer;
515                         addr6->sin6_family = AF_INET6;
516                         memcpy(&addr6->sin6_addr, &p6->IPv6Address, 16);
517
518                         /* [MS-SMB2] 2.2.32.5.1.2 Clients MUST ignore these */
519                         addr6->sin6_flowinfo = 0;
520                         addr6->sin6_scope_id = 0;
521                         addr6->sin6_port = cpu_to_be16(CIFS_PORT);
522
523                         cifs_dbg(FYI, "%s: ipv6 %pI6\n", __func__,
524                                  &addr6->sin6_addr);
525                         break;
526                 default:
527                         cifs_dbg(VFS,
528                                  "%s: skipping unsupported socket family\n",
529                                  __func__);
530                         goto next_iface;
531                 }
532
533                 (*iface_count)++;
534                 info++;
535 next_iface:
536                 next = le32_to_cpu(p->Next);
537                 if (!next)
538                         break;
539                 p = (struct network_interface_info_ioctl_rsp *)((u8 *)p+next);
540                 bytes_left -= next;
541         }
542
543         if (!*iface_count) {
544                 rc = -EINVAL;
545                 goto out;
546         }
547
548 out:
549         if (rc) {
550                 kfree(*iface_list);
551                 *iface_count = 0;
552                 *iface_list = NULL;
553         }
554         return rc;
555 }
556
557 static int compare_iface(const void *ia, const void *ib)
558 {
559         const struct cifs_server_iface *a = (struct cifs_server_iface *)ia;
560         const struct cifs_server_iface *b = (struct cifs_server_iface *)ib;
561
562         return a->speed == b->speed ? 0 : (a->speed > b->speed ? -1 : 1);
563 }
564
565 static int
566 SMB3_request_interfaces(const unsigned int xid, struct cifs_tcon *tcon)
567 {
568         int rc;
569         unsigned int ret_data_len = 0;
570         struct network_interface_info_ioctl_rsp *out_buf = NULL;
571         struct cifs_server_iface *iface_list;
572         size_t iface_count;
573         struct cifs_ses *ses = tcon->ses;
574
575         rc = SMB2_ioctl(xid, tcon, NO_FILE_ID, NO_FILE_ID,
576                         FSCTL_QUERY_NETWORK_INTERFACE_INFO, true /* is_fsctl */,
577                         NULL /* no data input */, 0 /* no data input */,
578                         CIFSMaxBufSize, (char **)&out_buf, &ret_data_len);
579         if (rc == -EOPNOTSUPP) {
580                 cifs_dbg(FYI,
581                          "server does not support query network interfaces\n");
582                 goto out;
583         } else if (rc != 0) {
584                 cifs_tcon_dbg(VFS, "error %d on ioctl to get interface list\n", rc);
585                 goto out;
586         }
587
588         rc = parse_server_interfaces(out_buf, ret_data_len,
589                                      &iface_list, &iface_count);
590         if (rc)
591                 goto out;
592
593         /* sort interfaces from fastest to slowest */
594         sort(iface_list, iface_count, sizeof(*iface_list), compare_iface, NULL);
595
596         spin_lock(&ses->iface_lock);
597         kfree(ses->iface_list);
598         ses->iface_list = iface_list;
599         ses->iface_count = iface_count;
600         ses->iface_last_update = jiffies;
601         spin_unlock(&ses->iface_lock);
602
603 out:
604         kfree(out_buf);
605         return rc;
606 }
607
608 static void
609 smb2_close_cached_fid(struct kref *ref)
610 {
611         struct cached_fid *cfid = container_of(ref, struct cached_fid,
612                                                refcount);
613
614         if (cfid->is_valid) {
615                 cifs_dbg(FYI, "clear cached root file handle\n");
616                 SMB2_close(0, cfid->tcon, cfid->fid->persistent_fid,
617                            cfid->fid->volatile_fid);
618                 cfid->is_valid = false;
619                 cfid->file_all_info_is_valid = false;
620                 cfid->has_lease = false;
621         }
622 }
623
624 void close_shroot(struct cached_fid *cfid)
625 {
626         mutex_lock(&cfid->fid_mutex);
627         kref_put(&cfid->refcount, smb2_close_cached_fid);
628         mutex_unlock(&cfid->fid_mutex);
629 }
630
631 void close_shroot_lease_locked(struct cached_fid *cfid)
632 {
633         if (cfid->has_lease) {
634                 cfid->has_lease = false;
635                 kref_put(&cfid->refcount, smb2_close_cached_fid);
636         }
637 }
638
639 void close_shroot_lease(struct cached_fid *cfid)
640 {
641         mutex_lock(&cfid->fid_mutex);
642         close_shroot_lease_locked(cfid);
643         mutex_unlock(&cfid->fid_mutex);
644 }
645
646 void
647 smb2_cached_lease_break(struct work_struct *work)
648 {
649         struct cached_fid *cfid = container_of(work,
650                                 struct cached_fid, lease_break);
651
652         close_shroot_lease(cfid);
653 }
654
655 /*
656  * Open the directory at the root of a share
657  */
658 int open_shroot(unsigned int xid, struct cifs_tcon *tcon,
659                 struct cifs_sb_info *cifs_sb, struct cifs_fid *pfid)
660 {
661         struct cifs_ses *ses = tcon->ses;
662         struct TCP_Server_Info *server = ses->server;
663         struct cifs_open_parms oparms;
664         struct smb2_create_rsp *o_rsp = NULL;
665         struct smb2_query_info_rsp *qi_rsp = NULL;
666         int resp_buftype[2];
667         struct smb_rqst rqst[2];
668         struct kvec rsp_iov[2];
669         struct kvec open_iov[SMB2_CREATE_IOV_SIZE];
670         struct kvec qi_iov[1];
671         int rc, flags = 0;
672         __le16 utf16_path = 0; /* Null - since an open of top of share */
673         u8 oplock = SMB2_OPLOCK_LEVEL_II;
674
675         mutex_lock(&tcon->crfid.fid_mutex);
676         if (tcon->crfid.is_valid) {
677                 cifs_dbg(FYI, "found a cached root file handle\n");
678                 memcpy(pfid, tcon->crfid.fid, sizeof(struct cifs_fid));
679                 kref_get(&tcon->crfid.refcount);
680                 mutex_unlock(&tcon->crfid.fid_mutex);
681                 return 0;
682         }
683
684         /*
685          * We do not hold the lock for the open because in case
686          * SMB2_open needs to reconnect, it will end up calling
687          * cifs_mark_open_files_invalid() which takes the lock again
688          * thus causing a deadlock
689          */
690
691         mutex_unlock(&tcon->crfid.fid_mutex);
692
693         if (smb3_encryption_required(tcon))
694                 flags |= CIFS_TRANSFORM_REQ;
695
696         memset(rqst, 0, sizeof(rqst));
697         resp_buftype[0] = resp_buftype[1] = CIFS_NO_BUFFER;
698         memset(rsp_iov, 0, sizeof(rsp_iov));
699
700         /* Open */
701         memset(&open_iov, 0, sizeof(open_iov));
702         rqst[0].rq_iov = open_iov;
703         rqst[0].rq_nvec = SMB2_CREATE_IOV_SIZE;
704
705         oparms.tcon = tcon;
706         oparms.create_options = cifs_create_options(cifs_sb, 0);
707         oparms.desired_access = FILE_READ_ATTRIBUTES;
708         oparms.disposition = FILE_OPEN;
709         oparms.fid = pfid;
710         oparms.reconnect = false;
711
712         rc = SMB2_open_init(tcon, &rqst[0], &oplock, &oparms, &utf16_path);
713         if (rc)
714                 goto oshr_free;
715         smb2_set_next_command(tcon, &rqst[0]);
716
717         memset(&qi_iov, 0, sizeof(qi_iov));
718         rqst[1].rq_iov = qi_iov;
719         rqst[1].rq_nvec = 1;
720
721         rc = SMB2_query_info_init(tcon, &rqst[1], COMPOUND_FID,
722                                   COMPOUND_FID, FILE_ALL_INFORMATION,
723                                   SMB2_O_INFO_FILE, 0,
724                                   sizeof(struct smb2_file_all_info) +
725                                   PATH_MAX * 2, 0, NULL);
726         if (rc)
727                 goto oshr_free;
728
729         smb2_set_related(&rqst[1]);
730
731         rc = compound_send_recv(xid, ses, flags, 2, rqst,
732                                 resp_buftype, rsp_iov);
733         mutex_lock(&tcon->crfid.fid_mutex);
734
735         /*
736          * Now we need to check again as the cached root might have
737          * been successfully re-opened from a concurrent process
738          */
739
740         if (tcon->crfid.is_valid) {
741                 /* work was already done */
742
743                 /* stash fids for close() later */
744                 struct cifs_fid fid = {
745                         .persistent_fid = pfid->persistent_fid,
746                         .volatile_fid = pfid->volatile_fid,
747                 };
748
749                 /*
750                  * caller expects this func to set pfid to a valid
751                  * cached root, so we copy the existing one and get a
752                  * reference.
753                  */
754                 memcpy(pfid, tcon->crfid.fid, sizeof(*pfid));
755                 kref_get(&tcon->crfid.refcount);
756
757                 mutex_unlock(&tcon->crfid.fid_mutex);
758
759                 if (rc == 0) {
760                         /* close extra handle outside of crit sec */
761                         SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid);
762                 }
763                 goto oshr_free;
764         }
765
766         /* Cached root is still invalid, continue normaly */
767
768         if (rc) {
769                 if (rc == -EREMCHG) {
770                         tcon->need_reconnect = true;
771                         printk_once(KERN_WARNING "server share %s deleted\n",
772                                     tcon->treeName);
773                 }
774                 goto oshr_exit;
775         }
776
777         atomic_inc(&tcon->num_remote_opens);
778
779         o_rsp = (struct smb2_create_rsp *)rsp_iov[0].iov_base;
780         oparms.fid->persistent_fid = o_rsp->PersistentFileId;
781         oparms.fid->volatile_fid = o_rsp->VolatileFileId;
782 #ifdef CONFIG_CIFS_DEBUG2
783         oparms.fid->mid = le64_to_cpu(o_rsp->sync_hdr.MessageId);
784 #endif /* CIFS_DEBUG2 */
785
786         memcpy(tcon->crfid.fid, pfid, sizeof(struct cifs_fid));
787         tcon->crfid.tcon = tcon;
788         tcon->crfid.is_valid = true;
789         kref_init(&tcon->crfid.refcount);
790
791         /* BB TBD check to see if oplock level check can be removed below */
792         if (o_rsp->OplockLevel == SMB2_OPLOCK_LEVEL_LEASE) {
793                 kref_get(&tcon->crfid.refcount);
794                 tcon->crfid.has_lease = true;
795                 smb2_parse_contexts(server, o_rsp,
796                                 &oparms.fid->epoch,
797                                 oparms.fid->lease_key, &oplock, NULL);
798         } else
799                 goto oshr_exit;
800
801         qi_rsp = (struct smb2_query_info_rsp *)rsp_iov[1].iov_base;
802         if (le32_to_cpu(qi_rsp->OutputBufferLength) < sizeof(struct smb2_file_all_info))
803                 goto oshr_exit;
804         if (!smb2_validate_and_copy_iov(
805                                 le16_to_cpu(qi_rsp->OutputBufferOffset),
806                                 sizeof(struct smb2_file_all_info),
807                                 &rsp_iov[1], sizeof(struct smb2_file_all_info),
808                                 (char *)&tcon->crfid.file_all_info))
809                 tcon->crfid.file_all_info_is_valid = true;
810
811 oshr_exit:
812         mutex_unlock(&tcon->crfid.fid_mutex);
813 oshr_free:
814         SMB2_open_free(&rqst[0]);
815         SMB2_query_info_free(&rqst[1]);
816         free_rsp_buf(resp_buftype[0], rsp_iov[0].iov_base);
817         free_rsp_buf(resp_buftype[1], rsp_iov[1].iov_base);
818         return rc;
819 }
820
821 static void
822 smb3_qfs_tcon(const unsigned int xid, struct cifs_tcon *tcon,
823               struct cifs_sb_info *cifs_sb)
824 {
825         int rc;
826         __le16 srch_path = 0; /* Null - open root of share */
827         u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
828         struct cifs_open_parms oparms;
829         struct cifs_fid fid;
830         bool no_cached_open = tcon->nohandlecache;
831
832         oparms.tcon = tcon;
833         oparms.desired_access = FILE_READ_ATTRIBUTES;
834         oparms.disposition = FILE_OPEN;
835         oparms.create_options = cifs_create_options(cifs_sb, 0);
836         oparms.fid = &fid;
837         oparms.reconnect = false;
838
839         if (no_cached_open)
840                 rc = SMB2_open(xid, &oparms, &srch_path, &oplock, NULL, NULL,
841                                NULL);
842         else
843                 rc = open_shroot(xid, tcon, cifs_sb, &fid);
844
845         if (rc)
846                 return;
847
848         SMB3_request_interfaces(xid, tcon);
849
850         SMB2_QFS_attr(xid, tcon, fid.persistent_fid, fid.volatile_fid,
851                         FS_ATTRIBUTE_INFORMATION);
852         SMB2_QFS_attr(xid, tcon, fid.persistent_fid, fid.volatile_fid,
853                         FS_DEVICE_INFORMATION);
854         SMB2_QFS_attr(xid, tcon, fid.persistent_fid, fid.volatile_fid,
855                         FS_VOLUME_INFORMATION);
856         SMB2_QFS_attr(xid, tcon, fid.persistent_fid, fid.volatile_fid,
857                         FS_SECTOR_SIZE_INFORMATION); /* SMB3 specific */
858         if (no_cached_open)
859                 SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid);
860         else
861                 close_shroot(&tcon->crfid);
862 }
863
864 static void
865 smb2_qfs_tcon(const unsigned int xid, struct cifs_tcon *tcon,
866               struct cifs_sb_info *cifs_sb)
867 {
868         int rc;
869         __le16 srch_path = 0; /* Null - open root of share */
870         u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
871         struct cifs_open_parms oparms;
872         struct cifs_fid fid;
873
874         oparms.tcon = tcon;
875         oparms.desired_access = FILE_READ_ATTRIBUTES;
876         oparms.disposition = FILE_OPEN;
877         oparms.create_options = cifs_create_options(cifs_sb, 0);
878         oparms.fid = &fid;
879         oparms.reconnect = false;
880
881         rc = SMB2_open(xid, &oparms, &srch_path, &oplock, NULL, NULL, NULL);
882         if (rc)
883                 return;
884
885         SMB2_QFS_attr(xid, tcon, fid.persistent_fid, fid.volatile_fid,
886                         FS_ATTRIBUTE_INFORMATION);
887         SMB2_QFS_attr(xid, tcon, fid.persistent_fid, fid.volatile_fid,
888                         FS_DEVICE_INFORMATION);
