^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 1) /*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 2) * fs/cifs/smb2misc.c
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 3) *
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 4) * Copyright (C) International Business Machines Corp., 2002,2011
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 5) * Etersoft, 2012
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 6) * Author(s): Steve French (sfrench@us.ibm.com)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 7) * Pavel Shilovsky (pshilovsky@samba.org) 2012
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 8) *
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 9) * This library is free software; you can redistribute it and/or modify
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 10) * it under the terms of the GNU Lesser General Public License as published
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 11) * by the Free Software Foundation; either version 2.1 of the License, or
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 12) * (at your option) any later version.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 13) *
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 14) * This library is distributed in the hope that it will be useful,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 15) * but WITHOUT ANY WARRANTY; without even the implied warranty of
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 16) * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 17) * the GNU Lesser General Public License for more details.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 18) *
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 19) * You should have received a copy of the GNU Lesser General Public License
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 20) * along with this library; if not, write to the Free Software
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 21) * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 22) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 23) #include <linux/ctype.h>
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 24) #include "smb2pdu.h"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 25) #include "cifsglob.h"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 26) #include "cifsproto.h"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 27) #include "smb2proto.h"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 28) #include "cifs_debug.h"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 29) #include "cifs_unicode.h"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 30) #include "smb2status.h"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 31) #include "smb2glob.h"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 32) #include "nterr.h"
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 33)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 34) static int
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 35) check_smb2_hdr(struct smb2_sync_hdr *shdr, __u64 mid)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 36) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 37) __u64 wire_mid = le64_to_cpu(shdr->MessageId);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 38)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 39) /*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 40) * Make sure that this really is an SMB, that it is a response,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 41) * and that the message ids match.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 42) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 43) if ((shdr->ProtocolId == SMB2_PROTO_NUMBER) &&
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 44) (mid == wire_mid)) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 45) if (shdr->Flags & SMB2_FLAGS_SERVER_TO_REDIR)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 46) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 47) else {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 48) /* only one valid case where server sends us request */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 49) if (shdr->Command == SMB2_OPLOCK_BREAK)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 50) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 51) else
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 52) cifs_dbg(VFS, "Received Request not response\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 53) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 54) } else { /* bad signature or mid */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 55) if (shdr->ProtocolId != SMB2_PROTO_NUMBER)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 56) cifs_dbg(VFS, "Bad protocol string signature header %x\n",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 57) le32_to_cpu(shdr->ProtocolId));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 58) if (mid != wire_mid)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 59) cifs_dbg(VFS, "Mids do not match: %llu and %llu\n",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 60) mid, wire_mid);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 61) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 62) cifs_dbg(VFS, "Bad SMB detected. The Mid=%llu\n", wire_mid);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 63) return 1;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 64) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 65)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 66) /*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 67) * The following table defines the expected "StructureSize" of SMB2 responses
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 68) * in order by SMB2 command. This is similar to "wct" in SMB/CIFS responses.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 69) *
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 70) * Note that commands are defined in smb2pdu.h in le16 but the array below is
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 71) * indexed by command in host byte order
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 72) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 73) static const __le16 smb2_rsp_struct_sizes[NUMBER_OF_SMB2_COMMANDS] = {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 74) /* SMB2_NEGOTIATE */ cpu_to_le16(65),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 75) /* SMB2_SESSION_SETUP */ cpu_to_le16(9),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 76) /* SMB2_LOGOFF */ cpu_to_le16(4),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 77) /* SMB2_TREE_CONNECT */ cpu_to_le16(16),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 78) /* SMB2_TREE_DISCONNECT */ cpu_to_le16(4),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 79) /* SMB2_CREATE */ cpu_to_le16(89),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 80) /* SMB2_CLOSE */ cpu_to_le16(60),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 81) /* SMB2_FLUSH */ cpu_to_le16(4),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 82) /* SMB2_READ */ cpu_to_le16(17),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 83) /* SMB2_WRITE */ cpu_to_le16(17),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 84) /* SMB2_LOCK */ cpu_to_le16(4),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 85) /* SMB2_IOCTL */ cpu_to_le16(49),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 86) /* BB CHECK this ... not listed in documentation */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 87) /* SMB2_CANCEL */ cpu_to_le16(0),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 88) /* SMB2_ECHO */ cpu_to_le16(4),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 89) /* SMB2_QUERY_DIRECTORY */ cpu_to_le16(9),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 90) /* SMB2_CHANGE_NOTIFY */ cpu_to_le16(9),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 91) /* SMB2_QUERY_INFO */ cpu_to_le16(9),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 92) /* SMB2_SET_INFO */ cpu_to_le16(2),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 93) /* BB FIXME can also be 44 for lease break */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 94) /* SMB2_OPLOCK_BREAK */ cpu_to_le16(24)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 95) };
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 96)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 97) #define SMB311_NEGPROT_BASE_SIZE (sizeof(struct smb2_sync_hdr) + sizeof(struct smb2_negotiate_rsp))
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 98)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 99) static __u32 get_neg_ctxt_len(struct smb2_sync_hdr *hdr, __u32 len,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 100) __u32 non_ctxlen)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 101) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 102) __u16 neg_count;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 103) __u32 nc_offset, size_of_pad_before_neg_ctxts;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 104) struct smb2_negotiate_rsp *pneg_rsp = (struct smb2_negotiate_rsp *)hdr;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 105)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 106) /* Negotiate contexts are only valid for latest dialect SMB3.11 */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 107) neg_count = le16_to_cpu(pneg_rsp->NegotiateContextCount);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 108) if ((neg_count == 0) ||
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 109) (pneg_rsp->DialectRevision != cpu_to_le16(SMB311_PROT_ID)))