889         SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid);
890 }
891
892 static int
893 smb2_is_path_accessible(const unsigned int xid, struct cifs_tcon *tcon,
894                         struct cifs_sb_info *cifs_sb, const char *full_path)
895 {
896         int rc;
897         __le16 *utf16_path;
898         __u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
899         struct cifs_open_parms oparms;
900         struct cifs_fid fid;
901
902         if ((*full_path == 0) && tcon->crfid.is_valid)
903                 return 0;
904
905         utf16_path = cifs_convert_path_to_utf16(full_path, cifs_sb);
906         if (!utf16_path)
907                 return -ENOMEM;
908
909         oparms.tcon = tcon;
910         oparms.desired_access = FILE_READ_ATTRIBUTES;
911         oparms.disposition = FILE_OPEN;
912         oparms.create_options = cifs_create_options(cifs_sb, 0);
913         oparms.fid = &fid;
914         oparms.reconnect = false;
915
916         rc = SMB2_open(xid, &oparms, utf16_path, &oplock, NULL, NULL, NULL);
917         if (rc) {
918                 kfree(utf16_path);
919                 return rc;
920         }
921
922         rc = SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid);
923         kfree(utf16_path);
924         return rc;
925 }
926
927 static int
928 smb2_get_srv_inum(const unsigned int xid, struct cifs_tcon *tcon,
929                   struct cifs_sb_info *cifs_sb, const char *full_path,
930                   u64 *uniqueid, FILE_ALL_INFO *data)
931 {
932         *uniqueid = le64_to_cpu(data->IndexNumber);
933         return 0;
934 }
935
936 static int
937 smb2_query_file_info(const unsigned int xid, struct cifs_tcon *tcon,
938                      struct cifs_fid *fid, FILE_ALL_INFO *data)
939 {
940         int rc;
941         struct smb2_file_all_info *smb2_data;
942
943         smb2_data = kzalloc(sizeof(struct smb2_file_all_info) + PATH_MAX * 2,
944                             GFP_KERNEL);
945         if (smb2_data == NULL)
946                 return -ENOMEM;
947
948         rc = SMB2_query_info(xid, tcon, fid->persistent_fid, fid->volatile_fid,
949                              smb2_data);
950         if (!rc)
951                 move_smb2_info_to_cifs(data, smb2_data);
952         kfree(smb2_data);
953         return rc;
954 }
955
956 #ifdef CONFIG_CIFS_XATTR
957 static ssize_t
958 move_smb2_ea_to_cifs(char *dst, size_t dst_size,
959                      struct smb2_file_full_ea_info *src, size_t src_size,
960                      const unsigned char *ea_name)
961 {
962         int rc = 0;
963         unsigned int ea_name_len = ea_name ? strlen(ea_name) : 0;
964         char *name, *value;
965         size_t buf_size = dst_size;
966         size_t name_len, value_len, user_name_len;
967
968         while (src_size > 0) {
969                 name = &src->ea_data[0];
970                 name_len = (size_t)src->ea_name_length;
971                 value = &src->ea_data[src->ea_name_length + 1];
972                 value_len = (size_t)le16_to_cpu(src->ea_value_length);
973
974                 if (name_len == 0)
975                         break;
976
977                 if (src_size < 8 + name_len + 1 + value_len) {
978                         cifs_dbg(FYI, "EA entry goes beyond length of list\n");
979                         rc = -EIO;
980                         goto out;
981                 }
982
983                 if (ea_name) {
984                         if (ea_name_len == name_len &&
985                             memcmp(ea_name, name, name_len) == 0) {
986                                 rc = value_len;
987                                 if (dst_size == 0)
988                                         goto out;
989                                 if (dst_size < value_len) {
990                                         rc = -ERANGE;
991                                         goto out;
992                                 }
993                                 memcpy(dst, value, value_len);
994                                 goto out;
995                         }
996                 } else {
997                         /* 'user.' plus a terminating null */
998                         user_name_len = 5 + 1 + name_len;
999
1000                         if (buf_size == 0) {
1001                                 /* skip copy - calc size only */
1002                                 rc += user_name_len;
1003                         } else if (dst_size >= user_name_len) {
1004                                 dst_size -= user_name_len;
1005                                 memcpy(dst, "user.", 5);
1006                                 dst += 5;
1007                                 memcpy(dst, src->ea_data, name_len);
1008                                 dst += name_len;
1009                                 *dst = 0;
1010                                 ++dst;
1011                                 rc += user_name_len;
1012                         } else {
1013                                 /* stop before overrun buffer */
1014                                 rc = -ERANGE;
1015                                 break;
1016                         }
1017                 }
1018
1019                 if (!src->next_entry_offset)
1020                         break;
1021
1022                 if (src_size < le32_to_cpu(src->next_entry_offset)) {
1023                         /* stop before overrun buffer */
1024                         rc = -ERANGE;
1025                         break;
1026                 }
1027                 src_size -= le32_to_cpu(src->next_entry_offset);
1028                 src = (void *)((char *)src +
1029                                le32_to_cpu(src->next_entry_offset));
1030         }
1031
1032         /* didn't find the named attribute */
1033         if (ea_name)
1034                 rc = -ENODATA;
1035
1036 out:
1037         return (ssize_t)rc;
1038 }
1039
1040 static ssize_t
1041 smb2_query_eas(const unsigned int xid, struct cifs_tcon *tcon,
1042                const unsigned char *path, const unsigned char *ea_name,
1043                char *ea_data, size_t buf_size,
1044                struct cifs_sb_info *cifs_sb)
1045 {
1046         int rc;
1047         __le16 *utf16_path;
1048         struct kvec rsp_iov = {NULL, 0};
1049         int buftype = CIFS_NO_BUFFER;
1050         struct smb2_query_info_rsp *rsp;
1051         struct smb2_file_full_ea_info *info = NULL;
1052
1053         utf16_path = cifs_convert_path_to_utf16(path, cifs_sb);
1054         if (!utf16_path)
1055                 return -ENOMEM;
1056
1057         rc = smb2_query_info_compound(xid, tcon, utf16_path,
1058                                       FILE_READ_EA,
1059                                       FILE_FULL_EA_INFORMATION,
1060                                       SMB2_O_INFO_FILE,
1061                                       CIFSMaxBufSize -
1062                                       MAX_SMB2_CREATE_RESPONSE_SIZE -
1063                                       MAX_SMB2_CLOSE_RESPONSE_SIZE,
1064                                       &rsp_iov, &buftype, cifs_sb);
1065         if (rc) {
1066                 /*
1067                  * If ea_name is NULL (listxattr) and there are no EAs,
1068                  * return 0 as it's not an error. Otherwise, the specified
1069                  * ea_name was not found.
1070                  */
1071                 if (!ea_name && rc == -ENODATA)
1072                         rc = 0;
1073                 goto qeas_exit;
1074         }
1075
1076         rsp = (struct smb2_query_info_rsp *)rsp_iov.iov_base;
1077         rc = smb2_validate_iov(le16_to_cpu(rsp->OutputBufferOffset),
1078                                le32_to_cpu(rsp->OutputBufferLength),
1079                                &rsp_iov,
1080                                sizeof(struct smb2_file_full_ea_info));
1081         if (rc)
1082                 goto qeas_exit;
1083
1084         info = (struct smb2_file_full_ea_info *)(
1085                         le16_to_cpu(rsp->OutputBufferOffset) + (char *)rsp);
1086         rc = move_smb2_ea_to_cifs(ea_data, buf_size, info,
1087                         le32_to_cpu(rsp->OutputBufferLength), ea_name);
1088
1089  qeas_exit:
1090         kfree(utf16_path);
1091         free_rsp_buf(buftype, rsp_iov.iov_base);
1092         return rc;
1093 }
1094
1095
1096 static int
1097 smb2_set_ea(const unsigned int xid, struct cifs_tcon *tcon,
1098             const char *path, const char *ea_name, const void *ea_value,
1099             const __u16 ea_value_len, const struct nls_table *nls_codepage,
1100             struct cifs_sb_info *cifs_sb)
1101 {
1102         struct cifs_ses *ses = tcon->ses;
1103         __le16 *utf16_path = NULL;
1104         int ea_name_len = strlen(ea_name);
1105         int flags = 0;
1106         int len;
1107         struct smb_rqst rqst[3];
1108         int resp_buftype[3];
1109         struct kvec rsp_iov[3];
1110         struct kvec open_iov[SMB2_CREATE_IOV_SIZE];
1111         struct cifs_open_parms oparms;
1112         __u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
1113         struct cifs_fid fid;
1114         struct kvec si_iov[SMB2_SET_INFO_IOV_SIZE];
1115         unsigned int size[1];
1116         void *data[1];
1117         struct smb2_file_full_ea_info *ea = NULL;
1118         struct kvec close_iov[1];
1119         struct smb2_query_info_rsp *rsp;
1120         int rc, used_len = 0;
1121
1122         if (smb3_encryption_required(tcon))
1123                 flags |= CIFS_TRANSFORM_REQ;
1124
1125         if (ea_name_len > 255)
1126                 return -EINVAL;
1127
1128         utf16_path = cifs_convert_path_to_utf16(path, cifs_sb);
1129         if (!utf16_path)
1130                 return -ENOMEM;
1131
1132         memset(rqst, 0, sizeof(rqst));
1133         resp_buftype[0] = resp_buftype[1] = resp_buftype[2] = CIFS_NO_BUFFER;
1134         memset(rsp_iov, 0, sizeof(rsp_iov));
1135
1136         if (ses->server->ops->query_all_EAs) {
1137                 if (!ea_value) {
1138                         rc = ses->server->ops->query_all_EAs(xid, tcon, path,
1139                                                              ea_name, NULL, 0,
1140                                                              cifs_sb);
1141                         if (rc == -ENODATA)
1142                                 goto sea_exit;
1143                 } else {
1144                         /* If we are adding a attribute we should first check
1145                          * if there will be enough space available to store
1146                          * the new EA. If not we should not add it since we
1147                          * would not be able to even read the EAs back.
1148                          */
1149                         rc = smb2_query_info_compound(xid, tcon, utf16_path,
1150                                       FILE_READ_EA,
1151                                       FILE_FULL_EA_INFORMATION,
1152                                       SMB2_O_INFO_FILE,
1153                                       CIFSMaxBufSize -
1154                                       MAX_SMB2_CREATE_RESPONSE_SIZE -
1155                                       MAX_SMB2_CLOSE_RESPONSE_SIZE,
1156                                       &rsp_iov[1], &resp_buftype[1], cifs_sb);
1157                         if (rc == 0) {
1158                                 rsp = (struct smb2_query_info_rsp *)rsp_iov[1].iov_base;
1159                                 used_len = le32_to_cpu(rsp->OutputBufferLength);
1160                         }
1161                         free_rsp_buf(resp_buftype[1], rsp_iov[1].iov_base);
1162                         resp_buftype[1] = CIFS_NO_BUFFER;
1163                         memset(&rsp_iov[1], 0, sizeof(rsp_iov[1]));
1164                         rc = 0;
1165
1166                         /* Use a fudge factor of 256 bytes in case we collide
1167                          * with a different set_EAs command.
1168                          */
1169                         if(CIFSMaxBufSize - MAX_SMB2_CREATE_RESPONSE_SIZE -
1170                            MAX_SMB2_CLOSE_RESPONSE_SIZE - 256 <
1171                            used_len + ea_name_len + ea_value_len + 1) {
1172                                 rc = -ENOSPC;
1173                                 goto sea_exit;
1174                         }
1175                 }
1176         }
1177
1178         /* Open */
1179         memset(&open_iov, 0, sizeof(open_iov));
1180         rqst[0].rq_iov = open_iov;
1181         rqst[0].rq_nvec = SMB2_CREATE_IOV_SIZE;
1182
1183         memset(&oparms, 0, sizeof(oparms));
1184         oparms.tcon = tcon;
1185         oparms.desired_access = FILE_WRITE_EA;
1186         oparms.disposition = FILE_OPEN;
1187         oparms.create_options = cifs_create_options(cifs_sb, 0);
1188         oparms.fid = &fid;
1189         oparms.reconnect = false;
1190
1191         rc = SMB2_open_init(tcon, &rqst[0], &oplock, &oparms, utf16_path);
1192         if (rc)
1193                 goto sea_exit;
1194         smb2_set_next_command(tcon, &rqst[0]);
1195
1196
1197         /* Set Info */
1198         memset(&si_iov, 0, sizeof(si_iov));
1199         rqst[1].rq_iov = si_iov;
1200         rqst[1].rq_nvec = 1;
1201
1202         len = sizeof(ea) + ea_name_len + ea_value_len + 1;
1203         ea = kzalloc(len, GFP_KERNEL);
1204         if (ea == NULL) {
1205                 rc = -ENOMEM;
1206                 goto sea_exit;
1207         }
1208
1209         ea->ea_name_length = ea_name_len;
1210         ea->ea_value_length = cpu_to_le16(ea_value_len);
1211         memcpy(ea->ea_data, ea_name, ea_name_len + 1);
1212         memcpy(ea->ea_data + ea_name_len + 1, ea_value, ea_value_len);
1213
1214         size[0] = len;
1215         data[0] = ea;
1216
1217         rc = SMB2_set_info_init(tcon, &rqst[1], COMPOUND_FID,
1218                                 COMPOUND_FID, current->tgid,
1219                                 FILE_FULL_EA_INFORMATION,
1220                                 SMB2_O_INFO_FILE, 0, data, size);
1221         smb2_set_next_command(tcon, &rqst[1]);
1222         smb2_set_related(&rqst[1]);
1223
1224
1225         /* Close */
1226         memset(&close_iov, 0, sizeof(close_iov));
1227         rqst[2].rq_iov = close_iov;
1228         rqst[2].rq_nvec = 1;
1229         rc = SMB2_close_init(tcon, &rqst[2], COMPOUND_FID, COMPOUND_FID, false);
1230         smb2_set_related(&rqst[2]);
1231
1232         rc = compound_send_recv(xid, ses, flags, 3, rqst,
1233                                 resp_buftype, rsp_iov);