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 110) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 111)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 112) /* Make sure that negotiate contexts start after gss security blob */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 113) nc_offset = le32_to_cpu(pneg_rsp->NegotiateContextOffset);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 114) if (nc_offset + 1 < non_ctxlen) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 115) pr_warn_once("Invalid negotiate context offset %d\n", nc_offset);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 116) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 117) } else if (nc_offset + 1 == non_ctxlen) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 118) cifs_dbg(FYI, "no SPNEGO security blob in negprot rsp\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 119) size_of_pad_before_neg_ctxts = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 120) } else if (non_ctxlen == SMB311_NEGPROT_BASE_SIZE)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 121) /* has padding, but no SPNEGO blob */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 122) size_of_pad_before_neg_ctxts = nc_offset - non_ctxlen + 1;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 123) else
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 124) size_of_pad_before_neg_ctxts = nc_offset - non_ctxlen;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 125)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 126) /* Verify that at least minimal negotiate contexts fit within frame */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 127) if (len < nc_offset + (neg_count * sizeof(struct smb2_neg_context))) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 128) pr_warn_once("negotiate context goes beyond end\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 129) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 130) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 131)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 132) cifs_dbg(FYI, "length of negcontexts %d pad %d\n",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 133) len - nc_offset, size_of_pad_before_neg_ctxts);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 134)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 135) /* length of negcontexts including pad from end of sec blob to them */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 136) return (len - nc_offset) + size_of_pad_before_neg_ctxts;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 137) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 138)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 139) int
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 140) smb2_check_message(char *buf, unsigned int len, struct TCP_Server_Info *srvr)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 141) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 142) struct smb2_sync_hdr *shdr = (struct smb2_sync_hdr *)buf;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 143) struct smb2_sync_pdu *pdu = (struct smb2_sync_pdu *)shdr;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 144) __u64 mid;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 145) __u32 clc_len; /* calculated length */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 146) int command;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 147) int pdu_size = sizeof(struct smb2_sync_pdu);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 148) int hdr_size = sizeof(struct smb2_sync_hdr);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 149)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 150) /*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 151) * Add function to do table lookup of StructureSize by command
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 152) * ie Validate the wct via smb2_struct_sizes table above
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 153) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 154) if (shdr->ProtocolId == SMB2_TRANSFORM_PROTO_NUM) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 155) struct smb2_transform_hdr *thdr =
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 156) (struct smb2_transform_hdr *)buf;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 157) struct cifs_ses *ses = NULL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 158) struct list_head *tmp;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 159)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 160) /* decrypt frame now that it is completely read in */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 161) spin_lock(&cifs_tcp_ses_lock);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 162) list_for_each(tmp, &srvr->smb_ses_list) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 163) ses = list_entry(tmp, struct cifs_ses, smb_ses_list);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 164) if (ses->Suid == thdr->SessionId)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 165) break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 166)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 167) ses = NULL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 168) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 169) spin_unlock(&cifs_tcp_ses_lock);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 170) if (ses == NULL) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 171) cifs_dbg(VFS, "no decryption - session id not found\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 172) return 1;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 173) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 174) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 175)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 176) mid = le64_to_cpu(shdr->MessageId);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 177) if (len < pdu_size) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 178) if ((len >= hdr_size)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 179) && (shdr->Status != 0)) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 180) pdu->StructureSize2 = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 181) /*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 182) * As with SMB/CIFS, on some error cases servers may
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 183) * not return wct properly
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 184) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 185) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 186) } else {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 187) cifs_dbg(VFS, "Length less than SMB header size\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 188) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 189) return 1;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 190) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 191) if (len > CIFSMaxBufSize + MAX_SMB2_HDR_SIZE) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 192) cifs_dbg(VFS, "SMB length greater than maximum, mid=%llu\n",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 193) mid);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 194) return 1;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 195) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 196)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 197) if (check_smb2_hdr(shdr, mid))
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 198) return 1;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 199)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 200) if (shdr->StructureSize != SMB2_HEADER_STRUCTURE_SIZE) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 201) cifs_dbg(VFS, "Invalid structure size %u\n",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 202) le16_to_cpu(shdr->StructureSize));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 203) return 1;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 204) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 205)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 206) command = le16_to_cpu(shdr->Command);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 207) if (command >= NUMBER_OF_SMB2_COMMANDS) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 208) cifs_dbg(VFS, "Invalid SMB2 command %d\n", command);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 209) return 1;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 210) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 211)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 212) if (smb2_rsp_struct_sizes[command] != pdu->StructureSize2) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 213) if (command != SMB2_OPLOCK_BREAK_HE && (shdr->Status == 0 ||
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 214) pdu->StructureSize2 != SMB2_ERROR_STRUCTURE_SIZE2)) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 215) /* error packets have 9 byte structure size */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 216) cifs_dbg(VFS, "Invalid response size %u for command %d\n",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 217) le16_to_cpu(pdu->StructureSize2), command);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 218) return 1;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 219) } else if (command == SMB2_OPLOCK_BREAK_HE
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 220) && (shdr->Status == 0)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 221) && (le16_to_cpu(pdu->StructureSize2) != 44)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 222) && (le16_to_cpu(pdu->StructureSize2) != 36)) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 223) /* special case for SMB2.1 lease break message */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 224) cifs_dbg(VFS, "Invalid response size %d for oplock break\n",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 225) le16_to_cpu(pdu->StructureSize2));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 226) return 1;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 227) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 228) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 229)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 230) clc_len = smb2_calc_size(buf, srvr);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 231)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 232) if (shdr->Command == SMB2_NEGOTIATE)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 233) clc_len += get_neg_ctxt_len(shdr, len, clc_len);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 234)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 235) if (len != clc_len) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 236) cifs_dbg(FYI, "Calculated size %u length %u mismatch mid %llu\n",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 237) clc_len, len, mid);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 238) /* create failed on symlink */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 239) if (command == SMB2_CREATE_HE &&
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 240) shdr->Status == STATUS_STOPPED_ON_SYMLINK)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 241) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 242) /* Windows 7 server returns 24 bytes more */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 243) if (clc_len + 24 == len && command == SMB2_OPLOCK_BREAK_HE)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 244) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 245) /* server can return one byte more due to implied bcc[0] */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 246) if (clc_len == len + 1)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 247) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 248)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 249) /*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 250) * Some windows servers (win2016) will pad also the final
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 251) * PDU in a compound to 8 bytes.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 252) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 253) if (((clc_len + 7) & ~7) == len)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 254) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 255)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 256) /*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 257) * MacOS server pads after SMB2.1 write response with 3 bytes
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 258) * of junk. Other servers match RFC1001 len to actual
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 259) * SMB2/SMB3 frame length (header + smb2 response specific data)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 260) * Some windows servers also pad up to 8 bytes when compounding.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 261) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 262) if (clc_len < len)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 263) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 264)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 265) pr_warn_once(
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 266) "srv rsp too short, len %d not %d. cmd:%d mid:%llu\n",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 267) len, clc_len, command, mid);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 268)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 269) return 1;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 270) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 271) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 272) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 273)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 274) /*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 275) * The size of the variable area depends on the offset and length fields
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 276) * located in different fields for various SMB2 responses. SMB2 responses
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 277) * with no variable length info, show an offset of zero for the offset field.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 278) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 279) static const bool has_smb2_data_area[NUMBER_OF_SMB2_COMMANDS] = {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 280) /* SMB2_NEGOTIATE */ true,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 281) /* SMB2_SESSION_SETUP */ true,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 282) /* SMB2_LOGOFF */ false,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 283) /* SMB2_TREE_CONNECT */ false,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 284) /* SMB2_TREE_DISCONNECT */ false,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 285) /* SMB2_CREATE */ true,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 286) /* SMB2_CLOSE */ false,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 287) /* SMB2_FLUSH */ false,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 288) /* SMB2_READ */ true,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 289) /* SMB2_WRITE */ false,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 290) /* SMB2_LOCK */ false,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 291) /* SMB2_IOCTL */ true,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 292) /* SMB2_CANCEL */ false, /* BB CHECK this not listed in documentation */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 293) /* SMB2_ECHO */ false,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 294) /* SMB2_QUERY_DIRECTORY */ true,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 295) /* SMB2_CHANGE_NOTIFY */ true,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 296) /* SMB2_QUERY_INFO */ true,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 297) /* SMB2_SET_INFO */ false,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 298) /* SMB2_OPLOCK_BREAK */ false
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 299) };
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 300)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 301) /*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 302) * Returns the pointer to the beginning of the data area. Length of the data
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 303) * area and the offset to it (from the beginning of the smb are also returned.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 304) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 305) char *
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 306) smb2_get_data_area_len(int *off, int *len, struct smb2_sync_hdr *shdr)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 307) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 308) *off = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 309) *len = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 310)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 311) /* error responses do not have data area */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 312) if (shdr->Status && shdr->Status != STATUS_MORE_PROCESSING_REQUIRED &&
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 313) (((struct smb2_err_rsp *)shdr)->StructureSize) ==
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 314) SMB2_ERROR_STRUCTURE_SIZE2)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 315) return NULL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 316)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 317) /*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 318) * Following commands have data areas so we have to get the location
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 319) * of the data buffer offset and data buffer length for the particular
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 320) * command.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 321) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 322) switch (shdr->Command) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 323) case SMB2_NEGOTIATE:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 324) *off = le16_to_cpu(
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 325) ((struct smb2_negotiate_rsp *)shdr)->SecurityBufferOffset);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 326) *len = le16_to_cpu(
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 327) ((struct smb2_negotiate_rsp *)shdr)->SecurityBufferLength);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 328) break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 329) case SMB2_SESSION_SETUP:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 330) *off = le16_to_cpu(
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 331) ((struct smb2_sess_setup_rsp *)shdr)->SecurityBufferOffset);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 332) *len = le16_to_cpu(
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 333) ((struct smb2_sess_setup_rsp *)shdr)->SecurityBufferLength);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 334) break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 335) case SMB2_CREATE:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 336) *off = le32_to_cpu(
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 337) ((struct smb2_create_rsp *)shdr)->CreateContextsOffset);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 338) *len = le32_to_cpu(
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 339) ((struct smb2_create_rsp *)shdr)->CreateContextsLength);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 340) break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 341) case SMB2_QUERY_INFO:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 342) *off = le16_to_cpu(