1234         /* no need to bump num_remote_opens because handle immediately closed */
1235
1236  sea_exit:
1237         kfree(ea);
1238         kfree(utf16_path);
1239         SMB2_open_free(&rqst[0]);
1240         SMB2_set_info_free(&rqst[1]);
1241         SMB2_close_free(&rqst[2]);
1242         free_rsp_buf(resp_buftype[0], rsp_iov[0].iov_base);
1243         free_rsp_buf(resp_buftype[1], rsp_iov[1].iov_base);
1244         free_rsp_buf(resp_buftype[2], rsp_iov[2].iov_base);
1245         return rc;
1246 }
1247 #endif
1248
1249 static bool
1250 smb2_can_echo(struct TCP_Server_Info *server)
1251 {
1252         return server->echoes;
1253 }
1254
1255 static void
1256 smb2_clear_stats(struct cifs_tcon *tcon)
1257 {
1258         int i;
1259
1260         for (i = 0; i < NUMBER_OF_SMB2_COMMANDS; i++) {
1261                 atomic_set(&tcon->stats.smb2_stats.smb2_com_sent[i], 0);
1262                 atomic_set(&tcon->stats.smb2_stats.smb2_com_failed[i], 0);
1263         }
1264 }
1265
1266 static void
1267 smb2_dump_share_caps(struct seq_file *m, struct cifs_tcon *tcon)
1268 {
1269         seq_puts(m, "\n\tShare Capabilities:");
1270         if (tcon->capabilities & SMB2_SHARE_CAP_DFS)
1271                 seq_puts(m, " DFS,");
1272         if (tcon->capabilities & SMB2_SHARE_CAP_CONTINUOUS_AVAILABILITY)
1273                 seq_puts(m, " CONTINUOUS AVAILABILITY,");
1274         if (tcon->capabilities & SMB2_SHARE_CAP_SCALEOUT)
1275                 seq_puts(m, " SCALEOUT,");
1276         if (tcon->capabilities & SMB2_SHARE_CAP_CLUSTER)
1277                 seq_puts(m, " CLUSTER,");
1278         if (tcon->capabilities & SMB2_SHARE_CAP_ASYMMETRIC)
1279                 seq_puts(m, " ASYMMETRIC,");
1280         if (tcon->capabilities == 0)
1281                 seq_puts(m, " None");
1282         if (tcon->ss_flags & SSINFO_FLAGS_ALIGNED_DEVICE)
1283                 seq_puts(m, " Aligned,");
1284         if (tcon->ss_flags & SSINFO_FLAGS_PARTITION_ALIGNED_ON_DEVICE)
1285                 seq_puts(m, " Partition Aligned,");
1286         if (tcon->ss_flags & SSINFO_FLAGS_NO_SEEK_PENALTY)
1287                 seq_puts(m, " SSD,");
1288         if (tcon->ss_flags & SSINFO_FLAGS_TRIM_ENABLED)
1289                 seq_puts(m, " TRIM-support,");
1290
1291         seq_printf(m, "\tShare Flags: 0x%x", tcon->share_flags);
1292         seq_printf(m, "\n\ttid: 0x%x", tcon->tid);
1293         if (tcon->perf_sector_size)
1294                 seq_printf(m, "\tOptimal sector size: 0x%x",
1295                            tcon->perf_sector_size);
1296         seq_printf(m, "\tMaximal Access: 0x%x", tcon->maximal_access);
1297 }
1298
1299 static void
1300 smb2_print_stats(struct seq_file *m, struct cifs_tcon *tcon)
1301 {
1302         atomic_t *sent = tcon->stats.smb2_stats.smb2_com_sent;
1303         atomic_t *failed = tcon->stats.smb2_stats.smb2_com_failed;
1304
1305         /*
1306          *  Can't display SMB2_NEGOTIATE, SESSION_SETUP, LOGOFF, CANCEL and ECHO
1307          *  totals (requests sent) since those SMBs are per-session not per tcon
1308          */
1309         seq_printf(m, "\nBytes read: %llu  Bytes written: %llu",
1310                    (long long)(tcon->bytes_read),
1311                    (long long)(tcon->bytes_written));
1312         seq_printf(m, "\nOpen files: %d total (local), %d open on server",
1313                    atomic_read(&tcon->num_local_opens),
1314                    atomic_read(&tcon->num_remote_opens));
1315         seq_printf(m, "\nTreeConnects: %d total %d failed",
1316                    atomic_read(&sent[SMB2_TREE_CONNECT_HE]),
1317                    atomic_read(&failed[SMB2_TREE_CONNECT_HE]));
1318         seq_printf(m, "\nTreeDisconnects: %d total %d failed",
1319                    atomic_read(&sent[SMB2_TREE_DISCONNECT_HE]),
1320                    atomic_read(&failed[SMB2_TREE_DISCONNECT_HE]));
1321         seq_printf(m, "\nCreates: %d total %d failed",
1322                    atomic_read(&sent[SMB2_CREATE_HE]),
1323                    atomic_read(&failed[SMB2_CREATE_HE]));
1324         seq_printf(m, "\nCloses: %d total %d failed",
1325                    atomic_read(&sent[SMB2_CLOSE_HE]),
1326                    atomic_read(&failed[SMB2_CLOSE_HE]));
1327         seq_printf(m, "\nFlushes: %d total %d failed",
1328                    atomic_read(&sent[SMB2_FLUSH_HE]),
1329                    atomic_read(&failed[SMB2_FLUSH_HE]));
1330         seq_printf(m, "\nReads: %d total %d failed",
1331                    atomic_read(&sent[SMB2_READ_HE]),
1332                    atomic_read(&failed[SMB2_READ_HE]));
1333         seq_printf(m, "\nWrites: %d total %d failed",
1334                    atomic_read(&sent[SMB2_WRITE_HE]),
1335                    atomic_read(&failed[SMB2_WRITE_HE]));
1336         seq_printf(m, "\nLocks: %d total %d failed",
1337                    atomic_read(&sent[SMB2_LOCK_HE]),
1338                    atomic_read(&failed[SMB2_LOCK_HE]));
1339         seq_printf(m, "\nIOCTLs: %d total %d failed",
1340                    atomic_read(&sent[SMB2_IOCTL_HE]),
1341                    atomic_read(&failed[SMB2_IOCTL_HE]));
1342         seq_printf(m, "\nQueryDirectories: %d total %d failed",
1343                    atomic_read(&sent[SMB2_QUERY_DIRECTORY_HE]),
1344                    atomic_read(&failed[SMB2_QUERY_DIRECTORY_HE]));
1345         seq_printf(m, "\nChangeNotifies: %d total %d failed",
1346                    atomic_read(&sent[SMB2_CHANGE_NOTIFY_HE]),
1347                    atomic_read(&failed[SMB2_CHANGE_NOTIFY_HE]));
1348         seq_printf(m, "\nQueryInfos: %d total %d failed",
1349                    atomic_read(&sent[SMB2_QUERY_INFO_HE]),
1350                    atomic_read(&failed[SMB2_QUERY_INFO_HE]));
1351         seq_printf(m, "\nSetInfos: %d total %d failed",
1352                    atomic_read(&sent[SMB2_SET_INFO_HE]),
1353                    atomic_read(&failed[SMB2_SET_INFO_HE]));
1354         seq_printf(m, "\nOplockBreaks: %d sent %d failed",
1355                    atomic_read(&sent[SMB2_OPLOCK_BREAK_HE]),
1356                    atomic_read(&failed[SMB2_OPLOCK_BREAK_HE]));
1357 }
1358
1359 static void
1360 smb2_set_fid(struct cifsFileInfo *cfile, struct cifs_fid *fid, __u32 oplock)
1361 {
1362         struct cifsInodeInfo *cinode = CIFS_I(d_inode(cfile->dentry));
1363         struct TCP_Server_Info *server = tlink_tcon(cfile->tlink)->ses->server;
1364
1365         cfile->fid.persistent_fid = fid->persistent_fid;
1366         cfile->fid.volatile_fid = fid->volatile_fid;
1367         cfile->fid.access = fid->access;
1368 #ifdef CONFIG_CIFS_DEBUG2
1369         cfile->fid.mid = fid->mid;
1370 #endif /* CIFS_DEBUG2 */
1371         server->ops->set_oplock_level(cinode, oplock, fid->epoch,
1372                                       &fid->purge_cache);
1373         cinode->can_cache_brlcks = CIFS_CACHE_WRITE(cinode);
1374         memcpy(cfile->fid.create_guid, fid->create_guid, 16);
1375 }
1376
1377 static void
1378 smb2_close_file(const unsigned int xid, struct cifs_tcon *tcon,
1379                 struct cifs_fid *fid)
1380 {
1381         SMB2_close(xid, tcon, fid->persistent_fid, fid->volatile_fid);
1382 }
1383
1384 static void
1385 smb2_close_getattr(const unsigned int xid, struct cifs_tcon *tcon,
1386                    struct cifsFileInfo *cfile)
1387 {
1388         struct smb2_file_network_open_info file_inf;
1389         struct inode *inode;
1390         int rc;
1391
1392         rc = __SMB2_close(xid, tcon, cfile->fid.persistent_fid,
1393                    cfile->fid.volatile_fid, &file_inf);
1394         if (rc)
1395                 return;
1396
1397         inode = d_inode(cfile->dentry);
1398
1399         spin_lock(&inode->i_lock);
1400         CIFS_I(inode)->time = jiffies;
1401
1402         /* Creation time should not need to be updated on close */
1403         if (file_inf.LastWriteTime)
1404                 inode->i_mtime = cifs_NTtimeToUnix(file_inf.LastWriteTime);
1405         if (file_inf.ChangeTime)
1406                 inode->i_ctime = cifs_NTtimeToUnix(file_inf.ChangeTime);
1407         if (file_inf.LastAccessTime)
1408                 inode->i_atime = cifs_NTtimeToUnix(file_inf.LastAccessTime);
1409
1410         /*
1411          * i_blocks is not related to (i_size / i_blksize),
1412          * but instead 512 byte (2**9) size is required for
1413          * calculating num blocks.
1414          */
1415         if (le64_to_cpu(file_inf.AllocationSize) > 4096)
1416                 inode->i_blocks =
1417                         (512 - 1 + le64_to_cpu(file_inf.AllocationSize)) >> 9;
1418
1419         /* End of file and Attributes should not have to be updated on close */
1420         spin_unlock(&inode->i_lock);
1421 }
1422
1423 static int
1424 SMB2_request_res_key(const unsigned int xid, struct cifs_tcon *tcon,
1425                      u64 persistent_fid, u64 volatile_fid,
1426                      struct copychunk_ioctl *pcchunk)
1427 {
1428         int rc;
1429         unsigned int ret_data_len;
1430         struct resume_key_req *res_key;
1431
1432         rc = SMB2_ioctl(xid, tcon, persistent_fid, volatile_fid,
1433                         FSCTL_SRV_REQUEST_RESUME_KEY, true /* is_fsctl */,
1434                         NULL, 0 /* no input */, CIFSMaxBufSize,
1435                         (char **)&res_key, &ret_data_len);
1436
1437         if (rc) {
1438                 cifs_tcon_dbg(VFS, "refcpy ioctl error %d getting resume key\n", rc);
1439                 goto req_res_key_exit;
1440         }
1441         if (ret_data_len < sizeof(struct resume_key_req)) {
1442                 cifs_tcon_dbg(VFS, "Invalid refcopy resume key length\n");
1443                 rc = -EINVAL;
1444                 goto req_res_key_exit;
1445         }
1446         memcpy(pcchunk->SourceKey, res_key->ResumeKey, COPY_CHUNK_RES_KEY_SIZE);
1447
1448 req_res_key_exit:
1449         kfree(res_key);
1450         return rc;
1451 }
1452
1453 static int
1454 smb2_ioctl_query_info(const unsigned int xid,
1455                       struct cifs_tcon *tcon,
1456                       struct cifs_sb_info *cifs_sb,
1457                       __le16 *path, int is_dir,
1458                       unsigned long p)
1459 {
1460         struct cifs_ses *ses = tcon->ses;
1461         char __user *arg = (char __user *)p;
1462         struct smb_query_info qi;
1463         struct smb_query_info __user *pqi;
1464         int rc = 0;
1465         int flags = 0;
1466         struct smb2_query_info_rsp *qi_rsp = NULL;
1467         struct smb2_ioctl_rsp *io_rsp = NULL;
1468         void *buffer = NULL;
1469         struct smb_rqst rqst[3];
1470         int resp_buftype[3];
1471         struct kvec rsp_iov[3];
1472         struct kvec open_iov[SMB2_CREATE_IOV_SIZE];
1473         struct cifs_open_parms oparms;
1474         u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
1475         struct cifs_fid fid;
1476         struct kvec qi_iov[1];
1477         struct kvec io_iov[SMB2_IOCTL_IOV_SIZE];
1478         struct kvec si_iov[SMB2_SET_INFO_IOV_SIZE];
1479         struct kvec close_iov[1];
1480         unsigned int size[2];
1481         void *data[2];
1482         int create_options = is_dir ? CREATE_NOT_FILE : CREATE_NOT_DIR;
1483
1484         memset(rqst, 0, sizeof(rqst));
1485         resp_buftype[0] = resp_buftype[1] = resp_buftype[2] = CIFS_NO_BUFFER;
1486         memset(rsp_iov, 0, sizeof(rsp_iov));
1487
1488         if (copy_from_user(&qi, arg, sizeof(struct smb_query_info)))
1489                 return -EFAULT;
1490
1491         if (qi.output_buffer_length > 1024)
1492                 return -EINVAL;
1493
1494         if (!ses || !(ses->server))
1495                 return -EIO;
1496
1497         if (smb3_encryption_required(tcon))
1498                 flags |= CIFS_TRANSFORM_REQ;
1499
1500         buffer = memdup_user(arg + sizeof(struct smb_query_info),
1501                              qi.output_buffer_length);
1502         if (IS_ERR(buffer))
1503                 return PTR_ERR(buffer);
1504
1505         /* Open */
1506         memset(&open_iov, 0, sizeof(open_iov));
1507         rqst[0].rq_iov = open_iov;
1508         rqst[0].rq_nvec = SMB2_CREATE_IOV_SIZE;
1509
1510         memset(&oparms, 0, sizeof(oparms));
1511         oparms.tcon = tcon;
1512         oparms.disposition = FILE_OPEN;
1513         oparms.create_options = cifs_create_options(cifs_sb, create_options);
1514         oparms.fid = &fid;
1515         oparms.reconnect = false;
1516
1517         if (qi.flags & PASSTHRU_FSCTL) {
1518                 switch (qi.info_type & FSCTL_DEVICE_ACCESS_MASK) {
1519                 case FSCTL_DEVICE_ACCESS_FILE_READ_WRITE_ACCESS:
1520                         oparms.desired_access = FILE_READ_DATA | FILE_WRITE_DATA | FILE_READ_ATTRIBUTES | SYNCHRONIZE;
1521                         break;
1522                 case FSCTL_DEVICE_ACCESS_FILE_ANY_ACCESS:
1523                         oparms.desired_access = GENERIC_ALL;
1524                         break;
1525                 case FSCTL_DEVICE_ACCESS_FILE_READ_ACCESS:
1526                         oparms.desired_access = GENERIC_READ;
1527                         break;
1528                 case FSCTL_DEVICE_ACCESS_FILE_WRITE_ACCESS:
1529                         oparms.desired_access = GENERIC_WRITE;
1530                         break;
1531                 }
1532         } else if (qi.flags & PASSTHRU_SET_INFO) {
1533                 oparms.desired_access = GENERIC_WRITE;
1534         } else {
1535                 oparms.desired_access = FILE_READ_ATTRIBUTES | READ_CONTROL;
1536         }
1537
1538         rc = SMB2_open_init(tcon, &rqst[0], &oplock, &oparms, path);
1539         if (rc)
1540                 goto iqinf_exit;
1541         smb2_set_next_command(tcon, &rqst[0]);
1542
1543         /* Query */
1544         if (qi.flags & PASSTHRU_FSCTL) {
1545                 /* Can eventually relax perm check since server enforces too */
1546                 if (!capable(CAP_SYS_ADMIN))
1547                         rc = -EPERM;
1548                 else  {
1549                         memset(&io_iov, 0, sizeof(io_iov));
1550                         rqst[1].rq_iov = io_iov;
1551                         rqst[1].rq_nvec = SMB2_IOCTL_IOV_SIZE;
1552
1553                         rc = SMB2_ioctl_init(tcon, &rqst[1],
1554                                              COMPOUND_FID, COMPOUND_FID,
1555                                              qi.info_type, true, buffer,
1556                                              qi.output_buffer_length,