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 343) ((struct smb2_query_info_rsp *)shdr)->OutputBufferOffset);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 344) *len = le32_to_cpu(
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 345) ((struct smb2_query_info_rsp *)shdr)->OutputBufferLength);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 346) break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 347) case SMB2_READ:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 348) /* TODO: is this a bug ? */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 349) *off = ((struct smb2_read_rsp *)shdr)->DataOffset;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 350) *len = le32_to_cpu(((struct smb2_read_rsp *)shdr)->DataLength);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 351) break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 352) case SMB2_QUERY_DIRECTORY:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 353) *off = le16_to_cpu(
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 354) ((struct smb2_query_directory_rsp *)shdr)->OutputBufferOffset);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 355) *len = le32_to_cpu(
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 356) ((struct smb2_query_directory_rsp *)shdr)->OutputBufferLength);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 357) break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 358) case SMB2_IOCTL:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 359) *off = le32_to_cpu(
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 360) ((struct smb2_ioctl_rsp *)shdr)->OutputOffset);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 361) *len = le32_to_cpu(
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 362) ((struct smb2_ioctl_rsp *)shdr)->OutputCount);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 363) break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 364) case SMB2_CHANGE_NOTIFY:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 365) *off = le16_to_cpu(
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 366) ((struct smb2_change_notify_rsp *)shdr)->OutputBufferOffset);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 367) *len = le32_to_cpu(
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 368) ((struct smb2_change_notify_rsp *)shdr)->OutputBufferLength);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 369) break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 370) default:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 371) cifs_dbg(VFS, "no length check for command %d\n", le16_to_cpu(shdr->Command));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 372) break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 373) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 374)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 375) /*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 376) * Invalid length or offset probably means data area is invalid, but
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 377) * we have little choice but to ignore the data area in this case.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 378) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 379) if (*off > 4096) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 380) cifs_dbg(VFS, "offset %d too large, data area ignored\n", *off);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 381) *len = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 382) *off = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 383) } else if (*off < 0) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 384) cifs_dbg(VFS, "negative offset %d to data invalid ignore data area\n",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 385) *off);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 386) *off = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 387) *len = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 388) } else if (*len < 0) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 389) cifs_dbg(VFS, "negative data length %d invalid, data area ignored\n",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 390) *len);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 391) *len = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 392) } else if (*len > 128 * 1024) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 393) cifs_dbg(VFS, "data area larger than 128K: %d\n", *len);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 394) *len = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 395) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 396)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 397) /* return pointer to beginning of data area, ie offset from SMB start */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 398) if ((*off != 0) && (*len != 0))
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 399) return (char *)shdr + *off;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 400) else
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 401) return NULL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 402) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 403)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 404) /*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 405) * Calculate the size of the SMB message based on the fixed header
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 406) * portion, the number of word parameters and the data portion of the message.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 407) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 408) unsigned int
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 409) smb2_calc_size(void *buf, struct TCP_Server_Info *srvr)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 410) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 411) struct smb2_sync_pdu *pdu = (struct smb2_sync_pdu *)buf;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 412) struct smb2_sync_hdr *shdr = &pdu->sync_hdr;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 413) int offset; /* the offset from the beginning of SMB to data area */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 414) int data_length; /* the length of the variable length data area */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 415) /* Structure Size has already been checked to make sure it is 64 */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 416) int len = le16_to_cpu(shdr->StructureSize);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 417)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 418) /*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 419) * StructureSize2, ie length of fixed parameter area has already
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 420) * been checked to make sure it is the correct length.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 421) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 422) len += le16_to_cpu(pdu->StructureSize2);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 423)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 424) if (has_smb2_data_area[le16_to_cpu(shdr->Command)] == false)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 425) goto calc_size_exit;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 426)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 427) smb2_get_data_area_len(&offset, &data_length, shdr);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 428) cifs_dbg(FYI, "SMB2 data length %d offset %d\n", data_length, offset);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 429)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 430) if (data_length > 0) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 431) /*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 432) * Check to make sure that data area begins after fixed area,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 433) * Note that last byte of the fixed area is part of data area
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 434) * for some commands, typically those with odd StructureSize,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 435) * so we must add one to the calculation.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 436) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 437) if (offset + 1 < len) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 438) cifs_dbg(VFS, "data area offset %d overlaps SMB2 header %d\n",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 439) offset + 1, len);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 440) data_length = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 441) } else {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 442) len = offset + data_length;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 443) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 444) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 445) calc_size_exit:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 446) cifs_dbg(FYI, "SMB2 len %d\n", len);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 447) return len;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 448) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 449)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 450) /* Note: caller must free return buffer */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 451) __le16 *
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 452) cifs_convert_path_to_utf16(const char *from, struct cifs_sb_info *cifs_sb)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 453) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 454) int len;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 455) const char *start_of_path;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 456) __le16 *to;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 457) int map_type;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 458)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 459) if (cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SFM_CHR)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 460) map_type = SFM_MAP_UNI_RSVD;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 461) else if (cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 462) map_type = SFU_MAP_UNI_RSVD;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 463) else
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 464) map_type = NO_MAP_UNI_RSVD;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 465)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 466) /* Windows doesn't allow paths beginning with \ */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 467) if (from[0] == '\\')
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 468) start_of_path = from + 1;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 469)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 470) /* SMB311 POSIX extensions paths do not include leading slash */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 471) else if (cifs_sb_master_tlink(cifs_sb) &&
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 472) cifs_sb_master_tcon(cifs_sb)->posix_extensions &&
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 473) (from[0] == '/')) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 474) start_of_path = from + 1;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 475) } else
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 476) start_of_path = from;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 477)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 478) to = cifs_strndup_to_utf16(start_of_path, PATH_MAX, &len,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 479) cifs_sb->local_nls, map_type);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 480) return to;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 481) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 482)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 483) __le32
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 484) smb2_get_lease_state(struct cifsInodeInfo *cinode)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 485) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 486) __le32 lease = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 487)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 488) if (CIFS_CACHE_WRITE(cinode))
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 489) lease |= SMB2_LEASE_WRITE_CACHING;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 490) if (CIFS_CACHE_HANDLE(cinode))
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 491) lease |= SMB2_LEASE_HANDLE_CACHING;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 492) if (CIFS_CACHE_READ(cinode))
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 493) lease |= SMB2_LEASE_READ_CACHING;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 494) return lease;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 495) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 496)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 497) struct smb2_lease_break_work {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 498) struct work_struct lease_break;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 499) struct tcon_link *tlink;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 500) __u8 lease_key[16];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 501) __le32 lease_state;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 502) };
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 503)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 504) static void
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 505) cifs_ses_oplock_break(struct work_struct *work)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 506) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 507) struct smb2_lease_break_work *lw = container_of(work,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 508) struct smb2_lease_break_work, lease_break);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 509) int rc = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 510)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 511) rc = SMB2_lease_break(0, tlink_tcon(lw->tlink), lw->lease_key,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 512) lw->lease_state);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 513)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 514) cifs_dbg(FYI, "Lease release rc %d\n", rc);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 515) cifs_put_tlink(lw->tlink);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 516) kfree(lw);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 517) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 518)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 519) static void
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 520) smb2_queue_pending_open_break(struct tcon_link *tlink, __u8 *lease_key,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 521) __le32 new_lease_state)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 522) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 523) struct smb2_lease_break_work *lw;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 524)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 525) lw = kmalloc(sizeof(struct smb2_lease_break_work), GFP_KERNEL);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 526) if (!lw) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 527) cifs_put_tlink(tlink);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 528) return;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 529) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 530)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 531) INIT_WORK(&lw->lease_break, cifs_ses_oplock_break);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 532) lw->tlink = tlink;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 533) lw->lease_state = new_lease_state;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 534) memcpy(lw->lease_key, lease_key, SMB2_LEASE_KEY_SIZE);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 535) queue_work(cifsiod_wq, &lw->lease_break);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 536) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 537)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 538) static bool
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 539) smb2_tcon_has_lease(struct cifs_tcon *tcon, struct smb2_lease_break *rsp)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 540) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 541) __u8 lease_state;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 542) struct list_head *tmp;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 543) struct cifsFileInfo *cfile;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 544) struct cifsInodeInfo *cinode;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 545) int ack_req = le32_to_cpu(rsp->Flags &
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 546) SMB2_NOTIFY_BREAK_LEASE_FLAG_ACK_REQUIRED);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 547)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 548) lease_state = le32_to_cpu(rsp->NewLeaseState);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 549)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 550) list_for_each(tmp, &tcon->openFileList) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 551) cfile = list_entry(tmp, struct cifsFileInfo, tlist);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 552) cinode = CIFS_I(d_inode(cfile->dentry));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 553)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 554) if (memcmp(cinode->lease_key, rsp->LeaseKey,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 555) SMB2_LEASE_KEY_SIZE))
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 556) continue;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 557)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 558) cifs_dbg(FYI, "found in the open list\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 559) cifs_dbg(FYI, "lease key match, lease break 0x%x\n",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 560) lease_state);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 561)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 562) if (ack_req)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 563) cfile->oplock_break_cancelled = false;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 564) else
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 565) cfile->oplock_break_cancelled = true;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 566)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 567) set_bit(CIFS_INODE_PENDING_OPLOCK_BREAK, &cinode->flags);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 568)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 569) cfile->oplock_epoch = le16_to_cpu(rsp->Epoch);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 570) cfile->oplock_level = lease_state;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 571)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 572) cifs_queue_oplock_break(cfile);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 573) return true;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 574) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 575)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 576) return false;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 577) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 578)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 579) static struct cifs_pending_open *