1557                                              CIFSMaxBufSize -
1558                                              MAX_SMB2_CREATE_RESPONSE_SIZE -
1559                                              MAX_SMB2_CLOSE_RESPONSE_SIZE);
1560                 }
1561         } else if (qi.flags == PASSTHRU_SET_INFO) {
1562                 /* Can eventually relax perm check since server enforces too */
1563                 if (!capable(CAP_SYS_ADMIN))
1564                         rc = -EPERM;
1565                 else  {
1566                         memset(&si_iov, 0, sizeof(si_iov));
1567                         rqst[1].rq_iov = si_iov;
1568                         rqst[1].rq_nvec = 1;
1569
1570                         size[0] = 8;
1571                         data[0] = buffer;
1572
1573                         rc = SMB2_set_info_init(tcon, &rqst[1],
1574                                         COMPOUND_FID, COMPOUND_FID,
1575                                         current->tgid,
1576                                         FILE_END_OF_FILE_INFORMATION,
1577                                         SMB2_O_INFO_FILE, 0, data, size);
1578                 }
1579         } else if (qi.flags == PASSTHRU_QUERY_INFO) {
1580                 memset(&qi_iov, 0, sizeof(qi_iov));
1581                 rqst[1].rq_iov = qi_iov;
1582                 rqst[1].rq_nvec = 1;
1583
1584                 rc = SMB2_query_info_init(tcon, &rqst[1], COMPOUND_FID,
1585                                   COMPOUND_FID, qi.file_info_class,
1586                                   qi.info_type, qi.additional_information,
1587                                   qi.input_buffer_length,
1588                                   qi.output_buffer_length, buffer);
1589         } else { /* unknown flags */
1590                 cifs_tcon_dbg(VFS, "invalid passthru query flags: 0x%x\n", qi.flags);
1591                 rc = -EINVAL;
1592         }
1593
1594         if (rc)
1595                 goto iqinf_exit;
1596         smb2_set_next_command(tcon, &rqst[1]);
1597         smb2_set_related(&rqst[1]);
1598
1599         /* Close */
1600         memset(&close_iov, 0, sizeof(close_iov));
1601         rqst[2].rq_iov = close_iov;
1602         rqst[2].rq_nvec = 1;
1603
1604         rc = SMB2_close_init(tcon, &rqst[2], COMPOUND_FID, COMPOUND_FID, false);
1605         if (rc)
1606                 goto iqinf_exit;
1607         smb2_set_related(&rqst[2]);
1608
1609         rc = compound_send_recv(xid, ses, flags, 3, rqst,
1610                                 resp_buftype, rsp_iov);
1611         if (rc)
1612                 goto iqinf_exit;
1613
1614         /* No need to bump num_remote_opens since handle immediately closed */
1615         if (qi.flags & PASSTHRU_FSCTL) {
1616                 pqi = (struct smb_query_info __user *)arg;
1617                 io_rsp = (struct smb2_ioctl_rsp *)rsp_iov[1].iov_base;
1618                 if (le32_to_cpu(io_rsp->OutputCount) < qi.input_buffer_length)
1619                         qi.input_buffer_length = le32_to_cpu(io_rsp->OutputCount);
1620                 if (qi.input_buffer_length > 0 &&
1621                     le32_to_cpu(io_rsp->OutputOffset) + qi.input_buffer_length
1622                     > rsp_iov[1].iov_len)
1623                         goto e_fault;
1624
1625                 if (copy_to_user(&pqi->input_buffer_length,
1626                                  &qi.input_buffer_length,
1627                                  sizeof(qi.input_buffer_length)))
1628                         goto e_fault;
1629
1630                 if (copy_to_user((void __user *)pqi + sizeof(struct smb_query_info),
1631                                  (const void *)io_rsp + le32_to_cpu(io_rsp->OutputOffset),
1632                                  qi.input_buffer_length))
1633                         goto e_fault;
1634         } else {
1635                 pqi = (struct smb_query_info __user *)arg;
1636                 qi_rsp = (struct smb2_query_info_rsp *)rsp_iov[1].iov_base;
1637                 if (le32_to_cpu(qi_rsp->OutputBufferLength) < qi.input_buffer_length)
1638                         qi.input_buffer_length = le32_to_cpu(qi_rsp->OutputBufferLength);
1639                 if (copy_to_user(&pqi->input_buffer_length,
1640                                  &qi.input_buffer_length,
1641                                  sizeof(qi.input_buffer_length)))
1642                         goto e_fault;
1643
1644                 if (copy_to_user(pqi + 1, qi_rsp->Buffer,
1645                                  qi.input_buffer_length))
1646                         goto e_fault;
1647         }
1648
1649  iqinf_exit:
1650         kfree(buffer);
1651         SMB2_open_free(&rqst[0]);
1652         if (qi.flags & PASSTHRU_FSCTL)
1653                 SMB2_ioctl_free(&rqst[1]);
1654         else
1655                 SMB2_query_info_free(&rqst[1]);
1656
1657         SMB2_close_free(&rqst[2]);
1658         free_rsp_buf(resp_buftype[0], rsp_iov[0].iov_base);
1659         free_rsp_buf(resp_buftype[1], rsp_iov[1].iov_base);
1660         free_rsp_buf(resp_buftype[2], rsp_iov[2].iov_base);
1661         return rc;
1662
1663 e_fault:
1664         rc = -EFAULT;
1665         goto iqinf_exit;
1666 }
1667
1668 static ssize_t
1669 smb2_copychunk_range(const unsigned int xid,
1670                         struct cifsFileInfo *srcfile,
1671                         struct cifsFileInfo *trgtfile, u64 src_off,
1672                         u64 len, u64 dest_off)
1673 {
1674         int rc;
1675         unsigned int ret_data_len;
1676         struct copychunk_ioctl *pcchunk;
1677         struct copychunk_ioctl_rsp *retbuf = NULL;
1678         struct cifs_tcon *tcon;
1679         int chunks_copied = 0;
1680         bool chunk_sizes_updated = false;
1681         ssize_t bytes_written, total_bytes_written = 0;
1682
1683         pcchunk = kmalloc(sizeof(struct copychunk_ioctl), GFP_KERNEL);
1684
1685         if (pcchunk == NULL)
1686                 return -ENOMEM;
1687
1688         cifs_dbg(FYI, "%s: about to call request res key\n", __func__);
1689         /* Request a key from the server to identify the source of the copy */
1690         rc = SMB2_request_res_key(xid, tlink_tcon(srcfile->tlink),
1691                                 srcfile->fid.persistent_fid,
1692                                 srcfile->fid.volatile_fid, pcchunk);
1693
1694         /* Note: request_res_key sets res_key null only if rc !=0 */
1695         if (rc)
1696                 goto cchunk_out;
1697
1698         /* For now array only one chunk long, will make more flexible later */
1699         pcchunk->ChunkCount = cpu_to_le32(1);
1700         pcchunk->Reserved = 0;
1701         pcchunk->Reserved2 = 0;
1702
1703         tcon = tlink_tcon(trgtfile->tlink);
1704
1705         while (len > 0) {
1706                 pcchunk->SourceOffset = cpu_to_le64(src_off);
1707                 pcchunk->TargetOffset = cpu_to_le64(dest_off);
1708                 pcchunk->Length =
1709                         cpu_to_le32(min_t(u32, len, tcon->max_bytes_chunk));
1710
1711                 /* Request server copy to target from src identified by key */
1712                 rc = SMB2_ioctl(xid, tcon, trgtfile->fid.persistent_fid,
1713                         trgtfile->fid.volatile_fid, FSCTL_SRV_COPYCHUNK_WRITE,
1714                         true /* is_fsctl */, (char *)pcchunk,
1715                         sizeof(struct copychunk_ioctl), CIFSMaxBufSize,
1716                         (char **)&retbuf, &ret_data_len);
1717                 if (rc == 0) {
1718                         if (ret_data_len !=
1719                                         sizeof(struct copychunk_ioctl_rsp)) {
1720                                 cifs_tcon_dbg(VFS, "invalid cchunk response size\n");
1721                                 rc = -EIO;
1722                                 goto cchunk_out;
1723                         }
1724                         if (retbuf->TotalBytesWritten == 0) {
1725                                 cifs_dbg(FYI, "no bytes copied\n");
1726                                 rc = -EIO;
1727                                 goto cchunk_out;
1728                         }
1729                         /*
1730                          * Check if server claimed to write more than we asked
1731                          */
1732                         if (le32_to_cpu(retbuf->TotalBytesWritten) >
1733                             le32_to_cpu(pcchunk->Length)) {
1734                                 cifs_tcon_dbg(VFS, "invalid copy chunk response\n");
1735                                 rc = -EIO;
1736                                 goto cchunk_out;
1737                         }
1738                         if (le32_to_cpu(retbuf->ChunksWritten) != 1) {
1739                                 cifs_tcon_dbg(VFS, "invalid num chunks written\n");
1740                                 rc = -EIO;
1741                                 goto cchunk_out;
1742                         }
1743                         chunks_copied++;
1744
1745                         bytes_written = le32_to_cpu(retbuf->TotalBytesWritten);
1746                         src_off += bytes_written;
1747                         dest_off += bytes_written;
1748                         len -= bytes_written;
1749                         total_bytes_written += bytes_written;
1750
1751                         cifs_dbg(FYI, "Chunks %d PartialChunk %d Total %zu\n",
1752                                 le32_to_cpu(retbuf->ChunksWritten),
1753                                 le32_to_cpu(retbuf->ChunkBytesWritten),
1754                                 bytes_written);
1755                 } else if (rc == -EINVAL) {
1756                         if (ret_data_len != sizeof(struct copychunk_ioctl_rsp))
1757                                 goto cchunk_out;
1758
1759                         cifs_dbg(FYI, "MaxChunks %d BytesChunk %d MaxCopy %d\n",
1760                                 le32_to_cpu(retbuf->ChunksWritten),
1761                                 le32_to_cpu(retbuf->ChunkBytesWritten),
1762                                 le32_to_cpu(retbuf->TotalBytesWritten));
1763
1764                         /*
1765                          * Check if this is the first request using these sizes,
1766                          * (ie check if copy succeed once with original sizes
1767                          * and check if the server gave us different sizes after
1768                          * we already updated max sizes on previous request).
1769                          * if not then why is the server returning an error now
1770                          */
1771                         if ((chunks_copied != 0) || chunk_sizes_updated)
1772                                 goto cchunk_out;
1773
1774                         /* Check that server is not asking us to grow size */
1775                         if (le32_to_cpu(retbuf->ChunkBytesWritten) <
1776                                         tcon->max_bytes_chunk)
1777                                 tcon->max_bytes_chunk =
1778                                         le32_to_cpu(retbuf->ChunkBytesWritten);
1779                         else
1780                                 goto cchunk_out; /* server gave us bogus size */
1781
1782                         /* No need to change MaxChunks since already set to 1 */
1783                         chunk_sizes_updated = true;
1784                 } else
1785                         goto cchunk_out;
1786         }
1787
1788 cchunk_out:
1789         kfree(pcchunk);
1790         kfree(retbuf);
1791         if (rc)
1792                 return rc;
1793         else
1794                 return total_bytes_written;
1795 }
1796
1797 static int
1798 smb2_flush_file(const unsigned int xid, struct cifs_tcon *tcon,
1799                 struct cifs_fid *fid)
1800 {
1801         return SMB2_flush(xid, tcon, fid->persistent_fid, fid->volatile_fid);
1802 }
1803
1804 static unsigned int
1805 smb2_read_data_offset(char *buf)
1806 {
1807         struct smb2_read_rsp *rsp = (struct smb2_read_rsp *)buf;
1808
1809         return rsp->DataOffset;
1810 }
1811
1812 static unsigned int
1813 smb2_read_data_length(char *buf, bool in_remaining)
1814 {
1815         struct smb2_read_rsp *rsp = (struct smb2_read_rsp *)buf;
1816
1817         if (in_remaining)
1818                 return le32_to_cpu(rsp->DataRemaining);
1819
1820         return le32_to_cpu(rsp->DataLength);
1821 }
1822
1823
1824 static int
1825 smb2_sync_read(const unsigned int xid, struct cifs_fid *pfid,
1826                struct cifs_io_parms *parms, unsigned int *bytes_read,
1827                char **buf, int *buf_type)
1828 {
1829         parms->persistent_fid = pfid->persistent_fid;
1830         parms->volatile_fid = pfid->volatile_fid;
1831         return SMB2_read(xid, parms, bytes_read, buf, buf_type);
1832 }
1833
1834 static int
1835 smb2_sync_write(const unsigned int xid, struct cifs_fid *pfid,
1836                 struct cifs_io_parms *parms, unsigned int *written,
1837                 struct kvec *iov, unsigned long nr_segs)
1838 {
1839
1840         parms->persistent_fid = pfid->persistent_fid;
1841         parms->volatile_fid = pfid->volatile_fid;
1842         return SMB2_write(xid, parms, written, iov, nr_segs);
1843 }
1844
1845 /* Set or clear the SPARSE_FILE attribute based on value passed in setsparse */
1846 static bool smb2_set_sparse(const unsigned int xid, struct cifs_tcon *tcon,
1847                 struct cifsFileInfo *cfile, struct inode *inode, __u8 setsparse)
1848 {
1849         struct cifsInodeInfo *cifsi;
1850         int rc;
1851
1852         cifsi = CIFS_I(inode);
1853
1854         /* if file already sparse don't bother setting sparse again */
1855         if ((cifsi->cifsAttrs & FILE_ATTRIBUTE_SPARSE_FILE) && setsparse)
1856                 return true; /* already sparse */
1857
1858         if (!(cifsi->cifsAttrs & FILE_ATTRIBUTE_SPARSE_FILE) && !setsparse)
1859                 return true; /* already not sparse */
1860
1861         /*
1862          * Can't check for sparse support on share the usual way via the
1863          * FS attribute info (FILE_SUPPORTS_SPARSE_FILES) on the share
1864          * since Samba server doesn't set the flag on the share, yet
1865          * supports the set sparse FSCTL and returns sparse correctly
1866          * in the file attributes. If we fail setting sparse though we
1867          * mark that server does not support sparse files for this share
1868          * to avoid repeatedly sending the unsupported fsctl to server
1869          * if the file is repeatedly extended.
1870          */
1871         if (tcon->broken_sparse_sup)
1872                 return false;
1873
1874         rc = SMB2_ioctl(xid, tcon, cfile->fid.persistent_fid,
1875                         cfile->fid.volatile_fid, FSCTL_SET_SPARSE,
1876                         true /* is_fctl */,
1877                         &setsparse, 1, CIFSMaxBufSize, NULL, NULL);
1878         if (rc) {
1879                 tcon->broken_sparse_sup = true;
1880                 cifs_dbg(FYI, "set sparse rc = %d\n", rc);
1881                 return false;
1882         }
1883
1884         if (setsparse)
1885                 cifsi->cifsAttrs |= FILE_ATTRIBUTE_SPARSE_FILE;
1886         else
1887                 cifsi->cifsAttrs &= (~FILE_ATTRIBUTE_SPARSE_FILE);
1888
1889         return true;
1890 }
1891
1892 static int
1893 smb2_set_file_size(const unsigned int xid, struct cifs_tcon *tcon,
1894                    struct cifsFileInfo *cfile, __u64 size, bool set_alloc)
1895 {
1896         __le64 eof = cpu_to_le64(size);
1897         struct inode *inode;
1898
1899         /*
1900          * If extending file more than one page make sparse. Many Linux fs
1901          * make files sparse by default when extending via ftruncate
1902          */
1903         inode = d_inode(cfile->dentry);
1904
1905         if (!set_alloc && (size > inode->i_size + 8192)) {
1906                 __u8 set_sparse = 1;
1907
1908                 /* whether set sparse succeeds or not, extend the file */
1909                 smb2_set_sparse(xid, tcon, cfile, inode, set_sparse);
1910         }
1911
1912         return SMB2_set_eof(xid, tcon, cfile->fid.persistent_fid,
1913                             cfile->fid.volatile_fid, cfile->pid, &eof);
1914 }
1915
1916 static int
1917 smb2_duplicate_extents(const unsigned int xid,
1918                         struct cifsFileInfo *srcfile,
1919                         struct cifsFileInfo *trgtfile, u64 src_off,
1920                         u64 len, u64 dest_off)
1921 {
1922         int rc;
1923         unsigned int ret_data_len;
1924         struct duplicate_extents_to_file dup_ext_buf;
1925         struct cifs_tcon *tcon = tlink_tcon(trgtfile->tlink);
1926
1927         /* server fileays advertise duplicate extent support with this flag */
1928         if ((le32_to_cpu(tcon->fsAttrInfo.Attributes) &
1929              FILE_SUPPORTS_BLOCK_REFCOUNTING) == 0)
1930                 return -EOPNOTSUPP;
1931
1932         dup_ext_buf.VolatileFileHandle = srcfile->fid.volatile_fid;
1933         dup_ext_buf.PersistentFileHandle = srcfile->fid.persistent_fid;
1934         dup_ext_buf.SourceFileOffset = cpu_to_le64(src_off);
1935         dup_ext_buf.TargetFileOffset = cpu_to_le64(dest_off);
1936         dup_ext_buf.ByteCount = cpu_to_le64(len);
1937         cifs_dbg(FYI, "Duplicate extents: src off %lld dst off %lld len %lld\n",
1938                 src_off, dest_off, len);
1939
1940         rc = smb2_set_file_size(xid, tcon, trgtfile, dest_off + len, false);
1941         if (rc)
1942                 goto duplicate_extents_out;
1943
1944         rc = SMB2_ioctl(xid, tcon, trgtfile->fid.persistent_fid,
1945                         trgtfile->fid.volatile_fid,
1946                         FSCTL_DUPLICATE_EXTENTS_TO_FILE,
1947                         true /* is_fsctl */,
1948                         (char *)&dup_ext_buf,
1949                         sizeof(struct duplicate_extents_to_file),
1950                         CIFSMaxBufSize, NULL,
1951                         &ret_data_len);
1952
1953         if (ret_data_len > 0)
1954                 cifs_dbg(FYI, "Non-zero response length in duplicate extents\n");
1955
1956 duplicate_extents_out:
1957         return rc;
1958 }
1959
1960 static int
1961 smb2_set_compression(const unsigned int xid, struct cifs_tcon *tcon,
1962                    struct cifsFileInfo *cfile)
1963 {
1964         return SMB2_set_compression(xid, tcon, cfile->fid.persistent_fid,
1965                             cfile->fid.volatile_fid);
1966 }
1967
1968 static int
1969 smb3_set_integrity(const unsigned int xid, struct cifs_tcon *tcon,
1970                    struct cifsFileInfo *cfile)
1971 {
1972         struct fsctl_set_integrity_information_req integr_info;
1973         unsigned int ret_data_len;
1974
1975         integr_info.ChecksumAlgorithm = cpu_to_le16(CHECKSUM_TYPE_UNCHANGED);
1976         integr_info.Flags = 0;
1977         integr_info.Reserved = 0;
1978
1979         return SMB2_ioctl(xid, tcon, cfile->fid.persistent_fid,
1980                         cfile->fid.volatile_fid,
1981                         FSCTL_SET_INTEGRITY_INFORMATION,
1982                         true /* is_fsctl */,
1983                         (char *)&integr_info,
1984                         sizeof(struct fsctl_set_integrity_information_req),
1985                         CIFSMaxBufSize, NULL,
1986                         &ret_data_len);
1987
1988 }
1989
1990 /* GMT Token is @GMT-YYYY.MM.DD-HH.MM.SS Unicode which is 48 bytes + null */
1991 #define GMT_TOKEN_SIZE 50
1992
1993 #define MIN_SNAPSHOT_ARRAY_SIZE 16 /* See MS-SMB2 section 3.3.5.15.1 */
1994
1995 /*
1996  * Input buffer contains (empty) struct smb_snapshot array with size filled in
1997  * For output see struct SRV_SNAPSHOT_ARRAY in MS-SMB2 section 2.2.32.2
1998  */
1999 static int
2000 smb3_enum_snapshots(const unsigned int xid, struct cifs_tcon *tcon,
2001                    struct cifsFileInfo *cfile, void __user *ioc_buf)
2002 {
2003         char *retbuf = NULL;
2004         unsigned int ret_data_len = 0;
2005         int rc;
2006         u32 max_response_size;
2007         struct smb_snapshot_array snapshot_in;
2008
2009         /*
2010          * On the first query to enumerate the list of snapshots available
2011          * for this volume the buffer begins with 0 (number of snapshots
2012          * which can be returned is zero since at that point we do not know
2013          * how big the buffer needs to be). On the second query,
2014          * it (ret_data_len) is set to number of snapshots so we can
2015          * know to set the maximum response size larger (see below).
2016          */
2017         if (get_user(ret_data_len, (unsigned int __user *)ioc_buf))
2018                 return -EFAULT;
2019
2020         /*
2021          * Note that for snapshot queries that servers like Azure expect that
2022          * the first query be minimal size (and just used to get the number/size
2023          * of previous versions) so response size must be specified as EXACTLY
2024          * sizeof(struct snapshot_array) which is 16 when rounded up to multiple
2025          * of eight bytes.
2026          */
2027         if (ret_data_len == 0)
2028                 max_response_size = MIN_SNAPSHOT_ARRAY_SIZE;
2029         else
2030                 max_response_size = CIFSMaxBufSize;
2031
2032         rc = SMB2_ioctl(xid, tcon, cfile->fid.persistent_fid,
2033                         cfile->fid.volatile_fid,
2034                         FSCTL_SRV_ENUMERATE_SNAPSHOTS,
2035                         true /* is_fsctl */,
2036                         NULL, 0 /* no input data */, max_response_size,
2037                         (char **)&retbuf,
2038                         &ret_data_len);
2039         cifs_dbg(FYI, "enum snaphots ioctl returned %d and ret buflen is %d\n",
2040                         rc, ret_data_len);
2041         if (rc)
2042                 return rc;
2043
2044         if (ret_data_len && (ioc_buf != NULL) && (retbuf != NULL)) {
2045                 /* Fixup buffer */
2046                 if (copy_from_user(&snapshot_in, ioc_buf,
2047                     sizeof(struct smb_snapshot_array))) {
2048                         rc = -EFAULT;
2049                         kfree(retbuf);
2050                         return rc;
2051                 }
2052
2053                 /*
2054                  * Check for min size, ie not large enough to fit even one GMT
2055                  * token (snapshot).  On the first ioctl some users may pass in
2056                  * smaller size (or zero) to simply get the size of the array
2057                  * so the user space caller can allocate sufficient memory
2058                  * and retry the ioctl again with larger array size sufficient
2059                  * to hold all of the snapshot GMT tokens on the second try.
2060                  */
2061                 if (snapshot_in.snapshot_array_size < GMT_TOKEN_SIZE)
2062                         ret_data_len = sizeof(struct smb_snapshot_array);
2063
2064                 /*
2065                  * We return struct SRV_SNAPSHOT_ARRAY, followed by
2066                  * the snapshot array (of 50 byte GMT tokens) each
2067                  * representing an available previous version of the data
2068                  */
2069                 if (ret_data_len > (snapshot_in.snapshot_array_size +
2070                                         sizeof(struct smb_snapshot_array)))
2071                         ret_data_len = snapshot_in.snapshot_array_size +
2072                                         sizeof(struct smb_snapshot_array);
2073
2074                 if (copy_to_user(ioc_buf, retbuf, ret_data_len))
2075                         rc = -EFAULT;
2076         }
2077
2078         kfree(retbuf);
2079         return rc;
2080 }
2081
2082
2083
2084 static int
2085 smb3_notify(const unsigned int xid, struct file *pfile,
2086             void __user *ioc_buf)
2087 {
2088         struct smb3_notify notify;
2089         struct dentry *dentry = pfile->f_path.dentry;
2090         struct inode *inode = file_inode(pfile);
2091         struct cifs_sb_info *cifs_sb;
2092         struct cifs_open_parms oparms;
2093         struct cifs_fid fid;
2094         struct cifs_tcon *tcon;
2095         unsigned char *path = NULL;
2096         __le16 *utf16_path = NULL;
2097         u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
2098         int rc = 0;
2099
2100         path = build_path_from_dentry(dentry);
2101         if (path == NULL)
2102                 return -ENOMEM;
2103
2104         cifs_sb = CIFS_SB(inode->i_sb);
2105
2106         utf16_path = cifs_convert_path_to_utf16(path + 1, cifs_sb);
2107         if (utf16_path == NULL) {
2108                 rc = -ENOMEM;
2109                 goto notify_exit;
2110         }
2111
2112         if (copy_from_user(&notify, ioc_buf, sizeof(struct smb3_notify))) {
2113                 rc = -EFAULT;
2114                 goto notify_exit;
2115         }
2116
2117         tcon = cifs_sb_master_tcon(cifs_sb);
2118         oparms.tcon = tcon;
2119         oparms.desired_access = FILE_READ_ATTRIBUTES;
2120         oparms.disposition = FILE_OPEN;
2121         oparms.create_options = cifs_create_options(cifs_sb, 0);
2122         oparms.fid = &fid;
2123         oparms.reconnect = false;
2124
2125         rc = SMB2_open(xid, &oparms, utf16_path, &oplock, NULL, NULL, NULL);
2126         if (rc)
2127                 goto notify_exit;
2128
2129         rc = SMB2_change_notify(xid, tcon, fid.persistent_fid, fid.volatile_fid,
2130                                 notify.watch_tree, notify.completion_filter);
2131
2132         SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid);
2133
2134         cifs_dbg(FYI, "change notify for path %s rc %d\n", path, rc);
2135
2136 notify_exit:
2137         kfree(path);
2138         kfree(utf16_path);
2139         return rc;
2140 }
2141
2142 static int
2143 smb2_query_dir_first(const unsigned int xid, struct cifs_tcon *tcon,
2144                      const char *path, struct cifs_sb_info *cifs_sb,
2145                      struct cifs_fid *fid, __u16 search_flags,
2146                      struct cifs_search_info *srch_inf)
2147 {
2148         __le16 *utf16_path;
2149         struct smb_rqst rqst[2];
2150         struct kvec rsp_iov[2];
2151         int resp_buftype[2];
2152         struct kvec open_iov[SMB2_CREATE_IOV_SIZE];
2153         struct kvec qd_iov[SMB2_QUERY_DIRECTORY_IOV_SIZE];
2154         int rc, flags = 0;
2155         u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
2156         struct cifs_open_parms oparms;
2157         struct smb2_query_directory_rsp *qd_rsp = NULL;
2158         struct smb2_create_rsp *op_rsp = NULL;
2159
2160         utf16_path = cifs_convert_path_to_utf16(path, cifs_sb);
2161         if (!utf16_path)
2162                 return -ENOMEM;
2163
2164         if (smb3_encryption_required(tcon))
2165                 flags |= CIFS_TRANSFORM_REQ;
2166
2167         memset(rqst, 0, sizeof(rqst));
2168         resp_buftype[0] = resp_buftype[1] = CIFS_NO_BUFFER;
2169         memset(rsp_iov, 0, sizeof(rsp_iov));
2170
2171         /* Open */
2172         memset(&open_iov, 0, sizeof(open_iov));
2173         rqst[0].rq_iov = open_iov;
2174         rqst[0].rq_nvec = SMB2_CREATE_IOV_SIZE;
2175
2176         oparms.tcon = tcon;
2177         oparms.desired_access = FILE_READ_ATTRIBUTES | FILE_READ_DATA;
2178         oparms.disposition = FILE_OPEN;
2179         oparms.create_options = cifs_create_options(cifs_sb, 0);
2180         oparms.fid = fid;
2181         oparms.reconnect = false;
2182
2183         rc = SMB2_open_init(tcon, &rqst[0], &oplock, &oparms, utf16_path);
2184         if (rc)
2185                 goto qdf_free;
2186         smb2_set_next_command(tcon, &rqst[0]);
2187
2188         /* Query directory */
2189         srch_inf->entries_in_buffer = 0;
2190         srch_inf->index_of_last_entry = 2;
2191
2192         memset(&qd_iov, 0, sizeof(qd_iov));
2193         rqst[1].rq_iov = qd_iov;
2194         rqst[1].rq_nvec = SMB2_QUERY_DIRECTORY_IOV_SIZE;
2195
2196         rc = SMB2_query_directory_init(xid, tcon, &rqst[1],
2197                                        COMPOUND_FID, COMPOUND_FID,
2198                                        0, srch_inf->info_level);
2199         if (rc)
2200                 goto qdf_free;
2201
2202         smb2_set_related(&rqst[1]);
2203
2204         rc = compound_send_recv(xid, tcon->ses, flags, 2, rqst,
2205                                 resp_buftype, rsp_iov);
2206
2207         /* If the open failed there is nothing to do */
2208         op_rsp = (struct smb2_create_rsp *)rsp_iov[0].iov_base;
2209         if (op_rsp == NULL || op_rsp->sync_hdr.Status != STATUS_SUCCESS) {
2210                 cifs_dbg(FYI, "query_dir_first: open failed rc=%d\n", rc);
2211                 goto qdf_free;
2212         }
2213         fid->persistent_fid = op_rsp->PersistentFileId;
2214         fid->volatile_fid = op_rsp->VolatileFileId;
2215
2216         /* Anything else than ENODATA means a genuine error */
2217         if (rc && rc != -ENODATA) {
2218                 SMB2_close(xid, tcon, fid->persistent_fid, fid->volatile_fid);
2219                 cifs_dbg(FYI, "query_dir_first: query directory failed rc=%d\n", rc);
2220                 trace_smb3_query_dir_err(xid, fid->persistent_fid,
2221                                          tcon->tid, tcon->ses->Suid, 0, 0, rc);
2222                 goto qdf_free;
2223         }
2224
2225         atomic_inc(&tcon->num_remote_opens);
2226
2227         qd_rsp = (struct smb2_query_directory_rsp *)rsp_iov[1].iov_base;
2228         if (qd_rsp->sync_hdr.Status == STATUS_NO_MORE_FILES) {
2229                 trace_smb3_query_dir_done(xid, fid->persistent_fid,
2230                                           tcon->tid, tcon->ses->Suid, 0, 0);
2231                 srch_inf->endOfSearch = true;
2232                 rc = 0;
2233                 goto qdf_free;
2234         }
2235
2236         rc = smb2_parse_query_directory(tcon, &rsp_iov[1], resp_buftype[1],
2237                                         srch_inf);
2238         if (rc) {
2239                 trace_smb3_query_dir_err(xid, fid->persistent_fid, tcon->tid,
2240                         tcon->ses->Suid, 0, 0, rc);
2241                 goto qdf_free;
2242         }
2243         resp_buftype[1] = CIFS_NO_BUFFER;
2244
2245         trace_smb3_query_dir_done(xid, fid->persistent_fid, tcon->tid,
2246                         tcon->ses->Suid, 0, srch_inf->entries_in_buffer);
2247
2248  qdf_free:
2249         kfree(utf16_path);
2250         SMB2_open_free(&rqst[0]);
2251         SMB2_query_directory_free(&rqst[1]);
2252         free_rsp_buf(resp_buftype[0], rsp_iov[0].iov_base);
2253         free_rsp_buf(resp_buftype[1], rsp_iov[1].iov_base);
2254         return rc;
2255 }
2256
2257 static int
2258 smb2_query_dir_next(const unsigned int xid, struct cifs_tcon *tcon,
2259                     struct cifs_fid *fid, __u16 search_flags,
2260                     struct cifs_search_info *srch_inf)
2261 {
2262         return SMB2_query_directory(xid, tcon, fid->persistent_fid,
2263                                     fid->volatile_fid, 0, srch_inf);
2264 }
2265
2266 static int
2267 smb2_close_dir(const unsigned int xid, struct cifs_tcon *tcon,
2268                struct cifs_fid *fid)
2269 {
2270         return SMB2_close(xid, tcon, fid->persistent_fid, fid->volatile_fid);
2271 }
2272
2273 /*
2274  * If we negotiate SMB2 protocol and get STATUS_PENDING - update
2275  * the number of credits and return true. Otherwise - return false.