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 580) smb2_tcon_find_pending_open_lease(struct cifs_tcon *tcon,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 581) struct smb2_lease_break *rsp)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 582) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 583) __u8 lease_state = le32_to_cpu(rsp->NewLeaseState);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 584) int ack_req = le32_to_cpu(rsp->Flags &
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 585) SMB2_NOTIFY_BREAK_LEASE_FLAG_ACK_REQUIRED);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 586) struct cifs_pending_open *open;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 587) struct cifs_pending_open *found = NULL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 588)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 589) list_for_each_entry(open, &tcon->pending_opens, olist) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 590) if (memcmp(open->lease_key, rsp->LeaseKey,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 591) SMB2_LEASE_KEY_SIZE))
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 592) continue;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 593)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 594) if (!found && ack_req) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 595) found = open;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 596) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 597)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 598) cifs_dbg(FYI, "found in the pending open list\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 599) cifs_dbg(FYI, "lease key match, lease break 0x%x\n",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 600) lease_state);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 601)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 602) open->oplock = lease_state;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 603) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 604)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 605) return found;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 606) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 607)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 608) static bool
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 609) smb2_is_valid_lease_break(char *buffer)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 610) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 611) struct smb2_lease_break *rsp = (struct smb2_lease_break *)buffer;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 612) struct list_head *tmp, *tmp1, *tmp2;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 613) struct TCP_Server_Info *server;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 614) struct cifs_ses *ses;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 615) struct cifs_tcon *tcon;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 616) struct cifs_pending_open *open;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 617)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 618) cifs_dbg(FYI, "Checking for lease break\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 619)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 620) /* look up tcon based on tid & uid */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 621) spin_lock(&cifs_tcp_ses_lock);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 622) list_for_each(tmp, &cifs_tcp_ses_list) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 623) server = list_entry(tmp, struct TCP_Server_Info, tcp_ses_list);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 624)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 625) list_for_each(tmp1, &server->smb_ses_list) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 626) ses = list_entry(tmp1, struct cifs_ses, smb_ses_list);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 627)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 628) list_for_each(tmp2, &ses->tcon_list) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 629) tcon = list_entry(tmp2, struct cifs_tcon,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 630) tcon_list);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 631) spin_lock(&tcon->open_file_lock);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 632) cifs_stats_inc(
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 633) &tcon->stats.cifs_stats.num_oplock_brks);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 634) if (smb2_tcon_has_lease(tcon, rsp)) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 635) spin_unlock(&tcon->open_file_lock);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 636) spin_unlock(&cifs_tcp_ses_lock);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 637) return true;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 638) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 639) open = smb2_tcon_find_pending_open_lease(tcon,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 640) rsp);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 641) if (open) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 642) __u8 lease_key[SMB2_LEASE_KEY_SIZE];
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 643) struct tcon_link *tlink;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 644)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 645) tlink = cifs_get_tlink(open->tlink);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 646) memcpy(lease_key, open->lease_key,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 647) SMB2_LEASE_KEY_SIZE);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 648) spin_unlock(&tcon->open_file_lock);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 649) spin_unlock(&cifs_tcp_ses_lock);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 650) smb2_queue_pending_open_break(tlink,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 651) lease_key,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 652) rsp->NewLeaseState);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 653) return true;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 654) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 655) spin_unlock(&tcon->open_file_lock);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 656)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 657) if (tcon->crfid.is_valid &&
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 658) !memcmp(rsp->LeaseKey,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 659) tcon->crfid.fid->lease_key,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 660) SMB2_LEASE_KEY_SIZE)) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 661) INIT_WORK(&tcon->crfid.lease_break,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 662) smb2_cached_lease_break);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 663) queue_work(cifsiod_wq,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 664) &tcon->crfid.lease_break);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 665) spin_unlock(&cifs_tcp_ses_lock);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 666) return true;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 667) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 668) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 669) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 670) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 671) spin_unlock(&cifs_tcp_ses_lock);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 672) cifs_dbg(FYI, "Can not process lease break - no lease matched\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 673) return false;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 674) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 675)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 676) bool
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 677) smb2_is_valid_oplock_break(char *buffer, struct TCP_Server_Info *server)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 678) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 679) struct smb2_oplock_break *rsp = (struct smb2_oplock_break *)buffer;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 680) struct list_head *tmp, *tmp1, *tmp2;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 681) struct cifs_ses *ses;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 682) struct cifs_tcon *tcon;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 683) struct cifsInodeInfo *cinode;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 684) struct cifsFileInfo *cfile;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 685)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 686) cifs_dbg(FYI, "Checking for oplock break\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 687)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 688) if (rsp->sync_hdr.Command != SMB2_OPLOCK_BREAK)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 689) return false;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 690)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 691) if (rsp->StructureSize !=
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 692) smb2_rsp_struct_sizes[SMB2_OPLOCK_BREAK_HE]) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 693) if (le16_to_cpu(rsp->StructureSize) == 44)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 694) return smb2_is_valid_lease_break(buffer);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 695) else