2276  */
2277 static bool
2278 smb2_is_status_pending(char *buf, struct TCP_Server_Info *server)
2279 {
2280         struct smb2_sync_hdr *shdr = (struct smb2_sync_hdr *)buf;
2281
2282         if (shdr->Status != STATUS_PENDING)
2283                 return false;
2284
2285         if (shdr->CreditRequest) {
2286                 spin_lock(&server->req_lock);
2287                 server->credits += le16_to_cpu(shdr->CreditRequest);
2288                 spin_unlock(&server->req_lock);
2289                 wake_up(&server->request_q);
2290         }
2291
2292         return true;
2293 }
2294
2295 static bool
2296 smb2_is_session_expired(char *buf)
2297 {
2298         struct smb2_sync_hdr *shdr = (struct smb2_sync_hdr *)buf;
2299
2300         if (shdr->Status != STATUS_NETWORK_SESSION_EXPIRED &&
2301             shdr->Status != STATUS_USER_SESSION_DELETED)
2302                 return false;
2303
2304         trace_smb3_ses_expired(shdr->TreeId, shdr->SessionId,
2305                                le16_to_cpu(shdr->Command),
2306                                le64_to_cpu(shdr->MessageId));
2307         cifs_dbg(FYI, "Session expired or deleted\n");
2308
2309         return true;
2310 }
2311
2312 static int
2313 smb2_oplock_response(struct cifs_tcon *tcon, struct cifs_fid *fid,
2314                      struct cifsInodeInfo *cinode)
2315 {
2316         if (tcon->ses->server->capabilities & SMB2_GLOBAL_CAP_LEASING)
2317                 return SMB2_lease_break(0, tcon, cinode->lease_key,
2318                                         smb2_get_lease_state(cinode));
2319
2320         return SMB2_oplock_break(0, tcon, fid->persistent_fid,
2321                                  fid->volatile_fid,
2322                                  CIFS_CACHE_READ(cinode) ? 1 : 0);
2323 }
2324
2325 void
2326 smb2_set_related(struct smb_rqst *rqst)
2327 {
2328         struct smb2_sync_hdr *shdr;
2329
2330         shdr = (struct smb2_sync_hdr *)(rqst->rq_iov[0].iov_base);
2331         if (shdr == NULL) {
2332                 cifs_dbg(FYI, "shdr NULL in smb2_set_related\n");
2333                 return;
2334         }
2335         shdr->Flags |= SMB2_FLAGS_RELATED_OPERATIONS;
2336 }
2337
2338 char smb2_padding[7] = {0, 0, 0, 0, 0, 0, 0};
2339
2340 void
2341 smb2_set_next_command(struct cifs_tcon *tcon, struct smb_rqst *rqst)
2342 {
2343         struct smb2_sync_hdr *shdr;
2344         struct cifs_ses *ses = tcon->ses;
2345         struct TCP_Server_Info *server = ses->server;
2346         unsigned long len = smb_rqst_len(server, rqst);
2347         int i, num_padding;
2348
2349         shdr = (struct smb2_sync_hdr *)(rqst->rq_iov[0].iov_base);
2350         if (shdr == NULL) {
2351                 cifs_dbg(FYI, "shdr NULL in smb2_set_next_command\n");
2352                 return;
2353         }
2354
2355         /* SMB headers in a compound are 8 byte aligned. */
2356
2357         /* No padding needed */
2358         if (!(len & 7))
2359                 goto finished;
2360
2361         num_padding = 8 - (len & 7);
2362         if (!smb3_encryption_required(tcon)) {
2363                 /*
2364                  * If we do not have encryption then we can just add an extra
2365                  * iov for the padding.
2366                  */
2367                 rqst->rq_iov[rqst->rq_nvec].iov_base = smb2_padding;
2368                 rqst->rq_iov[rqst->rq_nvec].iov_len = num_padding;
2369                 rqst->rq_nvec++;
2370                 len += num_padding;
2371         } else {
2372                 /*
2373                  * We can not add a small padding iov for the encryption case
2374                  * because the encryption framework can not handle the padding
2375                  * iovs.
2376                  * We have to flatten this into a single buffer and add
2377                  * the padding to it.
2378                  */
2379                 for (i = 1; i < rqst->rq_nvec; i++) {
2380                         memcpy(rqst->rq_iov[0].iov_base +
2381                                rqst->rq_iov[0].iov_len,
2382                                rqst->rq_iov[i].iov_base,
2383                                rqst->rq_iov[i].iov_len);
2384                         rqst->rq_iov[0].iov_len += rqst->rq_iov[i].iov_len;
2385                 }
2386                 memset(rqst->rq_iov[0].iov_base + rqst->rq_iov[0].iov_len,
2387                        0, num_padding);
2388                 rqst->rq_iov[0].iov_len += num_padding;
2389                 len += num_padding;
2390                 rqst->rq_nvec = 1;
2391         }
2392
2393  finished:
2394         shdr->NextCommand = cpu_to_le32(len);
2395 }
2396
2397 /*
2398  * Passes the query info response back to the caller on success.
2399  * Caller need to free this with free_rsp_buf().
2400  */
2401 int
2402 smb2_query_info_compound(const unsigned int xid, struct cifs_tcon *tcon,
2403                          __le16 *utf16_path, u32 desired_access,
2404                          u32 class, u32 type, u32 output_len,
2405                          struct kvec *rsp, int *buftype,
2406                          struct cifs_sb_info *cifs_sb)
2407 {
2408         struct cifs_ses *ses = tcon->ses;
2409         int flags = 0;
2410         struct smb_rqst rqst[3];
2411         int resp_buftype[3];
2412         struct kvec rsp_iov[3];
2413         struct kvec open_iov[SMB2_CREATE_IOV_SIZE];
2414         struct kvec qi_iov[1];
2415         struct kvec close_iov[1];
2416         u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
2417         struct cifs_open_parms oparms;
2418         struct cifs_fid fid;
2419         int rc;
2420
2421         if (smb3_encryption_required(tcon))
2422                 flags |= CIFS_TRANSFORM_REQ;
2423
2424         memset(rqst, 0, sizeof(rqst));
2425         resp_buftype[0] = resp_buftype[1] = resp_buftype[2] = CIFS_NO_BUFFER;
2426         memset(rsp_iov, 0, sizeof(rsp_iov));
2427
2428         memset(&open_iov, 0, sizeof(open_iov));
2429         rqst[0].rq_iov = open_iov;
2430         rqst[0].rq_nvec = SMB2_CREATE_IOV_SIZE;
2431
2432         oparms.tcon = tcon;
2433         oparms.desired_access = desired_access;
2434         oparms.disposition = FILE_OPEN;
2435         oparms.create_options = cifs_create_options(cifs_sb, 0);
2436         oparms.fid = &fid;
2437         oparms.reconnect = false;
2438
2439         rc = SMB2_open_init(tcon, &rqst[0], &oplock, &oparms, utf16_path);
2440         if (rc)
2441                 goto qic_exit;
2442         smb2_set_next_command(tcon, &rqst[0]);
2443
2444         memset(&qi_iov, 0, sizeof(qi_iov));
2445         rqst[1].rq_iov = qi_iov;
2446         rqst[1].rq_nvec = 1;
2447
2448         rc = SMB2_query_info_init(tcon, &rqst[1], COMPOUND_FID, COMPOUND_FID,
2449                                   class, type, 0,
2450                                   output_len, 0,
2451                                   NULL);
2452         if (rc)
2453                 goto qic_exit;
2454         smb2_set_next_command(tcon, &rqst[1]);
2455         smb2_set_related(&rqst[1]);
2456
2457         memset(&close_iov, 0, sizeof(close_iov));
2458         rqst[2].rq_iov = close_iov;
2459         rqst[2].rq_nvec = 1;
2460
2461         rc = SMB2_close_init(tcon, &rqst[2], COMPOUND_FID, COMPOUND_FID, false);
2462         if (rc)
2463                 goto qic_exit;
2464         smb2_set_related(&rqst[2]);
2465
2466         rc = compound_send_recv(xid, ses, flags, 3, rqst,
2467                                 resp_buftype, rsp_iov);
2468         if (rc) {
2469                 free_rsp_buf(resp_buftype[1], rsp_iov[1].iov_base);
2470                 if (rc == -EREMCHG) {
2471                         tcon->need_reconnect = true;
2472                         printk_once(KERN_WARNING "server share %s deleted\n",
2473                                     tcon->treeName);
2474                 }
2475                 goto qic_exit;
2476         }
2477         *rsp = rsp_iov[1];
2478         *buftype = resp_buftype[1];
2479
2480  qic_exit:
2481         SMB2_open_free(&rqst[0]);
2482         SMB2_query_info_free(&rqst[1]);
2483         SMB2_close_free(&rqst[2]);
2484         free_rsp_buf(resp_buftype[0], rsp_iov[0].iov_base);
2485         free_rsp_buf(resp_buftype[2], rsp_iov[2].iov_base);
2486         return rc;
2487 }
2488
2489 static int
2490 smb2_queryfs(const unsigned int xid, struct cifs_tcon *tcon,
2491              struct cifs_sb_info *cifs_sb, struct kstatfs *buf)
2492 {
2493         struct smb2_query_info_rsp *rsp;
2494         struct smb2_fs_full_size_info *info = NULL;
2495         __le16 utf16_path = 0; /* Null - open root of share */
2496         struct kvec rsp_iov = {NULL, 0};
2497         int buftype = CIFS_NO_BUFFER;
2498         int rc;
2499
2500
2501         rc = smb2_query_info_compound(xid, tcon, &utf16_path,
2502                                       FILE_READ_ATTRIBUTES,
2503                                       FS_FULL_SIZE_INFORMATION,
2504                                       SMB2_O_INFO_FILESYSTEM,
2505                                       sizeof(struct smb2_fs_full_size_info),
2506                                       &rsp_iov, &buftype, cifs_sb);
2507         if (rc)
2508                 goto qfs_exit;
2509
2510         rsp = (struct smb2_query_info_rsp *)rsp_iov.iov_base;
2511         buf->f_type = SMB2_MAGIC_NUMBER;
2512         info = (struct smb2_fs_full_size_info *)(
2513                 le16_to_cpu(rsp->OutputBufferOffset) + (char *)rsp);
2514         rc = smb2_validate_iov(le16_to_cpu(rsp->OutputBufferOffset),
2515                                le32_to_cpu(rsp->OutputBufferLength),
2516                                &rsp_iov,
2517                                sizeof(struct smb2_fs_full_size_info));
2518         if (!rc)
2519                 smb2_copy_fs_info_to_kstatfs(info, buf);
2520
2521 qfs_exit:
2522         free_rsp_buf(buftype, rsp_iov.iov_base);
2523         return rc;
2524 }
2525
2526 static int
2527 smb311_queryfs(const unsigned int xid, struct cifs_tcon *tcon,
2528                struct cifs_sb_info *cifs_sb, struct kstatfs *buf)
2529 {
2530         int rc;
2531         __le16 srch_path = 0; /* Null - open root of share */
2532         u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
2533         struct cifs_open_parms oparms;
2534         struct cifs_fid fid;
2535
2536         if (!tcon->posix_extensions)
2537                 return smb2_queryfs(xid, tcon, cifs_sb, buf);
2538
2539         oparms.tcon = tcon;
2540         oparms.desired_access = FILE_READ_ATTRIBUTES;
2541         oparms.disposition = FILE_OPEN;
2542         oparms.create_options = cifs_create_options(cifs_sb, 0);
2543         oparms.fid = &fid;
2544         oparms.reconnect = false;
2545
2546         rc = SMB2_open(xid, &oparms, &srch_path, &oplock, NULL, NULL, NULL);
2547         if (rc)
2548                 return rc;
2549
2550         rc = SMB311_posix_qfs_info(xid, tcon, fid.persistent_fid,
2551                                    fid.volatile_fid, buf);
2552         buf->f_type = SMB2_MAGIC_NUMBER;
2553         SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid);
2554         return rc;
2555 }
2556
2557 static bool
2558 smb2_compare_fids(struct cifsFileInfo *ob1, struct cifsFileInfo *ob2)
2559 {
2560         return ob1->fid.persistent_fid == ob2->fid.persistent_fid &&
2561                ob1->fid.volatile_fid == ob2->fid.volatile_fid;
2562 }
2563
2564 static int
2565 smb2_mand_lock(const unsigned int xid, struct cifsFileInfo *cfile, __u64 offset,
2566                __u64 length, __u32 type, int lock, int unlock, bool wait)
2567 {
2568         if (unlock && !lock)
2569                 type = SMB2_LOCKFLAG_UNLOCK;
2570         return SMB2_lock(xid, tlink_tcon(cfile->tlink),
2571                          cfile->fid.persistent_fid, cfile->fid.volatile_fid,
2572                          current->tgid, length, offset, type, wait);
2573 }
2574
2575 static void
2576 smb2_get_lease_key(struct inode *inode, struct cifs_fid *fid)
2577 {
2578         memcpy(fid->lease_key, CIFS_I(inode)->lease_key, SMB2_LEASE_KEY_SIZE);
2579 }
2580
2581 static void
2582 smb2_set_lease_key(struct inode *inode, struct cifs_fid *fid)
2583 {
2584         memcpy(CIFS_I(inode)->lease_key, fid->lease_key, SMB2_LEASE_KEY_SIZE);
2585 }
2586
2587 static void
2588 smb2_new_lease_key(struct cifs_fid *fid)
2589 {
2590         generate_random_uuid(fid->lease_key);
2591 }
2592
2593 static int
2594 smb2_get_dfs_refer(const unsigned int xid, struct cifs_ses *ses,
2595                    const char *search_name,
2596                    struct dfs_info3_param **target_nodes,
2597                    unsigned int *num_of_nodes,
2598                    const struct nls_table *nls_codepage, int remap)
2599 {
2600         int rc;
2601         __le16 *utf16_path = NULL;
2602         int utf16_path_len = 0;
2603         struct cifs_tcon *tcon;
2604         struct fsctl_get_dfs_referral_req *dfs_req = NULL;
2605         struct get_dfs_referral_rsp *dfs_rsp = NULL;
2606         u32 dfs_req_size = 0, dfs_rsp_size = 0;
2607
2608         cifs_dbg(FYI, "%s: path: %s\n", __func__, search_name);
2609
2610         /*
2611          * Try to use the IPC tcon, otherwise just use any
2612          */
2613         tcon = ses->tcon_ipc;
2614         if (tcon == NULL) {
2615                 spin_lock(&cifs_tcp_ses_lock);
2616                 tcon = list_first_entry_or_null(&ses->tcon_list,
2617                                                 struct cifs_tcon,
2618                                                 tcon_list);
2619                 if (tcon)
2620                         tcon->tc_count++;
2621                 spin_unlock(&cifs_tcp_ses_lock);
2622         }
2623
2624         if (tcon == NULL) {
2625                 cifs_dbg(VFS, "session %p has no tcon available for a dfs referral request\n",
2626                          ses);
2627                 rc = -ENOTCONN;
2628                 goto out;
2629         }
2630
2631         utf16_path = cifs_strndup_to_utf16(search_name, PATH_MAX,
2632                                            &utf16_path_len,
2633                                            nls_codepage, remap);
2634         if (!utf16_path) {
2635                 rc = -ENOMEM;
2636                 goto out;
2637         }
2638
2639         dfs_req_size = sizeof(*dfs_req) + utf16_path_len;
2640         dfs_req = kzalloc(dfs_req_size, GFP_KERNEL);
2641         if (!dfs_req) {
2642                 rc = -ENOMEM;
2643                 goto out;
2644         }
2645
2646         /* Highest DFS referral version understood */
2647         dfs_req->MaxReferralLevel = DFS_VERSION;
2648
2649         /* Path to resolve in an UTF-16 null-terminated string */
2650         memcpy(dfs_req->RequestFileName, utf16_path, utf16_path_len);
2651
2652         do {
2653                 rc = SMB2_ioctl(xid, tcon, NO_FILE_ID, NO_FILE_ID,