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 696) return false;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 697) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 698)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 699) cifs_dbg(FYI, "oplock level 0x%x\n", rsp->OplockLevel);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 700)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 701) /* look up tcon based on tid & uid */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 702) spin_lock(&cifs_tcp_ses_lock);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 703) list_for_each(tmp, &server->smb_ses_list) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 704) ses = list_entry(tmp, struct cifs_ses, smb_ses_list);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 705)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 706) list_for_each(tmp1, &ses->tcon_list) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 707) tcon = list_entry(tmp1, struct cifs_tcon, tcon_list);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 708)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 709) spin_lock(&tcon->open_file_lock);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 710) list_for_each(tmp2, &tcon->openFileList) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 711) cfile = list_entry(tmp2, struct cifsFileInfo,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 712) tlist);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 713) if (rsp->PersistentFid !=
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 714) cfile->fid.persistent_fid ||
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 715) rsp->VolatileFid !=
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 716) cfile->fid.volatile_fid)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 717) continue;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 718)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 719) cifs_dbg(FYI, "file id match, oplock break\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 720) cifs_stats_inc(
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 721) &tcon->stats.cifs_stats.num_oplock_brks);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 722) cinode = CIFS_I(d_inode(cfile->dentry));
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 723) spin_lock(&cfile->file_info_lock);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 724) if (!CIFS_CACHE_WRITE(cinode) &&
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 725) rsp->OplockLevel == SMB2_OPLOCK_LEVEL_NONE)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 726) cfile->oplock_break_cancelled = true;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 727) else
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 728) cfile->oplock_break_cancelled = false;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 729)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 730) set_bit(CIFS_INODE_PENDING_OPLOCK_BREAK,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 731) &cinode->flags);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 732)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 733) cfile->oplock_epoch = 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 734) cfile->oplock_level = rsp->OplockLevel;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 735)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 736) spin_unlock(&cfile->file_info_lock);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 737)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 738) cifs_queue_oplock_break(cfile);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 739)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 740) spin_unlock(&tcon->open_file_lock);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 741) spin_unlock(&cifs_tcp_ses_lock);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 742) return true;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 743) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 744) spin_unlock(&tcon->open_file_lock);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 745) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 746) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 747) spin_unlock(&cifs_tcp_ses_lock);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 748) cifs_dbg(FYI, "No file id matched, oplock break ignored\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 749) return true;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 750) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 751)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 752) void
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 753) smb2_cancelled_close_fid(struct work_struct *work)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 754) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 755) struct close_cancelled_open *cancelled = container_of(work,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 756) struct close_cancelled_open, work);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 757) struct cifs_tcon *tcon = cancelled->tcon;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 758) int rc;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 759)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 760) if (cancelled->mid)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 761) cifs_tcon_dbg(VFS, "Close unmatched open for MID:%llx\n",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 762) cancelled->mid);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 763) else
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 764) cifs_tcon_dbg(VFS, "Close interrupted close\n");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 765)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 766) rc = SMB2_close(0, tcon, cancelled->fid.persistent_fid,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 767) cancelled->fid.volatile_fid);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 768) if (rc)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 769) cifs_tcon_dbg(VFS, "Close cancelled mid failed rc:%d\n", rc);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 770)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 771) cifs_put_tcon(tcon);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 772) kfree(cancelled);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 773) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 774)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 775) /*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 776) * Caller should already has an extra reference to @tcon
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 777) * This function is used to queue work to close a handle to prevent leaks
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 778) * on the server.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 779) * We handle two cases. If an open was interrupted after we sent the
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 780) * SMB2_CREATE to the server but before we processed the reply, and second
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 781) * if a close was interrupted before we sent the SMB2_CLOSE to the server.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 782) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 783) static int
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 784) __smb2_handle_cancelled_cmd(struct cifs_tcon *tcon, __u16 cmd, __u64 mid,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 785) __u64 persistent_fid, __u64 volatile_fid)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 786) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 787) struct close_cancelled_open *cancelled;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 788)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 789) cancelled = kzalloc(sizeof(*cancelled), GFP_ATOMIC);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 790) if (!cancelled)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 791) return -ENOMEM;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 792)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 793) cancelled->fid.persistent_fid = persistent_fid;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 794) cancelled->fid.volatile_fid = volatile_fid;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 795) cancelled->tcon = tcon;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 796) cancelled->cmd = cmd;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 797) cancelled->mid = mid;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 798) INIT_WORK(&cancelled->work, smb2_cancelled_close_fid);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 799) WARN_ON(queue_work(cifsiod_wq, &cancelled->work) == false);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 800)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 801) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 802) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 803)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 804) int
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 805) smb2_handle_cancelled_close(struct cifs_tcon *tcon, __u64 persistent_fid,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 806) __u64 volatile_fid)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 807) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 808) int rc;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 809)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 810) cifs_dbg(FYI, "%s: tc_count=%d\n", __func__, tcon->tc_count);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 811) spin_lock(&cifs_tcp_ses_lock);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 812) if (tcon->tc_count <= 0) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 813) struct TCP_Server_Info *server = NULL;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 814)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 815) WARN_ONCE(tcon->tc_count < 0, "tcon refcount is negative");
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 816) spin_unlock(&cifs_tcp_ses_lock);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 817)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 818) if (tcon->ses)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 819) server = tcon->ses->server;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 820)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 821) cifs_server_dbg(FYI, "tid=%u: tcon is closing, skipping async close retry of fid %llu %llu\n",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 822) tcon->tid, persistent_fid, volatile_fid);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 823)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 824) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 825) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 826) tcon->tc_count++;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 827) spin_unlock(&cifs_tcp_ses_lock);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 828)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 829) rc = __smb2_handle_cancelled_cmd(tcon, SMB2_CLOSE_HE, 0,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 830) persistent_fid, volatile_fid);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 831) if (rc)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 832) cifs_put_tcon(tcon);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 833)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 834) return rc;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 835) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 836)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 837) int
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 838) smb2_handle_cancelled_mid(struct mid_q_entry *mid, struct TCP_Server_Info *server)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 839) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 840) struct smb2_sync_hdr *sync_hdr = mid->resp_buf;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 841) struct smb2_create_rsp *rsp = mid->resp_buf;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 842) struct cifs_tcon *tcon;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 843) int rc;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 844)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 845) if ((mid->optype & CIFS_CP_CREATE_CLOSE_OP) || sync_hdr->Command != SMB2_CREATE ||
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 846) sync_hdr->Status != STATUS_SUCCESS)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 847) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 848)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 849) tcon = smb2_find_smb_tcon(server, sync_hdr->SessionId,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 850) sync_hdr->TreeId);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 851) if (!tcon)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 852) return -ENOENT;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 853)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 854) rc = __smb2_handle_cancelled_cmd(tcon,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 855) le16_to_cpu(sync_hdr->Command),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 856) le64_to_cpu(sync_hdr->MessageId),
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 857) rsp->PersistentFileId,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 858) rsp->VolatileFileId);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 859) if (rc)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 860) cifs_put_tcon(tcon);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 861)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 862) return rc;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 863) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 864)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 865) /**
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 866) * smb311_update_preauth_hash - update @ses hash with the packet data in @iov
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 867) *
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 868) * Assumes @iov does not contain the rfc1002 length and iov[0] has the
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 869) * SMB2 header.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 870) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 871) int
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 872) smb311_update_preauth_hash(struct cifs_ses *ses, struct kvec *iov, int nvec)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 873) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 874) int i, rc;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 875) struct sdesc *d;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 876) struct smb2_sync_hdr *hdr;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 877) struct TCP_Server_Info *server = cifs_ses_server(ses);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 878)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 879) hdr = (struct smb2_sync_hdr *)iov[0].iov_base;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 880) /* neg prot are always taken */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 881) if (hdr->Command == SMB2_NEGOTIATE)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 882) goto ok;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 883)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 884) /*
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 885) * If we process a command which wasn't a negprot it means the
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 886) * neg prot was already done, so the server dialect was set
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 887) * and we can test it. Preauth requires 3.1.1 for now.
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 888) */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 889) if (server->dialect != SMB311_PROT_ID)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 890) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 891)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 892) if (hdr->Command != SMB2_SESSION_SETUP)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 893) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 894)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 895) /* skip last sess setup response */
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 896) if ((hdr->Flags & SMB2_FLAGS_SERVER_TO_REDIR)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 897) && (hdr->Status == NT_STATUS_OK
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 898) || (hdr->Status !=
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 899) cpu_to_le32(NT_STATUS_MORE_PROCESSING_REQUIRED))))
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 900) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 901)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 902) ok:
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 903) rc = smb311_crypto_shash_allocate(server);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 904) if (rc)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 905) return rc;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 906)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 907) d = server->secmech.sdescsha512;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 908) rc = crypto_shash_init(&d->shash);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 909) if (rc) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 910) cifs_dbg(VFS, "%s: Could not init sha512 shash\n", __func__);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 911) return rc;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 912) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 913)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 914) rc = crypto_shash_update(&d->shash, ses->preauth_sha_hash,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 915) SMB2_PREAUTH_HASH_SIZE);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 916) if (rc) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 917) cifs_dbg(VFS, "%s: Could not update sha512 shash\n", __func__);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 918) return rc;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 919) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 920)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 921) for (i = 0; i < nvec; i++) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 922) rc = crypto_shash_update(&d->shash,
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 923) iov[i].iov_base, iov[i].iov_len);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 924) if (rc) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 925) cifs_dbg(VFS, "%s: Could not update sha512 shash\n",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 926) __func__);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 927) return rc;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 928) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 929) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 930)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 931) rc = crypto_shash_final(&d->shash, ses->preauth_sha_hash);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 932) if (rc) {
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 933) cifs_dbg(VFS, "%s: Could not finalize sha512 shash\n",
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 934) __func__);
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 935) return rc;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 936) }
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 937)
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 938) return 0;
^8f3ce5b39 (kx 2023-10-28 12:00:06 +0300 939) }
Orange Pi5 kernel
Deprecated Linux kernel 5.10.110 for OrangePi 5/5B/5+ boards
3 Commits
0 Branches
0 Tags