2654                                 FSCTL_DFS_GET_REFERRALS,
2655                                 true /* is_fsctl */,
2656                                 (char *)dfs_req, dfs_req_size, CIFSMaxBufSize,
2657                                 (char **)&dfs_rsp, &dfs_rsp_size);
2658         } while (rc == -EAGAIN);
2659
2660         if (rc) {
2661                 if ((rc != -ENOENT) && (rc != -EOPNOTSUPP))
2662                         cifs_tcon_dbg(VFS, "ioctl error in %s rc=%d\n", __func__, rc);
2663                 goto out;
2664         }
2665
2666         rc = parse_dfs_referrals(dfs_rsp, dfs_rsp_size,
2667                                  num_of_nodes, target_nodes,
2668                                  nls_codepage, remap, search_name,
2669                                  true /* is_unicode */);
2670         if (rc) {
2671                 cifs_tcon_dbg(VFS, "parse error in %s rc=%d\n", __func__, rc);
2672                 goto out;
2673         }
2674
2675  out:
2676         if (tcon && !tcon->ipc) {
2677                 /* ipc tcons are not refcounted */
2678                 spin_lock(&cifs_tcp_ses_lock);
2679                 tcon->tc_count--;
2680                 spin_unlock(&cifs_tcp_ses_lock);
2681         }
2682         kfree(utf16_path);
2683         kfree(dfs_req);
2684         kfree(dfs_rsp);
2685         return rc;
2686 }
2687
2688 static int
2689 parse_reparse_posix(struct reparse_posix_data *symlink_buf,
2690                       u32 plen, char **target_path,
2691                       struct cifs_sb_info *cifs_sb)
2692 {
2693         unsigned int len;
2694
2695         /* See MS-FSCC 2.1.2.6 for the 'NFS' style reparse tags */
2696         len = le16_to_cpu(symlink_buf->ReparseDataLength);
2697
2698         if (le64_to_cpu(symlink_buf->InodeType) != NFS_SPECFILE_LNK) {
2699                 cifs_dbg(VFS, "%lld not a supported symlink type\n",
2700                         le64_to_cpu(symlink_buf->InodeType));
2701                 return -EOPNOTSUPP;
2702         }
2703
2704         *target_path = cifs_strndup_from_utf16(
2705                                 symlink_buf->PathBuffer,
2706                                 len, true, cifs_sb->local_nls);
2707         if (!(*target_path))
2708                 return -ENOMEM;
2709
2710         convert_delimiter(*target_path, '/');
2711         cifs_dbg(FYI, "%s: target path: %s\n", __func__, *target_path);
2712
2713         return 0;
2714 }
2715
2716 static int
2717 parse_reparse_symlink(struct reparse_symlink_data_buffer *symlink_buf,
2718                       u32 plen, char **target_path,
2719                       struct cifs_sb_info *cifs_sb)
2720 {
2721         unsigned int sub_len;
2722         unsigned int sub_offset;
2723
2724         /* We handle Symbolic Link reparse tag here. See: MS-FSCC 2.1.2.4 */
2725
2726         sub_offset = le16_to_cpu(symlink_buf->SubstituteNameOffset);
2727         sub_len = le16_to_cpu(symlink_buf->SubstituteNameLength);
2728         if (sub_offset + 20 > plen ||
2729             sub_offset + sub_len + 20 > plen) {
2730                 cifs_dbg(VFS, "srv returned malformed symlink buffer\n");
2731                 return -EIO;
2732         }
2733
2734         *target_path = cifs_strndup_from_utf16(
2735                                 symlink_buf->PathBuffer + sub_offset,
2736                                 sub_len, true, cifs_sb->local_nls);
2737         if (!(*target_path))
2738                 return -ENOMEM;
2739
2740         convert_delimiter(*target_path, '/');
2741         cifs_dbg(FYI, "%s: target path: %s\n", __func__, *target_path);
2742
2743         return 0;
2744 }
2745
2746 static int
2747 parse_reparse_point(struct reparse_data_buffer *buf,
2748                     u32 plen, char **target_path,
2749                     struct cifs_sb_info *cifs_sb)
2750 {
2751         if (plen < sizeof(struct reparse_data_buffer)) {
2752                 cifs_dbg(VFS, "reparse buffer is too small. Must be "
2753                          "at least 8 bytes but was %d\n", plen);
2754                 return -EIO;
2755         }
2756
2757         if (plen < le16_to_cpu(buf->ReparseDataLength) +
2758             sizeof(struct reparse_data_buffer)) {
2759                 cifs_dbg(VFS, "srv returned invalid reparse buf "
2760                          "length: %d\n", plen);
2761                 return -EIO;
2762         }
2763
2764         /* See MS-FSCC 2.1.2 */
2765         switch (le32_to_cpu(buf->ReparseTag)) {
2766         case IO_REPARSE_TAG_NFS:
2767                 return parse_reparse_posix(
2768                         (struct reparse_posix_data *)buf,
2769                         plen, target_path, cifs_sb);
2770         case IO_REPARSE_TAG_SYMLINK:
2771                 return parse_reparse_symlink(
2772                         (struct reparse_symlink_data_buffer *)buf,
2773                         plen, target_path, cifs_sb);
2774         default:
2775                 cifs_dbg(VFS, "srv returned unknown symlink buffer "
2776                          "tag:0x%08x\n", le32_to_cpu(buf->ReparseTag));
2777                 return -EOPNOTSUPP;
2778         }
2779 }
2780
2781 #define SMB2_SYMLINK_STRUCT_SIZE \
2782         (sizeof(struct smb2_err_rsp) - 1 + sizeof(struct smb2_symlink_err_rsp))
2783
2784 static int
2785 smb2_query_symlink(const unsigned int xid, struct cifs_tcon *tcon,
2786                    struct cifs_sb_info *cifs_sb, const char *full_path,
2787                    char **target_path, bool is_reparse_point)
2788 {
2789         int rc;
2790         __le16 *utf16_path = NULL;
2791         __u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
2792         struct cifs_open_parms oparms;
2793         struct cifs_fid fid;
2794         struct kvec err_iov = {NULL, 0};
2795         struct smb2_err_rsp *err_buf = NULL;
2796         struct smb2_symlink_err_rsp *symlink;
2797         unsigned int sub_len;
2798         unsigned int sub_offset;
2799         unsigned int print_len;
2800         unsigned int print_offset;
2801         int flags = 0;
2802         struct smb_rqst rqst[3];
2803         int resp_buftype[3];
2804         struct kvec rsp_iov[3];
2805         struct kvec open_iov[SMB2_CREATE_IOV_SIZE];
2806         struct kvec io_iov[SMB2_IOCTL_IOV_SIZE];
2807         struct kvec close_iov[1];
2808         struct smb2_create_rsp *create_rsp;
2809         struct smb2_ioctl_rsp *ioctl_rsp;
2810         struct reparse_data_buffer *reparse_buf;
2811         int create_options = is_reparse_point ? OPEN_REPARSE_POINT : 0;
2812         u32 plen;
2813
2814         cifs_dbg(FYI, "%s: path: %s\n", __func__, full_path);
2815
2816         *target_path = NULL;
2817
2818         if (smb3_encryption_required(tcon))
2819                 flags |= CIFS_TRANSFORM_REQ;
2820
2821         memset(rqst, 0, sizeof(rqst));
2822         resp_buftype[0] = resp_buftype[1] = resp_buftype[2] = CIFS_NO_BUFFER;
2823         memset(rsp_iov, 0, sizeof(rsp_iov));
2824
2825         utf16_path = cifs_convert_path_to_utf16(full_path, cifs_sb);
2826         if (!utf16_path)
2827                 return -ENOMEM;
2828
2829         /* Open */
2830         memset(&open_iov, 0, sizeof(open_iov));
2831         rqst[0].rq_iov = open_iov;
2832         rqst[0].rq_nvec = SMB2_CREATE_IOV_SIZE;
2833
2834         memset(&oparms, 0, sizeof(oparms));
2835         oparms.tcon = tcon;
2836         oparms.desired_access = FILE_READ_ATTRIBUTES;
2837         oparms.disposition = FILE_OPEN;
2838         oparms.create_options = cifs_create_options(cifs_sb, create_options);
2839         oparms.fid = &fid;
2840         oparms.reconnect = false;
2841
2842         rc = SMB2_open_init(tcon, &rqst[0], &oplock, &oparms, utf16_path);
2843         if (rc)
2844                 goto querty_exit;
2845         smb2_set_next_command(tcon, &rqst[0]);
2846
2847
2848         /* IOCTL */
2849         memset(&io_iov, 0, sizeof(io_iov));
2850         rqst[1].rq_iov = io_iov;
2851         rqst[1].rq_nvec = SMB2_IOCTL_IOV_SIZE;
2852
2853         rc = SMB2_ioctl_init(tcon, &rqst[1], fid.persistent_fid,
2854                              fid.volatile_fid, FSCTL_GET_REPARSE_POINT,
2855                              true /* is_fctl */, NULL, 0,
2856                              CIFSMaxBufSize -
2857                              MAX_SMB2_CREATE_RESPONSE_SIZE -
2858                              MAX_SMB2_CLOSE_RESPONSE_SIZE);
2859         if (rc)
2860                 goto querty_exit;
2861
2862         smb2_set_next_command(tcon, &rqst[1]);
2863         smb2_set_related(&rqst[1]);
2864
2865
2866         /* Close */
2867         memset(&close_iov, 0, sizeof(close_iov));
2868         rqst[2].rq_iov = close_iov;
2869         rqst[2].rq_nvec = 1;
2870
2871         rc = SMB2_close_init(tcon, &rqst[2], COMPOUND_FID, COMPOUND_FID, false);
2872         if (rc)
2873                 goto querty_exit;
2874
2875         smb2_set_related(&rqst[2]);
2876
2877         rc = compound_send_recv(xid, tcon->ses, flags, 3, rqst,
2878                                 resp_buftype, rsp_iov);
2879
2880         create_rsp = rsp_iov[0].iov_base;
2881         if (create_rsp && create_rsp->sync_hdr.Status)
2882                 err_iov = rsp_iov[0];
2883         ioctl_rsp = rsp_iov[1].iov_base;
2884
2885         /*
2886          * Open was successful and we got an ioctl response.
2887          */
2888         if ((rc == 0) && (is_reparse_point)) {
2889                 /* See MS-FSCC 2.3.23 */
2890
2891                 reparse_buf = (struct reparse_data_buffer *)
2892                         ((char *)ioctl_rsp +
2893                          le32_to_cpu(ioctl_rsp->OutputOffset));
2894                 plen = le32_to_cpu(ioctl_rsp->OutputCount);
2895
2896                 if (plen + le32_to_cpu(ioctl_rsp->OutputOffset) >
2897                     rsp_iov[1].iov_len) {
2898                         cifs_tcon_dbg(VFS, "srv returned invalid ioctl len: %d\n",
2899                                  plen);
2900                         rc = -EIO;
2901                         goto querty_exit;
2902                 }
2903
2904                 rc = parse_reparse_point(reparse_buf, plen, target_path,
2905                                          cifs_sb);
2906                 goto querty_exit;
2907         }
2908
2909         if (!rc || !err_iov.iov_base) {
2910                 rc = -ENOENT;
2911                 goto querty_exit;
2912         }
2913
2914         err_buf = err_iov.iov_base;
2915         if (le32_to_cpu(err_buf->ByteCount) < sizeof(struct smb2_symlink_err_rsp) ||
2916             err_iov.iov_len < SMB2_SYMLINK_STRUCT_SIZE) {
2917                 rc = -EINVAL;
2918                 goto querty_exit;
2919         }
2920
2921         symlink = (struct smb2_symlink_err_rsp *)err_buf->ErrorData;
2922         if (le32_to_cpu(symlink->SymLinkErrorTag) != SYMLINK_ERROR_TAG ||
2923             le32_to_cpu(symlink->ReparseTag) != IO_REPARSE_TAG_SYMLINK) {
2924                 rc = -EINVAL;
2925                 goto querty_exit;
2926         }
2927
2928         /* open must fail on symlink - reset rc */
2929         rc = 0;
2930         sub_len = le16_to_cpu(symlink->SubstituteNameLength);
2931         sub_offset = le16_to_cpu(symlink->SubstituteNameOffset);
2932         print_len = le16_to_cpu(symlink->PrintNameLength);
2933         print_offset = le16_to_cpu(symlink->PrintNameOffset);
2934
2935         if (err_iov.iov_len < SMB2_SYMLINK_STRUCT_SIZE + sub_offset + sub_len) {
2936                 rc = -EINVAL;
2937                 goto querty_exit;
2938         }
2939
2940         if (err_iov.iov_len <
2941             SMB2_SYMLINK_STRUCT_SIZE + print_offset + print_len) {
2942                 rc = -EINVAL;
2943                 goto querty_exit;
2944         }
2945
2946         *target_path = cifs_strndup_from_utf16(
2947                                 (char *)symlink->PathBuffer + sub_offset,
2948                                 sub_len, true, cifs_sb->local_nls);
2949         if (!(*target_path)) {
2950                 rc = -ENOMEM;
2951                 goto querty_exit;
2952         }
2953         convert_delimiter(*target_path, '/');
2954         cifs_dbg(FYI, "%s: target path: %s\n", __func__, *target_path);
2955
2956  querty_exit:
2957         cifs_dbg(FYI, "query symlink rc %d\n", rc);
2958         kfree(utf16_path);
2959         SMB2_open_free(&rqst[0]);
2960         SMB2_ioctl_free(&rqst[1]);
2961         SMB2_close_free(&rqst[2]);
2962         free_rsp_buf(resp_buftype[0], rsp_iov[0].iov_base);
2963         free_rsp_buf(resp_buftype[1], rsp_iov[1].iov_base);
2964         free_rsp_buf(resp_buftype[2], rsp_iov[2].iov_base);
2965         return rc;
2966 }
2967
2968 static struct cifs_ntsd *
2969 get_smb2_acl_by_fid(struct cifs_sb_info *cifs_sb,
2970                 const struct cifs_fid *cifsfid, u32 *pacllen)
2971 {
2972         struct cifs_ntsd *pntsd = NULL;
2973         unsigned int xid;
2974         int rc = -EOPNOTSUPP;
2975         struct tcon_link *tlink = cifs_sb_tlink(cifs_sb);
2976
2977         if (IS_ERR(tlink))
2978                 return ERR_CAST(tlink);
2979
2980         xid = get_xid();
2981         cifs_dbg(FYI, "trying to get acl\n");
2982
2983         rc = SMB2_query_acl(xid, tlink_tcon(tlink), cifsfid->persistent_fid,
2984                             cifsfid->volatile_fid, (void **)&pntsd, pacllen);
2985         free_xid(xid);
2986
2987         cifs_put_tlink(tlink);
2988
2989         cifs_dbg(FYI, "%s: rc = %d ACL len %d\n", __func__, rc, *pacllen);
2990         if (rc)
2991                 return ERR_PTR(rc);
2992         return pntsd;
2993
2994 }
2995
2996 static struct cifs_ntsd *
2997 get_smb2_acl_by_path(struct cifs_sb_info *cifs_sb,
2998                 const char *path, u32 *pacllen)
2999 {
3000         struct cifs_ntsd *pntsd = NULL;
3001         u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
3002         unsigned int xid;
3003         int rc;
3004         struct cifs_tcon *tcon;
3005         struct tcon_link *tlink = cifs_sb_tlink(cifs_sb);
3006         struct cifs_fid fid;
3007         struct cifs_open_parms oparms;
3008         __le16 *utf16_path;
3009
3010         cifs_dbg(FYI, "get smb3 acl for path %s\n", path);
3011         if (IS_ERR(tlink))
3012                 return ERR_CAST(tlink);
3013
3014         tcon = tlink_tcon(tlink);
3015         xid = get_xid();
3016
3017         utf16_path = cifs_convert_path_to_utf16(path, cifs_sb);
3018         if (!utf16_path) {
3019                 rc = -ENOMEM;
3020                 free_xid(xid);
3021                 return ERR_PTR(rc);
3022         }
3023
3024         oparms.tcon = tcon;
3025         oparms.desired_access = READ_CONTROL;
3026         oparms.disposition = FILE_OPEN;
3027         oparms.create_options = cifs_create_options(cifs_sb, 0);
3028         oparms.fid = &fid;
3029         oparms.reconnect = false;
3030
3031         rc = SMB2_open(xid, &oparms, utf16_path, &oplock, NULL, NULL, NULL);
3032         kfree(utf16_path);
3033         if (!rc) {
3034                 rc = SMB2_query_acl(xid, tlink_tcon(tlink), fid.persistent_fid,
3035                             fid.volatile_fid, (void **)&pntsd, pacllen);
3036                 SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid);
3037         }
3038
3039         cifs_put_tlink(tlink);
3040         free_xid(xid);
3041
3042         cifs_dbg(FYI, "%s: rc = %d ACL len %d\n", __func__, rc, *pacllen);
3043         if (rc)
3044                 return ERR_PTR(rc);
3045         return pntsd;
3046 }
3047
3048 static int
3049 set_smb2_acl(struct cifs_ntsd *pnntsd, __u32 acllen,
3050                 struct inode *inode, const char *path, int aclflag)
3051 {
3052         u8 oplock = SMB2_OPLOCK_LEVEL_NONE;
3053         unsigned int xid;
3054         int rc, access_flags = 0;
3055         struct cifs_tcon *tcon;
3056         struct cifs_sb_info *cifs_sb = CIFS_SB(inode->i_sb);
3057         struct tcon_link *tlink = cifs_sb_tlink(cifs_sb);
3058         struct cifs_fid fid;
3059         struct cifs_open_parms oparms;
3060         __le16 *utf16_path;
3061
3062         cifs_dbg(FYI, "set smb3 acl for path %s\n", path);
3063         if (IS_ERR(tlink))
3064                 return PTR_ERR(tlink);
3065
3066         tcon = tlink_tcon(tlink);
3067         xid = get_xid();
3068
3069         if (aclflag == CIFS_ACL_OWNER || aclflag == CIFS_ACL_GROUP)
3070                 access_flags = WRITE_OWNER;
3071         else
3072                 access_flags = WRITE_DAC;
3073
3074         utf16_path = cifs_convert_path_to_utf16(path, cifs_sb);
3075         if (!utf16_path) {
3076                 rc = -ENOMEM;
3077                 free_xid(xid);
3078                 return rc;
3079         }
3080
3081         oparms.tcon = tcon;
3082         oparms.desired_access = access_flags;
3083         oparms.create_options = cifs_create_options(cifs_sb, 0);
3084         oparms.disposition = FILE_OPEN;
3085         oparms.path = path;
3086         oparms.fid = &fid;
3087         oparms.reconnect = false;
3088
3089         rc = SMB2_open(xid, &oparms, utf16_path, &oplock, NULL, NULL, NULL);
3090         kfree(utf16_path);
3091         if (!rc) {
3092                 rc = SMB2_set_acl(xid, tlink_tcon(tlink), fid.persistent_fid,
3093                             fid.volatile_fid, pnntsd, acllen, aclflag);
3094                 SMB2_close(xid, tcon, fid.persistent_fid, fid.volatile_fid);
3095         }
3096
3097         cifs_put_tlink(tlink);
3098         free_xid(xid);
3099         return rc;
3100 }
3101
3102 /* Retrieve an ACL from the server */
3103 static struct cifs_ntsd *
3104 get_smb2_acl(struct cifs_sb_info *cifs_sb,
3105                                       struct inode *inode, const char *path,
3106                                       u32 *pacllen)
3107 {
3108         struct cifs_ntsd *pntsd = NULL;
3109         struct cifsFileInfo *open_file = NULL;
3110
3111         if (inode)
3112                 open_file = find_readable_file(CIFS_I(inode), true);
3113         if (!open_file)
3114                 return get_smb2_acl_by_path(cifs_sb, path, pacllen);
3115
3116         pntsd = get_smb2_acl_by_fid(cifs_sb, &open_file->fid, pacllen);
3117         cifsFileInfo_put(open_file);
3118         return pntsd;
3119 }
3120
3121 static long smb3_zero_range(struct file *file, struct cifs_tcon *tcon,
3122                             loff_t offset, loff_t len, bool keep_size)
3123 {
3124         struct cifs_ses *ses = tcon->ses;
3125         struct inode *inode;
3126         struct cifsInodeInfo *cifsi;
3127         struct cifsFileInfo *cfile = file->private_data;
3128         struct file_zero_data_information fsctl_buf;
3129         long rc;
3130         unsigned int xid;
3131         __le64 eof;
3132
3133         xid = get_xid();
3134
3135         inode = d_inode(cfile->dentry);
3136         cifsi = CIFS_I(inode);
3137
3138         trace_smb3_zero_enter(xid, cfile->fid.persistent_fid, tcon->tid,
3139                               ses->Suid, offset, len);
3140
3141
3142         /* if file not oplocked can't be sure whether asking to extend size */
3143         if (!CIFS_CACHE_READ(cifsi))
3144                 if (keep_size == false) {
3145                         rc = -EOPNOTSUPP;
3146                         trace_smb3_zero_err(xid, cfile->fid.persistent_fid,
3147                                 tcon->tid, ses->Suid, offset, len, rc);
3148                         free_xid(xid);
3149                         return rc;
3150                 }
3151
3152         cifs_dbg(FYI, "Offset %lld len %lld\n", offset, len);
3153
3154         fsctl_buf.FileOffset = cpu_to_le64(offset);
3155         fsctl_buf.BeyondFinalZero = cpu_to_le64(offset + len);
3156
3157         rc = SMB2_ioctl(xid, tcon, cfile->fid.persistent_fid,
3158                         cfile->fid.volatile_fid, FSCTL_SET_ZERO_DATA, true,
3159                         (char *)&fsctl_buf,
3160                         sizeof(struct file_zero_data_information),
3161                         0, NULL, NULL);
3162         if (rc)
3163                 goto zero_range_exit;
3164
3165         /*
3166          * do we also need to change the size of the file?
3167          */
3168         if (keep_size == false && i_size_read(inode) < offset + len) {
3169                 eof = cpu_to_le64(offset + len);
3170                 rc = SMB2_set_eof(xid, tcon, cfile->fid.persistent_fid,
3171                                   cfile->fid.volatile_fid, cfile->pid, &eof);
3172         }
3173
3174  zero_range_exit:
3175         free_xid(xid);
3176         if (rc)
3177                 trace_smb3_zero_err(xid, cfile->fid.persistent_fid, tcon->tid,
3178                               ses->Suid, offset, len, rc);
3179         else
3180                 trace_smb3_zero_done(xid, cfile->fid.persistent_fid, tcon->tid,
3181                               ses->Suid, offset, len);
3182         return rc;
3183 }
3184
3185 static long smb3_punch_hole(struct file *file, struct cifs_tcon *tcon,
3186                             loff_t offset, loff_t len)
3187 {
3188         struct inode *inode;
3189         struct cifsFileInfo *cfile = file->private_data;
3190         struct file_zero_data_information fsctl_buf;
3191         long rc;
3192         unsigned int xid;
3193         __u8 set_sparse = 1;
3194
3195         xid = get_xid();
3196
3197         inode = d_inode(cfile->dentry);
3198
3199         /* Need to make file sparse, if not already, before freeing range. */
3200         /* Consider adding equivalent for compressed since it could also work */
3201         if (!smb2_set_sparse(xid, tcon, cfile, inode, set_sparse)) {
3202                 rc = -EOPNOTSUPP;
3203                 free_xid(xid);
3204                 return rc;
3205         }
3206
3207         cifs_dbg(FYI, "Offset %lld len %lld\n", offset, len);
3208
3209         fsctl_buf.FileOffset = cpu_to_le64(offset);
3210         fsctl_buf.BeyondFinalZero = cpu_to_le64(offset + len);
3211
3212         rc = SMB2_ioctl(xid, tcon, cfile->fid.persistent_fid,
3213                         cfile->fid.volatile_fid, FSCTL_SET_ZERO_DATA,
3214                         true /* is_fctl */, (char *)&fsctl_buf,
3215                         sizeof(struct file_zero_data_information),
3216                         CIFSMaxBufSize, NULL, NULL);
3217         free_xid(xid);
3218         return rc;
3219 }
3220
3221 static long smb3_simple_falloc(struct file *file, struct cifs_tcon *tcon,
3222                             loff_t off, loff_t len, bool keep_size)
3223 {
3224         struct inode *inode;
3225         struct cifsInodeInfo *cifsi;
3226         struct cifsFileInfo *cfile = file->private_data;
3227         long rc = -EOPNOTSUPP;
3228         unsigned int xid;
3229         __le64 eof;
3230
3231         xid = get_xid();
3232
3233         inode = d_inode(cfile->dentry);
3234         cifsi = CIFS_I(inode);
3235
3236         trace_smb3_falloc_enter(xid, cfile->fid.persistent_fid, tcon->tid,
3237                                 tcon->ses->Suid, off, len);
3238         /* if file not oplocked can't be sure whether asking to extend size */
3239         if (!CIFS_CACHE_READ(cifsi))
3240                 if (keep_size == false) {
3241                         trace_smb3_falloc_err(xid, cfile->fid.persistent_fid,
3242                                 tcon->tid, tcon->ses->Suid, off, len, rc);
3243                         free_xid(xid);
3244                         return rc;
3245                 }
3246
3247         /*
3248          * Extending the file
3249          */
3250         if ((keep_size == false) && i_size_read(inode) < off + len) {
3251                 if ((cifsi->cifsAttrs & FILE_ATTRIBUTE_SPARSE_FILE) == 0)
3252                         smb2_set_sparse(xid, tcon, cfile, inode, false);
3253
3254                 eof = cpu_to_le64(off + len);
3255                 rc = SMB2_set_eof(xid, tcon, cfile->fid.persistent_fid,
3256                                   cfile->fid.volatile_fid, cfile->pid, &eof);
3257                 if (rc == 0) {
3258                         cifsi->server_eof = off + len;
3259                         cifs_setsize(inode, off + len);
3260                         cifs_truncate_page(inode->i_mapping, inode->i_size);
3261                         truncate_setsize(inode, off + len);
3262                 }
3263                 goto out;
3264         }
3265
3266         /*
3267          * Files are non-sparse by default so falloc may be a no-op
3268          * Must check if file sparse. If not sparse, and since we are not
3269          * extending then no need to do anything since file already allocated
3270          */
3271         if ((cifsi->cifsAttrs & FILE_ATTRIBUTE_SPARSE_FILE) == 0) {
3272                 rc = 0;
3273                 goto out;
3274         }
3275
3276         if ((keep_size == true) || (i_size_read(inode) >= off + len)) {
3277                 /*
3278                  * Check if falloc starts within first few pages of file
3279                  * and ends within a few pages of the end of file to
3280                  * ensure that most of file is being forced to be
3281                  * fallocated now. If so then setting whole file sparse
3282                  * ie potentially making a few extra pages at the beginning
3283                  * or end of the file non-sparse via set_sparse is harmless.
3284                  */
3285                 if ((off > 8192) || (off + len + 8192 < i_size_read(inode))) {
3286                         rc = -EOPNOTSUPP;
3287                         goto out;
3288                 }
3289         }
3290
3291         smb2_set_sparse(xid, tcon, cfile, inode, false);
3292         rc = 0;
3293
3294 out:
3295         if (rc)
3296                 trace_smb3_falloc_err(xid, cfile->fid.persistent_fid, tcon->tid,
3297                                 tcon->ses->Suid, off, len, rc);
3298         else
3299                 trace_smb3_falloc_done(xid, cfile->fid.persistent_fid, tcon->tid,
3300                                 tcon->ses->Suid, off, len);
3301
3302         free_xid(xid);
3303         return rc;
3304 }
3305
3306 static loff_t smb3_llseek(struct file *file, struct cifs_tcon *tcon, loff_t offset, int whence)
3307 {
3308         struct cifsFileInfo *wrcfile, *cfile = file->private_data;
3309         struct cifsInodeInfo *cifsi;
3310         struct inode *inode;
3311         int rc = 0;
3312         struct file_allocated_range_buffer in_data, *out_data = NULL;
3313         u32 out_data_len;
3314         unsigned int xid;
3315
3316         if (whence != SEEK_HOLE && whence != SEEK_DATA)
3317                 return generic_file_llseek(file, offset, whence);
3318
3319         inode = d_inode(cfile->dentry);
3320         cifsi = CIFS_I(inode);
3321
3322         if (offset < 0 || offset >= i_size_read(inode))
3323                 return -ENXIO;
3324
3325         xid = get_xid();
3326         /*
3327          * We need to be sure that all dirty pages are written as they
3328          * might fill holes on the server.
3329          * Note that we also MUST flush any written pages since at least
3330          * some servers (Windows2016) will not reflect recent writes in
3331          * QUERY_ALLOCATED_RANGES until SMB2_flush is called.
3332          */
3333         wrcfile = find_writable_file(cifsi, FIND_WR_ANY);
3334         if (wrcfile) {
3335                 filemap_write_and_wait(inode->i_mapping);
3336                 smb2_flush_file(xid, tcon, &wrcfile->fid);
3337                 cifsFileInfo_put(wrcfile);
3338         }
3339
3340         if (!(cifsi->cifsAttrs & FILE_ATTRIBUTE_SPARSE_FILE)) {
3341                 if (whence == SEEK_HOLE)
3342                         offset = i_size_read(inode);
3343                 goto lseek_exit;
3344         }
3345
3346         in_data.file_offset = cpu_to_le64(offset);
3347         in_data.length = cpu_to_le64(i_size_read(inode));
3348
3349         rc = SMB2_ioctl(xid, tcon, cfile->fid.persistent_fid,
3350                         cfile->fid.volatile_fid,
3351                         FSCTL_QUERY_ALLOCATED_RANGES, true,
3352                         (char *)&in_data, sizeof(in_data),
3353                         sizeof(struct file_allocated_range_buffer),
3354                         (char **)&out_data, &out_data_len);
3355         if (rc == -E2BIG)
3356                 rc = 0;
3357         if (rc)
3358                 goto lseek_exit;
3359
3360         if (whence == SEEK_HOLE && out_data_len == 0)
3361                 goto lseek_exit;
3362
3363         if (whence == SEEK_DATA && out_data_len == 0) {
3364                 rc = -ENXIO;
3365                 goto lseek_exit;
3366         }
3367
3368         if (out_data_len < sizeof(struct file_allocated_range_buffer)) {
3369                 rc = -EINVAL;
3370                 goto lseek_exit;
3371         }
3372         if (whence == SEEK_DATA) {
3373                 offset = le64_to_cpu(out_data->file_offset);
3374                 goto lseek_exit;
3375         }
3376         if (offset < le64_to_cpu(out_data->file_offset))
3377                 goto lseek_exit;
3378
3379         offset = le64_to_cpu(out_data->file_offset) + le64_to_cpu(out_data->length);
3380
3381  lseek_exit:
3382         free_xid(xid);
3383         kfree(out_data);
3384         if (!rc)
3385                 return vfs_setpos(file, offset, inode->i_sb->s_maxbytes);
3386         else
3387                 return rc;
3388 }
3389
3390 static int smb3_fiemap(struct cifs_tcon *tcon,
3391                        struct cifsFileInfo *cfile,
3392                        struct fiemap_extent_info *fei, u64 start, u64 len)
3393 {
3394         unsigned int xid;
3395         struct file_allocated_range_buffer in_data, *out_data;
3396         u32 out_data_len;
3397         int i, num, rc, flags, last_blob;
3398     &nbs